Mike, u wrote:
Hi Jackie;
I am going to take this topic back to one from earlier today. There was a
discussion about whether or not to run Microsoft Security Essentials &
Super
Anti Spyware in Real Time mode at the same time. In your professional
opinion, if you were running both of these programs how would you run the
2?
Meaning, would you run 1 in Real Time & not the other or, run both in Real
Time?
Mike, much depends on what the 2 programs do. Let me give a bit of
background, & then perhaps, by way of that, address your question.
In the not so very distant past, spyware & viruses were pretty much
distinct entities, & the programs designed to protect the computer
from each did quite different things. Antivirus programs tended to
look for what's called "file signatures", e.g., certain strings in
files that were suggestive of a virus, while antispyware programs
tended to monitor things like registry changes, where the browser was
being taken to, etc. That's fairly oversimplified, but the crux was
that 1 antivirus & 1 antispyware program could generally run together
in realtime w/o conflict.
Malware has, unfortunately, become much more sophisticated. Viruses
drop trojans which create a backdoor into your computer & allow all
kinds of information to be passed to some1, e.g., spyware. Thus, the
distinction between viruses & spyware--& other types of malware, for
that matter--have blurred considerably over the past few years. The
result is that antivirus programs have evolved to become
antivirus/antispyware programs, trying to become, as it were, all
protection for all malware, all things to all people, etc.
The answer to your question is that it really depends on what the
programs do. If the antivirus program confines itself to looking for
file signatures, etc., while the antispyware program monitors registry
changes & browser redirects, then it's probably safe. If, on the other
hand, the 2 programs monitor for similar things, then conflict can &
does result. The problem further arises when both try to quarantine
something at the same time, obviously, & it is for this reason that
malware experts suggest running only 1 realtime security suite type
program, e.g., antivirus/antispyware program, at any given time. What
I personally do is to run my antivirus/antispyware program (Avast) in
realtime. Then I scan w/Superantispyware or MalwareBytes weekly or so,
just to get rid of tracking cookies & other annoying nasties that may
have popped up. BTW, 1 thing that can really help keep the bugs in
check is to simply delete your temporary internet files often--lots &
lots of crap-ola gets in there.
So what I personally would do would be to run Microsoft Security
Essentials in realtime, & let SAS be an on-demand scanner. I know some
listers have run both w/o difficulty, but I can't help wondering what
would happen if both try to quarantine the same threat--neither 1
might win & your protection may well be compromised. I remember
getting this as a first exercise of my malware removal training, &
this is pretty much how I answered it then, too, & passed, so
hopefully it'll suffice.
I hope I've made myself sufficiently clear, & invite further queries
if I haven't.
Blessings for a wonderful holiday season.
On 12/27/10, Mike & Barbara In Arcadia <mb69ma...@charter.net> wrote:
> Hi Jackie;
>
> I am going to take this topic back to one from earlier today. There
> was a
> discussion about whether or not to run Microsoft Security
Essentials & Super
> Anti Spyware in Real Time mode at the same time. In your professional
> opinion, if you were running both of these programs how would you
run the 2?
> Meaning, would you run 1 in Real Time & not the other or, run both in
> Real
> Time? Personally I am not a heavy user of the Internet except for
> emailing
> and would like to hear a professional opinion on what the pros & cons
> might
> be. I am not trying to discredit any of the ideas/opinions of others
> that
> contributed to this topic earlier but, as a amateur computer user
and having
> learned most of what I've learned via trial & error, & lists' like
> this, I
> would like to hear from someone who deals with this type of issue on a
> professional basis. All advice/information will be greatly
> appreciated.
> Thanks much. Take care.
> Mike
>
> ----- Original Message -----
> From: Jackie McBride
> To: blind-computing@jaws-users.com
> Sent: Monday, December 27, 2010 7:56 PM
> Subject: Re: [Blind-Computing] removing a virus
>
>
> Andre, if I were working in the environment your nephew is working
> in,
> I'd do it that way as well. But u & I both know that most residential
> & soho customers do not walk around w/recent images of their OS or
> even backups of their data on a thumb or even an external drive. &
> it's not possible for us to have clean installation discs of all
> windows versions, never mind trying to use Magic Jellybean or some
> such to retrieve the key, cuz half the folks lost their restore
> discs.
> & then there's data to back up, etc. Then there's always the rare but
> interesting forensics issues of some1 trying to sabotage a company &
> has a virus set to reformat the particular hard drive to try to
> destroy evidence or bring down a network when certain actions are
> performed. The best thing to do in cases like this is just to
> dismount
> the drive. The way u suggest is easiest but not always practical.
>
> On 12/27/10, Betsy Whitney, Dolphin Press
<braill...@hawaii.rr.com> wrote:
> > Hi Andre,
> > I suspect that Jackie may work for multiple clients who have their
> > individual networks and configurations. My brother-in-law does the
> > same kind of work that I think Jackie does, and he also cleans up
> > these things the way she does. He says it is because each of the
> > networks is different and he finds it faster. He also said that
> > everyone has their preferred way of doing things, and if he were
> > working on his own network, he might very well do it your way if he
> > didn't have an alternative.
> >
> > Recently Andre Williams wrote:
> >>Interesting. My nephew works for our city's power company and he
> says
> they
> >>don't bother with any of those procedures as they take too
long. He says
> >> his
> >>tools consist of a bag full of operating system images and a
thumb drive
> >>with hundreds of serial keys including a password override for
> terminated
> >>employees that "can't" remember their passwords. He said he carries
> a
> very
> >>durable but very slow 10-hour battery life laptop when he's out on
> the
> >>streets, but when it comes to monitoring computers at work he uses
> a
> laptop
> >>that breaks into 2 parts and becomes a type of mobile unit.
> >>Andre
> >>
> >>----- Original Message -----
> >>From: "Jackie McBride" <able...@gmail.com>
> >>To: <blind-computing@jaws-users.com>
> >>Sent: Monday, December 27, 2010 7:02 PM
> >>Subject: Re: [Blind-Computing] removing a virus
> >>
> >>
> >>Andre, I *routinely* fix these problems because that is what I do
> for
> >>a living. As I said, I don't connect my computer that I use to
> repair
> >>others' machines to a network & therefore the integrity of that
> >>network is not in question. I'm trained both in computer forensics
> as
> >>well as in malware removal. While I agree that there are times when
> >>reformatting the operating system is necessary, it often is not. It
> >>depends on the type of malware infection, how good the tools one
> has
> >>for doing such removal, the operator's proficiency w/those tools, &
> a
> >>variety of other factors.
> >>
> >>On 12/27/10, Andre Williams <andre.williams.1...@gmail.com> wrote:
> >> > While it might appear all is fine it might not be. You are the
> best
> >> > judge
> >> > of
> >> > the integrity of your network. I would be concerned about
"routinely"
> >> > having
> >> > to fix these problems. I'll act on the advice of security
experts and
> do
> >> > my
> >> > best to insure any virus whether seemingly harmless to very
> destructive
> >> > is
> >> > not an unknown factor in any of the often strange quirks in
> Windows
> >> > world.
> >> > After an infection a reformat or image recovery gives me this
> peace
> of
> >> > mind.
> >> > Andre
> >> > ----- Original Message -----
> >> > From: "Jackie McBride" <able...@gmail.com>
> >> > To: <blind-computing@jaws-users.com>
> >> > Sent: Monday, December 27, 2010 6:16 PM
> >> > Subject: Re: [Blind-Computing] removing a virus
> >> >
> >> >
> >> > I routinely fix these sorts of problems by taking the drive out
> of
> the
> >> > computer, hooking it up to an external device, & then putting it
> on
> >> > another computer & running malware scans. I very very seldom
> have to
> >> > reformat an OS.
> >> >
> >> > Sometimes I do it in Linux, sometimes in Windows. Generally I
> >> > disconnect the machine from the network. It's also a "fix it"
> drive
> >> > w/nothing important in the event it becomes infected, but I've
> never
> >> > had that happen, either.
> >> >
> >> > On 12/27/10, Andre Williams <andre.williams.1...@gmail.com>
> wrote:
> >> >> Yep, I'm right there with you 100%!
> >> >> Andre
> >> >> ----- Original Message -----
> >> >> From: "Don Marang" <donald.mar...@gmail.com>
> >> >> To: <blind-computing@jaws-users.com>
> >> >> Sent: Monday, December 27, 2010 4:28 PM
> >> >> Subject: Re: [Blind-Computing] removing a virus
> >> >>
> >> >>
> >> >> I agree with Andre completely! Reformatting the hard disk and
> >> >> reinstalling
> >> >> the Operating System or recovering from a known good disk image
> is
> the
> >> >> only
> >> >> way to be sure the malware is removed. Anything short of that
> will
> >> >> likely
> >> >> have a small remnant left over that will infect the whole
> computer
> >> >> again
> >> >> or
> >> >> will damage necessary system files in the process.
> >> >>
> >> >> Most likely, your computer will run faster anyway, since
> Windows
> really
> >> >> needs to be reinstalled about once a year just to clean out the
> clutter
> >> >> and
> >> >> the registry.
> >> >>
> >> >> Don Marang
> >> >>
> >> >> There is just so much stuff in the world that, to me, is devoid
> of
> any
> >> >> real
> >> >> substance, value, and content that I just try to make
sure that I am
> >> >> working
> >> >> on things that matter.
> >> >> Dean Kamen
> >> >>
> >> >>
> >> >> --------------------------------------------------
> >> >> From: "Andre Williams" <andre.williams.1...@gmail.com>
> >> >> Sent: Monday, December 27, 2010 6:34 PM
> >> >> To: <blind-computing@jaws-users.com>
> >> >> Subject: Re: [Blind-Computing] removing a virus
> >> >>
> >> >>> Tell him to reformat and reinstall the operating system. With
> viruses
> >> >>> now
> >> >>> a
> >> >>> days you can never be sure if they're cleaned off
completely In the
> >> >>> hours
> >> >>> and possibly days he's going to spend trying to figure
this out and
> >> >>> trying
> >> >>> to clean his computer he can save himself the time and trouble
> and
> >> >>> reformat
> >> >>> and reload windows in about 2 hours. This happened to me
> sometime
> back
> >> >>> and
> >> >>> from the time I realized I had a virus placing 300 items on my
> system
> >> >>> tray
> >> >>> until the time I reinstalled and image of my hard drive it
> must
> have
> >> >>> been
> >> >>> an
> >> >>> hour. Image for Windows to the rescue! He also poses a danger
> to
> other
> >> >>> computers on the network at his job.
> >> >>> Andre
> >> >>> ----- Original Message -----
> >> >>> From: "Lenny McHugh" <lmch...@verizon.net>
> >> >>> To: "blind computing" <blind-computing@jaws-users.com>
> >> >>> Sent: Monday, December 27, 2010 3:23 PM
> >> >>> Subject: [Blind-Computing] removing a virus
> >> >>>
> >> >>>
> >> >>> I am trying to help a friend remove a virus from his
work computer.
> >> >>> Avg
> >> >>> did
> >> >>> identify it and reported that it could not be removed because
> it
> was
> >> >>> in
> >> >>> memory. He did not write the name down but it is in win32.
> The
> >> >>> computer
> >> >>> can
> >> >>> only be started in safe mode and if he lets it run it gives a
> message
> >> >>> that
> >> >>> chkdsk should be run with the f switch. That also will
not run when
> >> >>> the
> >> >>> machine is restarted. He turn system restore off and ran
avg and it
> >> >>> did
> >> >>> not
> >> >>> help.
> >> >>> He is using xp professional. He also ran kapersky and it did
> not
> help.
> >> >>> Any
> >> >>> quick suggestions?
> >> >>> Thanks
> >> >>> ---
> >> >>> Please visit my home page, it is motivational, educational,
> >> >>> inspirational
> >> >>> with a touch of humor. There is also a very extensive
resource list
> >> >>> for
> >> >>> the
> >> >>> blind.
> >> >>> http://www.LennyMcHugh.com
> >> >>> For answers to frequently asked questions about this list
> visit:
> >> >>> http://www.jaws-users.com/help/
> >> >>>
> >> >>>
> >> >>> For answers to frequently asked questions about this list
> visit:
> >> >>> http://www.jaws-users.com/help/
> >> >>>
> >> >>
> >> >> For answers to frequently asked questions about this list
> visit:
> >> >> http://www.jaws-users.com/help/
> >> >>
> >> >>
> >> >> For answers to frequently asked questions about this list
> visit:
> >> >> http://www.jaws-users.com/help/
> >> >>
> >> >
> >> >
> >> > --
> >> > Change the world--1 deed at a time
> >> > Jackie McBride
> >> > Scripting Classes: http://jawsscripting.lonsdalemedia.org
> >> > homePage: www.abletec.serverheaven.net
> >> > For technophobes: www.technophoeb.com
> >> >
> >> > For answers to frequently asked questions about this list visit:
> >> > http://www.jaws-users.com/help/
> >> >
> >> >
> >> > For answers to frequently asked questions about this list visit:
> >> > http://www.jaws-users.com/help/
> >> >
> >>
> >>
> >>--
> >>Change the world--1 deed at a time
> >>Jackie McBride
> >>Scripting Classes: http://jawsscripting.lonsdalemedia.org
> >>homePage: www.abletec.serverheaven.net
> >>For technophobes: www.technophoeb.com
> >>
> >>For answers to frequently asked questions about this list visit:
> >>http://www.jaws-users.com/help/
> >>
> >>
> >>For answers to frequently asked questions about this list visit:
> >>http://www.jaws-users.com/help/
> >
> >
> > For answers to frequently asked questions about this list visit:
> > http://www.jaws-users.com/help/
> >
>
>
> --
> Change the world--1 deed at a time
> Jackie McBride
> Scripting Classes: http://jawsscripting.lonsdalemedia.org
> homePage: www.abletec.serverheaven.net
> For technophobes: www.technophoeb.com
>
> For answers to frequently asked questions about this list visit:
> http://www.jaws-users.com/help/
> For answers to frequently asked questions about this list visit:
> http://www.jaws-users.com/help/
>
--
Change the world--1 deed at a time
Jackie McBride
Scripting Classes: http://jawsscripting.lonsdalemedia.org
homePage: www.abletec.serverheaven.net
For technophobes: www.technophoeb.com
For answers to frequently asked questions about this list visit:
http://www.jaws-users.com/help/
