Consolidated Security Thread (legacy)

[Medea]

Originally posted by: gmcsierra99
hi people, i did the Pandascan and it found some Spyware. could somebody help me get rid of this junk? thanks.

YGPM

 

[gmcsierra99]

whats that?

 

[Medea]

Originally posted by: Medea

Originally posted by: gmcsierra99
hi people, i did the Pandascan and it found some Spyware. could somebody help me get rid of this junk? thanks.

YGPM

Originally posted by: gmcsierra99
whats that?

YGPM = You've got a private message. It means that I PM'd you (sent you a private message) in response to your post for help.

 

[FrustratedUser]

Great thread. I got some crap I need to get rid of.

 

[potato28]

Great thread! Helped out me, and helped out my parents!

 

[HomeAppraiser]

Is there ONE commercial program that will do it all?

I have Norton Anti-virus and Firewall on and updated all the time, but it still tells me that there are two adware programs on my computer then quits! I tried one of the spysweeper programs, but that slowed my computer worse than the spyware itself and the junk would pop back on after being removed! NAIL was a b!tch to get rid of manually. Does Norton make an anti-spy/adware program with a firewall or do I need to switch to something else? I have three PCs at home (hers, mine and kids) plus a laptop that only gets used on the road. Do I have to get a seperate $50 a year program for each computer? Arrrggg!

 

[mechBgon]

Originally posted by: HomeAppraiser
Is there ONE commercial program that will do it all?

I have Norton Anti-virus and Firewall on and updated all the time, but it still tells me that there are two adware programs on my computer then quits! I tried one of the spysweeper programs, but that slowed my computer worse than the spyware itself and the junk would pop back on after being removed! NAIL was a b!tch to get rid of manually. Does Norton make an anti-spy/adware program with a firewall or do I need to switch to something else? I have three PCs at home (hers, mine and kids) plus a laptop that only gets used on the road. Do I have to get a seperate $50 a year program for each computer? Arrrggg!

Consider using Limited user accounts for browsing, IM and email purposes at the least (info on this). I don't even run Admin-class on my own PC except when I actually need the Admin powers for something. Advantages:

• it's free (or at least, it's paid for)
• there's no performance penalty at all
• it never needs updates or signatures
• it's extremely effective against accidental infection

On the other hand, if the computer users ignorantly elevate themselves back up to Administrator level, in order to go and deliberately install junk like Limewire, Kaaza, SmileyCentral, BonziBuddy or whatever, then they need education about not shooting themselves in the foot like that, or else they need their Admin option taken away.

The downside of a Limited account is that there's lots of software that is designed badly enough that it doesn't work right under a Limited account. See my other Limited page for some suggestions on overcoming that.

 

[Vikesrock]

Can I ask why you suggest disabling System Restore before you begin cleaning? System Restore cannot "reinfect" users unless they restore to an infected point. Before they begin cleaning the restore points are just as infected as there comp so I don't see the problem. If something goes wrong during the cleaning a System Restore is an easiy way to have another shot at cleaning it instead of having to reformat or go to more drastic measures. After a PC is cleaned you can disable then enable System Restore to wipe out all the old points and create a new one in case you ever need it.

 

[Schadenfroh]

Originally posted by: Vikesrock
Can I ask why you suggest disabling System Restore before you begin cleaning?

Text

you should disable System Restore before cleaning the system

 

[Vikesrock]

I have never seen a user "accidentally" restore a virus or spyware infection back onto there computer. However I have seen quite a few users who were forced to use System Restore because of unexpected complications when cleaning difficult infections.

I read through your link and, like your post, it seems to lack any reasoning behind the choice.

If a user attempts to clean there computer with System Restore off and something goes wrong, they have to have another PC or an XP CD or their up **** creek without a paddle.

Just my 2 cents. Feel free to take it or leave it.

 

[mechBgon]

Disabling System Restore is also the routine recommendation by security vendors like Symantec and McAfee in their virus-removal instructions. Methinks they have some practice with this stuff, and some reason for suggesting it

 

[Medea]

Vikesrock -

You make a good point, and there are also some who agree with you - see, READ & RUN ME FIRST.

 

[Schadenfroh]

Originally posted by: Medea
Vikesrock -

You make a good point, and there are also some who agree with you - see, READ & RUN ME FIRST.

It appears he is correct, i will probably alter it in the next revision:

Microsoft

Some people recommend that System Restore be turned off and all Restore Points deleted before attempting spyware removal. DO NOT DO THIS. If something goes wrong (anything is possible) you will have no way to reverse your actions. You'll want to delete your old Restore Points, but the time to do that is later, not now.

Thank you for brining this to my attention, Vikesrock

 

[shilala]

Just a "Thank You" bump.

This thread has helped me a lot more than once.

 

[MBrown]

Is the next AntiVir going to have automatic updates like avast?

 

[John]

Originally posted by: Schadenfroh

Originally posted by: Medea
Vikesrock -

You make a good point, and there are also some who agree with you - see, READ & RUN ME FIRST.

It appears he is correct, i will probably alter it in the next revision:

The MVP lady that wrote that article just posted a "general" guide with her own opinions. She doesn't even recommend safe mode until later on. I wonder how many computers a week she cleans? Probably none.

Originally posted by: mechBgon
Disabling System Restore is also the routine recommendation by security vendors like Symantec and McAfee in their virus-removal instructions. Methinks they have some practice with this stuff, and some reason for suggesting it

I concur. Actually most if not all of the major antivirus vendors and a majority of respected malware removal sites stress the importance of disabling system restore before you start the cleansing process. I don't ever recall seeing any of the systems that I've cleaned (personally about 20 a week) over the last 3 years where I had to use a restore point after malware removal. If the OS is hosed you need to do a repair install anyhow. If you don't have your OS cd then borrow one from someone you know.

In the end everyone has their own techniques, and it doesn't matter what steps you take to achieve your goal as long as the end result is a clean system.

 

[JustStarting]

Is Computer Associates Anti-virus and spyware stuff any good or is it a resource hog as well?

Time Warner Road Runners customers can get full versions for free. Just wondering as I built a new rig and don't have anything installed on it yet.

 

[John]

Rule of thumb: If it's not listed in the Consolidated Security Thread then it probably isn't worth mentioning.

 

[LiLithTecH]

I am usually not one to spout off on MS patching, but the latest
Security vunerbility released on Tuesday (Microsoft Security Bulletin MS06-003)
should be addressed by EVERYONE who uses OUTLOOK for mail and
organizations that are using EXCHANGE 5.0, 5.5, and 2000 Servers.

This has the makings of a an accident waiting to happen and it is only a
matter of time before some clever hack reverse engineers MS's patch.

Microsoft Security Bulletin MS06-003

 

[Beef Taco]

Hello all, I just have a quick question. Right now, i have the Sygate free firewall. Would switching to the Kerio 2.1.5 firewall provide any better protection against viruses/trojans ect.?

 

[John]

Doubtful. Please keep in mind that most of your viruses & trojans end up on your pc due to the fact:

1) You visit pr0n or warez sites
2) You aren't careful about what you download and install
3) Unpatched OS
3) Lack of common sense

If anything pick up a cheap cable/dsl router if you don't have one already.

 

[TheRyuu]

So, without taking the time to erad through the whole OP, whats the BEST anti-virus that cost money.

I quickly "thumbed" through it and I think that Kaspersky was mentened as the best. Before I put down the money to buy it, is that right??

And I mean best overall. (with a high detection rate)

 

[John]

Kaspersky or Nod32 have the best detection rates.

I prefer Kaspersky's GUI and ease of use (less clicks to configure).

 

[TheRyuu]

My Father is thinking about getting Norton Anti-Virus 2006. Do you think thats a good idea? Or should I try to convince him to get Kaspersky? (hes been using Norton for years)

 

[uhaulball]

guys i tried dling the kernio firewall installer twice.
once from download.com and once from kernio site itself.
When i run the installer i keep getting this error message http://img.photobucket.com/albums/v321/uhaulball/error.jpg
can someone tell me whats going on? i have my windows firewall off as well as my avast! antivirus.