Author Topic: In the wild virus/malware question  (Read 4457 times)

0 Members and 2 Guests are viewing this topic.

dispatcher21

  • Guest
In the wild virus/malware question
« on: March 31, 2011, 09:21:23 PM »
As a newb I have an ok but basic understanding of how AV software works.  I was cruising the forums yesterday and saw a few posts about infections involved AntiVirus XP 2008 and newer variants. I am confused as to how a virus/malware that seems to have been in the wild for a while still slips past a resident/web scanner?

Dieselman

  • Guest
Re: In the wild virus/malware question
« Reply #1 on: March 31, 2011, 09:30:12 PM »
I can help you out here. XP AntiVirus 2008 comes in many flavors such as XP AntiVirus 2009,2010 and 2011. These program are not viruses but rogues. Think of them like a scam. They make you believe you are infected to get you to buy there product. They rarely destroy a pc are not malicious. They really are annoying if anything. Malware writers are always 10 steps ahead of malware defenders. It is impossible to stay on top of the game cause once you find a cure for Xp AntiVirus 2008.............Then they re-write the code and bang.............You get hit with the same thing again but yet now its under a different code. No nativirus will detect everything. No antivirus can protect you 100%. With that said most of the responsibility falls on the user behind the mouse. Follow safe surfing habits you you should never get infected. Go around being click happy then you are will pay the price.

In a nut shell..............Companies like Avast,Symantec,Kaspersky,AVG and Avira have huge teams of people working on cures for the viruses that are known now................Never mind the ones that just came out today. You find a cure and release it. One minutes later there are tons more viruses. Get it?
« Last Edit: March 31, 2011, 09:34:12 PM by Dieselman »

Offline Charyb-0

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2508
Re: In the wild virus/malware question
« Reply #2 on: March 31, 2011, 10:22:47 PM »
@dispatcher21

Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.

 
Below is in the help file:
"By checking the box "Scan for potentially unwanted programs (PUPs)", you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use."
« Last Edit: March 31, 2011, 10:30:53 PM by Charyb »

Dieselman

  • Guest
Re: In the wild virus/malware question
« Reply #3 on: March 31, 2011, 10:31:49 PM »
@dispatcher21

Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.

 
Below is in the help file:
"By checking the box "Scan for potentially unwanted programs (PUPs)", you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use."

Keep in mind that enabling PUPS can also bring on false positives. Enabling PUPS on a full scan is ok but not so much for resident protection.

naren17

  • Guest
Re: In the wild virus/malware question
« Reply #4 on: April 01, 2011, 02:04:14 PM »
@dispatcher21

Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.

 
Below is in the help file:
"By checking the box "Scan for potentially unwanted programs (PUPs)", you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use."

Do you mean to detect fake AV's PUP should be enabled??

Thanxx
Naren

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: In the wild virus/malware question
« Reply #5 on: April 01, 2011, 02:17:55 PM »
Do you mean to detect fake AV's PUP should be enabled??

No.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37561
  • Not a avast user
Re: In the wild virus/malware question
« Reply #6 on: April 01, 2011, 02:20:48 PM »
Quote
Do you mean to detect fake AV's PUP should be enabled??
NO, FakeAV is considered a malicious program and is always detected

PUP = potentially Unwanted Programe

Like a legit keylogger program, if you have installed a Keylogger to see what your kids are doing with your computer when thy are on internet, then it is a program you want....if someone have installed it to Spy on your computer use...then it is a Unwanted Program

There are many programs that comes in the PUP category
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci1066761,00.html

Dieselman

  • Guest
Re: In the wild virus/malware question
« Reply #7 on: April 01, 2011, 02:29:40 PM »
Enabling PUP's does not hurt but can bring on false positives.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: In the wild virus/malware question
« Reply #8 on: April 01, 2011, 02:32:25 PM »
Enabling PUP's does not hurt but can bring on false positives.

Wouldn't be 'real' FPs, if you want to catch PUPs. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0