COMPUTER QUESTION: Why Can't COMODO Internet Security Detect "trojan-downloader.banload" ?

My Computer | June 2, 2012

[Yosemitest]

I trust TopTenREVIEWS.
So when my security softeware expired, I took their recommendation and bought COMODO Internet Security Complete 2012.

A little later I decided to get a utilities tool for Windows XP SP3, and again, I went to TopTenReviews.
I purchased Advanced System Optimizer 3.1,

Advanced System Optimizer 3.1, now 3.2, has a tool called "System Protector", and it finds many viruses and malware that COMODO doesn't.

My find was "trojan-downloader.banload".
It attacked the registry the following areas:

hkey-users\.default\software\microsoft\windows\currentversion\internet settings\zonemap\ranges\

range10\*
range10\:range
range6
range6\*
range6\:range
range2
range2\*
range2\:range
range15
range15\*
range16\:range
range7
range7\*
range7\:range
range5
range5\*
range5\:range



This really slowed down my computer.
Any suggestions for my next security suite, since it will NOT BE Comodo!

[Justa]

Sounds like it could be a root kit. You should get an up to date root kit and trojan detector. They usually run outside the Windows environment, as in during the boot process.

[oh8eleven]

I killed McAfee. It was good in it's day but it's become bloatware.
My ISP, T/W RoadRunner, gave me Computer Associates AV for free over the last 5 years.
It worked but it really slowed my (2 year old) PC, most notably, while booting - took 4 minutes.
A few months ago, my ISP switched to McAfee AV (2011) so I was forced to use it or pay for my own AV.
Install was a snap, my PC boots in under a minute and the PC runs fast as hell.
BTW, you really shouldn't be running two AVs on the same PC.

[oh8eleven]

thing still has control of the computer
Reload Windows again, but re-format the hard drive first.
Or - before you do that - try following these instructions ... "A step-by-step guide to dancing The Security Tango - for Windows."

[Lazamataz]

BTW, you really shouldn't be running two AVs on the same PC.

I'm aware of this, however, Avast has a 'subordinate AV install' mode that IS compliant and capable. I run AVG, and Avast in subordinate AV mode.

I only occasionally run spybot and malwarebytes, there's nothing I keep resident that would interfere with my main two AV's.

[Lazamataz]

I had a Google Redirect rootkit that actually also installed itself in my router.

I factory-refreshed the computer, the router, and I was good to go.

[Mr. K]

use AVAST

www.avast.com

they have a free home version- i have used it for years and years with great protection

[jaydee770]

What I have & do:

Avira (free, not paid) realtime-protection is always running. Windows Firewall is always on. Ad-aware, Spybot & Malwarebytes are installed, but only run rarely when needed. CCleaner & Glary Utilities run when needed. Allway Sync to auto sync my profile & important files to a small, relatively inexpensive raid-5 NAS. Beyond that, I try to be reasonably cautious when clicking links & opening files.

Honestly, most of the leading anti-virus utilities are good enough. Folks have already listed some perfectly good ones. It really comes down to how expensive they are in RAM and CPU to run and that certainly varies. I’ve never used a paid version of any anti-virus yet, though I won’t say I never will. I’ve always made-do with free versions. Just get some of the leading utilities (realtime, scanner, cleaner, etc) and keep them updated. I’m fine with just the free versions, but use the paid-versions if that makes you more comfortable.

But most importantly of all, try to be reasonably aware of what you are clicking, the sites you are surfing, the installs & programs you are authorizing to run and the files you are downloading & opening. If you aren’t sure, use a sandboxed environment to check/test those suspicious items if you can. It also helps to only use an admin account when you *have* to.

Perhaps I’m lucky, but so far with those precautions I’ve been pretty fortunate!

Good luck!

[ThomasThomas]

Always run your PC with out admin rights if not doing updates or installing something. This alone will stop most infections. I have not used an added virus protect on one my computers for 3 years and have not had any problems. The best software changes from year to year but I used Windows defender, Nod 32 and Kaspersky. Kaspersky is from Russia.

[armymarinemom]

I’m running webroot. It’s light allowing for more speed due to lack of bloat it also found malware that Avast missed.

[Yosemitest]

I also like CCleaner and use it every time, before I go onto the internet, and again, immediately after i come off the internet.
It's a very good product.
I use ADSSpy.exe occasionally to clean out "alternate data streams" and free up space being used without my permission,

[Yosemitest]

I also like CCleaner and use it every time, before I go onto the internet, and again, immediately after I come off the internet.
It's a very good product.
I use ADSSpy.exe occasionally to clean out "alternate data streams" and free up space being used without my permission,

[Yosemitest]

"Always run your PC with out admin rights if not doing updates or installing something."

This is something I don't know enough about.
I think I understand how it's suppose to work, but I find it very difficult to set up.
Every time I've tried, it gets too difficult to do what I want to do on the internet.
I just don't know enough about it.

[antisocial]

Thanks, do you know of any brand in particular that you would recommend?

[antisocial]

Thanks for those tips!

[oh8eleven]

You're welcome and there's something else to consider. Do you use a router?
Sometimes the bug, virus, malware, whatever, can take control of your router and no matter what AV you run on your PC, it won't resolve the problem.
If you do have a router, reset it manually by pressing the reset button on the back. It's usually recessed so you may need a tool.
Then run your router software and reset the password from the default (which is usually "admin").

[Justa]

I usually google it.

Kapersky looks to have a good one.

http://support.kaspersky.com/faq/?qid=208280684