As a newb I have an ok but basic understanding of how AV software works. I was cruising the forums yesterday and saw a few posts about infections involved AntiVirus XP 2008 and newer variants. I am confused as to how a virus/malware that seems to have been in the wild for a while still slips past a resident/web scanner?
I can help you out here. XP AntiVirus 2008 comes in many flavors such as XP AntiVirus 2009,2010 and 2011. These program are not viruses but rogues. Think of them like a scam. They make you believe you are infected to get you to buy there product. They rarely destroy a pc are not malicious. They really are annoying if anything. Malware writers are always 10 steps ahead of malware defenders. It is impossible to stay on top of the game cause once you find a cure for Xp AntiVirus 2008…Then they re-write the code and bang…You get hit with the same thing again but yet now its under a different code. No nativirus will detect everything. No antivirus can protect you 100%. With that said most of the responsibility falls on the user behind the mouse. Follow safe surfing habits you you should never get infected. Go around being click happy then you are will pay the price.
In a nut shell…Companies like Avast,Symantec,Kaspersky,AVG and Avira have huge teams of people working on cures for the viruses that are known now…Never mind the ones that just came out today. You find a cure and release it. One minutes later there are tons more viruses. Get it?
@dispatcher21
Also, scanning for Potentially Unwanted Programs (PUPs) is not enabled by default. You could go into the expert settings of each shield (that has this option) and select it.
Below is in the help file:
“By checking the box “Scan for potentially unwanted programs (PUPs)”, you can also scan for programs which you may have downloaded unknowingly, typically programs that are used for advertising, or collecting information about your computer or internet use.”
Keep in mind that enabling PUPS can also bring on false positives. Enabling PUPS on a full scan is ok but not so much for resident protection.
Do you mean to detect fake AV’s PUP should be enabled??
Thanxx
Naren
No.
Do you mean to detect fake AV's PUP should be enabled??NO, FakeAV is considered a malicious program and is always detected
PUP = potentially Unwanted Programe
Like a legit keylogger program, if you have installed a Keylogger to see what your kids are doing with your computer when thy are on internet, then it is a program you want…if someone have installed it to Spy on your computer use…then it is a Unwanted Program
There are many programs that comes in the PUP category
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci1066761,00.html
Enabling PUP’s does not hurt but can bring on false positives.
Wouldn’t be ‘real’ FPs, if you want to catch PUPs. 