|
Posted by FromTheRafters on May 11, 2008, 4:08 pm
If you were Registered and logged in, you could reply and use other advanced thread options Sometimes the action of a malware is indistinguishable
from the actions of an anti-malware. Not the fault of AVG
in their purportedly stated remedy, but rather an error in
assuming an anti-malware suite is what people want. The
wave of the future seems to be these suites where you don't
get the best defense from each category - you sacrifice that
for the 'ease of use' in having the all-in-one security suite.
I'm a little surprised there haven't been a lot of questions about
anti-rootkits being detected as rootkits by rootkit detectors of
different software vendors. Do these suites ignore the possibility
of subverting the OS?
> You're welcome! :)
>
> BD
>
>
>> Well spotted ! ...thanks for that :-)
>>
>> regards, Richard
>>
>>
>>> Hi Richard - a read here might help!
>>> http://www.bleepingcomputer.com/forums/topic143321.html
>>>
>>> Good Luck!
>>>
>>> Dave
>>>
>>>> Well, I haven't got a list like this:-
>>>> http://freeforum.avg.com/read.php?4,124300,124620
>>>>
>>>> but, someone in there is advising the guy to un-immunize, (using his
>>>> installed Spybot S&D), and then sweep with AVG a/v scanner !
>>>>
>>>> So, is my AVG 8.0 detecting something that Spybot S&D put into my
>>>> registry to thwart malware, as suggest by the guy on the above link ?
>>>> ...or do I do as suggested - un-immunize with S&D | sweep with AVG
>>>> again | then re-immunize ?
>>>>
>>>> At the moment AVG a/v sweep has located 30 registry keys of the form:-
>>>>
>>>> HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX
>>>> Compatibility\
>>>>
>>>> Result/Infection column, to the right of these items are mostly "Found
>>>> Adware.Generic"
>>>> ...and there's a few others e.g.
>>>> Adware.TitanShieldAntispyware
>>>> Adware.NewDotnet (now, I did have a NewDotNet variant a while ago -
>>>> I'm sure I flattened and rebuilt after that !)
>>>> Adware.Isearch
>>>> Adware.Generic3.BRJ (two of these - hinting that my ISP / Orange has
>>>> something naughty in it)
>>>>
>>>> :-)
>>>> ...any views on whether AVG 8.0 a/v sweep is just detecting keys
>>>> dropped in by Spybot S&D ?
>>>>
>>>> TIA
>>>>
>>>> regards, Richard
>>>>
>>>>
>>>
>>>
>>
>>
>>
>
>
|