Worms

Don't know when I've had so many virus scan updates

Don't know when I've had so many virus scan updates as between Saturday & today. From what I've read, the current onslaught is affecting Win 2000 systems. Is there a new XP problem too, or is it limited to Win 2000?

What virus scanner do you use? Does it do the job? I've used McAfee for years, mainly because it was what we had where I worked back when I decided to get a virus scanner. Never had any problems with it, & it has caught something once in a while.

I've heard positive things about Avast, but was nervous about changing after having good luck with the one I have.
41,207 views 18 replies
Reply #1 Top
I use AVG. It's free, updates everyday and never misses a thing. It scans e-mail coming in and going out.
Reply #2 Top
TrendMicro - ditched Norton after the fiasco trying to upgrade -It went through quite a few updates last night. Even popped up a warning about a new wild worm.

I did run AVG checks when I had Norton - seemed to work pretty well - I believe I read they are also getting ready to offer a firewall (maybe in team with someone else?)
Reply #3 Top
I've used Zone Alarm for ~3 years, but wouldn't mind having virus scan & firewall from the same place. If AVG is that good, maybe I'll jump over when my current subscription ends.

Somebody I know suggested running windows firewall & ZA together, but it sounded scary to me [insert skeptical smiley here]. Anybody ever try this combination?

Sir Bichur: When you had both Norton & AVG, did you disable Norton while you ran AVG?
Reply #4 Top
Sir Bichur: When you had both Norton & AVG, did you disable Norton while you ran AVG?


most of the time

I also ran windows FW with Norton PFW

but then I used to run Spybot & Adaware at the same time to see which would finish first.
Reply #5 Top

Did they find each other?
Reply #7 Top
I have a hardware firewall in the form of a DSL router, a software firewall in ZoneAlarm, AVG for virii, MS antispy, AdAware, Spybot S&D. Ya need it all
Reply #8 Top
re #7
Does DSL automatically serve as a hardware firewall? I once had satellite internet & it functioned as a firewall because of how it was put together. As for the rest, I hear ya. Substitute McAfee for AVG & I have the same set of stuff.
Reply #9 Top
Sir B




LOL
Reply #10 Top
Reply #11 Top
Is there a new XP problem too, or is it limited to Win 2000?


Seems we skipped something here.
Since all the updates I had yesterday I've been getting warnings of blockings of this one.
Reply #12 Top
AVG is garbage. On average only 85% detection, horrible trojan detection, poor heuristics, slow updates and threat responses, and almost no packer support. If you've used AVG for awhile, then you have a 25% chance of already having an infection.

McAfee is MUCH better than AVG, but it is pretty bloated, and has a horrible security center spam application.

If you want amazing detections, gotta go with Kaspersky or VBA32. VBA32 I find lighter than Kaspersky, and more features - sign up for beta and it is free. DrWeb is a solid 95% detection product with strong heuristics, and is a good option for gamers needing a super-light av.

Pick VBA32, Kaspersky or DRweb, then run Safe'n'Sec as your backend, switch to Firefox, or run IE in Sandboxie, and never again be infected. Simple.
Reply #13 Top
#12
Thanks for your comments. Not questioning your statements-- clearly I don't know enough. Your're very specific, even comparing effectiveness in percentages. Do you work in this field, or maybe do you have some sources I could look at? Again, not questioning your data-- how did you come to know such detail? My other questions will sound dumb, but here goes...

What is Sandboxie?

Do VBA32, Kaspersky, DRweb &/or Safe'n'Sec support FireFox? (McAfee doesn't). Recently I read that virus/worm makers have started exploiting vulnerabilities in FireFox.

I'm not familiar with VBA32, Kaspersky, DRweb or Safe'n'Sec, but will look into them.
Reply #14 Top
I've done virus analysis for about 2 years. I currently work in the field doing virus analysis and security consulting. On average I examine 4000 pieces of malware per month.

I wouldn't recomend a product that doesn't work with Firefox, so no trouble there. McAfee has their nose up MS's shirt, and even requires IE/ActiveX for updates, which is another reason I won't recomend it - it is a security hole in itself.

VBA32 can be run indefinately for free if you grab a beta key. As always, I recommend a layered approach.. 1) Hardware Firewall, 2) IDS-Type product (Safe'n'Sec, PrevX, DesktopArmor, etc), 3) Antivirus. That should provide you with 100% lockdown against any threats.

If you insist on using IE, then use Sandboxie with it, therefore anything that happens during your IE sessions is NOT permanent on your machine. CHeck it out at Sandboxie.com, it is free.
Reply #15 Top
I use Nortan Internet Security, Spybot, MS Antispyware, and Spyware doctor. I had Mcafee before Nortan and I had so many problems that it would render the program useless. So before the subscription even ran out I bought Nortan Internet Security because mcafee was broken and would not fix itself. Even when I restored my computer, in 2 days it broke again, and the people in the forum would not even answer any of my posts. They still to this day are remained ignored, probably deleted now.
Reply #16 Top
JAnder09
Thanks! I've wanted to try FireFox, but wasnt sure where to find good information on virus/etc protection. Now I'll give it a try. I was astounded (not in a good sense) when I first saw how many external plugins were attached to my IE (can't think of the name of them right now). I removed any I couldn't identify, but the idea makes me nervous- just surfing around can lead to who knows what invisible modifications. Will also check to see what sandboxie is. Does FoxFire also allow invisible modification by external parties?

What are you findings on the malware-type programs- or do you test them too? I guess the most popular are Ad-Aware. SpyBot, Hijack This, Spyware Doctor, MS AntiSpy... Just curious
Reply #17 Top
Norton unfortunately is worse than McAfee, not only does it add substantial system drag, but it lacks a competant unpacker engine, and speedy threat responses. I wouldn't run Norton if it were freeware.

As for Antispy stuff, a good AV will have reasonably strong Adware detections. Combined with a good backend product and firefox (or Sandboxie IE) you won't have any trouble. I haven't had a single piece of spyware or adware on my Honeypot for over a year and all it runs is VBA32 and Safe'n'Sec.

If you would feel safer with a antispyware application, the best in the business is Sunbelts Counterspy. http://www.sunbelt-software.com/CounterSpy.cfm

A bit of history.. MS AntiSpy was formerly GIANT, which they purchased. But unknown to Microsoft at time of purchase, the database in GIANT was actually owned by Sunbelt. A few weeks ago Sunbelt and Microsoft worked out a settlement, and parted ways. However Counterspy recieves almost HOURLY updates, while MS Antispy is lucky to get 1 update a week. Also Counterspy folks don't filter adware based on business affiliation with Spyware companies like Microsoft has recently been accused of doing: http://www.eweek.com/article2/0,1895,1836008,00.asp

That is my advice for you.
Reply #18 Top
I already dl'ed the VBA32 beta a little earlier-- noticed it mentions antispyware functionality in their list. BTW the commercial version costs a good bit less than the better known brands.
Thanks!