Re: Malware seen during scan but security suite not catching it.



From: "Harry Johnston" <harry@xxxxxxxxxxxxxxxxxx>


|
| I'm not sure I understand why you think this malware is on your computer in the
| first place. What do you mean by "you saw it in the scan window" - can you
| actually find the files on your computer? Are you sure you weren't merely
| seeing a message saying Norton was checking for them?
|
| Have you tried Windows Live OneCare (a free malware scan from Microsoft)?
|
| <http://onecare.live.com/site/en-us/default.htm?s_cid=sah>
|
| Harry.

Harry:

MS OneCare is one of the worst anti virus scanners in the anti virus market. In fact in a
recent public test descrivbed in AVComparatives, out of 17 tested anti virus products,
Microsoft's OneCare came in LAST !

http://www.av-comparatives.org/
http://www.computerworld.com.au/index.php/id;1407473052;fp;2;fpid;1

There are web site scanners from; Kaspersky, McAfee , Trend Micro, F-Secure, BitDefender,
yada, yada that are *much* better.

I have actually written the Multi AV Scanning Tool which is a front-end to the command line
scanners of; McAfee, Sophos, Trend Micro and Kaspersky.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.



Relevant Pages

  • Re: Need some help with Alcan Worm... Please help!
    ... will make the PPPoE connection. ... a utility that provides 3 different anti virus scanners from; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (alt.comp.anti-virus)
  • Re: spoolsv32.exe
    ... The submission will then be tested against 18 different AV vendor's scanners. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... Execute; Multi_AV.exe ...
    (microsoft.public.security.virus)
  • Re: help! Internet Explorer ignoring my HOSTS file
    ... correct any alterations and the utility provides AV scanners from; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Winsoftware popups / Virtumundo new version?
    ... The WinFixerFix is much more up-to-date for this family of malware and so is Atribune's ... Download Adware-Virtumundo Removal Tool -- ... On Win9x/ME platforms the report will not be shown in your bowser ... It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML ...
    (microsoft.public.security.virus)
  • Re: agent.exe malicious error
    ... You should scan the computer using other anti virus software. ... scanning tool provides "On Demand" scanners for; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (microsoft.public.windowsxp.general)