KAV and msblast

[Daniel CLEMENT]

From Kaspersky web site:

"Users of Kaspersky® Anti-Virus can be sure that this new worm will not harm
to their computers. All Kaspersky Labs products effectively detect both
modifications of "Lovesan", without requiring an update"

Hence, no removal tool, no instructions -- only technical details.

The only problem is that KAV doesn't block msblast at all.

Has it been (could it be) blocked by other AV software?

TIA,

 

[kurt wismer]

From Kaspersky web site:

"Users of Kaspersky® Anti-Virus can be sure that this new worm will not harm
to their computers. All Kaspersky Labs products effectively detect both
modifications of "Lovesan", without requiring an update"

Hence, no removal tool, no instructions -- only technical details.

The only problem is that KAV doesn't block msblast at all.

Has it been (could it be) blocked by other AV software?

i think you may have a wrong-headed understanding of what "block"
means... msblast shouldn't run if you've got kav's on-access scanner
running, but there's little a scanner can do to prevent it from being
downloaded to your local machine...

 

[Daniel CLEMENT]

Maybe KAV prevented some of blaster's effects. E.g. I didn't have unattended
restarts. But I had svchost error message and Internet connection troubles.

Yet, I'd have appreciated KAV just to warn that sth. was wrong, once the
worm in place. A complete scan reported nothing at all.

Have users of other (maybe better) AV software had better luck?

--

Daniel CLEMENT

From Kaspersky web site:

"Users of Kaspersky® Anti-Virus can be sure that this new worm will not harm
to their computers. All Kaspersky Labs products effectively detect both
modifications of "Lovesan", without requiring an update"

Hence, no removal tool, no instructions -- only technical details.

The only problem is that KAV doesn't block msblast at all.

Has it been (could it be) blocked by other AV software?

i think you may have a wrong-headed understanding of what "block"
means... msblast shouldn't run if you've got kav's on-access scanner
running, but there's little a scanner can do to prevent it from being
downloaded to your local machine...
[...]

 

[kurt wismer]

Maybe KAV prevented some of blaster's effects. E.g. I didn't have unattended
restarts. But I had svchost error message and Internet connection troubles.

Yet, I'd have appreciated KAV just to warn that sth. was wrong, once the
worm in place. A complete scan reported nothing at all.

Have users of other (maybe better) AV software had better luck?

if a full scan did not detect blaster then there are some possiblities...

1) this event occurred before kaspersky labs put out defs that included
msblaster (ie. it was too new at the time)...
2) you weren't completely up to date....
3) there's something wrong with your installation and it isn't
detecting things when it should - you might want to try verifying the
sanity of your installation with the eicar standard anti-virus test
file (http://www.eicar.org/anti_virus_test_file.htm)...
4) there's a bug in kav...