My colleague and I carry our personal USB devices for IT support, does anyone
have any suggestions on any good online tools to scan virus for my USB? when
I plug my USB HDD into my computer at home, Norton pops up a warning message
for J:\Drive.exe, will any virus be transfered as you plug your USB device
into any USB port?
Thanks in advance for any suggestions
Eric
There aren't any 'good' on-line scanners out there!
On-line scanners are the most unsafe and next to useless. Because by the
time you've started your infected Windows and connected to the Internet via
this infected code base, and start to look for scanning sites through
infected DNS, you are almost certain to have the malware perfectly
positioned to overrule your attempts to clean it. What happens if active
malware is found? Don't expect that the on-line scanner will do anything
about it. Most of them are just just marketing tools for selling you their
products. Quite often, malware removal on the NT based OS (Win 2K and XP)
is far from easy. Sometimes a (good) resident AV can deal with it in Safe
Mode.
Other reasons to stay away from on-line scanners are:
1. You have to use IE on very low security setting - ActiveX is required.
2. Many users will lower security in the Internet Zone to use the service
and then forget to set the Internet Zone back to highest possible security
- which is the only way that IE should be set.
3.Scanning should be performed while off-line.
4.Vulnerabilities in several virus scanners
http://www.heise-online.co.uk/secur...n-several-virus-scanners-Update--/news/112301
Also, according to Trend Micro, a surfer using a search engine such as
Google, with a search string such as, ´free online virus scan by Trend
Micro¡, can end up on a spoofed version of HouseCall by clicking the link
returned by Google. Not surprisingly, the spoofed site informs users their
computers are infected with malware, and then teases them to purchase a
fake anti-virus application in order to remove the fake threat.
Therefore:
'Stand-Alone' Anti-Virus scanning tools are *impressively better and
safer*, because you don't have to be on-line to use them (they have no
dependencies on using a web browser to perform their function), and they
also can be used in Safe Mode.
Download David's MULTI_AV.EXE directly:
http://www.pctip.ch/ds/28400/28470/Multi_AV.exe
or
http://212.98.39.7/ds/28400/28470/Multi_AV.exe
or
http://www.pctip.ch/downloads/dl/35905.asp
or
http://212.98.39.7/downloads/dl/35905.asp
or
English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/
Download/execute
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and--
SuperAntispyware - Free
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
--and/optional--
Kaspersky® Virus Removal Tool
http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/
http://www.kaspersky.com/support/viruses/avptool?level=2
--and/optional--
Dr.Web CureIt!® Utility - FREE
http://www.freedrweb.com/cureit/
--and/optional--
a-squared Free or a-squared Command Line Scanner
http://www.emsisoft.com/en/software/download/
--and/optional--
BitDefender10 Free Edition (*NOT FOR VISTA*)
http://www.bitdefender.com/site/Downloads/browseEvaluationVersion/1/42/
NOTE:
Kaspersky® Virus Removal Tool, Dr.Web CureIt!®' the free version of
Malwarebytes© and SuperAntispyware are not capable for real-time protection
of your computer.
Kaspersky® Virus Removal Tool, Dr.Web CureIt!® have no update feature (so
they don't turn into full blown scanners). As soon as your computer is
cleaned you are supposed to remove these tools from your operating system
and revert back to your (updated) resident (real-time) AV application.
Re: Kaspersky® Virus Removal Tool; To uninstall/move this program 'enable
self-defense' must be unchecked!
The free version of Malwarebytes© and SuperAntispyware have an update
feature, keep them installed in addtion to your resident AV/A-S
applications and scan frequently.
To scan your computer with the most up-to-date Kaspersky® AVPTool and
Dr.Web CureIT!® virus databases next time you should download new
Kaspersky® AVPTool and Dr.Web CureIt!® packages.
After the software is updated, it is suggested scanning the system in both
Normal Mode and Safe Mode (note: according to D. Cook, co-author of MBAM,
"Malwarebytes actually performs better in Normal Mode").
How to start Windows in Safe Mode?
By pressing/tabbing F8 (or F5 on some keyboards) during re-boot.
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/default.aspx?scid=315222
Start your computer in safe mode (Vista)
http://windowshelp.microsoft.com/Windows/en-us/help/323ef48f-7b93-4079-a48a-5c58eec904a11033.mspx
http://www.bleepingcomputer.com/tutorials/tutorial61.html
Alternatively:
Click Start==>Run... then type (or copy/paste) "msconfig" (without
quotation marks), click OK. Then click onto BOOT.INI tab and 'check'
/SAFEBOOT then OK and click Restart. To go back to Normal Mode, you must
access the System Configuration utility again and click the General tab
then click/check the radio button 'Normal Startup'- load all device drivers
and services'.
Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis
Please, do not post HJT logs to this newsgroup.
Fora where you can get expert advice for HiJack This! (HJT) logs.
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.tomcoyote.org/index.php?showforum=27
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29
NOTE:
Registration is required in any of the above mentioned fora before posting
a HJT log and read the 'stickies' (instructions/guidelines) for the
respective HJT forum.
Good luck
