Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Jackrabbit]

My USB has it but not my computer. It's awesome, I have a sort of weapon of terror on my portable flash disk. The power is getting to me, I am sure of it.

[Tormy]

Does Norton detect this?

Norton is far from being perfect, you should use Kaspersky. 

[FoboslC]

Kaspersky is far from perfect either. In fact, no AV can do anything against properly crypted virus.

[qwertyuiopas]

Actually, self-modifying code can be detected(as it must specifically tell the computer not to segfault when it edits itself) and programs that modify other processes also must go through a standard detectable method.

The area where an AV program would have issues is when a program creates an .exe then runs it.

Maybe the best would be to block, or at ask the user to allow or halt, creation of executables, other-process editing, .exe editing, and self-editing. Additionally, block access to all system files areas and disallow a program automatically adding itself to startup...

Then you would be relatively safe. Mostly.

[PTTG??]

Bah! People think computers are the same thing as a desk; that is, permanent.

The best system is really simple and cheap; Just have data on one hard drive, back it up weekly, and every 6 months reformat the application drive.

Keep all your installers on the other drive so you don't have to find them.
Tadaaaaaa!

I use this system at work for software testing because my systems need to be "clean", no floating partially installed programs and what what.

[DJ]

http://www.confickerworkinggroup.org/infection_test/cfeyechart.html
Click the link to see if you've got Conficker.

[Greiger]

Wow that's such an amazingly simple test, yet it would be so incredibly effective.  I can't belive I didn't think of that.

(for those too paranoid to click the link it's just a bunch of links to anti virus sites, and alternate os sites with images from each link.  If the antivirus site images don't show up but the os ones do, confiker is blocking them. So simple yet effective.)

[PTTG??]

Not sure if it's working right, though. My dad's machine seems to be infected but it can see all the images. Of course, there could be proxies involved that I'm not aware of.

[Yanlin]

I know for sure I don't have a proxy and I see all the images. Hooray for me.

[Ampersand]

Such nonsense. Probably the only thing it does is edit the Hosts file to block out the IP addresses it doesn't want you looking at. Changing the hosts file so that you can go to a legitimate anti-virus website to clean out the virus is trivial.

[Yanlin]

If it only did that, it would be easily taken care of.