Re: Virus/adware/spyware -- is there all-in-one protection in one program?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Phil Weldon (notdisclosed_at_example.com)
Date: 06/21/04


Date: Mon, 21 Jun 2004 23:22:35 GMT

Norton Systemworks 2003 with email scanning enabled
All current security patches for Windows 2000 and Office 2000
Norton Personal Firewall
Microsoft wireless basestation/router with embedded firewall and DNS.
Locked hosts file.
Periodic scans with Spybot Search&Destroy
Periodic scans with AdAware
Outlook 2000 for email
Outlook Newsreader for newsgroups (actually the same as Outlook Express
Newsleader, except for the name, as far as I can tell)
Custom security settings in Internet Explorer (mainly disable or prompt)

-- 
Phil Weldon, pweldonatmindjumpdotcom
For communication,
replace "at" with the 'at sign'
replace "mindjump" with "mindspring."
replace "dot" with "."
"John Blaustein" <no@spam.com> wrote in message
news:eQZNCc6VEHA.208@TK2MSFTNGP10.phx.gbl...
> Phil,
>
> AVG Free Edition is resident and running at all times.  I'b be interested
to
> know what AV program you use.
>
> I have a SonicWALL hardware firewall sitting between my home network and
the
> DSL modem.
>
> As of last night, I also have SpywareGuard running.  Kent England
suggested
> that program from Javacool Software.  If I understand it correctly,
> SpywareGuard will provide real-time protection from IE browser and Outlook
> Express spyware attacks.
>
> I scan with AdAware regularly, but have not used Spybot S&D for a while.
> Based on what happened yesterday, I really want to find some real-time
> scanning to prevent whatever caused my hosts file to be overwritten and
made
> those two bogus registry entries that prevented AVG from loading at
startup
> and prevented it from being able to run at all.
>
> John
>
>
>
> "Phil Weldon" <notdisclosed@example.com> wrote in message
> news:VGuBc.12891$Wr.4458@newsread1.news.pas.earthlink.net...
> > ALL antivirus programs should be set to scan whenever files are
> > manipulated - opened, copied, moved, or executed. In addition, scanning
> for
> > 'virus-like' activity should also ALWAYS be enabled.  Eventually you
might
> > want choose to eliminate scanning certain types of files (known clean
data
> > files for example - I have 10 Gbytes of encrypted .wma music files I
don't
> > feel the need to scan every time I listen to music.)  Periodic scanning
on
> > demand only tells you that you have infected files AFTER your system has
> > been exposed, and possibly infected.  If it ain't 'real time', it's not
in
> > time.
> >
> > And no, for single systems, there is no all-in-one.  Fortunately, for
> > individuals, Spybot Search&Destroy and LavaSoft AdAware are free, and
> widely
> > judged effective adjuncts to antivirus programs and software firewalls.
> You
> > might want to consider adding an inexpensive hardware firewall that
blocks
> > unwanted incoming touches - it is always on, doesn't need to be updated,
> > works with any system, and has no annual supscription.
> >
> > -- 
> > Phil Weldon, pweldonatmindjumpdotcom
> > For communication,
> > replace "at" with the 'at sign'
> > replace "mindjump" with "mindspring."
> > replace "dot" with "."
> >
> > "John Blaustein" <no@spam.com> wrote in message
> > news:etBlkn0VEHA.2288@TK2MSFTNGP10.phx.gbl...
> > > Thanks, Max.
> > >
> > > AVG has worked so far -- except it didn't help today.  In addition, it
> > does
> > > not have real-time e-mail scanning and that worries me.  I'll look at
> > Avast
> > > again.  PC-Cillin looks good too.  I used to use Norton Anti-Virus,
but
> it
> > > put so much junk into my registry that when I tried to uninstall it,
it
> > > caused a huge problem --- it's a long story for another time.
> > >
> > > I'll look at the programs you mention.  I hope I can find something
that
> > > does real-time scanning to prevent whatever caused my virus today.
> > >
> > > John
> > >
> > >
> > > "madmax" <maxpro4u@nomail.afraid.org> wrote in message
> > > news:gRqBc.3775$Il1.144@fe1.columbus.rr.com...
> > > > John Blaustein wrote:
> > > >
> > > > > Having had to deal with a virus that my AV program didn't find, I
am
> > > curious
> > > > > if anyone has found an "all-in-one" program to prevent viruses,
> > adware,
> > > > > spyware, etc.?
> > > > >
> > > > > I have been using AVG Free Edition and today discovered a virus on
> one
> > > of my
> > > > > computers.  The first symptoms were that my AV program didn't load
> at
> > > > > startup (and I couldn't run it at all), and I was not able to
access
> > > some
> > > > > sites on the Internet.  I discovered that my hosts file had been
> > > > > overwritten.  In addition, AdAware discovered two registry entries
> > that
> > > were
> > > > > causing the AV program not to load.
> > > > >
> > > > > I used System Restore to roll back to a restore point a few days
> ago,
> > > and
> > > > > that seems to have worked.  I deleted the bogus hosts file.
> > > > >
> > > > > At the suggestion of Bruce Chambers -- see my thread "Task Mgr &
> > > Registry
> > > > > locked! AV won't load!:  -- I ran several online scanners and the
> > McAfee
> > > > > scanner found "New Malware.b" in a "bogus" file called
iexlore.exe.
> > > It's
> > > > > now deleted and my system seems to be OK again.
> > > > >
> > > > > So, here's my question:  Is there one security program out there
> that
> > > will
> > > > > do the equivalent of scanning (and real-time protection) for
viruses
> > AND
> > > > > also protect from the things that AdAware looks for?  It seems
that
> > AVG,
> > > > > NAV, etc. look for viruses, and AdAware looks for other items.  Is
> > there
> > > a
> > > > > program to do it all?
> > > > >
> > > > > Thank you.
> > > > >
> > > > > John
> > > > >
> > > > >
> > > >   John-
> > > >   The short answer is no. The AV guys keep their defs. to
> > > > themselves.That's how they can say "buy ours" because we can
> > > > find X and the other guys can't.I myself run 4 at
> > > > once,Spybot1.3,Spyware Blaster,Script Defender+Spyware
> > > > Guard.Also have Ad-Aware,HyjackThis,Bazooka,Script
> > > > Defender,Swat-it+ xp-anti-spy installed for on-demand
> > > > scanning.Sygate for firewall.
> > > > And use I Avast instead of AVG (AVG gave me problems)
> > > > -max
> > > >
> > > > -- 
> > > > To help you stay safe see:
> > > > http://www.geocities.com/maxpro4u/madmax.html
> > > > This message is virus free as far as I can tell.
> > > > Change nomail.afraid.org to neo.rr.com so you can reply
> > > > (nomail.afraid.org has been set up specifically for
> > > >   use in Usenet. Feel free to use it yourself.)
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Difficulties in Network Mapping & port scanning
    ... You can make certain conclusions as to what the operating system is, what firewall it is, and so on by probing ... Many publications detail nmap port scanning techniques but make many assumptions. ... Same applies to ICMP network mapping. ...
    (Pen-Test)
  • Re: Virus/adware/spyware -- is there all-in-one protection in one program?
    ... Norton Systemworks 2003 with email scanning enabled ... Norton Personal Firewall ... Microsoft wireless basestation/router with embedded firewall and DNS. ... > SpywareGuard will provide real-time protection from IE browser and Outlook ...
    (microsoft.public.security)
  • Re: Virus/adware/spyware -- is there all-in-one protection in one program?
    ... Norton Systemworks 2003 with email scanning enabled ... Norton Personal Firewall ... Microsoft wireless basestation/router with embedded firewall and DNS. ... > SpywareGuard will provide real-time protection from IE browser and Outlook ...
    (microsoft.public.security.virus)
  • Re: Scan of TCP 552-554
    ... And it was exactly adaptative scanning I was thinking of. ... It is very easy, when the firewall drop packages, to determine that it IS ... attacker to understand there is a firewall there, ...
    (Incidents)
  • Re: Moving messages between Outbox and Sent folders
    ... But, as I said, both incoming and outgoing scanning ARE ... the Norton dialog that it is scanning still pops up when ... Make sure that the server names match what your ISP says they ... Is there any way to move an email from the Sent folder to the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)