virus scanners

[Guest]

Recently I made the error of downloading a active X control that merrily put
five files(trojans) on my computer. Lucky for me I had OneCare running and it
kicked out the most nasty one. Then I ran some other scanners and the winners
were: Onecare, Kapersky, McAfee, Housecall,Avast and the Losers were Sypbot
and Ad-aware...so much for the recommendations for these. I will soon be
uninstalling them.

my 2c

 

[Newbie Coder]

Mani,

Spybot... won't get rid of viruses. It does have a trojan file, but nothing
compared to the main virus scanners available

The ActiveX was downloaded & placed in Downloaded Program File in your
Windows directory

When using Spybot did you just perform a normal scan or did you use advanced
mode? It makes a lot of difference

 

[Guest]

Hi Newbie,

The active X (i guess) put 'exploit:win32/ Anicmoo' only the comp, onecare
removed it without me finding out where it was or being able to run any other
anti-virus. But then I ran a Kapersky scan and it found a zip file called
arr3.jar-44f34234.zip which was in a Java subfolder. This zip had four files
, three were trojans. I scanned that zip file with Ad-aware and it passed it.
then I ran a Spybot scan on the whole system( as it doesn't have the ability
to scan one file). This also failed to detect.
Anyway, I wanted to test these two progs with the sample I had, which I have
kept for posterity's sake

Mani

 

[Guest]

When using Spybot did you just perform a normal scan or did you use advanced
mode? It makes a lot of difference

Yup, Advanced it was

 

[Newbie Coder]

Mani,

Just read both your replies, but the scan is the same on both its the other
tools that come available in the advanced mode

Spybot doesn't scan the entire computer but known locations & that is why it
probably never found your virus. You can use the SETTINGS tab then
DIRECORIES & you can add a custom folder for Spybot to check. You will also
see that Spyboy seems to leave the Java sip files alone which can be removed
from the list

Back to what was found

This was the security bulletin to patch that exploit:

http://www.microsoft.com/technet/security/bulletin/MS05-002.mspx

As you see it was dated Jan 11th/April 12th 2005

Here's the Symantec writeup:

http://www.symantec.com/security_response/writeup.jsp?docid=2005-021610-3724-99&tabid=2

So, you see this is why it wasn't found via Spybot.Ad-Aware scanning

 

[Stefan Z Camilleri]

Recently I made the error of downloading a active X control that merrily put
five files(trojans) on my computer. Lucky for me I had OneCare running and it
kicked out the most nasty one. Then I ran some other scanners and the winners
were: Onecare, Kapersky, McAfee, Housecall,Avast and the Losers were Sypbot
and Ad-aware...so much for the recommendations for these. I will soon be
uninstalling them.

my 2c

Spybot and Ad-aware are SPYware/ADware (same thing) removers, and not
anti-virus scanners. As much as you shouldn't expect an anti-virus to
detect spyware, you also wouldn't expect an anti-spyware to detect a
virus.

In short... you need both... though personally, the best anti-spyware
out there is possibly Windows Defender.

 

[Guest]

:

Spybot doesn't scan the entire computer but known locations & that is why it
probably never found your virus. You can use the SETTINGS tab then
DIRECORIES & you can add a custom folder for Spybot to check.

will give it a try

This was the security bulletin to patch that exploit:

http://www.microsoft.com/technet/security/bulletin/MS05-002.mspx

But I AM on sp2 and all patched up. Perhaps it happened because I chose to
d/l the active X ? ...now I'm getting worried...

 

[Rock]

Recently I made the error of downloading a active X control that merrily
put
five files(trojans) on my computer. Lucky for me I had OneCare running and
it
kicked out the most nasty one. Then I ran some other scanners and the
winners
were: Onecare, Kapersky, McAfee, Housecall,Avast and the Losers were
Sypbot
and Ad-aware...so much for the recommendations for these. I will soon be
uninstalling them.

SpyBot S&D and Ad-Aware SE are not for viral malware. There is an
understanding gap here.

 

[Poprivet]

Recently I made the error of downloading a active X control that
merrily put five files(trojans) on my computer. Lucky for me I had
OneCare running and it kicked out the most nasty one. Then I ran some
other scanners and the winners were: Onecare, Kapersky, McAfee,
Housecall,Avast and the Losers were Sypbot and Ad-aware...so much for
the recommendations for these. I will soon be uninstalling them.

my 2c

That's a mistake, but you're entitled to your opinions. You're mixing
apples and oranges, plus mixing up the purposes of each w/r to what you used
for your "test". There's a LOT more to it than you seem to understand.

Pop`