PDA

View Full Version : Anti-virus software?



Sunshine
12-07-2002, 02:18 AM
ok, deal is I have Windows XP as my O/s and had a top of the range but now 6 months old PC, so fast/big/strong enough to cope with most software.

If you could start again, which anti-virus software would you use with the above?
which has the least compatability / crash issues?
easiest to set up / install?
most reliable?
best / most reliable updates?

any info gratefully received.....


:cheers:
Sunshine xxx

Darthtanion
12-07-2002, 02:25 AM
I generally use Norton as it comes standard with my NIS software firewall. Also, Symantec is among the best in terms of keeping up with modern virus and worms that come out regularly.

Wiggo
12-07-2002, 02:27 AM
Norman's would be another. :)

:beer: :beer: :beer:

Sunshine
12-07-2002, 02:36 AM
smart-arse Wiggo.....

:rolleyes2

Wiggo
12-07-2002, 03:03 AM
Most reviews of anti-virus software have both Norman (http://norman.com/) and Norton fighting out for the top spot. ;)

:beer: :beer: :beer:

Darthtanion
12-07-2002, 07:36 AM
:laugh: :laugh: :laugh: :laugh: :laugh:

Wiggo wasn't being sarcastic... there really is a Norman branded anti-virus program that has been shown to do a very fair job in the AV department. ;)

Sunshine
12-08-2002, 01:57 AM
(darn, no blushing smily)

ok, will check out Normans... sorry..... & thanks Wiggo....

:kay:

Darthtanion
12-08-2002, 02:06 AM
I'll see what I can do to find a blushing smilie. :)

Mr. C
12-08-2002, 08:56 AM
:o

^ I thought that was it.
Nobody likes to use it, but I've placed myself in the position of requiring it a time or 2 :D

DigitalDD
12-10-2002, 09:57 PM
I'm cheap by nature. so I go with a free antivirus product which is pretty good.

AVG AntiVirus from grisoft. http://www.grisoft.com/

enjoy..:cheers:

CheeZmonZter
12-20-2002, 09:44 AM
I seem to have contracted a Boot Sector virus. I have cleaned one of my hard drives but the drive that used to be my main drive has it still and Win XP doesnt see it as having been formatted. The drive is a 120 gig drive that had about 9 gig of info on it and it is now being labled as a 111 gig drive. I have McAfee Professional AV but i am still unable to get it to read the drive as a formatted drive. It was formatted with FAT32 but is now only able to be formatted under NTFS. Does anyone know how to get the drive to be read and scanned? I have been told to do some wild stuff..everythign from freeze it for 30sec. Tap on the drive spindle head 10 times....this is almost like a case of the hiccoughs!! does anyone know of a software or a procedure to follow to remove this and still save the Data? This is making me pull my hair out!!! :shoot:

Mr. C
12-20-2002, 11:24 AM
A potentially dangerous situation.
If the virus is present in data you recover from the drive, you run the risk of reinfection - might want to do a thorough risk assessment before proceeding.

That said;
It is possible to restore a boot sector. I'm not sure of the exact procedure for Windows XP (the question is, does fdisk /MBR apply to this OS?).

It may be possible to recover the data whith help of a recovery utility --- such as Disk Investigator, which you can get for free at;
http://www.theabsolute.net/sware/dskinv.html

I have used this utility in 9x with great success.
It reads the data in it's raw form directly from the HDD -- I have actually recovered data 3 weeks after it's deletion in 1 instance, 27 Mb ___ and that's with using the PC normally the whole time.
(I still have no recollection of ever deleting that darn file???)
At least that method will be non destructive to the data on the HDD and might be worth a try till another better method is presented.

Again, if you recover an infected file you could lose what you have going for you now.

Any info you can supply regarding what virii exactly has struck your PC may help to supply a more pertinent answer.

Darthtanion
12-20-2002, 12:06 PM
I'd probably do it the old fashioned way, and yes, the fdisk /mbr command would be highly advisable.

Start the system with a bootable Win98 floppy disk and start off with the fdsik /mbr command to the drive. From there, you should be able to go into the standard fdisk command and remove all partitions. If you're in NTFS file system right now, then you'll just need to delete the non-DOS partitions and anything else you find in there.

From here, you should be able to create a partition(s) and format it in whatever floats your boat.

DigitalDD
12-20-2002, 10:13 PM
FDISK /MBR will work.

if you want another alternative. boot off the XP CDROM and run the recovery console.

when you get the command prompt type HELP

theres 2 commands in there which may help.

FIXMBR and FIXBOOT..

CheeZmonZter
12-21-2002, 02:01 AM
Hey thanks for the responses! I am going to try out this info and see if it works! I will let you all know what is up thou i am leaving for the holidays and wont be back till after Christmas. I just hope i can get this figured out before i leave so I don't have this sitting on my mind!!

CheeZmonZter
12-21-2002, 03:07 AM
Lets give an update here. The drive in question cold boots to the win 98 safe mood start up screen (thou its never had 98 on it) When i tell the comp to start WIN in safe mode it tells me that these files are missing or corrupted HIMEM.SYS DBLBUFF.SYS IFSHLP.SYS and then asks where the command line interpreter is located. If I boot the comp with the McAfee emerg boot disk i am able to get it to scan the drive but on the 2nd scann pass it always hangs up on a file (dumb me didnt write the name down) could that file be the Virus? Using the Win 98 boot disk it loads and i am able to see, in dos, the files that are still on the drive, but i am unable to get the WINXP disk to run at all. Runing fdisk tells me that the drive is formatted with FAT32. If I run fdisk /mbr will that destroy the data on the HDD? If I remove the DOS partitions and reinstall them is that going to affect the data on the drive in anyway? I am trying to save as much of the data on there as possible. This has been my 1st major nightmare with a comp and i am still learning how to really use DOS( getting a crash course right now). FYI the HDD in question is the WD se 120 gig drive. I know this is a hard situation and i truely appreciate the help that is being given!!!

Darthtanion
12-21-2002, 03:58 AM
- fdisk /mbr will not destroy data on the hard drive

- fdisk used to remove a partition will destroy ALL DATA on the partition being removed.

If you still want the data and are sure that the infection is in the boot sector, then just attach the drive as a slave to retrieve the data and then scrap it and start it fresh. You will, of course, want to run a very thorough scan of all files transferred from the 120GB drive to double check that they are indeed clean. And make sure that you don't execute any files from the corrupted drive until they have been tested as clean.

G Smith
12-21-2002, 09:45 AM
http://www.ezboard.com/intl/aenglish/images/emoticons/embarassed.gif

Here's a blushing one.

CheeZmonZter
12-23-2002, 07:15 AM
I tried to set the drive as a slave and remove the files that i wanted from the drive that way but WinXP doesnt see the drive as having been formatted. It see's the drive as a raw drive and wont let me access the drive in anyway other than to format it(though the drive displays as a 111gig drive). The only way i have been able to look at the files on the WD drive is booting with a safe disk. Any tricks on how to get the comp to read the drive in its correct format FAT32? I don't know if this really is a virus or if the drive has failed in some way. But i do know how to answer the problem once and for all:hammer: but i would like to kinda keep the drive!

Aspirinix
01-05-2003, 05:12 AM
Try getting a second HDD from a friend. Setup Win and then attach the second HDD (the one that gives you problems). On Win install Ontrack FixIt utilities or Norton Utilities. With fiel retrieval tools try restoring data. If system recognizes your hdd without problems you wont need them.
If Neither Norton UT nor Ontrack FixIt cant help it's big chance your hdd is for no use. After trying all you know maybe it's time for a repair-guy to look at it. And the last, if there are no data worth trying for, think on a lowlevel formating the drive.

Wiggo
01-05-2003, 05:58 AM
Hey CheeZmonZter go to WD's website (http://support.wdc.com/download/index.asp) and d/l their diagnostic tools then check the drive out as these may prove to be the best idea to find out if something's wrong w/ the drive itself. I had a WD BB800 go on me about 7 months ago, 5 weeks after the customer got it off me, and the drive was just a dud which was promptly replaced by the dealer. ;)

:beer: :beer: :beer:

CheeZmonZter
01-05-2003, 06:09 AM
Thanks I already tried that and the drive seems to be functioning properly. I have backed up all of the files that I needed through DOS (royal pain in the A$$) I am going to be fragging the drive to night and starting out fresh again. Thanks to everybodies help on this!

CheeZmonZter
01-05-2003, 06:16 PM
Well the Virus problem has been taken care of! drive is back up and running with a few hundred hours of hair pulling and curses! I really hate DOS :angryfire but things are working and now i just have to download all of my junk. Let this be a lesson to anyone out there without a antivirus program or those that dont back things up. this has been a royal pain in the neck!!! Again thank you to all those that helped with tips and information!!:thumb:

Wiggo
01-06-2003, 08:46 AM
That's good to hear. :thumb:

Does this mean that those SETI w/u's will be rollin' again? :)

:beer: :beer: :beer: :beer: :beer:

Mr. C
01-06-2003, 09:40 AM
DOS may seem a bit harsh CheeZmonZter, but there is no denying it's power:thumb:

Glad to see you got this issue behind you, you've done well Padewan:clap:

CheeZmonZter
01-06-2003, 10:57 AM
Again thank you! I know the power of dos but it is exactally what Bill named it Dirty Operating System. I have the system back up and going and am waiting to overclock againit to test its stability first, so the work units are taking about 6-7 hours instead of the 4-5 they were..but i have gotten quite a few out since joining...i think i started with 12w/u's 2 months ago and am up to 56 or so! I started in 8th place and now am way down the list! darn. New Ram and Cpu are going to be on their way shortly and pump up the speed!!!!!!!! :clap: Talk to you all soon...