Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Jack421 on January 20, 2011, 02:56:53 AM
-
How do I know if malware has compromised Avast? If somehow the malware has secretly rendered the scan engine inoperable or unable to remove malware.
Rootkits, viruses spyware etc ect
-
Ideally, you would see a yellow exclamation point or red X over Avast! icon in the system tray, either constantly or intermittently.
-
Is there anyway avast can be compromised showing its operating normally or any other scan engine such as malware bytes and Super Anti Spyware!
-
Sure it's possible. I have seen Norton disabled several times over the years. It looks like it scans but finds nothing. The PC's in question were being operated by dangerous users that did not follow common sense and most likely help infect their PC's with malware that disabled norton. I have yet to see Avast get disabled, fingers crossed.
Bill
-
Ok but how would one know if the system is compromised if it operates normally as if it had not been compromised by malware? Would this come up in a OTL log or some other type of utility! If it is compromised how could it be fixed and how can you find out?
-
Ultimate goal of much malware is to be stealth. That is one reason for frequent program/virus database updates.
Logs like you speak of are effective to see what others can not, if you know how to read the results. They do nothing to prevent initial infection, though.
Best prevention of this doomsday scenario is layers of protection from separate sources.
-
What do you suggest I know avast covers spy ware and you can only run one anti virus at a time, I have avast and online Armour! I use House Call and Eset Online Scanner as well as combo fix, Malware bytes, Spyware Blaster and Super Anti Spyware!
-
Ok, that is a lineup. I would say for me that would be more than good enough. But more? Something like Threatfire.....maybe some kind of HIPS (OA have something like that?).... Sandboxie (or a full VM like VMware or Virtualbox).....Winpatrol......Prevx......all good things to check out.