AntiVirus 2008-09 threat causing insanity

by ApprenticeDAve Oct 30, 2008 1:53AM PDT

I work on other peoples computers, and obviously have a lot to learn. But this one problem continues to pop up over and over again. How many of you have heard on AntiVirus 2008 or 09. Basically it holds your computer hostage and demands a ransom, leading the user to believe that they?re infected with 2000 or so threats, sometimes demanding over $100 to allegedly ?fix your computer?.

My question is this. I have done a fresh install on many a system, and installed Avast and Zone Alarm, only to have them infected again with the ever so pleasant AntiVirus 2008, 09. AdAware after the fact is useless. Is there a free product that?s not bloated and not complicated for the average consumer, that I can install on a clean system that will keep this from happening?

Now obviously this is a user behavioral issue. That is the user is at fault for continually clicking and downloading this mess. We?ll have to assume in this post that the behavior cannot be modified.

I have just recently started to ad the Zone Alarm Spy Blocker toolbar. As a general rule, I discourage toolbars, but if anyone has any experience with this being successful, please let me know.

Desperately,
David

BTW, I have manually removed this threat once or twice, but it?s quite time consuming. Hoping for a better solution.

Discussion is locked

- Collapse -

The cure is bad as the issue.

by r. proffitt Former Forum moderator Oct 30, 2008 2:17AM PDT

Here's the cure -> Reduce the PCs to nothing more than a PS3, XBox or such type machine. By disallowing any "unauthorized" content or end user modification then you are in full lockdown mode.

But then again I don't have this issue yet on Apple or Linux.
Bob

- Collapse -

I've Used These Options To...

by Grif Thomas Former Forum moderator Oct 30, 2008 3:01AM PDT

...mitigate the problem substantially..

1. Install a HOSTS file on the computer which prevents to the user from going to known "bad/adware/spyware" sites.. Not a "cure all" but it stops access to many of the locations where such drive-by installations occur and prevents 90% of the popups previously seen.

2. Require the user to use a browser such a Firefox, which doesn't use ActiveX. ActiveX has been implicated in many of the these types of problems.

3. Use a good, CURRENT, antivirus and antspyware scanner running realtime.

4. Teach the user what to look for and that it's not wise to simply click OK when a popup occurs..

And just a note about the ZA Spyblocker toolbar.. Some antispyware programs detect that toolbar as adware because of it's association with the Ask.com search engine.. See the link below:

http://forums.zonelabs.org/zonelabs/board/message?board.id=gen&message.id=47515#M47515

Hope this helps.

Grif

- Collapse -

Host File

by ApprenticeDAve Oct 30, 2008 4:33AM PDT

Thank you all for the feedback.

About the HOST file. Where would you get an updated list of bad sites that you would put into the host file? Have one as an example?

Thanks,
David

- Collapse -

I Use Either Of The Ones Below..

by Grif Thomas Former Forum moderator Oct 30, 2008 4:47AM PDT

They are both updated frequently so all you have to do is copy a new one to the appropriate folder. If you want to add something specific, simply use Notepad to open the file and add, or remove a site.:

http://www.hosts-file.net/

http://www.mvps.org/winhelp2002/hosts.htm

And if you've never used a HOSTS file before, read the link below:

How To Use A HOSTS File

Hope this helps.

Grif

- Collapse -

For prevention

by Tarq57 Oct 30, 2008 7:10AM PDT

It appears to be important that all the software, esp the browser and Java, on the computer are up to date and patched.
Also what should stop it is to disable scripting in the browser. This comes down to a behaviour issue, however, as for many sites to display correctly at least partial scripting has to be enabled. The NoScript extension for Firefox could make a difference.
For clean up, MBAM and Superantispyware seem to be the stars of this show.

AntiVirus 2008-09 threat causing insanity

CNET Forums

Other Forums

Forum Info