topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Thursday April 18, 2024, 9:09 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Bamse [ switch to compact view ]

Pages: prev1 ... 11 12 13 14 15 [16] 17next
376
General Software Discussion / Re: Best free firewall for Windows?
« on: October 25, 2009, 10:41 AM »
Yes but there is a big difference between actual need and what not so informed people want and dont forget - are told to use Tuxman. Photoshop is highly recommended for resizing pics, Dreamweaver is the one to use for webbuilding. How it has been for years. Accelerates unless circle is broken. General level of know-how is not as high as you think, reasons are many though.

377
General Software Discussion / Re: Best free firewall for Windows?
« on: October 25, 2009, 10:13 AM »
The cool stuff is typically expensive Tuxman. Games, Adobe, MS. Fast internet make it easy. Most do not know much about free or fairly priced alternatives either. Most do not think more of software industry than music/film industry. Everything goes territory, no feeling of harming anyone = easy to justify. Irresponsible youth? There must be some sociological books about this you can read  8) Fact is it is very common. I know some people who have no idea of p2p, but they do have illegal Windows, Office etc. Got it from the guy they bought computer from. Office is even on a dvd. 1 download can spread out.

There are different levels of trust f0dder, we are talking of how likely it is X cause problems. To not use it at all is safe but alternative is not necessarily to go click, click - ooops, I never saw that coming!

378
General Software Discussion / Re: Best free firewall for Windows?
« on: October 25, 2009, 09:41 AM »
Not a subject to dive into I think but how do you evaluate software around here? In sandboxes, VMs, research, Sysinternals magic tools spitting out graphs and relations, thinking og wondering and so on right? Same goes for illegal software, if done right - and if even possible to avoid risk that way. Not saying it is but those who are careful have same reservations like you. Majority just click and why infections breed like rats. Hopeless, could start with an exe-file allowing to run whatever security suite to get "safe" ;) Simple application blocking is only part of this type of "security" but pretty sure most consider it a must.

379
General Software Discussion / Re: Best free firewall for Windows?
« on: October 25, 2009, 09:25 AM »
Or preventing damage from being done f0dder. Think Rapidshare, p2p, illegal software - some of incomings can be tricky to deal with. Like wanting to "phone home", check serial numbers and such. For this "firewall" can be useful and that is also a reason they are regarded as a "must" by some  8) I would estimate 50/50 between that usergroup and the extremely cautious/paranoid/interested one. Kind of funny? Not all who are into illegal stuff trust keygen.exe. I almost don't use such things any more, but when I did arming computer with "firewall" was considered common sense among those who did not just click, click.

Had to mention that since it is important  :D

381
General Software Discussion / Re: Windows Security Essentials
« on: October 18, 2009, 11:40 AM »
False what?  8) Is this one http://www.microsoft...ThreatID=-2147338578 I think "severe" category is a bit hefty. Malwarebytes dont like it too though. Besides A-squared, ESET, Norman I dont think anyone cares. "without user consent" is probably the trigger.

IainB, you should change default actions to "Quarantine" from "Recommended" and untick box beneath with "apply recommended actions:...". Go to Settings, Default actions. Is safe and you get option of allowing and chance to know what is going on. First 2 categories (I think, definitely "Severe") are just swept away so if you don't sit at computer you will never know since action is automated. At least untick box so you become the decider, they see that as a security risk 8) File becomes "suspended" and untouchable until you have made up mind. You are not supposed to care, doubt, know but some day it might come in handy not to trust program. Will probably not delete system files but who knows. Unless you check history tab regularly you dont know what MSE has been doing. You might hear cpu fan go off because computer is working hard some minutes but that is it.MSE developers must be brave men because setup can potentially go very wrong  ;D

There is a new AVG out btw. Now has "basic" rootkit protection but not "advanced" Difference is ? The one you used has zero. Not the most interesting infection to get. I read email protection is non working, like in not at all. Speaking of bugs in security software, never stops. If tired of MSE Avast will soon release a new version as well. Looks very promising, news are Behavior shield and I think also much more ip blocking like Malwarebytes. Practically a new program compared to old version 4.

382
General Software Discussion / Re: Windows Security Essentials
« on: October 16, 2009, 01:42 PM »
The big unknown adventure with no clicks involved, just happened, ooops... Ok I stop but details, details, the more the better. Must know what went wrong, can nearly always be found out. If he has given you detailed and convincing reports of infection he also know where it came from. Check Malwarebytes log if nothing else is avialable, PM me link and such if you have it please. May be he got hit but Im sure of one thing - he DID click and that will be confirmed by a reconstruction. Most conveniently forget but unless you run unpatched XP with IE6, a few old browser plugins will help too, chances are not so clever clicks are involved. Like every time. Nothing to do with MSE, should stop whatever anyway but MSE was not alone of failure or you can slap me silly. If an infection race through your knowledgeable friends supposedly fully functional setup we have a major history to tell the world. Closest you will get to I did not do anything!! is infection from an usb drive with autorun enabled. That is entirely up to scanner and Windows to stop. He cant do much about that. I think MS just released a tool to permanently disable autorun on all removable drives, not the worst idea if unknown drives are used.

Well seems like that MS was right about that Russian update.exe which is in fact notepad.exe. I guess malware collector must have bundled it with all the other nasty Flash exploits and exe-files on that site. First time Ive seen that. Comodo now also flag it but I dont know. 3 out of 40+ I or scanners cant see any sign of infection so give up, is just sitting there. Went through strings in Process Explorer, looks like a Russian notepad to me. Had hoped it would trigger suddenly, nothing happens. Besides apparently being right response time of 16 min. is extremely fast. Makes people submit more, less than 6 hours or so is great.

Does not take more than a Google search do find those lists of malware but if anyone wants the handful I have they are avail. Next after Vista/7 getting computer infected is the most effective defense ever. Spend time removing too. Also good test of browser filters, Ive been told by MS IE8 have a 80+% detect rate in "social engineered" malware downloads = links! Try 30 tops. Strange world this is. Goes a bit up and down because those site of course does not list in real time,  bundle and present. How that match MS filter machinery is perhaps random, no where near 80% hitrate that is for sure. Not ahead of Google filter either but nm that, another battle... If infection is good, like you cant figure out how to remove - done for!, it will stick in memory for a while. Must be done in Virtualbox/VMware or what else there is. No shared folders either. Get a 120 days free XP with IE6 from MS if none available. MSE require legit Windows, I assume it will work on those free versions. Guess easiest to set up in MS Virtual PC, don't remember if Virtualbox convert automatically.  

383
General Software Discussion / Re: Windows Security Essentials
« on: October 16, 2009, 06:24 AM »
Here is MSE in action when I enter domain holding that update.exe so Im a bit cheap on the links... Not all are so well protected  :D

Screenshot - 16-10-2009.png

384
General Software Discussion / Re: Windows Security Essentials
« on: October 16, 2009, 06:04 AM »
Is from a site listing malwaredomain so not HP. Should be a trojan, has ID and all. Content is all malware. When run it appears to be a Russian notepad.exe - no scanner seem to catch anything. Strange but I hope Kaspersky or other big names recognize it soon. Then back to the xbox playing dude at MS.

Not sure Im allowed to give links to that site, there are several of them, very public - used by Malwarebytes and others, but not all like them in forum posts. Like those who write forum rules. Can say so much site listed is Chinese and other content is labeled pdf exploit, Liberty Exploit System kit, trojan. I put money on infection for now.


385
General Software Discussion / Re: Windows Security Essentials
« on: October 16, 2009, 04:58 AM »
Damn that was quick - and a disaster! Im not sure it is a good idea to post but must be fair...

Submitted Files
 =============================================
 update.exe [Not Malware]

That better be a FP but Im 99% sure it is not. Got it from a list of malwaredomain. Malware 1, MSE 0  8) I can feel a need to sign up for their forum coming on.

386
General Software Discussion / Re: Windows Security Essentials
« on: October 16, 2009, 04:49 AM »
Yeah but there is still room for improvement. Right now Im waiting for something to drop from the sky, like a "dynamic" signature. Have submitted to MS so looking at clock. http://www.virustota...219d78ca9-1255686179 Im careful about testing since cant do it in Virtualbox due to some validation problems but file definitely not recognized. I know it is not MSE engine they use but Im not running it to test "code emulation" or what they call it. 2 days old and shows how crappy situation is - if you happen to click on everything that moves. And dont use newer Windows properly, but it can potentially get crappy! Remember first thing to do in at least Vista is to turn off UAC and run as admin if not superadmin. As much common knowledge as the opposite and so then risk is much closer.

387
General Software Discussion / Re: Windows Security Essentials
« on: October 16, 2009, 03:08 AM »
You dont even have it on your computer dude so how can you say you have done any testing? Are they releasing a security program without heuristics? No they are not. Rootkits also covered. You have more basic questions go look them up. This is pretty low. Im not assuming, just replying to your weird ideas of this little program. You sprint to negative conclusions at first chance. Start with getting facts right at least, you can still hate it. Just be a bit fair and informed. So now we have test results? from where? Ive not seen any. Is it the friend again, yes why not focus on 1 friend with a program being spread globally. We continue the if not as fast as Kaspersky MSE is flawed logic. If he was god you still cant hang your "flawed" idea on his experience, can never make sense - especially not if you say you run Outpost Security Suite. Seems like you are thrashing it to me. Zero interest for anything but picking up negative or false info is typically sign of that, then time stops since you have what you need for conclusion. Lets see 724 posts - ok so you know how that works... You wait for expected ??? or what did it do? and then you are off. Dont say you are testing anything dude. If you run Outpost you know how these programs work out in the real world and that issues are close friends to them. Ive pointed out at least one which might not be bug but at least an annoyance of the more severe. Others here and there have said the same, I have researched. Dont scream! Im not able to find any other problem unless we go down to GUI and such. Really. My offer of making any other free AV look silly still stands by the way. If you test AVs by not installing them, you could seek other sources, google it! Add and substract, some day do your own testing. Then you learn.

Well the MICROSOFT name being the major trigger I could understand. Some will feel that way. Those who think others should know about their position write just like you - but flawed and worthless label is explained and justified based on your knowledge, so not the case. Pro and con concept is not really your cup of tea I guess.

Btw, your friends story about MSE being transparent to infections is about the first time Ive seen that. Really. I might be close to 100% sure detection rate is not an issue, that I will do you the favor of suggesting putting focus on other matters. If Im right what will happen is your stories get old, very old. Im not sure you know how malware world works, but references to randomly picked incidents, which require a lot more info to be more than hmmm, and basing a thrashing on that is simply rambling. Unless whatever is just always crap it really is rambling. Thing is MS have not had bigger problems than so many others with the old OneCare for quite some time. MSE is supposed to be better and nothing indicate that is not the case. This fact you have figured out could be false, just trying to help...

388
General Software Discussion / Re: Windows Security Essentials
« on: October 14, 2009, 06:13 AM »
Must say the MICROSOFT name triggering doubts is understandable (they should have made MSE when XP was released!) but not really if you feel there are many tiny Microsoft clones in security business. With some exceptions perhaps but generally my point of view, so I welcome MSE and hope it will do well. At least enough to make competition (not competition if you ask MS but BS) make an extra effort. Strange that both AVG and Avast just happens to put out new versions right about now  8) To make a reason for being alive they need to be better. MSE serves other purpose than just being a more than good enough scanner for GrandMa and family.

389
General Software Discussion / Re: Windows Security Essentials
« on: October 14, 2009, 12:43 AM »
Well that is up to you Innuendo but dont think you test basing evaluation on random info. You are set on not liking MSE so use a different standard no security software can pass - including the one you use right now. Let us say your friend did not mess up, then what? There are personal disaster stories of every other program. This was just confirming what you want to hear. Which program you want me to fail? We are in free AV section so not that many to chose from. You think it is impossible to make exact replica of your friends story? Provoking problems is so easy! Forget about "reviews" or even the few "reputable" tests. They all have limitations, why should MSE be an exception?

There is no "of course I know settings" about this. This thread show that as well. Majority have no clue of them, expect program to work flawlessly from day 1. Default matters and probably also why MSE is designed the way it is. That is one of the definite good things about it if you think about how majority deal with such a program.

Im not a novice either and had to use Malwarebytes when testing microsoft_09.exe using Outpost Pro  8) - comodo too btw. Default settings are no good but why not accept that since program is not from MS? Threatfire worked. The others did work just not 100%. How it is. Im not shocked or feel a need to warn against anything. Grab another of the 10000s of files and situation might be opposite. I will appreciate HIPS power (set up to actually work) cause no other tool have an idea. If you dont understand that you should be careful with tests and fast conclusions, even feeling "secure". "Of course I know settings" save your butt but not all are so eager to tinker. Any other approach is being naive or paid by a company. You end up writing blog posts or rambling in a podcast  ;D

As Ive said before they do have forum and ways to report bug, even a wishlist so dig in with both eyes open...

What would you feel about MSE if it was years old and had "System Restore did not work under Windows Vista" in changelog for latest version? You dont mind Outpost so guess not a problem? MICROSOFT name on the box makes you shoot left and right  8)

390
General Software Discussion / Re: Windows Security Essentials
« on: October 13, 2009, 10:31 AM »
Innuendo, next up must be a test on your computer  8) You read too much into random chitchat. A bit selective too, my impression is most like MSE. Much is hype but some know more than OneCare and still see the point. Which should be obvious if knowing security industry. See for your self but if shocked by less than 100% perfection you better not. Scanner does not become flawed because it is slower than another btw. - the opposite can easily make more sense. If you want to see MVPs saying other scanners cheat you can do that, heh. They have actually taken a paranoid route here. Not that it slow down scanning that much. I dont see much point in full scan but what do you think would be an issue if it skipped files? Some would say Grandma have no clue of changing settings to genuine full and so MSE is not safe. Think pros and cons instead of being definitive. You use Outpost Suite right?  8) What an interesting changelog for that program! Hopefully you have dug into settings or virus scanner work somewhat... Strange default settings for a HIPS but user can always learn and modify, also with Outpost. Again the only real problem I can see myself and others unite about is cpu spiking and that is mainly relevant when you know about it. There are many post about that on their forum but truth is most don't notice or don't care, not a showstopper at all. If they take complaints seriously or not is my test of MSE. Im already confident it works great as an AV which is its purpose in life. There is something weird going on, asking to be fixed I would assume - programmer problem not user. We will see. Majority dont post on their forum, join "wish-list" so this is a good test. Overall MSE don't really need defending unless MS stop developing of course or I have missed the many other free perfect AVs... Rest is really nothing in this area of software.

391
General Software Discussion / Re: Windows Security Essentials
« on: October 11, 2009, 04:06 PM »
Default actions are decided in settings, all can be forced Quarantine if that is preferred. Recommended means alert level decide so at least severe and high is automated. False positives do not exist so not a problem 8)

I dont really get slow speed complaint. Full is full, quick is quick - like every other scanner. Same relationship to me in duration. No difference when they all scan every file which they rarely do. Will use "Smartscan" or other term unless forced, no reason to waste time so skip as much as possible.. MSE seems to scan everything unless exclude settings have been used. I have not noticed sleep-scanning either. Wonder if I have a genuine copy or it is a rouge :)

But weird scanner. I started a full scan 15 min ago, sprints away with 250000 items in 15 minutes. Then comes to a program folder with small video editor. Almost stops completely and use 4 minutes on that little program alone. Has 22 exe-files though but other exe-files are scanned fast so no explanation. Now sprinting again. I did not use cpu for other things so no idle trick to comfort computing, guess it just needed a break or to contact HQ! If such breaks are common time will stand still.

I guess missing pause button during full scan is explained by sleep/restore trick.

So a bit over 1 hour for 1.1 million items in 187.023 files. Not bad I think. If I use Kaspersky Virus Removal Tool it is not even half done at 1 hour. Will take 2.5 hours or so. No tricks from Kaspersky with on-demand scanner and files set to all :)

I had 2 severe infections (known) and could chose action for each one. May be because I use quarrantine and not "Recommended" as default action. What is tricky is if you dont chose an action within may be 3-4 minutes MSE does it for you. Not much time to research! And up pops a green windows, all cleared and now in history. So do not hesitate. This also points at qurrantine as best setting. I think auto-fix countdown comes from the setting under default action "Apply recommended actions: Help protect your computer by applying the actions above..." Not clear because they use the word "recommended" which is also an action. So Quranntine is new "recommended action" and will be applied automatically if that box is ticked? Which it is per default.

I still think main worry is resident behavoir. Diagnose with Process monitor, exclude stuff. Sooner or later it gets randomly greedy with cpu usage. I use Qsel and when I open up a new category window become white for may be 15-20 secs. Not always but often. Well not anymore because now qsels files are excluded. But not too convincing. Must have to do with shortcuts and MSE sniffing original folder/files. One of the severe infections I had was not even on C: but D: - file was placed as a recent file/shortcut on C:. So it take off when getting a hint. I also read on their forum that some had fixed cpu spikes by turning off desktop=shortcuts. Annoying.

392
General Software Discussion / Re: Windows Security Essentials
« on: October 07, 2009, 07:30 AM »
Gibson have noticed paranoia in his newsgroup and wonder where it come from?  8) Is it not the same guy who disable scripting in browsers?

The other dude saying Quick scan is also slow should compare a bit more I think. Seems very fast to me, even if looking at packed files like UPX. Possible Full scan is a pain - same goes for most scanners. MSE does not seem to cheat and full scan will rarely be used. Dont think on-demand speed is much of an issue. Resident problems more noticeable and annoying.

I was looking at c:\programdata\microsoft\microsoft antimalware folder. 93 files in 59 folders, 442 MB (464.109.568 bytes) :D Signatures is about 45-50mb but then there is backup folder of them of course, same size. So close to 100mb just for sigs. 1 Quarantine files is 255mb! Have 15-20 infections quarantined. After removal data folder is down to 165mb 8) All in all I guess around 200mb should be expected. There is another Microsoft Security Essentials folder under data, then comes program files.

Check their forums http://social.answer...s/en-US/category/mse where MVPs and moderators insist that MSE does use heuristics scanning method. http://news.zdnet.co...0189,39778759,00.htm or just the quote
Cliff Evans, Microsoft UK's security chief, said MSE uses the same engine as OneCare, but added that the new product was "better, in the sense that it's a later iteration of that engine". The new software does not include the non-security features, such as automated PC tuneups, provided by its subscription-based predecessor.

MSE uses a higher amount of heuristic detection techniques than OneCare, Evans said. The software studies the behaviour of suspicious applications, then reports back to a central server to check the behaviour against that of known malware.

The Dynamic Signature Service technology uses the most recent virus definitions to check applications for risks, rather than relying on the last batch of definitions downloaded, Microsoft said.

The suite also emulates programs before they complete their execution, and looks for behaviour such as carrying out operations without user permission, Owen said. If a program is behaving suspiciously, MSE will ping the Dynamic Signature Service to see whether the program should be submitted for analysis or terminated.

In addition, Owen said that MSE offers a performance boost over OneCare because it is not a "big suite" like its predecessor.


393
General Software Discussion / Re: Windows Security Essentials
« on: October 06, 2009, 01:37 PM »
Ive used Avira which is very light and overall cant tell difference to MSE besides those strange events and when checking Task Manager. Cant reproduce mini-freezes since they seem random, and rare, but if I boot up and immediately enter a folder with 100s of downloads it often seem to think a bit too long. Sometimes same issue when right clicking a file. Would be strange if MSE will not get a changelog of fixed bugs, no reason to be surprised. When they do first update of program Im more calm, are they in this as part of a greater policy or just an experiment they might lose interest in? Can never tell. If they use brain they better follow up on release and fix problems. Cant imagine they wont, either that or total failure. Was bad enough with Defender. Strangely enough I never ever noticed any problems in beta versions. Ram usage has always been high though. Personally I dont care as long as everything else is great but since Ive seen requests for easy closing of Avira processes due to "resource-usage" I know many will. Some stuck in Win9x thinking but numbers are high no doubt. If Task Manager numbers are important forget about MSE.

Btw, run MpCmdRun.exe /? to see what can be done in batchfiles :) /SignatureUpate fixes issue with updates being part of WU. Can update away every 1 hour or whatever via Scheduler.

Advertised numbers? There have never been any I think. Users claiming 6-10mb are wrong, MsMpEng.exe (Antimalware Service Executable) is overlooked. Might add that Malwarebytes use about 45mb when resident but yeah MSE can get as high as 150mb on my computer, depending on what it is doing. Right now only about 70mb, quiet night :) (I look at Private Working Set). If in a MS-is-cool-mood I would say it scales to ram available or something "advanced" or simply say it does not matter - if used to Avira numbers I would scream pig!, heh.

Dont forget anyone installing MSE becomes member of MS Spynet. What they will use all that info for time will tell. Keeping up with heuristic magic with solid and massive amount of signatures? If MSE catches on perhaps biggest cloud security feature ever :) No option of disregarding Spynet. Probably also used in IE8, Basic and obligatory membership says "including where the software came from".

394
General Software Discussion / Re: Windows Security Essentials
« on: October 06, 2009, 12:27 PM »
Just same old story about not running 2 different resident AV programs at once. More than just AV category today, a "firewall" can have AV or Spyware module so they say "secuirty-related" to cover their butt  8)

Avast claims to be compatible with MSE btw. I dont get that but cool if so http://blog.avast.co...etings-from-redmond/ Their now boss, former Symantec employee, has an interesting article about MSE http://blog.avast.co...entials%E2%80%94mse/ Everyone is sooo interested, heh. And of course he link to a PCMag test which are completely unknown to mankind. Pretty good article though considering it comes from a competitor. MS tone down MSE but he know better as does anyone knowing MS :D

395
General Software Discussion / Re: Windows Security Essentials
« on: October 06, 2009, 12:09 PM »
You sure about Avast and heuristics? I read on their blog they said something like most dont know we have implemented some heuristics in standard shield already, been quiet about it. Mail module have had it for years. 5 has everything.

There is a technical view on such "must-haves" and buzzwords and one of majority of users. Too easy to just recommend away, as so many experts too, since tools cant be handled. Much unstable crap as well, adds to requirements of user. All promoted as wonder tools of course. The more thinking is done the more risk of ending up with programs like Comodo or invest in mightiest of suites. Anything less is not safe, firewall story is oldest of those "truths", still going strong. For Mrs. Grandma and millions of other users that is highly irrelevant and MSE is a much better option. Some do need more because their computing is not normal or legal. Interest, paranoia counts too but separate. They still needs to manage tool of course. I would probably run an advanced firewall if I could find one that worked ok - to pad control freak on back. Nothing to do with security. Many sources try to build up demand besides everyones brain, all understand concept of "security" so interesting area to work with if into marketing. If my wet dreams come true MSE kind of stops the nonsense of weird offers for needed better security. Well, MSE and Vista, Windows 7 - even IE8 (SmartScreen) is part of this scheme.

Products that offer a new angle on how to better security are way cool of course, does not have to be freeware either. Malwarebytes with life time pro license, cost like 4-5 packs of cigarettes here. No subscription trick. Should support what works. Or take WOT, domain blocker version of Malwarebytes - which runs around the same companies crying about MSE. Block-list as useful in 2009  8) Who would have thought with all the new buzzwords. WOT can be more efficient than any AV. With Adblocking, Browser filters and WOT not much get through, is just not there. No heuristics required. If really scared for the big unknown or not able to see through scams I think WOT should be a must-have. Compare WOT with old offers from Norton, Mcafee, Trend - they are hardly functional in comparison when it comes to sites with malicious content, the red sites in WOT. Because they say they take care of bad web sites does not mean much is actually done. Just words. Annoying features about WOT is fixed by setting up plugin. Social chit chat about light or full yellow might not be interesting or make sense.

I dont know about programming but ram usage at 60-120mb+ for a not so advanced "basic" AV? Is it possible to make a pig look pretty by increasing ram usage to new heights? Would hope not and that numbers comes from tons of lovely signatures. There are slowdowns, cpu spikes when entering large folders, may be worse with archives. Actually some have complained about cpu spikes just out of the blue. Runs smoothly but then it take off for no apparent reason. Ive seen it a couple of times, sort of freezes - may be swallowing signatures? :) Can hopefully be swept under "will be fixed" carpet and not sign of MS putting too much faith in engine. Dont remember name but they did buy up a AV-company, like Giant with Defender. May be already used OneCare. Again a we will see issue, but, if otherwise functional!, you can certainly argue that MSE being simple and not so advanced is an advantage. As little as possible is better for majority people. Cant dismiss AV regardless of newer Windows improved security. Why they made it I guess. All MS. If we are all doing cloud computing in few years security will be top issue. So may be a good idea to start "managing" public today? Dont know if that is why they are so interested all of a sudden.

If Aviras heuristics is supergreat why are they beta-testing a new Pro-Active program? If whatever pass Avira today you are done for, so trying to make a system and user monitoring tool is new challenge. No one is close to safe with Avira or other scanner based tool with room for errors, not until you buy Pro-Active program. Simple logic because you are going for 100% safety not 75% and who does not run xxxxxx malware samples or has Rapidshare as most visited site. Or you fall in love with the can never be too sure, and better safe than sorry slogans - MSE have nothing to do with that but you can always argue it should since proven that blah blah.

396
General Software Discussion / Re: Windows Security Essentials
« on: October 05, 2009, 11:34 PM »
Which is why any other AV with "heuristics", most of them, are superb  8) I only know Avast 4 with no declared sniffing features, they say a "little". "HIPS" features are also needed for the many "drive-by" infections people suffer from - or the more you think about it the more you "need". Very messy, many dont know first thing of "safe computing" but they do know Windows firewall stink and a better is required. One of the many "truths" out there.

Time will tell if MSE is too simple as an AV.

397
General Software Discussion / Re: I'm tired of being told.
« on: October 04, 2009, 05:13 PM »
Hmm Malwarebytes did forget hosts file. 127.0.0.1 microsoft.com was 1 line. Still great but just shows most removal sessions includes research, action, research, action. Could have been much worse. There are good reasons all those malware removal forums exist - and backup solutions  :D

A2 Squared did not find anything except download btw.

398
General Software Discussion / Re: Windows Security Essentials
« on: October 04, 2009, 04:56 PM »
I have thin skin when it comes to conclusive statements about anything related to security. Check, double-check then wonder if it really could be true  8) Only facts counts. This seeking the truth and lack of trust might origin from my dark past as heavy user of cracks and such things. Educational though and sometimes I infect a Virtualbox just to get reminded of how things really work, or dont work. Everyone should do that.

Im not really interested in MSE as such but it has same effect as when Norton starts to make decent software. Like an world wide event which should be celebrated! Also free alternatives are not many and I have problems jumping on subscription idea. More so when we are at Windows 7, XP fading out. Seems right that MS offer an AV to make Windows complete. AV still a must for majority. Dont mind them taking market shares either so sympathy is towards MSE. You can be absolutely sure it will be thrashed if there are any problems. No risk of MS getting away with poor performance. Symantec had "report" prepared for release date, MSE is terrible "not enough!" they scream 8) A local security site, which also sell Kaspersky etc., do not recommend MSE based on a quick-test. Ready on release date. There will be much more of this and it will continue. MSE is a provocation to Symantec, Trend, Mcafee, all companies with interests in this field.

399
General Software Discussion / Re: I'm tired of being told.
« on: October 04, 2009, 03:49 PM »
Try Kaspersky  8) I did some more testing with a fresh infection which should be a nasty one "zeus/wsnpoem v2" - google it! Was a sad experience. Dr. Web Cureit found download and fixed hosts file, Norman Malware Scanner found download, Kaspersky Virus Removal Tool found download, Avast found download. None noticed it was already installed and running. Hitman found 1 of the infected files but it is recreated at boot. ESETs brilliant online scanner zero, Trend Micro scanner zero, Nortons zero. Could not test MSE since this Virtualbox Windows seems to have problems getting activated... I knew they would use MSE for extended check. So I fired up Malwarebytes - all detected, all removed/repaired. Got infected again, this time SuperAntiSpyware removed all except quite a few registry entries. Last ComboFix, did a 100% job except a few registry entries (I think). Problem is I can do this again with another type of infection and then may be Normans tool is the only one to offer any help. Toolbox must be huge. Good idea to always start with Malwarebytes and SuperAntiSpyware.

A2 Squared is pretty good, ugly and slow but massive database - I forgot to test that one. Be careful with FPs, expect tons. Malwarebytes is so great when it recognize stuff but price to pay is smaller view on the world of infections.

Malwarebytes perfect cleanup
Spoiler
Malwarebytes' Anti-Malware 1.41
Database version: 2905
Windows 5.1.2600 Service Pack 3

10/4/2009 7:40:10 PM
mbam-log-2009-10-04 (19-40-10).txt

Scan type: Quick Scan
Objects scanned: 83001
Time elapsed: 1 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 1
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: c:\windows\system32\sdra64.exe -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: system32\sdra64.exe -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.

Folders Infected:
C:\WINDOWS\system32\lowsec (Stolen.data) -> Delete on reboot.

Files Infected:
C:\WINDOWS\system32\lowsec\local.ds (Stolen.data) -> Delete on reboot.
C:\WINDOWS\system32\lowsec\user.ds (Stolen.data) -> Delete on reboot.
C:\WINDOWS\system32\sdra64.exe (Trojan.FakeAlert) -> Delete on reboot.


400
General Software Discussion / Re: Windows Security Essentials
« on: October 04, 2009, 12:16 PM »
No I did not misread, was not directed at you but anyone putting faith in "standings" on an internet forum  8) You are probably a fantastic human being without such praise.

Well you were sure not to recommend MSE because of an email. Only time will show if it is worth anything. Whole point of MSE are those Grandmas - reliability is more important than whatever test unless really crappy result. Made your friends bug-report interesting. There are bugs for sure but this type must not be among them, why they did all the beta testing naturally. If reproducible he should complain at their forum.

Beta or not, bugs are close friends of security products. Dont know if Avast has one about not handling high hd traffic. I doubt it is a universal one. Would say Bugs for such old and proven to work program are usually more subtle but of course annoying for those who suffer. Avast 4 is no speed king, will expect 5 to be better in that discipline as well. Check their forum. Not sure they bother fixing 4 but if complaint has meat on it I think there is good chance they listen. Advantage of small company. Microsoft has been fairly open with MSE but again time will show if they go zzzz when program is considered "done". No such thing as "done" with AVs. Only real problem I see with MSE is it becomes Defender or IE7. Dont think so but who knows.

Pages: prev1 ... 11 12 13 14 15 [16] 17next