Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 
Circumspice
520 posts

Ultimate Geek
+1 received by user: 121

Trusted
Lifetime subscriber

  Reply # 86785 15-Sep-2007 15:36
Send private message

Still waiting for a reply to above.

By the way, what about anti-spyware tools?

BDFL - Memuneh
61832 posts

Uber Geek
+1 received by user: 12480

Administrator
Trusted
Geekzone
Lifetime subscriber

Reply # 86786 15-Sep-2007 16:15
Send private message
 
 
 
 


Circumspice
520 posts

Ultimate Geek
+1 received by user: 121

Trusted
Lifetime subscriber

  Reply # 86790 15-Sep-2007 16:33
Send private message

Yes but presumably EICAR is useful because it has characteristics a virus scanner would recognise in a true virus.

156 posts

Master Geek


  Reply # 86792 15-Sep-2007 16:33
Send private message

Personally, I don't think so, because it identified and quarantined the "threat", but it's up to you.
I'm not familiar with either ZA or NOD32, but it sounds like NOD has a similar module to Avast, in that it is able to identify suspect content prior to download, and prevent the download.
I like that added layer myself, but if the scanner is able to stop the threat when it tries to run, it's still doing it's job.

[EDIT] (cross posted)
The characteristics are, I believe, the identification of the file via signature database, rather than by "guessing" its likely behaviour.

BDFL - Memuneh
61832 posts

Uber Geek
+1 received by user: 12480

Administrator
Trusted
Geekzone
Lifetime subscriber

Reply # 86794 15-Sep-2007 16:36
Send private message

paulchinnz: Yes but presumably EICAR is useful because it has characteristics a virus scanner would recognise in a true virus.


Are you using the Zone Alarm AntiVirus product or just the Zone Alarm firewall?

As I said EICAR is a test file. All anti-virus have to react to it. How they react os different from product to product...





Circumspice
520 posts

Ultimate Geek
+1 received by user: 121

Trusted
Lifetime subscriber

Reply # 86797 15-Sep-2007 16:54
Send private message

Ah I see what you mean by different actions Mauricio. It may not make a difference to the outcome whether the scanner recognised EICAR while saving the file or after saving the file.

Tarq, I thought heuristics or something means that some scanners can predict whether a novel programme that is not in it's database is a virus or not.

156 posts

Master Geek


  Reply # 86800 15-Sep-2007 17:18
Send private message

Yes, heuristics is that, as far as I understand.
I would guess that all virus/malware scanners would have the signature of the EICAR file in their databases.
Avast (and, I guess, NOD) don't need to rely on heuristics to block it. I guess they have a wee peep at the download source, first.
But all should alert to it when it is saved.

Circumspice
520 posts

Ultimate Geek
+1 received by user: 121

Trusted
Lifetime subscriber

  Reply # 86825 16-Sep-2007 09:47
Send private message

So does anyone use programmes specific for anti-spyware?

156 posts

Master Geek


  Reply # 86827 16-Sep-2007 09:58
Send private message

Yes. http://www.geekzone.co.nz/forums.asp?ForumId=45&TopicId=15505&page_no=1#83900

Circumspice
520 posts

Ultimate Geek
+1 received by user: 121

Trusted
Lifetime subscriber

  Reply # 86828 16-Sep-2007 10:05
Send private message

Thanks Tarq had read that, hence my question about specific (i.e. doesn't do anything else e.g. I've heard Webroot Spysweeper's pretty good) programmes peole use for antispyware.

4305 posts

Uber Geek
+1 received by user: 85

Moderator
Trusted
Lifetime subscriber

  Reply # 86829 16-Sep-2007 10:10
Send private message

Both of my PC's run Windows Defender. Also, the XP machine runs SPYBOT Search and Destroy and Lavasoft Ad-aware 2007.

All of these are free, and do a really good job.

The Vista machine only runs Windows Defender.

I also run anti-virus software...

Circumspice
520 posts

Ultimate Geek
+1 received by user: 121

Trusted
Lifetime subscriber

  Reply # 86839 16-Sep-2007 13:14
Send private message

Had forgotten about Lavasoft and Spybot. Thanks for the reminder!

1 | 2 | 3 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Geekzone Live »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.