Is Re-imaging An Infected PC The Right (Default) Decision?

I received a rather annoying email today informing me that my office computer had been compromised by a virus and has been sending out elicit packets. Damn.

I’m not sure how I got the virus, but clearly it is a security threat to me and my school. I appreciate that removing it is not an option, but is re-imaging my machine really the best way to go? That’s right, the default response to this type of situation for our IT department is to re-image the infected machine.

Of course they will help back-up my data, but what about all my settings and all the programs that I have personally (legally) installed? I’m pretty anal when it comes to how my computer is configured and it will take me several hours to get things back to the way I like them. So I ask again, is this the right move? I’m not a security expert but it seems like there are several other steps that can be taken first: virus scan, firewall, etc… Why must they wipe everything as a first move?

Anyone have any experience with this and know how I can convince my IT folks that there is a better way? I really don’t have the time/energy to deal with re-installing my entire machine.

Help!?


Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • bodytext
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Slashdot
  • StumbleUpon
  • Live
  • Technorati
  • Reddit
  • YahooMyWeb

One Response to “Is Re-imaging An Infected PC The Right (Default) Decision?”

    1. Jeroen Latour June 17th, 2008 at 3:50 pm

      My guess is you’re out of luck. A virus scan might be enough to undo the damage, but I think the average IT department will want to defend their network first and do whatever it takes to be sure that the virus is stopped… that’d be imaging.

      You could try letting them only do a virus scan and seeing if that solves the problem, but I wouldn’t get your hopes up. However: if they also backup your entire ‘Documents and Settings’ or ‘Users’ directory, you might retain most of your settings.

      - Jeroen

Leave a Reply