Here I go again, SORRY!

Okay, I know I have most likely driven you crazy before about Anti-Virus programs and how I was wondering about AVG's Free Anti-Virus and Norton AV program that I have. Well, I did not like the way Norton took over my PC so I tried AVG and everything seemed just fine until I read a post about GFI SecurityGFI E-Mail Test
I put the link to see if anyone wanted to take a look. Anyway, I was told that a Virus was able to penetrate my computer during the test. Norton always passed for me
Anyway, I'm wondering what to do now, leave AVG alone and continue to update or go back to NAV
Thanks for the help,,its always good to know your all here
~~Paul~~

 

I think that's a call best left up to you. AVG is a good program but as you found out it does have a few holes. For the most part I believe that the avarage user will get along just fine with AVG if you are also running a good Firewall too.
You should also understand that GFI Security is trying to sell you a product so their going to throw everything it can at your AV program hoping to sell you their product when yours let's you down.

John

 

Failed on which test(s)?

 

I do not believe that there is any one AV program that is not going to have a hole or two in it.

And as John Sparkman Stated a test will throw everything they can at you just to make there software look better.

And as far as AVG vs Norton they both do very well EXCEPT that Norton loads the hello out of the system and can be very Windows/Norton version specific.

As far as I know AVG will work with any version of Windows. I do know that it works well in 98SE and XP.

I myself use a combo of a Router, AVG AV and Kerio Firewall. If i go to Norton they tell me straight out that I have no AV protection. I do but it just ain't theirs.

Some of the IMPORTANT parts of AV software is to keep it UP TO DATE and LOADED at all times and have it checking e-mail.

That is a necessity for me as I am on Cable Intenet.

BillyBob

 

Just a little update. I ran the test also and got the following.
My ISP stopped one, my AV program (McAfee) stopped two, Zone Alarm stopped two before my AV could read them, and the rest got through. I don't remember the details of the ones that got trough but it looks like all of them were targeted at testing a servers security.

I plan to switch to AVG once McAfee stops providing updates for my current version.

John

 

Hi Paul

Good link! I missed that one but now have it saved.

I think you should stick with AVG. It is possible that if you changed to cover this one thing you may just open the door to something else.

This was an interesting test for me.

My computer has 3 boots drive c: my main everyday win 2k.

Drive d: another 2k basic install to use to repair the c: 2k if needed weather it be a virus or an SP or patch gone wrong, or other things.

Drive e: win98 basically to allow me to run 98 for assisting others that run 98.

On purpose each boot runs a different virus scanner.

C: Computer Associates Etrust (Inoculateit)
D: AntiVir
E: AVG

I have intended to use different firewalls on these also but have not gotten around to it so all run Zone alarm 2.6. I use 2.6 by choice because of what I have read about 3.0 and additionally my experiences with 3.0 on client’s computers.

Additionally I use the following to catch other culprits.

Script Trap STRAP (get this if you don't do anything else!)
http://keir.net/scriptrap.html

NSClean cleanups and exploit fixes
http://www.nsclean.com/freebies.html
http://nsclean.com/dsostop.html
http://nsclean.com/htastop.html
http://nsclean.com/0click.html
http://nsclean.com/socklock.html
http://nsclean.com/sclean.html

Spam help
http://www.mailwasher.net/download.php

Additionally I have used most of the tips and recommendations of the following sites.

http://www.markusjansson.net/eienbid.html

http://www.jasons-toolbox.com/test-defenses.asp

So finally the results of my test.

I got so many warnings that it took me 10 minutes to look thru them.

1. I got all these warnings from my ISP of a potential virus. I allowed it thru.

2. Then Zone alarm caught it and allowed me to make the choice to run it or not, for testing I allowed it to run.

3. ScriptTrap then caught it, allowed me to run my virus scanner on it, and additionally allowed me to let it run, which I did.

The end result, I could not even force the things thru far enough to see the warnings from GFI. ScriptTrap did allow me to actually open the HTA file to the actual source code. But not to run.

I would recommend that you keep AVG but consider the additional of the steps I used above.

Mike

 

I would stay with AVG. In the past few days, AVG has been releasing daily updates, due to the release of a few variants of existing viruses. I watched the update window and noticed one particular file was updated along with the data table. It was Avgxch32.Dll Version 6, 0, 1, 460, located in C:\Windows\System.
Under properties of this file I get this [AVG pro MS Exchange clients & Outlook].
I take this to be an updated file for email clients.

 

I new I could count on you all!

Great,,I knew I would be able to have some reasuring input from the best forum on the web. Thanks to John,Brett,BillyBob,Mark,Crister and MFlynn for ALL the GREAT links full of help. I guess I will hang with AVG, like BillyBob said I could just as easy open up another can of "worms" with my Norton. I do like AVG and my PC seems to run a little bit quicker without NAV.
Thanks again everyone,,
~~Paul~~

 

Hi Paul

Did you put in ScripTrap and any of the other fixes and rerun the GFI tests?

Mike

 

Mike Hi
I did with the script trap, thanks for the recommendation.
Ive used anologX script defender , found an even better one
script sentry and now much better script block.
have you added anything to its list ?

Lonny

 

No need to worry Lonnie.

When one day you click on say a MS word or Excel file that you know to be good, that has legit Macros then ScriptTrap will warn you.

At that time you can tell it to remember to pass/open this file and it will no longer warn you on this particular file.

Mike

 

SCRIP TRAP !!

I used Scrip Trap Mike and I did re-run the test. It worked to help stop access. Then I had this little episode that all this talk is really about. My teenage daughter (really) not that I don't use it,,was downloading a song to listen to on the PC when AVG caught its first Virus for me. It was a nice feeling to see that AVG worked and worked right. I had never had a Virus since changing from Norton to AVG. Anyway Mike I do really like all I read about Scrip Trap,,glad that you pointed me towards it.
Thanks for all the help
~~Paul~~

 

I have AVG also and plan to keep it , But
you do know the free version cant scan zipped files , But i use winzip and it allows me to peak inside and scan with avg.
I don't like the way AVG behaves when it does find a virus
Usually gives an option to allow stop or clean , it often wont
clean and stop didn't take me back to windows , in each case
ctrl alt del restart PC then run a full scan to get rid of virus..it then works fine and will if possible clean if not put it in the vault.

The other day I for an experiment ( never mind please) renamed a text file r/click rename and windows made it xxxxx.txt.bat avg kicked in
wouldn't clean it , click clean >what <blank screen,,reboot wouldn't let me rename it either , anyway for some odd reason avg saw that file as a hidden extension , even after I with folder options set windows to display all extentions..

Maybe Mike would post a link to eicar , so you and others can make a safe> fake <virus for testing purposes( I lost the link)

Regards
Lonny

 

Lonnie

Lonnie perhaps there is someting wrong with your install of AVG maybe a complete uninstall and reinstall?

Some of my cleints have caught a few of the baddies Code Red SirCam and etc and no problems eradicating. I keep the eicar on all my computers at home and on my server and my personal work stations at work. Just to confirm the Virus scanner has notbeen disabled.

The eicar virus test file.
http://www.trendmicro.com/en/security/test/overview.htm

Mike

 

Hi Lonnie,,I agree with you on the way AVG acted when it found the Virus. I think that it was my fault though for not knowing more about the operation of AVG.

The Virus was placed into some vault after I ran the Scan of my hard drive. When all was said and done though, it did catch the virus and stop it from infecting my computer. I don't know about you but,,that's all I want from a FREE or from a Paid in full Anti-Virus Program
I love this Forum...
Thanks, ~~Paul~~

 

With the proliferation of viruses, I'm beginning to believe virus problems and the fancy names are generated by AV programmers. It would be job security as an employee, and then the employee would be given kudos for recogniziong and finding a solution. I can't believe some people would spend unprofitable time on dispensing problems.

Maybe the development of viruses are a college class project in software design and the other half of the project is to solve the problems, then the class professor is naming and selling AV programs on the side.

 

I love it,,maybe a conspiracy. Hey you never know KenKeith.
In my life , as the line goes ANYTHING is possible. It could be the Software companies but I somehow think not. Well if it is than I say Well done to them because I would think next to the OS, Anti-Virus software are the most programs sold. So move over Bill Gates....
~~Paul~~