Beware fake virus protection

[Park@82]

Why will system restore being turned off aid in malware removal?

AFAIK, system restore backs up files that are modified to “System Volume Information” on c (or any other drives for which it is turned on) which are only accessible to the system unless changed. If a virus is backed up to this folder, it often finds a way to re-infect the machine. Turning off system restore deletes the files in the System Volume Information…

What do you mean by disable startup? Do you mean disable the malware's start up? How do you go about that? Surely most malware is designed to stop you from doing so?

msconfig is a good place to start, both the services and startup tabs.

 

[Threepwood]

Okay that makes sense.

 

[ic]

I'm very familiar with the enterprise fake anti-virus protection known to the rest of the world as McAfee, I first stumbled across this McAfee thing in 1999 at work, and it's now 2008 and the mainstream anti-malware vendors still haven't found a way of getting rid of it.

 

[Tns]

The funny thing was I could not find a process responsible for the popup and antivirus software turned up nothing; it seemed to be somehow embedded in the shell.

cause it's a hidden task, processexplorer and securitytaskmanager kills it.

 

[AirWolf]

I'm very familiar with the enterprise fake anti-virus protection known to the rest of the world as McAfee, I first stumbled across this McAfee thing in 1999 at work, and it's now 2008 and the mainstream anti-malware vendors still haven't found a way of getting rid of it.

So you don't like McAfee?

 

[Park@82]

cause it's a hidden task, processexplorer and securitytaskmanager kills it.

still I could not find it anywhere in the startup, not in the startup folders or services or in the reg... I cant remember if i did use processexplorer back then, nowadays I use it all the time.

 

[Threepwood]

cause it's a hidden task, processexplorer and securitytaskmanager kills it.

Is this a / Is this like a rootkit?

 

[ic]

So you don't like McAfee?

I'm just saying that McAfee is the very best of the best fake-anti-virus programs available, or is that Norton...either way they are very close to each other.

 

[Tns]

So you don't like McAfee?

yes i like swiss cheese. running trend micro. getting rid of these malware is useally a two phased approach, you scan for spyware with spybot and or other malware scanners. then a full scan with a antivirus, sometimes you have to scan the drive in another machine.

 

[DJ...]

I have no idea what the hell you guys are talking about, but can you at least alert us as to what pr0n sites you were downloading from so that we can steer clear of them?

 

[kronoSX]

I'm very familiar with the enterprise fake anti-virus protection known to the rest of the world as McAfee, I first stumbled across this McAfee thing in 1999 at work, and it's now 2008 and the mainstream anti-malware vendors still haven't found a way of getting rid of it.

i think its a conspiracy theory.