NOD32 missed a virus, should I be disappointed?

Bane said:
What browser were you using?

The trial gave this pop-up about wanting Windows updates. Didn't see why it needed Silverlight.
Click to expand...

I was probably using Firefox as that's usual, but it might have been IE. I often have both running.

I don't think NOD32 needs Silverlight, it's just reminding you about Windows Updates that haven't been done.

Rgds
 
Anti-virus probably only detect about 30-40% anyway. And removal would probably be about a quarter of that previous figure.

You have every right to be disappointed. Disappointed by the brainwashing that has occured over the past 15 years.
 
I picked up a nasty Win7 Guardian 2010 by simply browsing a site I have UAC, all the updates and run with Microsoft Essentials. I didn't click any dialogue boxes that appear.

All the removal guides i read up on suggested going into regedit.. BUT thing darn virus disabled all my exe's and internet browers, regedit, system restore.. It was nasty.. After an hr of trying a done a reformat.. which took a bleedin' 12hrs (thanks to being a gamer)

Anyway if anyone has sussed out a way to get around these exe and regedit lockdowns please let me know.

I think i'm going to buy Ghost or Acronis now, and just re-image. 12hrs was waaaaaay too long.

Seriously though, if there's a guide pass it on please.
 
Did you try Safe Mode? Windows only loads up Microsoft services and drivers meaning most crapware doesn't even get to run.
 
SiriusB said:
Did you try Safe Mode? Windows only loads up Microsoft services and drivers meaning most crapware doesn't even get to run.
Click to expand...

In all honesty no. I just dual booted into WinXP killed the AV.exe and renamed regedit.exe to regedit.com (which still didn't run)

I was also unable to find some of the folders that had apparently installed themselves, even with show everything switched on.

I don't think I'd of been happy with anything other than a re-installation at that point anyway... So i just went for it ! always feels good to nuke your partition anyways.. The good soon turns to misery though, when you are still baby sitting your damn computer 12hrs later... Feeding it disks and waiting and waiting.
 
Spike_UK said:
Last week I had to remove "Security Tools 2010" from three of our laptops.
Click to expand...

Aye, that thing seems rife at the moment, it's one that gets installed when people click "click here to watch the full vid" of that killer whale drowning that woman last week

Always an idea to run MalwareBytes Pro in the background alongside your preferred AV suite
 
Terrier_Jimlad said:
Aye, that thing seems rife at the moment, it's one that gets installed when people click "click here to watch the full vid" of that killer whale drowning that woman last week

Always an idea to run MalwareBytes Pro in the background alongside your preferred AV suite
Click to expand...

Yes these new types of scareware are rife and now money is involved, it's not going to get any better.

My question to the AV companies and Microsoft.. What are you gonna do about it?

If you can go to a webpage and this crap installs itself without any user intervention then its a big problem.

There are groups of criminals out there making lots of money out of this. Maybe the law can assist? Bah who am i kidding. Nothing racist was said.
 
NathanE said:
Anti-virus probably only detect about 30-40% anyway. And removal would probably be about a quarter of that previous figure.
Click to expand...
If that's true then it's a wonder that people bother with AV software ?

I'm currently using NOD32 but when my licence runs out in a few months time, I'm thinking of trying out Kaspersky 2010.
 
Burnsy2023 said:
It doesn't install itself without any intervention, it still requires a user to click at least once.
Click to expand...


honesty no it doesn't. Some webpages can run scripts you know. Normally though my AV catches.. This one was smart and disabled the AV before anything could be done. I did not click any scan my pc, just went to the site and boom.
 
You don't even need to have admin rights to get these malware things installed. I've seen about 20 infections of the same fake 'AV' software at work, none of the users have admin rights, but the software runs from the users Application Data folder, somehow it even manages to change the .EXE association to re-run the malware if you try and run anything under that user account. It doesn't affect any other user accounts on the machine.

I put a group restriction on our network to prevent any executable code from running under C:\Documents and Settings\ and that seems to have stopped them all. Obviously there are ways around it but generally this kind of software is kind of dumb so it doesn't try.
 
radderfire said:
One other thing, I've never updated Windows on this machine. That's because the Win update process crashed another computer once, so I thought, what's the point. I back up everything externally so I don't lose data.
Click to expand...

:eek:

It doesn't matter how good your AV is if your system is exposed to every vulnerability that's ever been discovered in your version of Windows! You're patching over one route into your system and leaving another wide open.

MS release security updates for a reason... apply them! That it might have crashed another system once makes no difference. If you ignore security updates then you can't complain when you get malware.
 
What's the distinction drawn between malware and viruses? Is one a subset of the other?

Am I right in thinking that firefox's noscript addon prevents the vast majority of nasty things making it onto a windows computer?

Reading through this thread has left me thoroughly confused as to how one is supposed to stop windows being broken by various things. Keep it updated, run antivirus, antimalware, and a firewall and keep these updated too, don't run as administrator, but what else if these are not sufficient?
 
Do most of these things target IE users?

I've never seen anything remotely like it on my machines, but for the last 8 years or so I've used Opera or Firefox in conjunction with Admuncher.
 
It can happen on anything, mainly attachments in emails that people open without thinking.
 
I have been running Kaspersky Antivirus along with Internet explorer in protected mode and never had a single issue in over 2 years to date. I use the free Secunia Personal Software Inspector to keep all my programs patched and run a regular scan with Kaspersky. Can't recommend it enough. I use the Antivirus mind and not the 'internet security' suite which can be a resource hog!
 
Khaaan! said:
It can happen on anything, mainly attachments in emails that people open without thinking.
Click to expand...

Use to be the case. Now they typically come from scripts on websites. Crap like lose weight fast or get rich quick type sites.

I would say in a network of about 70 at work, at least once a week we get someone's machine infected.

Problem has seemed to get much much much worse in the last few months. Every crook now has his app.

It's obviously very profitable for them and it seems as if no-one is doing anything about it.
 
You must log in or register to reply here.
Back
Top Bottom