Just removed trojans Femad.B and exploit.bytverify

General Network security, firewalls, port filtering/forwarding, wireless security, anti-spyware, as well as spam control and privacy discussions.
Post Reply
User avatar
twisted
Regular Member
Posts: 199
Joined: Fri Dec 15, 2000 12:00 am

Just removed trojans Femad.B and exploit.bytverify

Post by twisted »

and yes, after doing a search in this forum I know how to avoid in the future getting these two trojans....but it will be hard (hehe). Anyways, my comment on this is that my security progies did not prevent these from infecting my system. I currently use Bitdefender Professional v7.2 ( http://www.bitdefender.com/index.php ) with the firewall and AV running. Prior to removing these two trojans, I decided to re-install AVG free and run the test to see if AVG found these trojans....it did NOT find them. I also ran Symantec's on-line scanner and it too did NOT find these trojans on my system. The only two progies that found these two trojans were BitDefender and the on-line "house call" from Trend-Micro. So....I'm undecided as to whether or not Bitdefender is an OK progie becasue although it did not do anything to prevent these two trojans from getting on my system (yes, a very bad thing), it did tell me after running the scan that I was infected. Had I still been using AVG or a Symantec AV, I would assume that I would have also been infected, BUT, AVG and Symantec would not tell me that I had these trojans on my system (a worse thing not knowing at all).

I think I would rather know that I have then vs. not knowing. Your thoughts?
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

I have seen AVG FREE and Pro catch this trojan MANY times, so it must be something you set improperly.

:)
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

I haven't found Symantecs online scanner to be all too effective, since the byteverify/Femad.B affect VM, and I believe their online scanner utilizes VM, may have prevented it from finding it as easily. I know their Corp Edition product catches it, assuming their consumer retail product would too. Regardless, if you keep your OS up to date with Windows Updates, Microsoft had an update which addressed that vuln in VM so your computer can just chuckle at that byteverify and Femad.b (the two go hand in hand).
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

Of course my preferred method of scanning which I've been doing for ages, is to take the suspect hard drive out, and slave it into another computer which is fully updated and fully protected with a robust antivirus package. Boot up that "scanning" machine, and scan the slaved hard drive through My Computer (you'll usually see it as something like "drive D"). That's the most effective way of scanning, since no system files of the bad drive will be open/in use.

But not everyone has the luxury of a second computer to do with with, so the next best method is to boot the suspect machine up in safe mode...and run a scan. In safe mode, far less services of the OS and other apps will be running, so you'll have far less files which may be open/in use.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
MadDoctor
New Member
Posts: 4
Joined: Fri Apr 27, 2001 12:00 pm
Location: Looks dark

Post by MadDoctor »

YeOldeStonecat wrote:Of course my preferred method of scanning is to take the suspect hard drive out, and slave it into another computer which is fully updated and fully protected
Me too!!!!!

rep point on the way.....
People will forget what you said... and people will forget what you did... but people will never forget how you made them feel.
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

MadDoctor wrote:Me too!!!!!

rep point on the way.....
///sends truckload of sheep///
MORNING WOOD Lumber Company
Guinness for Strength!!!
Post Reply