Virus shuts down.

[Ed H]

Hey:

I had CA's anti-virus program but I kept finding the protection shut off
spontaneously so I got rid of it and now use MacAfee which comes with
Comcast internet. Now it too will be shut off on its own and I need to
reboot to get it started. I'm assuming that this is a Windows problem? Both
anti-virus programs act the same.

Thank you

 

[Guest]

Hi, Ed

I'm new to this group but I have a few ideas:

- Contact the antivirus vendor first. Usually they can help you solve this
kind of issues. Don't assume it's Windows that's causing problems.

- The symptoms are really weird: could your system be infected?

First, use your own antivirus/antisyware to sweep the system.

Then, try running a Web-based virus scan, see how it comes out. There are
many reputable online virus scans:

* Kaspersky (I believe their program has the best detection):
http://www.kaspersky.com/virusscanner

* Trend Micro Housecall: http://housecall.trendmicro.com (if I remmeber
correctly, Housecall also offers to remove identified threats)

And tons of others.

Also, make sure you have a (only ONE) firewall turned on (I know this is a
redundant reminder, but trust me: I've seen some users who don't believe they
need a firewall).

Good luck.

Regards,

 

[David H. Lipman]

From: "Ed H" <[email protected]>

| Hey:
|
| I had CA's anti-virus program but I kept finding the protection shut off
| spontaneously so I got rid of it and now use MacAfee which comes with
| Comcast internet. Now it too will be shut off on its own and I need to
| reboot to get it started. I'm assuming that this is a Windows problem? Both
| anti-virus programs act the same.
|
| Thank you


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/downloads/dl/35905.asp

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Ed H]

- Contact the antivirus vendor first. Usually they can help you solve this
kind of issues. Don't assume it's Windows that's causing problems.

I'll try.

- The symptoms are really weird: could your system be infected?

I've used several scans, all negative.

Also, make sure you have a (only ONE) firewall turned on (I know this is a
redundant reminder, but trust me: I've seen some users who don't believe
they
need a firewall).

I only use Windows firewwall.

 

[Ed H]

Hey David:

I'm not trying to run multiple AV's, I just want my real time protection to
be active. I used to have CA's AV, and I would often find the program shut
down, on its own. So I switched to MacAfee assuming that CA was the problem
but MacAfee does it as well. I'll come out of snooze mode, a warning flag
will appear telling me that my computer is not protected, the real time
protection is shut off. I need to re-boot to turn it on.

Thanks

 

[David H. Lipman]

From: "Ed H" <[email protected]>

| Hey David:
|
| I'm not trying to run multiple AV's, I just want my real time protection to
| be active. I used to have CA's AV, and I would often find the program shut
| down, on its own. So I switched to MacAfee assuming that CA was the problem
| but MacAfee does it as well. I'll come out of snooze mode, a warning flag
| will appear telling me that my computer is not protected, the real time
| protection is shut off. I need to re-boot to turn it on.
|
| Thanks

All of the scanners are "On Demand". If you have the retail version of McAfee it does not
offer the command line version of the McAfee scanner, only the GUI.

By using the multiple versions it may just find what is the root of the problem. There are
many Trojans that deliberately disable anti virus software if you are infected with it prior
to the anti virus software having signatures for it.

It is OK to run multiple "On Demand" anti virus scanners as long as you only have one fully
installed anti virus product that does "On Access" as well as "On Demand" scanning.

It is worth the shot.

 

[Ed H]

Okay I've done all that. System seems clean (?)

Thanks

 

[David H. Lipman]

From: "Ed H" <[email protected]>

| Okay I've done all that. System seems clean (?)
|
| Thanks

Hmmm, then the chances of it being a AV process killer is low then.
Why else would two different AV products start and then be disabled ?

How long after you boot does McAfee get disabled ?

 

[Ed H]

I believe it is already disabled when the computer wakes up from snooze, not
every time, every few days or so.

 

[David H. Lipman]

From: "Ed H" <[email protected]>

| I believe it is already disabled when the computer wakes up from snooze, not
| every time, every few days or so.

OK. This happens only after hibernation ?

Is this a desktop or notebook ?

 

[Ed H]

Not 'hibernation' but after 'Standby'. This is a PC.

 

[David H. Lipman]

From: "Ed H" <[email protected]>

| Not 'hibernation' but after 'Standby'. This is a PC.

Change the Power Setting in the Power Options control Panel applet such that it will NOT
turn off the hard disk, not go into Stand By or Hibernation modes, just turns off the
monitor after a predetermined time period.