Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: dispatcher21 on March 31, 2011, 09:21:23 PM

Title: In the wild virus/malware question
Post by: dispatcher21 on March 31, 2011, 09:21:23 PM
As a newb I have an ok but basic understanding of how AV software works.  I was cruising the forums yesterday and saw a few posts about infections involved AntiVirus XP 2008 and newer variants. I am confused as to how a virus/malware that seems to have been in the wild for a while still slips past a resident/web scanner?
Title: Re: In the wild virus/malware question
Post by: Dieselman on March 31, 2011, 09:30:12 PM
I can help you out here. XP AntiVirus 2008 comes in many flavors such as XP AntiVirus 2009,2010 and 2011. These program are not viruses but rogues. Think of them like a scam. They make you believe you are infected to get you to buy there product. They rarely destroy a pc are not malicious. They really are annoying if anything. Malware writers are always 10 steps ahead of malware defenders. It is impossible to stay on top of the game cause once you find a cure for Xp AntiVirus 2008.............Then they re-write the code and bang.............You get hit with the same thing again but yet now its under a different code. No nativirus will detect everything. No antivirus can protect you 100%. With that said most of the responsibility falls on the user behind the mouse. Follow safe surfing habits you you should never get infected. Go around being click happy then you are will pay the price.

In a nut shell..............Companies like Avast,Symantec,Kaspersky,AVG and Avira have huge teams of people working on cures for the viruses that are known now................Never mind the ones that just came out today. You find a cure and release it. One minutes later there are tons more viruses. Get it?
Title: Re: In the wild virus/malware question
Post by: Charyb-0 on March 31, 2011, 10:22:47 PM
@dispatcher21

Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.

 
Below is in the help file:
"By checking the box "Scan for potentially unwanted programs (PUPs)", you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use."
Title: Re: In the wild virus/malware question
Post by: Dieselman on March 31, 2011, 10:31:49 PM
@dispatcher21

Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.

 
Below is in the help file:
"By checking the box "Scan for potentially unwanted programs (PUPs)", you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use."

Keep in mind that enabling PUPS can also bring on false positives. Enabling PUPS on a full scan is ok but not so much for resident protection.
Title: Re: In the wild virus/malware question
Post by: naren17 on April 01, 2011, 02:04:14 PM
@dispatcher21

Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.

 
Below is in the help file:
"By checking the box "Scan for potentially unwanted programs (PUPs)", you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use."

Do you mean to detect fake AV's PUP should be enabled??

Thanxx
Naren
Title: Re: In the wild virus/malware question
Post by: Asyn on April 01, 2011, 02:17:55 PM
Do you mean to detect fake AV's PUP should be enabled??

No.
Title: Re: In the wild virus/malware question
Post by: Pondus on April 01, 2011, 02:20:48 PM
Quote
Do you mean to detect fake AV's PUP should be enabled??
NO, FakeAV is considered a malicious program and is always detected

PUP = potentially Unwanted Programe

Like a legit keylogger program, if you have installed a Keylogger to see what your kids are doing with your computer when thy are on internet, then it is a program you want....if someone have installed it to Spy on your computer use...then it is a Unwanted Program

There are many programs that comes in the PUP category
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci1066761,00.html
Title: Re: In the wild virus/malware question
Post by: Dieselman on April 01, 2011, 02:29:40 PM
Enabling PUP's does not hurt but can bring on false positives.
Title: Re: In the wild virus/malware question
Post by: Asyn on April 01, 2011, 02:32:25 PM
Enabling PUP's does not hurt but can bring on false positives.

Wouldn't be 'real' FPs, if you want to catch PUPs. ;)