From: Felis silvestris on
On Tirsdag 23. mars 2010 09.20, Peter Köhlmann wrote:

> RayLopez99 wrote:
>
>> Seriously, has anybody seen--or even heard--of a serious virus
>> (including rootkit or malware) problem in Windows when using
>> commercial antivirus protection?
>
> Yes

*raises hand*
about 200 Windows desktops were knocked out at my latest $orkplace when
someone connected an infected laptop to the LAN. This was an office of one
of the world's largest outsourcing companies, well protected by commercial
AV systems.

It took the IT staff a few hours to clean up the mess. Unfortunately, we two
Linux users missed the opportunity to point out to the manglement that we
were able to continue working ...

>> One of the claims of the Linux crowd is that such problems are
>> legion. But talking so some of the people at alt.comp.anti-virus I
>> get the impression such problems are rare.

The incidence report from offices world wide was full of virus alerts and
attacks.


From: Lusotec on
RayLopez99 wrote:
> Seriously, has anybody seen--or even heard--of a serious virus
> (including rootkit or malware) problem in Windows when using
> commercial antivirus protection?

Yes I have, *many* *many* times!

There is nothing rare about a machine running up-to-date free or commercial
anti-virus software and still be fully compromised, usually with several
species of serious malware (e.g. root kits, key loggers, spam bots, ransom
ware, egold stealer).

Fully updated anti-virus software like Avast, AVG, Kapersky, f-prot, Norton,
etc, are by no means a guarantee of safety against malware.

> One of the claims of the Linux crowd is that such problems are
> legion. But talking so some of the people at alt.comp.anti-virus I
> get the impression such problems are rare.

You have a wrong impression about lots of subjects.

> Who is more right?

You certainly are not.

>BTW, check out this PDF on AV software:
>http://www.av->comparatives.org/images/stories/test/ondret/avc_report22.pdf
>
>It compares 16 commercial programs, and finds Microsoft at #2,
>catching 60% of all viruses (Avanti is #1 at 70%).

If the number one anti-virus catches *only* 70% of all viruses, then it lets
30% of them pass. That is just proof of failure, not success and definitely
not a rare occurrence.

>And we're taking about all viruses, some of which as so obscure I'm sure
>you'll never seen one in the wild...

The real problem are the new viruses, obviously, not known by the anti-virus
programs. The heuristics used by the anti-virus are also of little use to
detect new viruses since any capable virus developer can test his creation
against a good number of anti-virus and tweak the binary until it is not
detected.

Regards.

From: SteveH on
RayLopez99 wrote:
> Seriously, has anybody seen--or even heard--of a serious virus
> (including rootkit or malware) problem in Windows when using
> commercial antivirus protection?
>

Seriously, are you having a laugh?

--
SteveH


From: bbgruff on
On Tuesday 23 March 2010 07:51 RayLopez99 wrote:

> Seriously, has anybody seen--or even heard--of a serious virus
> (including rootkit or malware) problem in Windows when using
> commercial antivirus protection?

A good question, but perhaps you are asking the wrong people?
Would it be better (just as an example) to address your question to
Manchester City Council or to the Greater Manchester Police?

http://news.bbc.co.uk/1/hi/england/manchester/8492669.stm

It is of course quite possible that the administrators were not so
knowledgable as yourself, and would therefore benefit from your advice.
Judging by the cost of outbreaks like these, I'm sure you could make a lot
of money - the cost seems to work out at about £1,000,000 a time to clean
up the mess.
Go for it :-)

From: larry moe 'n curly on


RayLopez99 wrote:

> Seriously, has anybody seen--or even heard--of a serious virus
> (including rootkit or malware) problem in Windows when using
> commercial antivirus protection?
>
> One of the claims of the Linux crowd is that such problems are
> legion. But talking so some of the people at alt.comp.anti-virus I
> get the impression such problems are rare.

I was running AVG ver. 8 and got some malware that hogged all the CPU
time. It caused operation to slow so much that I couldn't run the
computer and had to transfer the HD to a computer with a dual core
CPU. A full scan with AVG indicated the problem but couldn't fix it.
Norton detected nothing, and free online scans by Trend and PC Pit
Stop didn't fix it (I don't remember if they detected it), but Bit
Defender partially did, and the rest of the problem was solve with
either ComboFix or SmithFraudFix.