Re: Modern antivirus for NT3.51?

From: Auric__ (not.my.real_at_email.address)
Date: 08/29/05


Date: Mon, 29 Aug 2005 13:02:26 -0700

On Sun, 28 Aug 2005 19:15:46 -0400, David H. Lipman wrote:

>From: "Auric__" <not.my.real@email.address>
>
>
>|
>| That's why I'm seeking a good antivirus. (I'm also looking for a working
>| firewall, but that's OT here, right?)
>|
>| If the NT3 machine *did* get infected with a worm, wouldn't my Win2k
>| machine's antivirus (AVG free) or firewall (Outpost free) tell me
>| something's not kosher?
>|
>| Finally... do DOS scanners work okay under NT machines, or is the
>| environment too different?
>| --
>| auric dot auric at gmail dot com
>| *****
>| Your clothes, give them to me, now.
>
>Well FireWall software (or a hardware device) is not specialized here, but, this is a Virus
>and Security News Group so it is not totally Off Topic.
>
>AV software istalled ON PC A will not flag an infection on PC B. However, it will reduce
>the risk of one PC spreading a virus from a priotected PC to a non-protected PC.

I know; I meant, if NT3 is infect with a worm, the situation might be a
bit like this:
worm: "w00t! I have infect0rzed a b0xen! l33t! Time to find anothor
      b0xen to infect!"
outpost on Win2k: "Uh oh, weird connection attempts from NT3 - let's
                  block 'em, eh?"
[or]
AVG on Win2k: "Uh oh, worm trying to infect my host - deny, deny, deny."

>DOS scanners are limited to 8.3 naming conventions and will be limited on the folder depth.
>In addition, they can't read NTFS partitions without the use of a third party software such
>as NTFS4DOS.

But I'm talking about running them from a cmd box under NT.

>Additionally, they would be "On Demand" scanners and can find and clean only after the fact.
>Not protect against infection.
>
>You can try my Multi AV scanner tool which provided "On Demand" scanning for Trend Micro's
>Sysclean utility and the McAfee and Sophos Command Line Scanners. However, they will
>require TCP/IP be loaded on the NT v3.51 platform and use a utility called WGET.EXE (for
>downloading the signatures, scanners and engine files for the respective AV scanners) which
>may have a dependency that will not be met on NT v3.51.

If the requirement is Winsock2 then it is *definitely* not met. OTOH, if
that's the only problem, will it still work without automatic updating?
Also, does it work with one (or two) of those scanners *not* installed?
(Meaning: scanner A not available - does it die, or move on to scanner
B?)

>If you try it, I would CERTAINLY be very interested in your findings and tresults in using
>the tool under that OS and would appreciate the feedback.

Will do.

-- 
auric dot auric at gmail dot com
*****
- "The crew of Air Force One falls ill, so the president must land the
  plane himself. Given initial altitude, weight, rate of descent, and
  the acceleration due to gravity, calculate the time required to land."
  So, what do I do?
- Swear in Cheney.
- No, what do I have with the plane and--
- One confused president.
- No! When it reaches the ground, how--
- One charbroiled president.


Relevant Pages

  • RE: RE: Best spyware program
    ... > In my experience none of the spyware scanners ever seem to get a system ... > truly clean, especially when dealing with some of the more devious stuff ... any of a number of scanners works great. ... For a really bad infection I will do as you mentioned above as well as ...
    (Security-Basics)
  • Re: Trojan.Win32.Agent.azsy
    ... If this infection was detected after a Windows update it is likely a false positive. ... Go to http://www.virustotal.com/ and upload the infected file to the site. ... A true infection will be flagged by most of the scanners. ... Installers and updaters are frequently victims of false positives because many anti-virus scanners see the changing of system or program files as "virus-like behavior" even when no virus signature is present. ...
    (microsoft.public.windowsupdate)
  • Re: HardBound and SoftBound
    ... only causing problems rather than averting them. ... Now there is virus total, where you can send infected files to see just how bad those scanners are. ... is that its not just the obscure scanners failing to detect the infection. ...
    (comp.arch)
  • Re: vundo fix
    ... | Do any of the scanners in MULTI_AV scan the mbr? ... I recently saw an infection ... Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp ...
    (alt.comp.anti-virus)
  • Re: Modern antivirus for NT3.51?
    ... | machine's antivirus or firewall tell me ... DOS scanners are limited to 8.3 naming conventions and will be limited on the folder depth. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (microsoft.public.security.virus)