Previous in Forum: Win XP Pro Disk   Next in Forum: media player problem
Close
Close
Close
17 comments
Rate Comments: Nested
Power-User

Join Date: Oct 2008
Location: Gujarat, India
Posts: 142

How Does Antivirus Software Work?

03/20/2009 2:12 PM

how antivirus removes virus from computer? what does it actually do?

are viruses are created by antivirus maker itself to promote pcs and systems?

__________________
Paresh B. Gujarati
Register to Reply
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

Good Answers:

These comments received enough positive votes to make them "good answers".

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Guru
Engineering Fields - Systems Engineering - New Member Popular Science - Weaponology - New Member

Join Date: Jun 2006
Location: Borrego Springs
Posts: 2636
Good Answers: 62
#1

Re: how antivirus removes virus from computer?

03/20/2009 2:27 PM

are created by antivirus maker itself to promote pcs and systems?

There have been cases of virus removers that actually installed the problems they were supposed to fix.

How virus removers work is as varied as how viruses work. Usually the standard is to delete them. Some virus are sensitive to touching them (run, open, delete) and replicate themselves on contact. These you isolate.

__________________
"If you want to get somewhere else, you must run at least twice as fast as that!"
Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#2

Re: How Does Antivirus Software Work?

03/20/2009 11:52 PM

direct your query to 'Microsoft tech net'

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
Popular Science - Biology - life lover Hobbies - Musician - music lover Safety - Hazmat - better safe than sorry United Arab Emirates - Member - desert trek Technical Fields - Procurement - procurement

Join Date: Sep 2008
Location: Dubai, UAE
Posts: 744
Good Answers: 58
#3

Re: How Does Antivirus Software Work?

03/21/2009 3:44 AM

Hi paresh,

find the answers to your 1st 2 questions from Stanford.

your second question is one of ethics, and is therefore difficult to answer, except through experience, i.e., the longer your machine has stayed in shape using a certain A-V software, the greater your confidence would be that this company is not a Dr. Jekyll-Mr. Hyde company.

in my case, I've used eSafe for a long time (until they stopped their free version), then switched to AVG up to now. I guess the key is keeping the virus patterns updated DAILY, and scanning *daily*, too.

HTH!

__________________
Now the darkness only stays the night-time, in the morning it will fade away. -- George Harrison (All Things Must Pass)
Register to Reply Score 1 for Good Answer
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#4

Re: How Does Antivirus Software Work?

03/21/2009 3:51 AM

A/V software causes your computer to analyze 100,000's of your data against their data base of known virus and malware profiles.

FYI don't be fooled by claims that a particular software is quicker; they are cutting corners and compromising your security to do it.

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
Popular Science - Biology - life lover Hobbies - Musician - music lover Safety - Hazmat - better safe than sorry United Arab Emirates - Member - desert trek Technical Fields - Procurement - procurement

Join Date: Sep 2008
Location: Dubai, UAE
Posts: 744
Good Answers: 58
#5
In reply to #4

Re: How Does Antivirus Software Work?

03/21/2009 4:15 AM

"FYI don't be fooled by claims that a particular software is quicker; they are cutting corners and compromising your security to do it."

good point bwire! my AVG takes about 3 hours to completely scan my 150GB HDD. selective scanning slashes an hour off that. well of course, it doesn't mean the longer it takes the better it is. but it's a good rule of thumb, nevertheless.

methinks that's a good thread to start.

__________________
Now the darkness only stays the night-time, in the morning it will fade away. -- George Harrison (All Things Must Pass)
Register to Reply
2
Guru

Join Date: Jun 2006
Location: Ottawa Canada
Posts: 1975
Good Answers: 117
#6

Re: How Does Antivirus Software Work?

03/21/2009 7:56 AM

There is a particlarly nasty trojan spyware=adware=virus which actually calls itself "microsoft-antivirus-2009" The trojan sends you to this very professional looking web site which every single link on it will install another spyware bit. It is instantly recognizable by the funky wallpaper...all random blocks of red, yellow and blue. If you get that, you will also get audio advertisments which will play fairly loudly, and a polite little pop up box which will tell you are infested, and to go to their web site for the removal tool.

Your choices when infested with this trojan is to simply format c, or pay a tech for 5 to 6 hours of cleaning.

Don't go to the recommended site to down load the removal tool. Don't use the removal tool.

DO check a few entries on google to find out what is masquerading as what. Take your time...find out what you are dealing with. Don't run anything without verifying with a couple of reliable forums and web sites. Remember, the trojan's web site looks really good...has testimonials, blogs and all sorts of other stuff on it to make it look really professional.. It is professional all right....but not in your favor.

And it really doesn't matter what anti-virus software you have, so long as you have something. Keep it updated, scan regularly. Everybody has their favorite. McCafee seems to be a front runner, and I have run Norton for years with zero problems.

One further suggestion. McCafee and Norton don't like each other. Pick one or the other, but not both. They both want control of select dll files, which results in conflict, and possibly both systems failing, and it may also result in the "blue screen of death".

Anyway, I guess this is off topic because it tells you how a nasty trojan called "anti-virus" works. OTOH, the warning is valid. I think I will leave it on topic, and if the community thinks it is "off topic", they can vote me down.

(5 hours! sheesh! I hereby resolve to back up daily!)

__________________
If it was easy anybody could do it.
Register to Reply Good Answer (Score 2)
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#7
In reply to #6

Re: How Does Antivirus Software Work?

03/21/2009 8:04 PM

Good points Yusef1 but it's not really that critical though scary at least. Send me a PM and I'll explain the how to ditch the cretin without reformatting etc..

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply Off Topic (Score 5)
Guru

Join Date: Jun 2006
Location: Ottawa Canada
Posts: 1975
Good Answers: 117
#9
In reply to #7

Re: How Does Antivirus Software Work?

03/25/2009 11:18 PM

Normally, I consider worms and viruses to be only annoying, like gum on your shoe. My problem was that I let the Norton expire on my wife's computer, and sure enough, the "anti-virus" worm moved in. One day....grrrrr...

I like to format C once in a while. Keeps me in practice, and gets rid of a lot of old files which kind of just sit there not getting accessed, but taking up space. Unfortuantely, the worm kept me from backing up files and I could not just flush the electronic toilet. Now with this USB sticks available for any easy backup, there is no excuse not to.

This "software on demand" from Oracle is looking better and better all the time. http://www.oracle.com/ondemand/index.html I wonder how THEY handle the darned worms....

__________________
If it was easy anybody could do it.
Register to Reply Off Topic (Score 5)
Commentator

Join Date: Mar 2009
Posts: 82
#8
In reply to #6

Re: How Does Antivirus Software Work?

03/22/2009 8:04 PM

Greetings! How to make Windows run without Spyware?

1:http://download.cnet.com/Spybot-Search-amp-Destroy/3000-8022_4-10122137.html?tag=mncol

The tool, when updated, will found the addresses which are present in your system and should be blocked in the Internet Explorer, and also putting sum list in your explorer, and changes your installations in several ways, which you have to correct after the tool was in use, but it also giving you a list on spyware in your system, and when you see those addresses, you block them inside Internet Explorer>Tools> Secutiry>Restricted sites. When done, check again a few times, and when no more found, you erase the tool, and correct the installations in your Explorer.

2:http://simplysup.com/

You run trojan remower, update it, remove every single each problems from the system, what the tool could found, then run it again to check if there still is something left maybe. When system cleaned, you uninstall the tool, and defragment the drive.

3: The 3rd step is a little more complicated, though you need the list on all the trojan programms you have in your present system. The only tool which gives you a list on positivelly identifyed Virus infated files, is Kaspersky. But Kaspersky will not remowe any of them, and what you do is, you read every files found and check in which programms they are present in, because you maybe must remove entire programms, not only files, is because if we remowe infated files, what we do is, we make several functions stop in those programms where the infated files are located, but if we do not remowe those files, and I have to remind you here, that non of the Virus programs today will give you any list on trojan, and will not remowe them, the only thing you can actually do against this simple problem, is that you remowe the infacted files step by step, file by file manually, and run Kaspersky over and over again, until you have remowed every single trojans from your system by hand, and no more can be found. Then you remowe Kaspersky, check the damidge in the system, and make list on those programs which now you have to get rid of, or correct in some way. You must also have to found emails, which you think can be related with spyware, and remowe them all manually from you mails, and from the delated mails folder as well.

Then you just make sure, not to log in to those adresses on the web, which you suspect as dangerous, and nothing will happen to your system, and you won´t need any Virus Remower programs to slow down your computer. I know because I am running hundreds of programms online, and no need to check on viruses, I used to remowe the viruses under time when the "Fresh Installation" is in the making. So remember, that Virus remower programs will not remowe trojans, and you can only get clean them manually. What I have explained for you here now, is the only way to get rid of them today.

Have fun with experimenting! Best wishes!

Register to Reply
Guru

Join Date: Jun 2006
Location: Ottawa Canada
Posts: 1975
Good Answers: 117
#10
In reply to #8

Re: How Does Antivirus Software Work?

03/25/2009 11:31 PM

I think I will print off this reply and send it to all my friends. We are all waiting the "April Fool' trojan to come by.

Thanks. I thought I had done all that. but it just takes one re-director to infest your whole system. I believe it was a government web site, which re-directed me to a soft core porn site, which only stayed up long enough for me to wonder wtf, and then I ended up on a site which had a trojan. Ah well. What can you do?

"Spyware Blaster" has a huge list of infested sites. Unfortunately, it came with a pile of tracking and adware which sat on the list of bad web sites, and Spy Hunter kept finding and telling me to delete it. Poor "SB", I am afraid SH pretty much gutted it. Don't you love it when programs have a fight?

Trojans. They call them trojans for a reason, right?

Regards.

__________________
If it was easy anybody could do it.
Register to Reply Off Topic (Score 5)
Guru
Canada - Member - New Member Hobbies - Musician - New Member

Join Date: Dec 2006
Location: Western Canada
Posts: 1863
Good Answers: 39
#11
In reply to #10

Re: How Does Antivirus Software Work?

03/26/2009 2:17 AM

Infected websites are not the only risk. I was expecting a parcel so when I received a tracking number from FedEx why be suspicious? TOO LATE! Next day when I booted up, there was the trojan message. A friend in California who also happened to be the company IT expert; got caught the same way. Except it was DHL not FedEx. Unless you have additional computers with which to download help, you are NOT going to defeat it. Incidentally Antivirus can and does jump across to other drives even those tagged as SLAVE and USB sticks and external Had drives. I have two computers and six damaged drives to prove that point. The virus mutates every time you reboot. If you run third party software they virus is not already familiar with it forces a condition leading to a forced reboot whether or not you want it to. The files it recreates also change name. This according to CNet's own page on how to deal with it.

__________________
Elnav
Register to Reply
Commentator

Join Date: Mar 2009
Posts: 82
#12
In reply to #11

Re: How Does Antivirus Software Work?

03/26/2009 10:58 AM

Well, you can erase the contents of a harddrive, 30 times if you want, or make a new boot as many times as you like, but not in practice. The maximum that I have counted, about how many times you can erase the drive completely, is 3 times.

Also when we shut down the computer to save the drive too many times, we damidge the drive, and if do soo too many times, the drive becomes useless.

When a drive is damidged, the only solution is that to buy a new harddrive, and replace the old one with a SATA drive. Virus does not change names, only there are some exe files related with a program where you have the virus hidden.

I will give you an example: Let´s say you have Macromedia MX installed, and there is a virus in that program. You get rid of the virus, and you think that everything is ok, and you removed it in safe mode. You restart the computer and check that the very same virus is still there. There is another file which makes sure that your virus is reborn again, and you found that file in Win 32, and get rid of it, but the same thing happenz, and the virus is still there. Why? Hihihi! You have forgotten to get rid of the installation in the start up programs, and the computer will make sure that those processes will start up again which makes sure that the virus is reborn in good health.

You have to get rid of all the exe files which are related with the virus, stop all processes which are related with it, get rid of every single other files which are related , and always check if the experiment is a success or not, because antivirus programs will not work on exe files, you should know that, they are not exe remowers and not program remowers, but simply remowing viruses and not making sure for you that those programs which will create the virus is born again are eleminated, and they will even not change the start up program installations eighter.

Register to Reply
Guru
Canada - Member - New Member Hobbies - Musician - New Member

Join Date: Dec 2006
Location: Western Canada
Posts: 1863
Good Answers: 39
#13
In reply to #12

Re: How Does Antivirus Software Work?

03/26/2009 4:59 PM

The Cnet instructions for manual removal even gave the name of the virus files. The advice as to search for any file beginning with the three first letters ( can't recall at the moment) and use wildcard * for the rest. I ran a seach and found 8 separate sets of files including one inside a hidden folder. I manually deleted all 8 cases of files. Not just 8 files but 8 sets of files each one bearing the characteristic three letter beginning the file name. After removal, I ran another search and found nothing. Then I scanned my computer with a known good virus scanner. It came up clean "no virus found" I figured I was safe and had managed to remove the malware. While the computer was still off line and not connected to anything I rebooted and found the malware was still present. I had previously discovered the so called warning was only a bit map imbedded in my wall paper. It was deleted already. I used other clues to show the malware was still present. When the malware finds itself trapped in a computer that is unplugged from the internet it exhibit other characteristics. you cannot open Several key MS programs even in off line mode. If you get sneaky and boot up not connected then launch Mozilla or similar third party internet explorer and then connect to internet, you can get out. But if you now try to connect to major anti vurus websites like McAfee, AVG, or spy doc you get redirected to a look alike website but now it demands payment for what should be a free download. AVG still offers a free basic package but the re-direct website wants to charge you $29.95. that's the clue. Other clues are banner ads from the AVG website advertising porn. etc. AVG has never offered Sex for sale ads. If you keep going for 10 - 15 minutes or more you suddenly find your access to any internet website produces 404 errors such as "site not found" Clearly something is now blocking your access. To prove it, you need a second computer that is immune and proven clean of virus. Use the clean computer and you find the blocked or not available website is now back again.

__________________
Elnav
Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#14
In reply to #12

Re: How Does Antivirus Software Work?

03/26/2009 10:49 PM

What kinda drives you using can't wipe more than three times

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Commentator

Join Date: Mar 2009
Posts: 82
#15
In reply to #14

Re: How Does Antivirus Software Work?

03/26/2009 11:16 PM

You can, but you shouldn´t, because if you do, than you will have many problems with that drive, I promis I know. For example too much lost of data, and must have to make corrections in the registry... so on... only waste of time. Better to learn to use the drive the right and correct ways and make sure that the entire system is always free of errors and "Problems" and you never have to think about these things. I don´t have any problems with my drive, or anything and it´s running like a dream. I am not proud of it, just know how to operate it, and how to handle it, that´s all.

I have learned what a defect drive can do to your system, on my skin and expenses, and it cost a lot to learn.

Register to Reply
Guru

Join Date: Jun 2006
Location: Ottawa Canada
Posts: 1975
Good Answers: 117
#16
In reply to #12

Re: How Does Antivirus Software Work?

03/29/2009 12:38 PM

Interesting. I have re-formatted the drive on my IBM about 7 times now. I didn't know you could damage the hard drive by doing this. Is re-formating the same as "erasing the drive completely"? On the other hand, hard drives may be obsolete within a few years now that they are using solid state hard drives, so the question may be moot.

__________________
If it was easy anybody could do it.
Register to Reply Off Topic (Score 5)
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#17
In reply to #16

Re: How Does Antivirus Software Work?

03/29/2009 5:32 PM

HD's will be as obsolete as XP O/S is now

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply Off Topic (Score 5)
Register to Reply 17 comments

Good Answers:

These comments received enough positive votes to make them "good answers".

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Copy to Clipboard

Users who posted comments:

attila2007 (3); bwire (5); edignan (1); elnav (2); langyaw (2); Yusef1 (4)

Previous in Forum: Win XP Pro Disk   Next in Forum: media player problem
You might be interested in: Panel PCs, Tablet PCs, Network Security Platforms

Advertisement