Results 1 to 15 of 15
  1. #1
    New Lounger
    Join Date
    Feb 2006
    Location
    Dallas, Texas, USA
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    General Antivirus advice

    At least twice a week my Bit defender Standard finds a new virus or Trojan on my computer. I know basic antivirus prevention stuff, but obviously I am doing something wrong. I use Comcast Broadband internet. I have Bit AV and Microsoft Defender antispyware. I don't have an upgraded firewall, I just use the microsoft firewall right now. I do quite a bit of online gaming and have some servers running for FEAR, HalfLife 2 and Counterstrike (via STEAM). I do use filesharing sites like bearshare and limewire frequently. I don't know what I am doing wrong, but it is very upsetting. This morning I had 3 viruses in a microsoft office/11/1033 file. I went to bed and everything was fine and I woke up and my computer won't even run. After rebooting and deleting infected files and running bit antivirus about 4 times it seems to be ok now. I think. Can anyone tell me like some "best practices" or advice to prevent viruses and trojans and spyware. I know stuff like don't open e-mail attachments, and I did (today) start using a "limited account" instead of administrator access. Any suggestions?? PLEASE?? Thank you!

  2. #2
    Uranium Lounger viking33's Avatar
    Join Date
    Jun 2002
    Location
    Cape Cod, Massachusetts, USA
    Posts
    6,308
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: General Antivirus advice

    Robert,
    I'm not familiar with Bit Defender so I can't say much there except to suggest you try another AV program, since it doesn't seem to be doing much good. Keep it UPDATED.

    Also replace the MS firewall with another one. Try Zone Alarm ( a freebie but a goodie )

    Your surfing habits ( file sharing and gaming sites ) are rife with viruses, malware and other bad stuff. Thus you are getting exposed to a ton of potential problems.

    This is a start and I'm sure there will be other suggestions for you.
    BOB
    http://lounge.windowssecrets.com/S/flags/USA.gif http://lounge.windowssecrets.com/S/f...sachusetts.gif


    Long ago, there was a time when men cursed and beat on the ground with sticks. It was called witchcraft.
    Today it is called golf!

  3. #3
    New Lounger
    Join Date
    Feb 2006
    Location
    Dallas, Texas, USA
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    Ok guys, I just had a thought. I have access to McAfee services for free with my comcast broadband account. So.... If I install the McAfee firewall , and the McAfee antivirus, keep my Microsoft Defender antispyware, also (I am paranoid) remove the Limewire and Bearshare filesharing, and uninstall the gaming servers, should I be OK? Like I said I know the basics and I don't use the computer for porn at all, and I don't open any strange Emails or attachments. Also I will begin using the "limited access account" for daily stuff. I just don't understand where all the trojans and viruses are coming from while I am asleep. And I am afraid that my brand new computer will get something that can't be fixed. I'll try that and let you know how it is going in a week or so. I have had roughly 8 different trojans and 4 to 6 different viruses in the past 4 week time period. If there is anything else I need to look for or to do, please let me know. Thanks to all.

  4. #4
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: General Antivirus advice

    Diagnosing and fixing computer problems usually is easiest if you just make one change at a time. However, drastic action might be appropriate in this case. Once everything has stabilized, you can try adding back your various sharing/server programs one at a time, configuring them for minimum access to your system, to see if the culprit can be identified. Or you could just not use that software and keep the door tightly shut to outsiders. <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

  5. #5
    Uranium Lounger viking33's Avatar
    Join Date
    Jun 2002
    Location
    Cape Cod, Massachusetts, USA
    Posts
    6,308
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: General Antivirus advice

    Yes, you will be a LOT better off than now, that's for sure.
    BOB
    http://lounge.windowssecrets.com/S/flags/USA.gif http://lounge.windowssecrets.com/S/f...sachusetts.gif


    Long ago, there was a time when men cursed and beat on the ground with sticks. It was called witchcraft.
    Today it is called golf!

  6. #6
    New Lounger
    Join Date
    Feb 2006
    Location
    Dallas, Texas, USA
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    Thanks alot Bob. I deleted about 30 gig's worth of my games, servers, file shareing, etc. last night. I lost alot of my stuff, but I can add stuff back one at a time. For anyone that is wondering that, Mcafee package is really a slick deal. The firewall is awesome and has a traffic log/monitor, as well as pie graphs and bar graphs showing blocked events, activities in and out, etc. The security console balances 3 programs, the firewall plus, the virus scan , and the privacy service. I have it set way too strict and am having problems right now as far as accepting cookies, etc. So some web sites wont function properly. I just need to find the perfect balance between not getting HACKED and being able to surf. Anyway I'll get it figured out. It seems very very safe and the firewall is really cool. If anyone uses Comcast Broadband for their ISP then I would recommend trying the McAfee security package, all 3 programs are free. **Something of interest** I used a application called Roboform that memorizes passwords, user id's, creditcards, bank account information, etc. Anyway I found a Trojan in a component of roboform, I uninstalled and deleted all related files, kinda scary since there was kinda sensitive information in that app. Not sure if I would trust Roboform with too much info. I only used it for about 2 weeks.

  7. #7
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: General Antivirus advice

    What trojan did you find? What software said there was a trojan? I've used Roboform for quite a while and have never had a scan show any trojan. Roboform is pretty highly thought of.

    Joe
    Joe

  8. #8
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: General Antivirus advice

    A word of caution about McAfee's scanner: it sometimes alerts on innocent code that fits a pattern used by malware. These occasional false positives are the trade-off for catching new threats through more aggressive heuristic scanning. This could be what happened with RoboForm, or perhaps the program was actually infiltrated...

  9. #9
    New Lounger
    Join Date
    Feb 2006
    Location
    Dallas, Texas, USA
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    Joe, it was weird, McAfee nor Bitdefender picked anything up. I went to Symantec's site and did a free scan: It just showed you have a trojan (generic with no specific name) in, I can't remember exactly the file name, but it was ...rbf , So I searched that online and it said a .rbf file is related to Roboform. I have a second computer which also has roboform and also did a Symantec virus scan, It did not pick up any trojans in any rbf files on my second computer. At first I thought it may be a false alarm but after scanning my other cpu I panicked and uninstalled roboform on both. Just for kicks, you can go to www.Symantec.com and click on "home and home office" then in the right side of the screen under "Top things to do" click on "Free scan for viruses". If it picks up a trojan in a rbf file then it may be a false alarm, I should have clicked "more information" but I was in such a rush just deleting and uninstalling that I didn't follow through. Let me know what you find out, because I really liked Roboform and wouldn't mind getting it back, IF it is safe. Thanks, RobertMac

  10. #10
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: General Antivirus advice

    This rbf file - Google Search does not say anything about Roboform on the first page. What folder contained the file(s)?

    Joe
    Joe

  11. #11
    New Lounger
    Join Date
    Feb 2006
    Location
    Dallas, Texas, USA
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    Joe I'm at work this morning, I'll get the exact file name and location to you first thing this afternoon when I get home from work. Were you able to run a Symantec virus scan? Just curious if it showed any trojans in any RBF files. Like I said, I'll be off work in a bit and I will get you that information about 3:00pm or 4:00pm central time. Actually, I will also reinstall Roboform and do another Symantec scan and see if I get any "trojan" warning. That should tell us whether it is a false alarm or not, right??? Thanks Joe, I'll let you know ASAP.

  12. #12
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    Do not use MsAfee Virus SCan 10 for scanning.

    I purchased the crittera few week ago and was astonished to find that there is "automatic cleaning" in a scan, i.e., no chance for the user to tel the software how to handle the alleged virus.

    This is dangerous due to files being deleted when there is a false positive.

    If you go to the McAfee forums, you'll se a number of posters have been burnt by this shortcoming.
    NAV has offereed options for actions to be taken for years.
    Not sure what otherAV software does, but I'd not use Mcafee VS 10 for scanning.

  13. #13
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    There are things that NAV detects, but McAfee doesn't, and likely vice versa.

  14. #14
    New Lounger
    Join Date
    Feb 2006
    Location
    Dallas, Texas, USA
    Posts
    14
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: General Antivirus advice

    (Edited by HansV to make URL clickable - see <!help=19>Help 19<!/help>)

    Sorry, Joe, actually it was in a .RFB file. Here is address of File ext. site that told me what it was after I had found the trojan.

    http://filext.com/detaillist.php?extdetail=RFB

    I installed Roboform again and ran a Symantec virus scan and it showed "no threats". Now I am really paranoid. So, I am assuming it was an actual trojan. I don't know what to do or what or how much of my personal information was accessed. I can't remember where exactly that rfb file was at except that there were 4 rfb files in the same folder on my computer and one was infected. Sorry I couldn't be more help. There was no "log" etc with that free scan so I can't find the exact name of the rfb file I deleted.

  15. #15
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: General Antivirus advice

    You'll find that Roboform creates a .RBF file for each passcard. They are encrypted which is probably why the scan identified it as a trojan. Encryption can created strings which detection software identifies as being a trojan but is really a false alarm. I'd never take the 'word' of any one product about that. See Tutorials & Links to Detection & Removal Tools for more information.

    Joe
    Joe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •