Will full Antimalwarebytes stop infections?

unsure

A few months back we went a bit in MSE and swapped paid for antivirus (nod32) for Microsoft Security Essentials backed up by free Antimalwarebytes (occasional scan). Not sure if it's coincidence but since then we've had two infections (latest was System Tool 2011) on my son's laptop, both from clickingnon seemingly innocent-looking sources on google images which he was using for homework ( latest one was picture and quotes of Mahatma Gandhi!).

With a bit of time and fidldling around, we managed to get rid of System Tool but son is upset and worried about future use. So I have a few questions for good, kind and knowledgable MSE Techies:

1. Has my security "downgrade" made these infections more likely (in which case I'd be tempted go back to Nod32 which kept us safe and untroubled for years)?

2. Would paid for full version of Antimalware (with real time scanning)have been likley to prevent these infections and avoid future ones (in which case I'd get my wallet out for that...at least on son's laptop)?

3. Does anyone have a better suggestion or advice (...I don't want son getting phobic or discouraged about using the computer?)

Thanks for any help and advice you can offer.

aliEnRIK

The majority of av programs fell foul of 'system tools'
You could have stopped it by using FIREFOX with the NOSCRIPT plug in. Possibly an AD BLOCKING program. SANDBOXIE would (Should) stop it too

the full antimalwarebytes would NOT have stopped it when it when the majority of people were getting infected by it.
Im unsure if NOD would have, but id personally lay a bet it also would have failed

esuhl

I have never had a virus or any malware on any of my PCs (except one running Windows 98 and no antivirus!) You should be able to use free software for security. The ones I use are:

Avira AntiVir (although I'm thinking of changing back to AVG)
Spybot - Search & Destroy
Malwarebytes' Anti-Malware
SpywareBlaster
Comodo Free Firewall
Secunia PSI

In addition, I use Firefox instead of Internet Explorer, along with Adblock Plus (which I use to subscribe to the malware domains block list), NoScript and TACO.

Gibson Research have a few useful tools too. You can check if your firewall is working properly using Shields Up and LeakTest, disable UPnP with Unplug n' Pray (maybe also a good idea to disable UPnP on your router).

dogmaryxx

aliEnRIK wrote: »

the full antimalwarebytes would NOT have stopped it when it when the majority of people were getting infected by it.
QUOTE]

How would the full version of Malwarebytes' Anti-Malware help protect me?

We hope our application has helped you eradicate this malicious software. If your current security solution let this infection through, you might please consider purchasing the FULL version of Malwarebytes' Anti-Malware for additional protection.

As you can see below the full version of Malwarebytes' Anti-Malware would have protected you against the System Tool rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.


Resized to 60% (was 1189 x 194) - Click image to enlarge

aliEnRIK

dogmaryxx wrote: »

aliEnRIK wrote: »

the full antimalwarebytes would NOT have stopped it when it when the majority of people were getting infected by it.
QUOTE]

How would the full version of Malwarebytes' Anti-Malware help protect me?

We hope our application has helped you eradicate this malicious software. If your current security solution let this infection through, you might please consider purchasing the FULL version of Malwarebytes' Anti-Malware for additional protection.

As you can see below the full version of Malwarebytes' Anti-Malware would have protected you against the System Tool rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.


Resized to 60% (was 1189 x 194) - Click image to enlarge

From what ive seen it wouldnt have stopped it as the current rules didnt know there was an infection

The same people 'claim' theres no difference between running a quick scan and a full one when I know for a fact that the full scans have found quite a lot more in some cases

But whatever. Im not really fussed one way or the other

esuhl

dogmaryxx wrote: »

As you can see... the full version of Malwarebytes' Anti-Malware would have protected you against the System Tool rogue.

I don't know much about System Tool, but I was surprised at the suggestion that the majority of AV tools wouldn't have blocked it. I looked at antivirus detection rates a while ago and all the AVs tested detected 100% of viruses that were "in the wild" - it was just lab viruses detected heuristically that were a bit hit-and-miss.

If System Tool wouldn't have been detected by anti-malware/AV applications, does this mark the beginning of a new age where up-to-date security software isn't enough? That can't be good for the masses who use online banking... :eek:

closed

what's in the wild changes daily, no AV company can fully keep up with that straight away.

gonzo127

never believe a 100% detection rate on tests as no protection is 100%, these things are written to get past the current security out there AV programs are always playing catch up since they can only really protect against known threats, all the new virus's are unknown for a while and even when they become known someone has to write the defense system against that particular attack so there is always a time lag.

yes AV programs can offer some protection to stop unknown threats by using heuristics and other methods, but yet again the virus writers can then test there virus against some of the programs to work out how to get around these 'extra layers' of protection