T
Tommy
Can anyone tell me the pro and con about the Etrust anti-Virus and if
possible their spam. Thanks in advance
possible their spam. Thanks in advance
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
J
jools
Tommy said:Can anyone tell me the pro and con about the Etrust anti-Virus and if
possible their spam. Thanks in advance
Wouldnt touch them with a barge-pole
S
searcher
Tommy said:Can anyone tell me the pro and con about the Etrust anti-Virus and if
possible their spam. Thanks in advance
I ditched them ages ago... not very user friendly
E
Ernie B.
It was a good AV package at one time. I ditched it about two years agoCan anyone tell me the pro and con about the Etrust anti-Virus and if
possible their spam. Thanks in advance
when they started having update problems that couldn't be solved. I was
especially annoyed when they began hi-jacking my browser to their renewal
page during the last month of my subscription.
BTW, the last I heard ZoneAlarm Pro uses Etrust as their AV package.
P
Pete
x-no-archive: yes
Here is a review of the best packages:
http://anti-virus-software-review.toptenreviews.com/
Ernie B. said:It was a good AV package at one time. I ditched it about two years ago
when they started having update problems that couldn't be solved. I was
especially annoyed when they began hi-jacking my browser to their renewal
page during the last month of my subscription.
BTW, the last I heard ZoneAlarm Pro uses Etrust as their AV package.
--
Ernie B.
Communication: The art of moving an idea from one mind to another,
hopefully without distortion.
Here is a review of the best packages:
http://anti-virus-software-review.toptenreviews.com/
W
Wilf
Pete said ...
but now indirectly using eTrust via ZA Antivirus). I'd say it's pretty
good. I still get the occasional newsletter fron CA because I have
never unsubscribed.
no problems with eTrust myself (was using the free-for-a-year offeringx-no-archive: yes
Here is a review of the best packages:
http://anti-virus-software-review.toptenreviews.com/
but now indirectly using eTrust via ZA Antivirus). I'd say it's pretty
good. I still get the occasional newsletter fron CA because I have
never unsubscribed.
C
* * Chas
Here is a review of the best packages:
http://anti-virus-software-review.toptenreviews.com/
Thanks for the input and site recommendation but I have to question
their recommendations.
Best in their opinion??? What are their qualifications to test AV
products?
According to their bios, the people listed at toptenreviews.com are all
marketing guys!!!
http://www.toptenreviews.com/bios.html
Chas.
J
Jay
* * Chas said:Thanks for the input and site recommendation but I have to question
their recommendations.
Best in their opinion??? What are their qualifications to test AV
products?
According to their bios, the people listed at toptenreviews.com are all
marketing guys!!!
http://www.toptenreviews.com/bios.html
The AV software review site is questionable IMO. For example, in the
eTrust EZ AV review, they say,
"Ease of Use:
The interface uses an Explorer-like file tree that you use to select
individual files and folders for scanning."
eTrust _stopped_ using the explorer-like interface a long time ago (
last used in version 6 IIRC).
I happen to like the product including it's minimal use of resources.
M
MrMusic
Thanks for the input and site recommendation but I have to question
their recommendations.
Best in their opinion??? What are their qualifications to test AV
products?
According to their bios, the people listed at toptenreviews.com are all
marketing guys!!!
http://www.toptenreviews.com/bios.html
Chas.
I have been using their product for +5 years. Don't try to get an
answer to a problem. You get an automated Email which points you to
confusing links & FAQ's. I guess this is the nature of the beast.
Even though I FAITHFULLY update their signatures, a MAJOR problem is
their total INABILITY to remove the "WIN32/GAEL.3666.A" virus from my
computer. BTW, I use 98SSE.
I did a complete CA EZ anti-virus scan & it says it has cleaned "320"
files that were infected with the Win32/Gael.3666.A virus. I merrily
continue on my way & a couple hours later do a "selective" scan &
eurerka it has come BACK. A file dl.exe seems to be involved. I
delete all versions even from recyle bin but it too comes back.
Does any kind person in this group know of a FREE way to get RID of
this virus. I have googled & they all want me to pay $. And Computer
Associates are doing NOTHING after 2 Emails.
Bottomline when it comes time to renew in May, I will go with another
company!!!!!!!!!
Just my 2 cents.
J
Jim Byrd
Hi Mr. Music - See the post by Papper in this thread and see if that
approach helps:
http://www.dslreports.com/forum/remark,14044083?hilite=w32/gael+worm
Also, as a general rule when you run into removal difficulties, try
re-running the AV/Anti-Spyware or whatever from Safe mode or from a Clean
Boot. From my Blog, Defending Your Machine, addy below in my Signature:
"#########IMPORTANT#########
Show hidden files and run all of the following removal tools from Safe mode
or a "Clean Boot" when possible, logged on as an Administrator. BEFORE
running these tools, be sure to clear all Temp files and your Temporary
Internet Files (TIF) (including offline content.) Reboot and test if the
malware is fixed after using each tool.
HOW TO Enable Hidden Files
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339
Clean Boot - General Win2k/XP procedure, but see below for links for other
OS's (This for Win2k w/msconfig - you can obtain msconfig for Win2k here:
http://www.3feetunder.com/files/win2K_msconfig_setup.exe ):
1. StartRun enter msconfig.
2. On the General tab, click Selective Startup, and then clear the 'Process
System.ini File', 'Process Win.ini File', and 'Load Startup Items' check
boxes. Leave the 'boot.ini' boxes however they are currently set.
3. In the Services tab, check the "Hide All Microsoft Services" checkbox,
and then click the "Disable All" button. If you use a third party firewall
then re-check (enable) it. For example, if you use Zone Alarm, re-check the
True Vector Internet Monitor service (and you may also want to re-check
(enable) the zlclient on the Startup tab.) Equivalent services exist for
other third party firewalls. An alternative to this for XP users is to
enable at this time the XP native firewall (Internet Connection Firewall -
ICF). Be sure to turn it back off when you re-enable your non-MS services
and Startup tab programs and restore your normal msconfig configuration
after cleaning your machine.
4. Click OK and then reboot.
For additional information about how to clean boot your operating system,
click the following article links to view the articles in the Microsoft
Knowledge Base:
310353 How to Perform a Clean Boot in Windows XP
http://support.microsoft.com/kb/310353
281770 How to Perform Clean-Boot Troubleshooting for Windows 2000
http://support.microsoft.com/kb/281770/EN-US/
267288 How to Perform a Clean Boot in Windows Millennium Edition
http://support.microsoft.com/kb/267288/EN-US/
192926 How to Perform Clean-Boot Troubleshooting for Windows 98
http://support.microsoft.com/kb/192926/EN-US/
243039 How to Perform a Clean Boot in Windows 95
http://support.microsoft.com/kb/243039/EN-US/
#########IMPORTANT#########"
You might also want to try a different AV or Trojan Detector such as
SysClean from Trend Micro and/or A² Free. Again from my Blog:
"SysClean - Boot to Safe mode with Network Support (HowTo here:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
or do a Clean Boot as above.
Recommended Approach for SysClean - Ian Kenefick's site here:
http://www.ik-cs.com/got-a-virus.htm contains information and links to a
number of useful programs concerned with virus removal including some not
listed in this Blog. One in particular of several there written by David H.
Lipman, Multi AV, is a "malware removal utility incorporating multiple
command line scanners including McAfee, Sophos, Kaspersky and Trend engines"
which can be selectively downloaded. See Procedure #2, here:
http://www.claymania.com/removal-trojan-adware.html Note that it must be
extracted to C:\AV-CLS, and I strongly recommend that you read the Help
before using it. Some of the downloads (Sophos, for example) may be quite
slow depending on the server involved, so be patient. This approach has the
virtue, of course, of giving you access to a number of excellent AV products
from one interface in addition to SysClean with which we are concerned here.
Alternative Approach #1 - Download sysclean.com , from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest released
pattern file, here: http://www.trendmicro.com/download/pattern.asp Be sure
to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt Place them in a
dedicated folder after appropriate unzipping.
Alternative Approach #2 - You might also want to get SYSCLEAN_FE, also
written by David H. Lipman , available here:
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe. There's a brief
description here: http://www.ik-cs.com/more_information.htm. (If you
download and use the updater from the beginning, it will automatically
handle downloading the other files. Note: If you use Sysclean_FE, then it
MUST be in the C:\sysclean folder in order to work correctly.) SYSCLEAN_FE
offers the option of restarting in order to run SysClean in Safe mode;
however, I would recommend that you use a Clean Boot to actually run both
the SYSCLEAN_FE and SysClean programs when using the updater. (Note BTW that
SYSCLEAN_FE will make a copy of your HOSTS file [see the end of this Blog
for more about the HOSTS file], if any, renaming it hosts.bak, and then
delete the original HOSTS file. To restore it when you've finished cleaning
your machine, just rename hosts.bak back to HOSTS.)
NOTE: For all of the approaches, you can get a somewhat more current interim
pattern file, the Controlled Pattern Release, here and manually unzip it to
your SysClean folder:
http://www.trendmicro.com/download/pattern-cpr-disclaimer.asp Look for the
lptxxx.zip file after you agree to the terms. (Sorry, but Multi AV or the
SYSCLEAN_FE Updater won't go get this one for you. However, if you manually
download the CPR first and then use the updater, SysClean will automatically
use these CPR definitions when it starts. Just be sure you put it in the
appropriate SysClean folder.)
Show hidden and system files (HowTo here:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
then go to Safe mode or, prefereably, do a Clean Boot.
If you're using WindowsME or WindowsXP, SysClean (and the other cleaning
tools below) may find infections within Restore Points which it will be
unable to clean. You may choose to disable Restore if you're on XP or ME
(directions here:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm) which will
eliminate ALL previous Restore Points, or alternatively, you can wait until
cleaning is completed and then use the procedure within the *********'s
below to delete all older, possibly infected Restore Points and save a new,
clean one. This approach is in the sprit of "keep what you've got" so that
you can recover to an at least operating albeit infected system if you
inadvertently delete something vital, and is the approach I recommend that
you take. See here: http://aumha.net/viewtopic.php?t=15265 Here are MVP Jim
Eshelman's specific recommendations from that document (with which I'm in
agreement):
(1) Know the risk of reinfection if you SystemRestore before it is cleaned.
(2) Until it is cleaned, don't use it unless you absolutely have to.
(3) Leave SR cache in place during cleaning since a leaky boat in a storm is
better than no boat in a storm, and returning to an infected computer state
is better than losing everything.
(4) Clean the machine.
(5) After the machine is clean, make a new SR point and purge all the old
ones.
(6) Rescan to make sure things remain clean.
I recommend that you run SysClean with "Automatically clean or delete
detected files" UNchecked and look in the log after the scan is complete
(View Log) to determine what was found in order to handle any false
positives and/or any malware found in your email databases. Read
tscreadme.txt carefully, then do a complete scan of your system and clean or
delete anything it finds EXCEPT EMAIL DATABASES OR FILES. These need special
handling. See here: http://www.ik-cs.com/virus-emaildatabase.htm
If anything is found (non-false positive or non-email - see below for some
links which can help you identify these), then rerun SysClean with
"Automatically clean . . ." checked this time. Reboot and re-run SysClean
and continue this procedure until you get a clean scan or nothing further
can be cleaned/removed.
Now reset things in msconfig if necessary and reboot to normal mode and
re-run the scan again.
These scans likely will take a long time, as Sysclean is VERY extensive and
thorough. For example, one user reported that Sysclean found 69 hits that an
immediately prior Norton AV v. 11.0.2.4 run had missed.
Note that sometimes you need to make a judgement call about what the
programs below report as spyware. See here, for example:
http://www.imilly.com/alexa.htm They can also sometimes generate "false
positives" so look carefully before you delete things. There's a good list
of categorized "unknown, safe, optional, spyware/adware, virus" programs to
check against here: http://www.pcpitstop.com/spycheck/SWList.asp Some
additional very useful lists are available here:
http://castlecops.com/StartupList.html (Recommended) and here:
http://www.windowsstartup.com/wso/browse.php (Recommended), and here:
http://www.computer-support.nl/Computerhulp/taken.htm and here:
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm and here:
http://www.3feetunder.com/krick/startup/list.html and here:
http://startup.networktechs.com/ There are online tests of possible malware
components available here: http://virusscan.jotti.org/ and here:
http://www.kaspersky.com/virusscanner
Download and run the free or trial version of A² Personal, here:
http://www.emsisoft.com/en/software/free/ UPDATE, then run from a Clean Boot
or Safe Mode with Show Hidden Files enabled as above. Two things to note
about this program - First, there's also a Detection Only on-line scan
available here: http://www.emsisoft.com/en/software/ax/ and Next, since
there's currently a good deal of interest in rootkits because of Sony's
malfeasance, A² detects and removes dozens of them and their variants."
approach helps:
http://www.dslreports.com/forum/remark,14044083?hilite=w32/gael+worm
Also, as a general rule when you run into removal difficulties, try
re-running the AV/Anti-Spyware or whatever from Safe mode or from a Clean
Boot. From my Blog, Defending Your Machine, addy below in my Signature:
"#########IMPORTANT#########
Show hidden files and run all of the following removal tools from Safe mode
or a "Clean Boot" when possible, logged on as an Administrator. BEFORE
running these tools, be sure to clear all Temp files and your Temporary
Internet Files (TIF) (including offline content.) Reboot and test if the
malware is fixed after using each tool.
HOW TO Enable Hidden Files
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339
Clean Boot - General Win2k/XP procedure, but see below for links for other
OS's (This for Win2k w/msconfig - you can obtain msconfig for Win2k here:
http://www.3feetunder.com/files/win2K_msconfig_setup.exe ):
1. StartRun enter msconfig.
2. On the General tab, click Selective Startup, and then clear the 'Process
System.ini File', 'Process Win.ini File', and 'Load Startup Items' check
boxes. Leave the 'boot.ini' boxes however they are currently set.
3. In the Services tab, check the "Hide All Microsoft Services" checkbox,
and then click the "Disable All" button. If you use a third party firewall
then re-check (enable) it. For example, if you use Zone Alarm, re-check the
True Vector Internet Monitor service (and you may also want to re-check
(enable) the zlclient on the Startup tab.) Equivalent services exist for
other third party firewalls. An alternative to this for XP users is to
enable at this time the XP native firewall (Internet Connection Firewall -
ICF). Be sure to turn it back off when you re-enable your non-MS services
and Startup tab programs and restore your normal msconfig configuration
after cleaning your machine.
4. Click OK and then reboot.
For additional information about how to clean boot your operating system,
click the following article links to view the articles in the Microsoft
Knowledge Base:
310353 How to Perform a Clean Boot in Windows XP
http://support.microsoft.com/kb/310353
281770 How to Perform Clean-Boot Troubleshooting for Windows 2000
http://support.microsoft.com/kb/281770/EN-US/
267288 How to Perform a Clean Boot in Windows Millennium Edition
http://support.microsoft.com/kb/267288/EN-US/
192926 How to Perform Clean-Boot Troubleshooting for Windows 98
http://support.microsoft.com/kb/192926/EN-US/
243039 How to Perform a Clean Boot in Windows 95
http://support.microsoft.com/kb/243039/EN-US/
#########IMPORTANT#########"
You might also want to try a different AV or Trojan Detector such as
SysClean from Trend Micro and/or A² Free. Again from my Blog:
"SysClean - Boot to Safe mode with Network Support (HowTo here:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
or do a Clean Boot as above.
Recommended Approach for SysClean - Ian Kenefick's site here:
http://www.ik-cs.com/got-a-virus.htm contains information and links to a
number of useful programs concerned with virus removal including some not
listed in this Blog. One in particular of several there written by David H.
Lipman, Multi AV, is a "malware removal utility incorporating multiple
command line scanners including McAfee, Sophos, Kaspersky and Trend engines"
which can be selectively downloaded. See Procedure #2, here:
http://www.claymania.com/removal-trojan-adware.html Note that it must be
extracted to C:\AV-CLS, and I strongly recommend that you read the Help
before using it. Some of the downloads (Sophos, for example) may be quite
slow depending on the server involved, so be patient. This approach has the
virtue, of course, of giving you access to a number of excellent AV products
from one interface in addition to SysClean with which we are concerned here.
Alternative Approach #1 - Download sysclean.com , from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest released
pattern file, here: http://www.trendmicro.com/download/pattern.asp Be sure
to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt Place them in a
dedicated folder after appropriate unzipping.
Alternative Approach #2 - You might also want to get SYSCLEAN_FE, also
written by David H. Lipman , available here:
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe. There's a brief
description here: http://www.ik-cs.com/more_information.htm. (If you
download and use the updater from the beginning, it will automatically
handle downloading the other files. Note: If you use Sysclean_FE, then it
MUST be in the C:\sysclean folder in order to work correctly.) SYSCLEAN_FE
offers the option of restarting in order to run SysClean in Safe mode;
however, I would recommend that you use a Clean Boot to actually run both
the SYSCLEAN_FE and SysClean programs when using the updater. (Note BTW that
SYSCLEAN_FE will make a copy of your HOSTS file [see the end of this Blog
for more about the HOSTS file], if any, renaming it hosts.bak, and then
delete the original HOSTS file. To restore it when you've finished cleaning
your machine, just rename hosts.bak back to HOSTS.)
NOTE: For all of the approaches, you can get a somewhat more current interim
pattern file, the Controlled Pattern Release, here and manually unzip it to
your SysClean folder:
http://www.trendmicro.com/download/pattern-cpr-disclaimer.asp Look for the
lptxxx.zip file after you agree to the terms. (Sorry, but Multi AV or the
SYSCLEAN_FE Updater won't go get this one for you. However, if you manually
download the CPR first and then use the updater, SysClean will automatically
use these CPR definitions when it starts. Just be sure you put it in the
appropriate SysClean folder.)
Show hidden and system files (HowTo here:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
then go to Safe mode or, prefereably, do a Clean Boot.
If you're using WindowsME or WindowsXP, SysClean (and the other cleaning
tools below) may find infections within Restore Points which it will be
unable to clean. You may choose to disable Restore if you're on XP or ME
(directions here:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm) which will
eliminate ALL previous Restore Points, or alternatively, you can wait until
cleaning is completed and then use the procedure within the *********'s
below to delete all older, possibly infected Restore Points and save a new,
clean one. This approach is in the sprit of "keep what you've got" so that
you can recover to an at least operating albeit infected system if you
inadvertently delete something vital, and is the approach I recommend that
you take. See here: http://aumha.net/viewtopic.php?t=15265 Here are MVP Jim
Eshelman's specific recommendations from that document (with which I'm in
agreement):
(1) Know the risk of reinfection if you SystemRestore before it is cleaned.
(2) Until it is cleaned, don't use it unless you absolutely have to.
(3) Leave SR cache in place during cleaning since a leaky boat in a storm is
better than no boat in a storm, and returning to an infected computer state
is better than losing everything.
(4) Clean the machine.
(5) After the machine is clean, make a new SR point and purge all the old
ones.
(6) Rescan to make sure things remain clean.
I recommend that you run SysClean with "Automatically clean or delete
detected files" UNchecked and look in the log after the scan is complete
(View Log) to determine what was found in order to handle any false
positives and/or any malware found in your email databases. Read
tscreadme.txt carefully, then do a complete scan of your system and clean or
delete anything it finds EXCEPT EMAIL DATABASES OR FILES. These need special
handling. See here: http://www.ik-cs.com/virus-emaildatabase.htm
If anything is found (non-false positive or non-email - see below for some
links which can help you identify these), then rerun SysClean with
"Automatically clean . . ." checked this time. Reboot and re-run SysClean
and continue this procedure until you get a clean scan or nothing further
can be cleaned/removed.
Now reset things in msconfig if necessary and reboot to normal mode and
re-run the scan again.
These scans likely will take a long time, as Sysclean is VERY extensive and
thorough. For example, one user reported that Sysclean found 69 hits that an
immediately prior Norton AV v. 11.0.2.4 run had missed.
Note that sometimes you need to make a judgement call about what the
programs below report as spyware. See here, for example:
http://www.imilly.com/alexa.htm They can also sometimes generate "false
positives" so look carefully before you delete things. There's a good list
of categorized "unknown, safe, optional, spyware/adware, virus" programs to
check against here: http://www.pcpitstop.com/spycheck/SWList.asp Some
additional very useful lists are available here:
http://castlecops.com/StartupList.html (Recommended) and here:
http://www.windowsstartup.com/wso/browse.php (Recommended), and here:
http://www.computer-support.nl/Computerhulp/taken.htm and here:
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm and here:
http://www.3feetunder.com/krick/startup/list.html and here:
http://startup.networktechs.com/ There are online tests of possible malware
components available here: http://virusscan.jotti.org/ and here:
http://www.kaspersky.com/virusscanner
Download and run the free or trial version of A² Personal, here:
http://www.emsisoft.com/en/software/free/ UPDATE, then run from a Clean Boot
or Safe Mode with Show Hidden Files enabled as above. Two things to note
about this program - First, there's also a Detection Only on-line scan
available here: http://www.emsisoft.com/en/software/ax/ and Next, since
there's currently a good deal of interest in rootkits because of Sony's
malfeasance, A² detects and removes dozens of them and their variants."
P
Pete
x-no-archive: yes
ALWAYS make sure the virus is not in memory if you are having trouble with
it coming back and back. Also, work in safe mode. Good luck.
-Pete
ALWAYS make sure the virus is not in memory if you are having trouble with
it coming back and back. Also, work in safe mode. Good luck.
-Pete
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.