McAfee/Viruses

[anon]

I use McAfee for my virus protection.

Use this link to see this morning's virus scan:
http://www.indianapa.com/chamber/mcafee.htm

As you can see, there were 97 viruses detected as a result of my scan which
was precipitated by a response from a colleague who told me that a link that
I had sent them was detected as carrying a virus.

I guess I'm missing the concept of virus protection, at least in McAfee's
case. Is it "normal" to have 97 viruses that are detected as the result of
a specific virus scan vs. the program itself "automatically" picking them up
and dealing with them accordingly?

Any help will be most appreciated.

Thank you,

 

[null]

I use McAfee for my virus protection.

Use this link to see this morning's virus scan:
http://www.indianapa.com/chamber/mcafee.htm

As you can see, there were 97 viruses detected as a result of my scan which
was precipitated by a response from a colleague who told me that a link that
I had sent them was detected as carrying a virus.

There were not 97 viruses detected. 97 files were "infected",
apparently many of them with Exploit-ObjectData which you can read
about here:

http://vil.nai.com/vil/content/v_100715.htm

The Netsky and Bagle detections appear to be on zipped files, with
maybe the Bagle one password protected. Your realtime monitor can't be
expected to alert on zip files (though there are certain special
exceptions to this with some av scanner products nowdays, which I'll
not go into).

And pay attention to the Microsoft links at the above url.

I guess I'm missing the concept of virus protection, at least in McAfee's
case. Is it "normal" to have 97 viruses that are detected as the result of
a specific virus scan vs. the program itself "automatically" picking them up
and dealing with them accordingly?

I'm not sure why McAfee didn't alert as (most of) these files were
downloaded automaticaly to your PC, apparently when you browsed using
IE. Perhaps you should look at your scan option settings. I don't use
McAfee so I don't know if your version of the realtime monitor allows
for some sort of "alert on download" or "alert on copy" setting
options.

But you should pay attention to your IE security settings as well.
Uncheck "enable download" along with scripting and activex. Better
yet, quit using IE. See my web site for suggestions. Use Mozilla and
be done with this kind of nonsense


Art
http://www.epix.net/~artnpeg