Ponder over Infections...

[Corka]

Hello Newsgroup,

Every fortnight or so I scan my PC for infections. Scanning tools I use;

* NOD32 (Antivirus)
* SpyBot - SD (scan only, do not use the immuniser), and
* Malwarebytes

All up to date definition files.

I also use the immuniser in SpywareBlaster, with restricted sites turned
off. I use Comodo for my firewall. I have Windows XP Pro SP3, and use
Internet Explorer 8, that's the background.

If I do a complete scan using the tools mentioned above, with all advanced
options selected (particulaly with NOD32) in Safe Mode then again in Normal
Mode and, in both cases I come up clean (i.e. no infections), is there still
a chance I may be infected? Could this be considered as;

- A larger than big chance I am not infected? Or
- A smaller than little chance I am infected?

If the latter, what else can be done (or I can do) to iron out this case as
much as possible?

Not at all paranoid after completing my scans this morning such a thought
occured to me, and thought I'd ask.

Thanks and regards Newsgroup,
- Corka

 

[David H. Lipman]

From: "Corka" <[email protected]>


| Hello Newsgroup,

| Every fortnight or so I scan my PC for infections. Scanning tools I use;

| * NOD32 (Antivirus)
| * SpyBot - SD (scan only, do not use the immuniser), and
| * Malwarebytes

| All up to date definition files.

| I also use the immuniser in SpywareBlaster, with restricted sites turned
| off. I use Comodo for my firewall. I have Windows XP Pro SP3, and use
| Internet Explorer 8, that's the background.

| If I do a complete scan using the tools mentioned above, with all advanced
| options selected (particulaly with NOD32) in Safe Mode then again in Normal
| Mode and, in both cases I come up clean (i.e. no infections), is there still
| a chance I may be infected? Could this be considered as;

| - A larger than big chance I am not infected? Or
| - A smaller than little chance I am infected?

| If the latter, what else can be done (or I can do) to iron out this case as
| much as possible?

| Not at all paranoid after completing my scans this morning such a thought
| occured to me, and thought I'd ask.

| Thanks and regards Newsgroup,
| - Corka

Yes there is a very small chance that you MAY be infected IFF you don't practice Safe Hex,
do not mitigate all vulnerabilities in all applications and utilities (not just the
Windows XP OS) and the anti malware scanners (NOD32, MBAM and SpyBot S&D) do not have
definitions for the infector. Smaller than little chance.

 

[Daave]

Hello Newsgroup,

Every fortnight or so I scan my PC for infections. Scanning tools I
use;
* NOD32 (Antivirus)
* SpyBot - SD (scan only, do not use the immuniser), and
* Malwarebytes

All up to date definition files.

I also use the immuniser in SpywareBlaster, with restricted sites
turned off. I use Comodo for my firewall. I have Windows XP Pro SP3,
and use Internet Explorer 8, that's the background.

If I do a complete scan using the tools mentioned above, with all
advanced options selected (particulaly with NOD32) in Safe Mode then
again in Normal Mode and, in both cases I come up clean (i.e. no
infections), is there still a chance I may be infected? Could this be
considered as;
- A larger than big chance I am not infected? Or
- A smaller than little chance I am infected?

If the latter, what else can be done (or I can do) to iron out this
case as much as possible?

Not at all paranoid after completing my scans this morning such a
thought occured to me, and thought I'd ask.

Although anything is possible, sometimes you have to just take the
attitude that if you have never been infected and if you practice safe
hex, using high-quality anti-malware programs (constantly updated), that
the proof is in the pudding. If there is no evidence of malware, you
shouldn't be paranoid. Assume there is no malware and continue to keep
up the good work.

The only other thing you missed is to make sure you are current with all
the Windows security patches. Without the more recent ones, you are more
vulnerable to a Conficker infection.

 

[Ken Blake, MVP]

Every fortnight or so I scan my PC for infections. Scanning tools I use;

* NOD32 (Antivirus)
* SpyBot - SD (scan only, do not use the immuniser), and
* Malwarebytes

Good. Excellent choices.

All up to date definition files.

Good.


I also use the immuniser in SpywareBlaster, with restricted sites turned
off. I use Comodo for my firewall. I have Windows XP Pro SP3, and use
Internet Explorer 8, that's the background.

Good.


If I do a complete scan using the tools mentioned above, with all advanced
options selected (particulaly with NOD32) in Safe Mode then again in Normal
Mode and, in both cases I come up clean (i.e. no infections), is there still
a chance I may be infected? Could this be considered as;

Yes, certainly. None of this software (or any other software) is
perfect, and even if it were perfect at this moment, five minutes from
now, there could be new malware out there and it would immediately
become less than perfect.

- A larger than big chance I am not infected?

No.


Or
- A smaller than little chance I am infected?

Yes. It sounds like you what you do is good, and your risks are
therefore very low. But they are not, and can not ever be, zero.

If the latter, what else can be done (or I can do) to iron out this case as
much as possible?

Practice safe hex. Be very careful what sites you visit, what
attachments (if any) you open, etc.

 

[1PW]

Hello Newsgroup,

Every fortnight or so I scan my PC for infections. Scanning tools I use;

* NOD32 (Antivirus)
* SpyBot - SD (scan only, do not use the immuniser), and
* Malwarebytes

All up to date definition files.

I also use the immuniser in SpywareBlaster, with restricted sites turned
off. I use Comodo for my firewall. I have Windows XP Pro SP3, and use
Internet Explorer 8, that's the background.

If I do a complete scan using the tools mentioned above, with all advanced
options selected (particularly with NOD32) in Safe Mode then again in Normal
Mode and, in both cases I come up clean (i.e. no infections), is there still
a chance I may be infected? Could this be considered as;

- A larger than big chance I am not infected? Or
- A smaller than little chance I am infected?

If the latter, what else can be done (or I can do) to iron out this case as
much as possible?

Not at all paranoid after completing my scans this morning such a thought
occurred to me, and thought I'd ask.

Thanks and regards Newsgroup,
- Corka

Hello Corka:

Despite your good selection of antimalware tools, we /can/ still be
infected. We must also be very careful to keep our systems updated with
the latest security patches to both our operating systems and our
applications. Then, if we place ourselves behind good up to date NAT
routers, we have come as close to safe as we can with one last exception:

Safe Hex.

Some might offer that your browser could probably be more hardened
and/or operated from a security Sandbox.

To your tool lineup, you may wish to evaluate GMER.

Best wishes,

Pete

 

[Olórin]

Corka wrote:

Could this be considered as;
- A larger than big chance I am not infected? Or
- A smaller than little chance I am infected?

<snip>

Aren't those just two different ways round of saying the same thing?

Big chance I'm not infected = Little chance I am infected

Larger than big chance not infected = Smaller than little chance infected

 

[Corka]

David H., Daave, Ken and 1PW,

Thanks for your replies, your suggestions and recommendation shall be
practiced.


Olórin,

Yes, I now realise my wording and predicates.

Thanks and regards,
- Corka