~All About Antivirus: The Best, The Worst and The Free!~

[DonJenn]

---

Avast kay dili bug-at

[acronis]

If you have a router, block also this ip ranges:
195.225.176.0/22
85.255.112.0/19
66.230.175.0/255.255.255.0
193.111.200.0/255.255.255.0

This are mostly gromozon ip ranges, the worst around.

thanks for the tip! May I ask what gromozon is

[softtouch]

Gromozon Info. More info, http://www.wilderssecurity.com/showthread.php?t=136452

Also known as the LinkOptimizer rootkit, the malware was initially distributed through Gromozon.com but is now found on an increasing number of websites. The sneaky bit of software is typically downloaded by unsuspecting web users who visit sites that either contain or link to the rootkit.

It attacks computers by downloading a script that checks for running antivirus software and creating a workaround to prevent detection. It then downloads a file entitled "www.google.com" onto the PC, taking advantage of user trust in the Google name in order to entice users to click the link. Once the link is clicked, the infection is triggered.

From there the rootkit will attempt to download additional nasty bits of executables, including ActiveX control malware and Java exploits.

Information security researchers have become increasingly worried over stealthy rootkit attacks in recent months. In Gromozon's case, the malware hides its source code using Alternate Data Streams while encrypting hidden code and data files.

"Gromozon is just one of a growing wave of malicious software which is bypassing most security products with ease," said Mel Morris, CEO of Prevx. "In fact, despite claiming that this infection is ‘easy' to remove, one market leading security vendor is still unable to detect any component of this attack."

In conjunction with the announcement on Friday researchers from Prevx released a free detection and removal tool that gives users the ability to check their PCs for the presence of the Gromozon/LinkOptimizer rootkit.

[acronis]

ic, sounds nasty!

[mata_hari]

^^ nasty indeed... Im currently using AVG... what's its Achilles heel? please... enlighten me!

[cHoLoCoY]

ok,... so i installed a fresh Windows XP
also with:
- Nod32
- Look 'n' Stop
- PeerGuardian 2

and for some reason when i restart or shutdown my comp. it takes awhile to completely shutdown,... like maybe 1 or 2 minutes,..... b4 it would only be like 10 - 15 sec.

[softtouch]

The only rea

ok,... so i installed a fresh Windows XP
also with:
- Nod32
- Look 'n' Stop
- PeerGuardian 2

and for some reason when i restart or shutdown my comp. it takes awhile to completely shutdown,... like maybe 1 or 2 minutes,..... b4 it would only be like 10 - 15 sec.

SOME system having a slow down during shutdown because of peerguardian. Just exit peerguardian before you shutdown and all should be back to normal. This is little compared what peerguardian do for you. Currently, peerguardian blocks more than 911 million bad ip's.

Lock 'n Stop: Read the setup here: http://www.wilderssecurity.com/showthread.php?t=83498

[cHoLoCoY]

its working pretty good now,..... i'll see how it is in the long run,.....

thanx softtouch_ph

oh yeah,.....
do i still need to install a spyware scanner?

[kenoidz]

i'm using norton 2005 internet utilities (antivirus+antispyware+...)...it's great jud but just don't enable it on startup coz mkahang xa oftentimes sa pc...then nakanice ani is that cg ra cla ug update so download rapod ko everyweek ug virus definitions nila...

so far so good ang NAV 2005....

[softtouch]

its working pretty good now,..... i'll see how it is in the long run,.....

thanx softtouch_ph

oh yeah,.....
do i still need to install a spyware scanner?

Yes, you would need an antispyware. Try Spybot Search and Destroy, Freeware, VERY good, http://www.safer-networking.org/en/index.html