Adware anti-viral issues

luthierwnc

Distinguished
Apr 19, 2013
150
0
18,680
Hi All,

This is a combination rant and cry for help.

In just got my second malware infection on my office computer in as many months. As I understand it, this one is a toolbar bug featuring the Quibids browser hijacker. I have what I thought was a competent anti-virus tool in McAfee and also ran Malwarebytes. Neither of them even noticed the thing.

Then I called McAfee to see what could be done and I was quickly shunted off to an Indian guy who asked me a couple of questions and said that I would be turned over to one of his techs to get rid of the thing for a mere $89 dollars. I went through Dell for the last infection and swear I was sent to the same company. Same $89 fee at any rate. Before I left work tonight I set the computer to a restore point a week ago and I'll see if that does any good first.

That was the rant. Now for the issue. I asked the tech if his software didn't stop the bug getting in and couldn't fix it after it got in, WTH am I paying for? He said that the virus got in because I allowed it to. Huh? What possible difference could that make. Even if I had purposely downloaded toxic rootkits, I get anti-viral software to make it better.

So, what is the state of malware protection these days? If a top line anti-virus software and a program designed specifically designed for adware couldn't even detect it, much less remove it, what is the consumer's next move? BTW, this is an office computer with no porn surfing, gaming or social media. Pretty dull stuff compared to some. Is there a next gen cocktail of programs and tech help to deal with the current crop of swindlers? I don't mind paying for something that works. I just hate paying for something that not only doesn't work, the purveyors don't even understand why I would expect it to work.

Seems like the bad guys are winning,

Thanks, sh
 
I think the general public is really taking the wrong measures against malware. You shouldn't look for ways to DELETE them or DETECT & KILL. You should look for ways to PREVENT. Once they get into your system, whatever task they were created to do, they would've done it by the time you can get rid of it. So getting rid of it doesn't mean anything by that point. Damage is done. No program will undo those changes for you. Maybe if you make daily snapshots, you can revert back to an older version. System Restore is not backup nor snapshots. So in the end, no one, other than maybe you, care if you deleted it.

The tech may have some truth to his/her statement. If you let the malware in, then it is your fault. I know there are internet security applications, which are different from antivirus applications, but they also cannot detect 100% of all malware nor can they guarantee 100% that they will prevent all malware.

The best route is to not allow them access to your system core files. A good way is to lock down the administrator account(s). No one should use an administrator account. Use a standard account. So if you get a virus and you are clueless enough or foolish enough to supply an admin password and allow it to install or run, then you really screwed yourself. ;) Daily snapshots are also great. You can also use a non-IE browser. Firefox is good and has tons of security plugins. Chrome is decent. Running VMs or in a sandbox environment are also good preventive measures.

There are many ways to prevent the issue. Most people don't choose this route and hide behind a program hoping that it alone can keep them safe.
 

luthierwnc

Distinguished
Apr 19, 2013
150
0
18,680
Oh, agreed. But there would be no profit in malware if the common man was much good in keeping it out. I look at anti-virus software as insurance. It is a little money up front that doesn't cost you more later. I don't expect All State to keep me out of a wreck but I do expect them to fix my car -- regardless of whose fault it was. And that isn't because it restores balance to the universe. It's because I need to drive to work tomorrow.

So what is the use for a conventional anti-virus package if it can't even identify a bogey after it has gotten into the system? I did complete scans and it smugly came back that the box was clean. The only satisfaction I've gotten so far is that when I was on the McAfee site to get help, a Norton ad popped up.

FWIW, my database and company operating software is web-based so they are responsible for keeping the integrity of those systems. Alas, the latter only works on IE -- in compatibility mode at that. This bug got into both IE and Chrome. Haven't run Foxfire in a week or so. Probably won't. I don't particularly object to paying the techs to take care of the problem. It is more realistic than expecting a single software package to scrub all the hiding places these things can stick to. I think a good move would be to hire a local technician to come to the office for a couple hours and show all of us how to be more organized and careful. If I have to defend myself against professional villians, I'd better fight fire with fire.

Thanks for looking, sh
 

Hence why the common man is not. By profit, I will assume you meant monetary profit. Where's the profit for many Linux or *BSD distributions that pride themselves in security? There isn't one. Where's the profit in open-source programming? There isn't one. If I were to create a virus, I will create it with the intent that it works great and destroys the user's operating system. The joy didn't come from me wanting to make a profit. The joy didn't come from me caring that others are too stupid to know how to prevent it. The joy come from knowing that it worked and that it was a success. If we all had the same morals, we wouldn't have any issues.



You don't always get what you expect. Expect the unexpected. Your car insurance company charge you a premium and I doubt it pays for every crash or absurd thing that you get yourself into. So if you were to get into 5 accidents in a day, your insurance company will be okay with it and just get you back up and running? I doubt it. Even they have limits. So do antiviral and internet security suites.



It's not easy. So many are created in a day. Let's say you work for some company that makes an antivirus software. If I were creating one and released it just now, how would you make your program detect that my virus is an actual virus or that it's malicious to the system? Because first of all, it takes time for you to be aware of my virus. And different masking and encryption are available to mask it. It's not like every malware comes with a big red sign saying "MALWARE ALERT INCOMING". Wouldn't that be nice to have? o_O



Not true. Even seasoned professional technicians cannot undo damages to the system that were caused by the malware (if any). They may be able to remove all traces of the malware, but it may be too late because it already did its job. So you're paying them to remove something that may not actually help your system. It's like if I wrote some malicious code to remove some registry entries in Windows 7. Once my malware enters your computer, it executes that command immediately. So it removed some registry entries. That's it. It's done. Feel free to remove the malware. Not like I care. It did its job. You are not likely to be able to reverse the damage(s).

 

luthierwnc

Distinguished
Apr 19, 2013
150
0
18,680
I used the term profit for lack of a better one. It is hard to see the motivation. By the same token, there doesn't seem to be much risk of law enforcement impinging on their personal freedom. Perhaps a career making license plates and new romantic opportunities would have a deterrent effect.

If the restore doesn't work I'll hire a local computer tech to come to the office and go over some basic safety precautions as part of the cleansing process. I've never had a professional explanation of how these things get in or how to be smart about basic computer sanitation. It is money out of pocket either way and I'd just as soon keep the cash in the community. Even if I have to wipe the drive, I still need to get the computer back up in a hurry. Word and Excel files are backed up weekly on an external drive. Life goes on. It could have been a flood or a lightning strike.
 
Yeah I mean it's a rough world. Obviously there are some troubled people. But my best advice for you is to read up on prevention instead of detection + deletion. I've ran Windows 7 for years without any AV or IS apps and I haven't gotten any issues. I don't need their help in protecting me. You know what they say "if you want it done right, you got to do it yourself".
 

luthierwnc

Distinguished
Apr 19, 2013
150
0
18,680
If you ran your computer without it, that pretty well answers my question. At the minimum, I want something that at least tells me if I have a bug. Kinda like a smoke detector. Don't expect it to know how it started. Don't expect it to put it out. But I'd like to know if the house is on fire or it is just someone cooking sausage. sh
 
Agreed. But you wouldn't need that if you do what I said in my first post in this thread. ;) So if I never get malware, I don't need a detector for it. At the same time, even if malware gets in somehow, it can't harm my system because it has no access to system files. So big deal. :p
 

TenPc

Honorable
Jul 11, 2012
2,471
1
11,960
Office Computer - for use with Office products to ensure the running of the company is profitable and books are kept in order etc..
It is not to be used for fun, downloading anything that is not related to the running of the office, and visits to web sites should not be those that might offend, disgrace, or discriminate others in the said office.

Any misuse of the Office Computer will result in immediate termination of said culprit.

Set your Parental Controls to Maximum, have a log on option for all users with ID numbers, and any user who does not have permission to use the PC while it is being used by an authorized person will be reprimanded and sujected to the full arm of the BOSS' LAW, with a swift kick in the backside, and a week without pay.

You don't need extravagant anti-virus software if you stick to the basic rules of the Office PC Conduct Rules (see above).
MSE is more than enough for anyone as an anti-virus product.
 

luthierwnc

Distinguished
Apr 19, 2013
150
0
18,680
Well, I own the company so termination isn't an option. I think it got in when I was look at new software for analytical use. It is hard to tell who is legit. Knowing how to check it before it gets loaded in on the list of things to learn. That box doesn't get used for personal stuff unless I'm looking up weekend projects at Lowes. Ksham's advice about protocols on Admin vs. user access is the kind of thing I need help with. I'll also take a good look at aford10's link.

There are some good technicians in the area. I'll give one a call on Tuesday to come out, fix the bug if needed, and make sure I know what I'm doing. The guys in India did a good job last time but they aren't likely to recommend my business to their friends. This would be a business card swapping opportunity.

Thanks to all, sh