[artman]

I have always been under the impression that you should not have multiple anti-virus, spyware and malware programs running in the background at the same time because the programs might conflict with each other.

Is this true, or is it OK to run multiple scanners in the background at the same time?

With the above said last week my daughter who is running Windows XP SP3 was infected with the XP Recovery Virus. The virus wiped out her desktop icons, quick launch, start button program listing and more.

She had ESET NOD32 anti-version version 4 running in the background. She also has the free version of Super Anti-Spyware and the free version of Malwarebytes Anti-Malware installed on her machine but they are not running in the background because I thought they would conflict with ESET and each other. She does a weekly manual computer scan with the Anti-Spyware and Anti-Malware software.

In addition to my questions above, if you are not suppose to run multiple anti-virus, malware and spyware programs in the background at the same time what is the best way to protect a computer from things like the XP Recovery Virus?

My daughter has scanned and rescanned her machine with the 3 products I mention above and after the initial scans the machine is coming clean but the machine still has major issues.

Any information you can give me would be great. Thanks!

This post has been edited by artman: 31 May 2011 - 07:30 PM

[AgentF]

Only have one real-time program installed at a time. You can have any number of on-demand scanners, but Malwarebytes and SuperAntiSpyware should be satisfactory. You should perform system scans one at a time. Technically, a real-time program is constantly scanning as you use the computer, but you don't need to disable it while you run the on-demand programs. Just limit your computer use so the real-time program is doing less.

Malware can get on a computer any number of ways. Just by browsing a website and not specifically downloading a file, one could get infected due to vulnerabilities in the operating system, web browser, and web browser add-ons/extensions. Although it is hard to keep up with it all, the best protection is to educate the computer user. Make sure all that stuff is updates with the latest security patches and be vigilant about what websites you visit, emails you read, and everything you specifically download.

Another important thing to keep in mind is the firewall. The firewall built into Windows XP SP2 (and later modified in SP3) only protects from incoming connections, and it does a poor job at that. I strongly suggest installing a two-way firewall, one that protects both incoming and outgoing connections. I personally use Comodo Firewall Free. It can be annoying during the first few weeks as it learns your usual programs, but it's also very effective when configured well. There's a lot available for configuration, so it's probably a bit overwhelming for your daughter. Another option is ZoneAlarm, which is supposedly easier to manage, although I haven't personally used it. The firewalls in Windows Vista & 7 are two-way.

Please provide the initial scan logs and details of other problems you're having. Can you confirm that the shortcuts and whatnot are actually deleted and not just hidden? Open up Windows Explorer, go to Tools > Folder Options > View tab > radio button: Show hidden files/folders

This post has been edited by AgentF: 31 May 2011 - 08:19 PM

[LincolnSpector]

XP Recovery is a rogue. It scares you into downloading and installing the program, and then paying for it.


The best defense is skepticism. Don't trust an error message from software you didn't install, and don't install a program that you didn't find on an established download site or that wasn't recommended by someone you trust.


Lincoln

[LiveBrianD]

If you get a fake AV scanner in your browser, I'll bet you that 110% of the time it's fake, fake, fake. Umm... why would the my computer window be giving me AV results? And for that matter, why am I seeing that in a web browser? Installing the software they want you to is like letting a criminal come in your house when he comes to your door. You should slam the door in his face, NOT let him in.


If you run into a fake AV scanner, kill the browser with the task manager immediately (end the process(es)), then when you open it again, DO NOT have it restore your session.


Try using an addon like WOT (http://mywot.com) to help avoid such sites. However, if a legit site was hyjacked, that won't help you.

Running multiple AV scanners in the background is not a good idea. It IS a good idea to keep something like malwarebytes installed in case you need it - that's not realtime protection (in the free version anyway).

As for your infection, if you can't clean it with security software, try system restore. But the only surefire way to get rid of it is to reinstall Windows. Well, almost (some of you may remember how I mentioned that reinstalling Windows is like blowing up a city full of criminals - you'll likely wipe everything out, but there might be the criminal hiding in the sewers that survives the blast - akin to malware that doesn't get wiped with an OS reinstall.

[cyberknight]

artman, on 31 May 2011 - 07:28 PM, said:

I have always been under the impression that you should not have multiple anti-virus, spyware and malware programs running in the background at the same time because the programs might conflict with each other.

Is this true, or is it OK to run multiple scanners in the background at the same time?

With the above said last week my daughter who is running Windows XP SP3 was infected with the XP Recovery Virus. The virus wiped out her desktop icons, quick launch, start button program listing and more.

She had ESET NOD32 anti-version version 4 running in the background. She also has the free version of Super Anti-Spyware and the free version of Malwarebytes Anti-Malware installed on her machine but they are not running in the background because I thought they would conflict with ESET and each other. She does a weekly manual computer scan with the Anti-Spyware and Anti-Malware software.

In addition to my questions above, if you are not suppose to run multiple anti-virus, malware and spyware programs in the background at the same time what is the best way to protect a computer from things like the XP Recovery Virus?

My daughter has scanned and rescanned her machine with the 3 products I mention above and after the initial scans the machine is coming clean but the machine still has major issues.

Any information you can give me would be great. Thanks!

Actually u should'nt be running multiple security apps with real time shield. Free versions of MalwareBytes & Super Anti-virus don't have real time shields. So they are fine along with ESET. Your main anti-virus app i.e ESET should have blocked such threats. If it did'nt then better try something else. U can also install a firewall if u are using XP.

[artman]

Thank you everyone for your good information.

[SpiritWind]

Hi Art :

As Lincoln said, more than likely your daughter got
what the malware-fighting "community" calls a "Rogue"
or "Fake" security program on her computer . They
come in different "flavors" and each "flavor"
requires a distinct process to completely remove the
Rogue and reverse its side effects . There are 1 to 3
PRELIMINARY Steps that must be done PRIOR to running
Malwarebytes Anti-Malware . Best info is that your
daughter got what the Expert malware-fighting
community calls "Windows XP Recovery" Rogue and they
recommend she try the "Automated Removal Instructions"
available at http://www.bleepingc...ows-xp-recovery
Particular attention should be paid to Instructions
Numbers 3, 4, and 5 . IF she is unable to follow
those Instuctions or by successfully following those
Instuctions does NOT restore her computer, then I
recommend she seek the help of a trained, experienced,
CERTIFIED, Volunteer "Malware Removal Specialist"
found on an Advanced Malware Removal forum, such as
the One at http://www.geekstogo.com/forum .