Re: Is a single souced AV package a valid strategy



"amabutho" <mikehopper@xxxxxxxxxx> wrote in
news:1123253983.168729.209340@xxxxxxxxxxxxxxxxxxxxxxxxxxxx:

> My recent experiences with identifying a virus/worm/trojan on my
> system has led me to question the value of AV protection using
> software from a single source. I do not want to start a flame war
> over AV tools but have experienced an infection that challenged
> identification.
>
> A week ago a virus entered my XP system after downloading the July
> 30 MS XP updates. I run Symantec Norton AV (NAV) which is updated
> regularly using LiveUpdate. NAV identified the virus as a variant
> of "Netsky" and cleaned it up but the system still behaved as if
> it were infected. Things like TaskManager and the DOS window
> would open an immediately close. Running NAV in both Safe and
> Normal mode indicated nothing wrong.
>
> I then spent the next two days trying a variety of "free" virus
> checker packages in both Safe and Normal mode all to no avail.
> Then started looking for web based tools that might do the job.
> After checking out four I uncovered the web version of
> BitDefender which running in normal mode identified the culprit as
> the "mytob.GD" worm. From there it was a few hours of work to get
> the system back to operation. Thanks to some of the earlier
> messages on this group (David Lipman on July 6 2005).
>
> Now my question is: Is it sound practice to rely on one AV package
> that cannot be relied to identify each and every infection? [NAV
> as of today appears not to detect the "mytob.GD" worm].
>
> Is there any strategy to have some alternate package run on the
> system?
> I understand there could be a number of conflicts etc but has
> anyone
> used a scheduled web tool task to complement their loaded package?
> This episode cost me 20 hours of productivity and I value that at
> at least $1000, so any approach that saves me so much effort is
> worth paying for.
>
> mike
>

I am trying out using multiple scanners. I have eTrust(which is my
main one),AVG free and AntiVir free running with real-time scanning
turned on.Also BitDifender free,ClamWin for backup.
I always use Thunderbird for mail and Firefox as browser.
Plus Spybot with resident running,MSAS running with real-time
scanning,PestPatrol with active protection running and 2 script
blockers(script defender/script sentry)running.
So far just a minimum slow down in loading programs(I am using an
older P2 450mz/512mb win2000pro)
-max
--
Making Good Posts: http://dts-l.org/goodpost.htm
Virus Removal Instructions: http://home.neo.rr.com/manna4u/
Change nomail.afraid.org to yahoo.com to reply.
Registered Linux User #393236


.



Relevant Pages

  • Re: Help Removing Trojan
    ... | running fine until I start NAV Auto-Protect and thats when all these files ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Somebody saw this trojan ?
    ... your other machines and use that to scan it remotely via network share. ... I am using NAV ... The first virus or Trojan ... >> I deleted the exe file and when I rebooted I noticed that it is always ...
    (Security-Basics)
  • Re: Virus File, USB_D2.exe?
    ... I got one last night (Mercury Mail log entry): ... Intelligent Update to grab the beta March 9, 2004 definitions, NAV still ... minutes received a link to another beta definition file; ... This update found the virus. ...
    (microsoft.public.security.virus)
  • Is a single souced AV package a valid strategy
    ... My recent experiences with identifying a virus/worm/trojan on my system ... I run Symantec Norton AV (NAV) which is updated ... packages in both Safe and Normal mode all to no avail. ... Is there any strategy to have some alternate package run on the system? ...
    (alt.comp.anti-virus)
  • Re: Is a single souced AV package a valid strategy
    ... > My recent experiences with identifying a virus/worm/trojan on my system ... I run Symantec Norton AV (NAV) which is updated ... > packages in both Safe and Normal mode all to no avail. ... > Is there any strategy to have some alternate package run on the system? ...
    (alt.comp.anti-virus)