OK. I have an up to date virus checker, firewall, and anti spayware. All up to date. I scan my pc and no problems are detected. YET every time I connect to the internet, and I mean the second I connect my virus checker pops up with a message like below. It is always a file in the system32 directory and it is never the same file name twice. I google the filename and it always seems to be some kind of malware, but when I scan, nothing is detected. What's going on? Also, once a virus is quarantined, is that it, is it dealt with, or do you still need to follow the fixing instructions one finds on the web? I still don't really understand what to do when I get an alert like the one below (all the time at the moment)
Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: Trojan Horse
File: C:WINDOWS.0System32 nnoomn.dll
Location: Quarantine
Computer: PRIVATE-2DHMI9L
User: SYSTEM
Action taken: Quarantine succeeded : Access denied
Date found: Monday, June 04, 2007 6:26:22 PM
Are you absolutely sure the Firewall's working/configured properly?
If it's been quarantined, then you should be OK.
What antispyware application is it? And in Avira, in heuristic detection, what sensitivity is the scanner set to?
Some malwares are capable of changing their names, or if the heuristics of Avira (heuristics=a way of detecting malware based on file behaviour rather than signatures) are set too high it could be a series of false positives.
Could try uploading the file found to Virus Total for a large number of second opinions, if there are two or more results that flag it as malware, and with similar sort of names (but it depends a bit) I'd be inclined to download and run Superantispyware (get the free one, update it before scanning.)
It is superantispyware that I am running. That detects nothing - it is only the virus checker that picks it up. LAN - how would I find out if I have the correct config of the firewall?
TFF: It's not as easy you might hope, some ISPs put a filter between their customers and the internet - which means that most firewall test results are skewed. Try
ShieldsUp!
Unfortunately as a result of ISP filtering it sometimes reports that you're safe, when you aren't.
What firewall are you using, and what ISP do you use?
May I suggest (if you are not already using it), try "ZoneLabs" firewall and AVG for your anti-spyware program.
I run zonelabs and am very happy with it (have been for years) and am considering using the free version of AVG - it's rated one of the best free apps on the market.
Cheers
Zoltan
AVG Anti-spyware is very good. There is some info on configuring your Windows computer for security on my linux/travel site
I*'m running superantispyware as recommeded elswhere in this branch. I ran the shields up thing and it pointed out so many vulnerabilities, I'm completely lost. Like I said in another thread, I just don't have the time/inclination to muck about - I have a PC to use not to tinker with like some wierd hobby. I have a firewall and a virus checker, run spyware, have windows up to date, but apparently that is not enough and I need to spend more time (by the looks of it many many hours) getting technical and mucking about. Thanks for the advice though. I think I'm going to give up. I installed AVG on another computer once and it seemed to delete a load of important files (false positives) and killed the PC. I only ran a scan.
Mac here I come, it's settled.
If you feel that it's going to take you hours to fix the problem and you don't have the time or inclination to "muck about", give the PC to a professional to fix for you.
It may cost you $100 for an hour + of work but it would alleviate the stress you are likely to encounter.
But then again, if you are going to throw the PC out and get a MAC, then you obviously have money to burn.
You should keep in mind that MACs can also get viruses and have their own limitations.
I have the free edition of AVG on my PC at home. I'd reccommend it. Only 2 days ago it found a virus and healed it. I originally had Norton on the PC which was already installed but got rid of it as it was blocking too many legit websites and I couldn't alter the settings. I've also heard that McAfee is good but not tried it.
trusted partner
