[PANTUGGeneral] AVG Rescue CD (or USB stick version)

[David Dows]

For anyone who needs to recover a non-booting Windows HD after
infection, this may come in very handy:

http://www.avg.com/us-en/avg-rescue-cd#tba2

I believe I also read that the free trial version of Vipre allows you to
create a recovery disk even before you purchase a license for Vipre.

These sound like excellent incentives to consider these vendors for
permanent protection.

I only wish one of them could also match ESET NOD32, Kaspersky AV and
Avira AntiVir for detection, while matching Norton and Vipre for reduced
CPU load, AND matching the ease of installing the Norton Firewall with
excellent auto-configuration, granting the minimal required internet
access for most programs.

While not a HIPS, Norton's Firewall requires the least user-based
training of any firewall, without resorting to very loose rules such as
those in the Windows XP Firewall, e.g. open a single port to all apps,
or allow a single app access to all ports.

_______________________________________________
PANTUGGeneral mailing list: PANTUG...@lists.pantug.org
To remove your address or change your delivery options see:
http://lists.pantug.org/mailman/listinfo/pantuggeneral
For the searchable archives see:
http://groups.google.com/group/pantug/

[Troy Sorzano]

I have been looking for something like this these for years. Carrying around 24 port Hubs that are 15 years old for sniffing is a PITA.

Dual-comm has 10/100 and 10/100/1000 both are 5 port and USB powered devices. Port 1 is mirrored to Port 5.
http://dual-comm.com/

I have built some assessment kits using the ultra tiny Acer Revo and the dual-comm for $300.
http://www.newegg.com/Product/Product.aspx?Item=N82E16883103228

Add WireShark, Ntop or any of your favorite tools. This replaces our assessment notebooks that people were always messing with when left on site. The acer is deployed headless and people seem to leave it alone.

Troy

[JP Vossen]

Troy Sorzano wrote:
> I have been looking for something like this these for years. Carrying around 24 port Hubs that are 15 years old for sniffing is a PITA.
>
> Dual-comm has 10/100 and 10/100/1000 both are 5 port and USB powered devices. Port 1 is mirrored to Port 5.
> http://dual-comm.com/
>
> I have built some assessment kits using the ultra tiny Acer Revo and the dual-comm for $300.
> http://www.newegg.com/Product/Product.aspx?Item=N82E16883103228
>
> Add WireShark, Ntop or any of your favorite tools. This replaces our assessment notebooks that people were always messing with when left on site. The acer is deployed headless and people seem to leave it alone.

Very cool. I still have some 8 port hubs for that kind of thing, I
agree 24 is a bit overkill... :-)

Later,
JP
----------------------------|:::======|-------------------------------
JP Vossen, CISSP |:::======| http://bashcookbook.com/
My Account, My Opinions |=========| http://www.jpsdomain.org/
----------------------------|=========|-------------------------------
"Microsoft Tax" = the additional hardware & yearly fees for the add-on
software required to protect Windows from its own poorly designed and
implemented self, while the overhead incidentally flattens Moore's Law.