Yahoo IM Worm Hijacks Browsers

Anyone heard about this?

http://www.informationweek.com/secu...leID=188101147&subSection=Viruses+and+Patches

 

Yes, Arie has a post about it in the news forum as of yesterday.

 

I'm an everyday user of Yahoo IM...What can a person do do about keeping this off their machine? Wait on AV companies to find a fix?

 

The defense in the absence of siqnitures for a specific malware is bahavior blocking - hueristics. What AV are you running?

What realtime security are you running besides an AV?

I run firewalls for instance - Sunbelt's Kerio, ZA Pro - that catch bogus versions of familiar programs, such as IE, or the execution of new programs through behavior blocking.

Regards - Charles

 

I am running Sygate firewall, plus WinPatrol....AVG is my AV program.

You are running 2 firewalls?

 

No, two XP installations.

Had Sygate before the Symantec buyout and it does have the capacity to warn of a bogus familiar program.

WinPatrol, everything I've read about it indicates that it is an excellent program, will warn if anything new wants to execute.

You have what is known as a layered defense - meaning not relying on any one security app. You can add to that by using Ewido free as a scanner, an anti-trojan, to cross check the others. Ewido http://www.ewido.net/en/ Install as a scanner only: under "Additional Options ", uncheck "Install background guard ".

SpywareBlaster v3.5 http://www.javacoolsoftware.com/sbdownload.html provides permanent protection against over 6000 items of spyware, etc. Download, update and Enable all protection.

SpywareBlaster is not a scanner but a realtime process that takes very little resources.

Regards - Charles

 

Sorry Charles, I forgot about me having Spyware Blaster installed too.

I really like WinPatrol, it is a lot like Ad-Aware, in that it uses minimal resources, and it alerts me to BHO's that want to install.

As for using Ewido, if it pulls up something that Ad-Aware or Spybot missed, will it remove the malware, or do you have to buy the full version for that purpose? (I'm not up to speed on this program, and have never used it before)

 

Hi James,

The free version will remove malware - the only difference between the free version and paid is the paid runs realtime.

If you didn't have WinPatrol, I would recommend Ewido paid.

BTW, in the Ewido install instructions, do install the right click context menu scan - I'll edit my instructions, handy for scanming a particular folder(s).

Among the free apps, my opinion is that Windows Defender is not ready for prime time - all the problems with it and the results I don't think are worth it, at least not yet.

Regards - Charles

 

Thanks Charles...I'll save your instructions to my desktop.

I agree about WD...It seemed to want to conflict (or override) with WinPatrol, so I uninstalled for now.

I've also heard reports about Spybot not being quite the program that it once was too...But I still keep it updated and perform daily (scheduled) scans with it.

It never finds anything though.