SQUID With ESET for Local Proxy

B

bgavin

I am coming off a long malware adventure on my home lab systems.
Due to my own fault, I let a customer machine infect my environment.

I'm a Windows environment, and a subscriber to Malwarebytes.
MBAM was unable to stop some old malware from infecting my environment.
It is also unable to remove all those infections.

The ESET online scanner is far more comprehensive at removal.
Even it was unable to find or remove the variants of "mrsys.exe" which were embedded in the Registry.

My question: has anybody set up a general malware proxy for their internal environments?

I'd like to have a proxy FBSD host running ESET for FBSD, that can work like SQUID for incoming HTML as well as local file storage scanning before storing on a server.
 
I nuked it so no hash.
I wrote a util I call FindAndKill which searches the entire drive, resets attributes to normal then deletes the file.

This one is also present in the windows registry in various Run or Logon sections
 
You must log in or register to reply here.
Back
Top