HI
I want to mention another matter that is related to my previous post “HELP” in order to find the viruses on system.Its the fact that the viruses/worms/Trojans act anonymously and hidden to find them on system .
Is there any way to find them?
thanks
Hidden virus are generally rootkits.
I suggest you visit this page http://www.antirootkit.com/software/index.htm for antirootkit detection, removal & protection.
Comparison test here: http://www.informationweek.com/software/showArticle.jhtml?articleID=196901062&pgno=1&queryText=
For “avast antirootkit” features: http://forum.avast.com/index.php?topic=32126.msg268578#msg268578
If you mean you can’t find them in explorer. Even if you don’t it is advantageous to have these settings anyway.
- Ensure that you have hidden files and folders enabled and disable hide system files in Windows Explorer, Tools, Folder Options, Hidden files and folders, uncheck Hide extensions for known file types, etc. see image.
HI
Thanks for your answer.
You know those who write viruses are smart enough to hide there files in different places and by different methods.If I can find them naturally what is the advantage of using an anti virus while I can find them and then clean them.I exactly want to say that according to virus orders it is clear that they have different places to set and different functions to do and I want to know if there is a way to Find them ASAP.
Absolutely this is possible to do without a program to help (an antivirus.)
The steps:
-1) Learn by heart the name and path of every file on your PC. (Re-learn them all again following any system or program update.
-2) regularly check every file and compare to the list you have memorised. Investigate any that were not present before. If they do not belong, delete them.
-3) Apply the same procedure to the registry.
-4) This may not work for files hidden in the alternate data stream. These are probably rootkits. I don’t know how to find these without the appropriate program, but you’ll probably need a hex editor.
or
-1) Use an AV or similar program.
-2) "Google the name of any file found. If it has been previously reported on an infected machine, there is a chance that one of the AV or security companies has analysed it, and made a list of what changes it makes to the machine. Find this list.
-3) Go through the list of changes made, in safe mode if necessary, and delete all entries found. (Note this is far from foolproof, as the version you have may be different from the one reported.)
or
-1) Use one or more scanners to regularly scan and clean (if infected) your computer. Keep it updated. Put up with any slight performance hit.
;D ;D ;D ;D ;D