New anti-virus programs - advice please

Subject: RE: New anti-virus programs - advice please
From: Bill D
Date: 20 Nov 00 - 09:20 PM

not a full solution, but a big help, is to get one of the free "email checkers" that looks at your mail ON the server and allows you to delete without downloading any mail you don't like or trust. It works pretty fast, though for those who get a LOT of email, it can take extra time. It would not get a worm in mail from a friend, but it can at least be one form of "spam stopper"(....but DO get a good virus program...Norton stopped the Kakworm for me!)

I use one called "POP3 Scan Mailbox"...but there are several others...see the WWW's best freeware page at Son of Spy Freeware

Subject: RE: New anti-virus programs - advice please
From: McGrath of Harlow
Date: 20 Nov 00 - 08:05 PM

I don't generally pass on virus warnings, because too many of them are hoaxes - but I got this from an old folk friend I know and trust from days long gone:

Hi, all

There is a new WORM virus called NAVIDAD, which has been confirmed by Symantec and McAfee. See links below - they will confirm it is NOT a hoax. I have looked at them both. I would not dare to pass this on otherwise. Go to the link appropriate to your antivirus prog to get full info and an update for your antivirus data files. Thanks to Bernard Cromarty for alerting me. The text below is his.

Mike

Bernard's text:-

http://www.symantec.com/avcenter/venc/data/w32.navidad.html

http://vil.mcafee.com/

This is what Symantec have to say:

W32.Navidad

Discovered on: November 3, 2000

Last Updated on: November 11, 2000 0 9:38:15 PM PST

W32.Navidad is a mass mailing worm program. The worm replies using MAPI to all Inbox messages that contain a single attachment. This works with Microsoft Outlook. The worm utilises the existing email subject line and body and attaches itself as NAVIDAD.EXE. Due to the bugs in the code, after being executed, the worm causes your system to be unusable.

This is how the virus manifests itself:

'Navidad' is Spanish for Christmas.

The 'festive' malware arrives as an attachment called navidad.exe.

If executed, it installs itself in the victim's system tray, next to the clock, where it appears as an icon of a small blue eye.

Clicking on the eye produces a button labelled "Nunca presionar este boton", Spanish for "Never press this button."

Victims who ignore that warning and click the button are treated to a message box with the title "Feliz Navidad", and the message:

"Lamentablemente cayo en la tentacion y perdio su computadora,"

(in English: "Merry Christmas. Unfortunately you've given in to temptation and lose your computer.")

Despite its threatening tone, the program does not deliberately destroy anything on the victim's computer. But a programming error by the uncredited author causes Navidad to damage the system registry in a way that makes it impossible to execute most programs with a .EXE extension.

The virus spreads by replying to messages that arrive in a victim's inbox.

We've all been tricked by virus hoaxes at some time - this is no hoax.

Subject: RE: New anti-virus programs - advice please
From: pict
Date: 20 Nov 00 - 07:32 PM

Check out virus makers sites and read the info they give on protecting yourself.I'd recommend "Anti viral toolkit pro" software the virus writers say that McAfee and Norton products are not reliable protection I'm inclined to agree these people study the protection programs and develop viruses to get past them.Most of these programs have download filters and can scan emails and program files automatically.The best protection though is common sense don't run any prog you don't trust without virus scanning it first and never open unsolicited attachments.

Subject: RE: New anti-virus programs - advice please
From: Jon Freeman
Date: 19 Nov 00 - 08:13 PM

To add to the above, I have just found that it is possible to run any program and with the first one I tried to test it on,it did block a legitimate operation (updating registry).

Jon

Subject: RE: New anti-virus programs - advice please
From: Jon Freeman
Date: 19 Nov 00 - 08:10 PM

Have have downloaded this program to see what it is about. It appears to monitor programs opened from emails and I believe ones from web pages but not programs that are already present or installed by other means. It does offer protection that virus protection programs can't but its value is limited (and as been pointed out, it is likely to report legitimate operations as being breaches in security) and it is not a substitue for good AV software.

Really and honestly apart from the AV software, the best protection with the likes of email attachments and unknown content on the internet is not to open them in the first place unless you know what they are.

Jon

Subject: RE: New anti-virus programs - advice please
From: Amos
Date: 19 Nov 00 - 07:55 PM

I've likewise had good and reliable results using Norton, both on Macs and Windows boxes. Bite the bullet and get te whole suite. A blanket solution like "blocking registry writes" can turn out to be a real pain if you are trying to install software that should perform registry writes, and Norton is usually smart enough to discrminate.

A

Subject: RE: New anti-virus programs - advice please
From: Don Firth
Date: 19 Nov 00 - 07:49 PM

When I got my new(est) computer last year, I loaded Norton Systemworks, which includes Norton AntiVirus. About $70.00 for the whole suite at Office Depot. I contains all kinds of tools for keeping your computer healthy and in good running order. It's saved my posterior on more occasions than I care to count (like when you hit the delete button and deep-six the book you've been working on for the past four years -- but easily resurrect it with Norton UnErase). Within the past three weeks, I've been hit with the KakWorm virus no less than three times (comes in on somebody's e-mail). Norton AntiVirus identified it and nailed it coming through the door!

Can't recommend it highly enough. Just be sure to use LiveUpdate frequently -- I use it at least once a week.

Don Firth

Subject: RE: New anti-virus programs - advice please
From: MK
Date: 19 Nov 00 - 07:26 PM

I gave my 2 cents recently as well, here.

Subject: RE: New anti-virus programs - advice please
From:
Date: 19 Nov 00 - 07:20 PM

I'd suggest the current Norton Anti-virus. No, it's not free, but free updates are available and this allows you to keep up-to-date on virus definitions. A virus routine that "will block or close down any program that tries to alter your computer files" will simply not work, e.g. files are routinely altered for many, many applications: this is what makes your computer do what it does. I've used Thunderbyte, a freeware virus program that's not bad, but I'd really suggest biting the bullet and buying youself a copy of the current Norton Anti-virus. Then about once a week, check into Norton's website for updates. And if you're running Windows 9X, hit the Microsoft website now and then for updates. Windows 9X, particularly its e-mail functions, are often vulnerable to intrustions and the Microsoft website has updates now and then that close some of these security holes. Don't hesitate to e-mail me if you have questions or want to chat about computer security; I'll be glad to help you out if I can. And no, I'm not employed by Norton or Symantec.

Subject: New anti-virus programs - advice please
From: nutty
Date: 19 Nov 00 - 03:48 PM

I have been reading about a new form of anti-virus program available free on the Internet

It is called SurfinGuard and is produced by Finjan at www.finjan.com

It is said to be a totally new type of security system as it is pro-active and will block or close down any program that tries to alter your computers files

My problem is that although I am interested in getting the best possible security as cheaply as possible I do not have the technical knowledge to assess this kind of product

What do you think? Is it a waste of space or something that I really should have?

Comments gratefully recieved