virus?

[Guest]

AOk i have trend microscan virus protection. That does not pick up any
viruses on my computer but i have been testing out different ones and as far
as i knew trend is one of the best . but anyway so i found avast free home
edition downloaded it updated it and the avast free home edition pickup a
virus but my "supposed to be one of the best virus scanners" did not and will
not pick it up. What do you think i should do?

 

[Bob I]

Use the product that satisfies the criteria you set.

 

[Steve Parry [MVP]]

sthompson fumbled, fiddled and fingered:

AOk i have trend microscan virus protection. That does not pick up any
viruses on my computer but i have been testing out different ones and
as far as i knew trend is one of the best . but anyway so i found
avast free home edition downloaded it updated it and the avast free
home edition pickup a virus but my "supposed to be one of the best
virus scanners" did not and will not pick it up. What do you think i
should do?

The company I work for had F-Secure anti virus, then they moved to
Trend, we've found it very poor in comparison.

Not detecting infections that F-Secure finds instantly, and often even
those it detects its been unable to clean, thankfully our company has
decided that as of this summer we're going back to F-Secure.

Suffice to say my PC at work, my laptop and my PC at home have all got
F-Secure on them.

 

[Crouchie1998]

I would only ever recommend one piece of virus software & that is Symantec
Antivirus 9 Corporate Edition, but its not free by any means. Although, you
get what you pay for; a superb piece of kit!! I, personally wouldn't use
anything else

Crouchie1998
BA (HONS) MCP MCSE

 

[DL]

and the file it picks up is?

 

[David H. Lipman]

From: "sthompson" <[email protected]>

| AOk i have trend microscan virus protection. That does not pick up any
| viruses on my computer but i have been testing out different ones and as far
| as i knew trend is one of the best . but anyway so i found avast free home
| edition downloaded it updated it and the avast free home edition pickup a
| virus but my "supposed to be one of the best virus scanners" did not and will
| not pick it up. What do you think i should do?

I think you should ask in a News Group that specializes in Anti Virus.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

There are *many* variables that have to be looked at; software settings, AV software
version and age, AV signture file and engine updates, when the infection occurred and when
the signatures were released, etc.

You didn't even to bother to state what vitus Avasy found that Trend Micro software didn't
find.

 

[Quaestor]

I would only ever recommend one piece of virus software & that is Symantec
Antivirus 9 Corporate Edition, but its not free by any means. Although, you
get what you pay for; a superb piece of kit!! I, personally wouldn't use
anything else

OTOH I have seen numerous complaints about symantec not catching
everything. I have never seen a complaint about AVAST! and it is free.

 

[David H. Lipman]

From: "Quaestor" <[email protected]>


| OTOH I have seen numerous complaints about symantec not catching
| everything. I have never seen a complaint about AVAST! and it is free.
|
| --
| A sufficiently advanced computer network protective attitude is indistinguishable from
| paranoia.

I have !

 

[Crouchie1998]

You say about Symantec not catching everything, but which version? Maybe you
are thinking about the Home User products & not the Corporate Edition

Crouchie1998
BA (HONS) MCP MCSE

 

[Rob]

ftp://agn-www.informatik.uni-hamburg.de/pub/texts/tests/pc-av/2004-07/

That is a link to the latest published tests performed by the Univ. of
Hamburg
which I believe to be the most thorough independent tests available.

ftp://agn-www.informatik.uni-hamburg.de/pub/texts/tests/pc-av/
Link to all test years

Placing 1st in all categories was McAfee/Network Associates (scn)

ftp://agn-www.informatik.uni-hamburg.de/pub/texts/tests/pc-av/2004-07/0xecsum.txt

Link to the overall results.

===================== AntiVirus Products ====================
Windows-2000 (25) Windows-XP (25) LINUX(SUSE) (11)
-------------------------------------------------------------
Place 1: SCN (17) SCN (17) SCN
(16)
2: FSE (16) FSE (16)
AVP (15)
3: AVP (15) AVP (15)
FSE (13)
More: AVK,PAV (13) AVK,PAV (13) SWP (10)
NAV,RAV (11) NAV,RAV (11) FPR ( 9)
FPR ( 9) FPR ( 9)
CMD ( 8)
BDF,INO,SWP ( 8) BDF,INO,SWP ( 8) INO ( 7)
AVA,DRW ( 7) AVA,DRW ( 7) ANT ( 6)
ANT ( 6) ANT ( 6)
DRW ( 5)
AVG,CMD,PRO ( 5) AVG,CMD,PRO ( 5)
GLA,VSP ( 4) GLA,VSP ( 4)
IKA,NVC,QHL ( 3) IKA,NVC,QHL ( 3)
FIR,PER,VBR ( 2) FIR,PER,VBR ( 2)
-------------------------------------------------------------
Useless Linux AV products: CLA,OAV ( 0)


=================== AntiMalware Products ====================
Windows-2000 (25) Windows-XP (25) LINUX(SUSE) (11)
-------------------------------------------------------------
Place 1: SCN,FSE (20) SCN,FSE (20) AVP,SCN (19)
3: AVP (19) AVP (19)
FSE (17)
AVK,PAV (17) AVK,PAV (17) FPR,SWP (12)
NAV,RAV (13) RAV (14) CMD
(10)
FPR (10) NAV (13)
DRW ( 6)
BDF,INO,SWP ( 9) FPR (10)
AVA,DRW ( 8) BDF,INO,SWP ( 9)
CMD ( 7) CMD ( 7)
IKA,NVC ( 4) IKA,NVC ( 4)
VBR ( 3) VBR ( 3)
-------------------------------------------------------------
Useless Linux AV products: CLA,OAV ( 0)


Table ES2: List of AV products in test "2004-07"
================================================
Abbreviation/Product/Version Tested under Platform
----------------------------------------------------------------------
ANT = Antivir: H+B EDV Datentechnik Germany W2K WXP LIN
AVA = Avast! ALWIL Software, Czech Republic W2K WXP
AVG = AVG Antivirus System: GriSoft,Czech Republic W2K WXP
AVK = AntiVirenKit: GData Software, Germany W2K WXP
AVP = Kaspersky Anti-Virus: Kaspersky Lab. Russia W2K WXP LIN
BDF = BitDefender Professional: SOFTWIN, Romania W2K WXP
CLA = CLAM AntiVirus: Open Antivirus Project LIN
CMD = Command Antivirus:
Command Software Systems, USA W2K WXP LIN
DRW = Dr. Web: DialogueScience, Russia W2K WXP LIN
FIR = Fire Anti-virus: Prognet Technologies India W2K WXP
FPR = F-PROT: Frisk Software Intnl. Iceland W2K WXP LIN
FSE = F-SECURE: F-Secure Corporation, Finland W2K WXP LIN
GLA = Gladiator AV: Author="Gladiator" W2K WXP
IKA = Ikarus Virus Utilities:
IKARUS Software Austria W2K WXP LIN
INO = eTrust AV: Computer Associates Intnl. USA W2K WXP
NAV = Norton Antivirus: Symantec, USA W2K WXP
NVC = Norman Virus Control:
Norman Data Defense, Norway W2K WXP
OAV = Open AntiVirus: Open Antivirus Project LIN
PAV = Power AV: GData Software, Germany W2K WXP
PER = Peruvian AntiVirus: PER Systems, Peru W2K WXP
PRO = Protector: Proland Software, India W2K WXP
QHL = Qhickheal: Cat Computer Services India W2K WXP
RAV = RAV Antivirus: GeCAD Software, Romania W2K WXP
SCN = McAfee ViruScan: Network Associates, USA W2K WXP LIN
SWP = Sophos AV: Sophos, UK W2K WXP LIN
VBR = VirusBuster: Leprechaun Australia W2K WXP
VSP = VirScanPlus: Ralph Roth, Germany W2K WXP

 

[Crouchie1998]

Thank you for the links. Fighting viruses has been a big hobby of mine since
1997.

How can McAfee be 1st?

Hotmail used to use McAfee online scanning which let through viruses that
were picked up by Symantec on July 24th, 2004. I am talking of around 4
months ago & I contacted both Hotmail & McAfee on this & now Hotmail use a
different virs scanner. I proved that McAfee wasn't working to both
Microsoft & McAfee on 4 seperate ocassions with 4 different viruses all
picked up with Symantec Antivirus 9 Corporate Edition, which I use.

It just proves that not all virus scanners pick up everything & a bold
statement being made that a freeware antivirus software scanner did pick up
everything is complete nonsense. If that was the case then they would be
selling & promoting it as such. Not sure where you are, but in the UK there
are laws against false advertising.

Crouchie1998
BA (HONS) MCP MCSE

 

[Guest]

the file it picked up is fgiebar.dll

and the file it picks up is?

 

[Steve Parry [MVP]]

sthompson fumbled, fiddled and fingered:

the file it picked up is fgiebar.dll

More Malware than Virus by the look of it....

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077947

 

[Crouchie1998]

The 'fgiebar.dll' is from FLASH GET. From the name it looks like its an
Internet Explorer toolbar (Browser Helper Object (BHO)).

Search your registry for:

{E0E899AB-F487-11D5-8D29-0050BA6940E3}

and delete it

Crouchie1998
BA (HONS) MCP MCSE

 

[Kevin D. Quitt]

Very nice, but too old to be useful. AVG is at version 7.0.322 and, as far
as I have been able to tell, has a 100% find rate. I'll have to check on
whether it handles CAB files, but compressed files are generally not a
problem; when something is extracted, it's examined.

 

[Crouchie1998]

LOL

96.37% of all stats are made up, but this one especially

Some of those virus programs are out-of-date because it mentions Symantec
Antivirus 8 Corporate Edition & I am using version 9.0.0.1400, which is the
very latest version.

Crouchie1998
BA (HONS) MCP MCSE

 

[David H. Lipman]

From: "Crouchie1998" <[email protected]>

| LOL
|
| 96.37% of all stats are made up, but this one especially
|
| Some of those virus programs are out-of-date because it mentions Symantec
| Antivirus 8 Corporate Edition & I am using version 9.0.0.1400, which is the
| very latest version.
|
| Crouchie1998
| BA (HONS) MCP MCSE
|

Well there are three parts to every AV application; Kernel, Engine an Signatures.

- The version of the software is the Kernel.
- The Engine applies the algorithms for find infectors
- The signatures are the fingerprints of the infector.

The two most important parts are the Engine and Signature files.

The Kernel is application and OS related and is insignificant for the purpose of Virus
Total's tests 0or sample analysis.

For example if you used the McAfee Command Line Scanner, it stands alone and independent of
whether it is Enterprise VirusScan v7.x, Enterprise VirusScan v8.0i or Retail VirusScan 8
or Retail VirusScan 9. Only the Engine and Signature files are used.

I can assure you that Virus Total does not have 18 AV applications installed and running on
a server. Rather they are applying the sample to the various command line scanners. So the
fact that it is Symantec v8 or Symantec v9 is insignificant. It is more important to know
the version of the signature files that were used. Why that is not displayed I don't know.
For McAfee is shows DAT v4479 but it does not show the Engine version which should be v4400.

In summation, the latest version of software is needed on a desktop for a given OS, it is
not needed for vendor scanner infector analysis.

If you question the analysis using Symantec v8 vs. Symantec v9 I suggest email --
(e-mail address removed)

 

[Crouchie1998]

I have Symantec Version 9 Corporate Edition (9.0.0.1400)

Scan Engine: 51.1.0.15

Def's: 25th May, 2005 Revision 18

No. of Threats: 69604

They are the most up-to-date definitions & were released 3 hours ago now.

Crouchie1998
BA (HONS) MCP MCSE

 

[Crouchie1998]

You say that McAfee has nearly twice as many as Symantec, but it don't pick
up simple viruses/worms dated 24th July 2004.

Also, previous versions of McAfee used to pick itself up as a virus.

Does McAfee Virus scan also pickup spyware, adware & mailware because you
never mentioned it?

You will never convince me otherwise that McAfee is better & never in a
million years would I ever install one of their products.

Crouchie1998
BA (HONS) MCP MCSE

 

[Guest]

AOk i have trend microscan virus protection. That does not pick up any
viruses on my computer but i have been testing out different ones and as far
as i knew trend is one of the best . but anyway so i found avast free home
edition downloaded it updated it and the avast free home edition pickup a
virus but my "supposed to be one of the best virus scanners" did not and will
not pick it up. What do you think i should do?