
anti-virus labels itself as malware, borks EVERYTHING
Finally, safe computing
Panda users had a bad hair day on Wednesday, after the Spanish security software firm released an update that classified components of its own technology as malign. As a result, enterprise PCs running the antivirus software tied themselves in something of a knot, leaving some systems either unstable or unable to access the …
SFC doe sin fact keep a copy of Windows' boot-required files, but doesn't touch any third party files, which is what is happening here. Panda made some of its own files critical for the system to boot properly (these DLLs, intercept calls to the system network and file system stack to detect malware on-access), but were stupid enough to not include anything to protect them.
It has also vaguely been linked to the Church of Scientolology by none other than John Leyden.
I remember that article from before the godawful GWOT, before everything was linked to Al Qaeda and now Putin or even ISIS. Good times.
I have a standard Panda 2015 internet security license for three computers - I can confirm 2015 has been a complete disaster since installation (all three computers have had problems and numerous reinstallations ~ whereas 2014 was fine) Issues culminatinated in one completely broken computer this afternoon. How can Panda not acknowledge a problem with the standard product?
The original problem was caused by a network bridge between wifi and Lan - Uninstall the bridge and everything worked - Reinstall and CPU elevates / resource errors then bsod!
This afternoon I restarted one machine for Windows updates and Panda destroyed itself in the process ~ file association issues which don't repair after a cfs /scannow can't run anything *.exe
I reported the original problems to product support several days ago and their response was a couple of uninstall programs and the latest version of 2015 which...blah,blah arse
>This afternoon I restarted one machine for Windows updates and Panda destroyed itself in the process ~ file association issues which don't repair after a cfs /scannow can't run anything *.exe
1. it is sfc /scannow and no, that will not fix file associations which are stored in your registry
2. Check HKey_Local_Machine\Software\Classes\.exe\Command\Open, you might have to copy regedit.exe to regedit.scr or regedit.com prior to running it.
Disclaimer: Not 100% sure of the registry path, no windows box at hand to look it up, but it is something like that, it might be exefile iso .exe.
Gawd! I spent the best part of today trying to get out of this black hole: I couldn't access programs. At least Safe Mode with Internet did work, after a fashion. But I wasn't able to find any info online about the cause, nor a solution. Umpteen nail-chewing reboots later, I think everything is now working -- and I've just learned what the problem was. Thank you, Panda!
Love the reference! have an up vote! Seems like the Panda ate the kippers and is now the corpse.
In the end, all AV seems to have an uphill battle. Last week it was AVG with issues, this week Panda. I remember Norton and McAffee's bad days too... Nothing says love like reinstalling a whole lab in the aftermath.
So, fellow commentard windows users, what product do you find best for AV protection?
I know install linux... but if that is not an option? What then?
Microsoft Security Essentials and System Restore.
MSE doesn't really *do* anything (except making the red "anti-virus" warning go away), so it doesn't fail and screw your system over either. The big problem today is malware, addware and crapware - snap.do and wajam for example; these little pieces of shit can only be uninstalled with system restore /fresh start.
I know install linux... but if that is not an option? What then?
Eset NOD32. Got turned onto it back in the day - before ACV got ruined by the trolls. After a couple of years researching (including building up a malware collection for my own testing) came to the conclusion that the best were Kaspersky and Eset. Used Kaspersky until about when Vista came out and they went the bloatware course (and had one or two serious bad def updates doing the usual). Switched to NOD32. In about ten years the only problem I've ever had with them was with a beta - which didn't stop the system working, just itself (when Data Execution Prevention was enabled). So, no problems (with RTM versions) in all that time, no compromises - and - unlike Kaspersky - never any impact on performance. Also cheap.
I run Linux too btw.
Another Vote for ESET Nod32 here... I've been using it exclusively on about 300 computers for 7 or 8 years now and never had a virus get in, nor have I ever had to fix a computer it had totally bricked, a few issues with it not playing nicely with an outlook plugin but that'll be the outlook plug ins fault rather than eset's...
Personally I have used Bit Defender Total Security since its concept. I know as in all such programs there are people out there that have issues with different programs. Still I have tried a number of other Firms AV/Firewall programs & found them to be wanting.
I recommend Bit Defender as private & Industrial protection. NO I am not working for them, I am just a very satisfied customer of theirs.
Stop using pirated software!! FOR EVER.
That copy of Photoshop you happen to have is not as innocent as you think, you don't know what it's allowing in, and most importantly, what it's sending out.
Just use MS Security Essentials - if it's good enough for my 80 year old Dad, then it's good enough for me. Neither of us download software from dodgy sites, anyway.
It's sad to think that some people would simply not believe me, but that pirating kid grew up.
The first time I installed Panda was back in the times of demo CDs on the front of PC magazines. I installed Panda to give it a go. On the obligatory reboot for installing pretty much anything under Windows 98SE it completely bricked my OS resulting in a lovely afternoon of restoring to factory settings.
Yes, I know it was 15 years ago, get over it etc etc. Unfortunately for Panda there's a lot of AV vendors that would have to really piss me off before I'd consider going near a Panda product again; and that was before it started confusing itself with bamboo and having a munch.
Got a copy of DivX when I purchased Roxio Creator several years ago. I now run Malware Bytes Pro and Kaspersky Internet Security, neither ever detected snap.do or wajam. Prior to Kaspersky, I ran Eset NOD for A/V and AdAware Pro for malware detection, again neither program ever detected snap.do or wajam. Are there versions of DivX without this malware ? Thanks atlatl
Microsoft is extending the Defender brand with a version aimed at families and individuals.
"Defender" has been the company's name of choice for its anti-malware platform for years. Microsoft Defender for individuals, available for Microsoft 365 Personal and Family subscribers, is a cross-platform application, encompassing macOS, iOS, and Android devices and extending "the protection already built into Windows Security beyond your PC."
The system comprises a dashboard showing the status of linked devices as well as alerts and suggestions.
Microsoft has made a standalone version of Microsoft Defender for Business generally available, aimed at customers not keen on paying for one of its subscriptions.
The product is already bundled with Microsoft 365 Business Premium (for businesses with up to 300 employees) but can now be picked up as a standalone product for $3 per user per month, as we reported from Ignite late last year.
Microsoft currently has four tiers of 365 subscriptions, starting at Business Basic (which includes the web versions of the company's productivity apps) for $6, going up to the full-fat premium version for $22 per user per month, with desktop versions of Office apps.
Germany's BSI federal cybersecurity agency has warned the country's citizens not to install Russian-owned Kaspersky antivirus, saying it has "doubts about the reliability of the manufacturer."
Russia-based Kaspersky has long been a target of suspicious rumors in the West over its ownership and allegiance to Russia's rulers.
In an advisory published today, the agency said: "The BSI recommends replacing applications from Kaspersky's virus protection software portfolio with alternative products."
The UK Competition and Markets Authority (CMA) merger inquiry into NortonLifeLock's proposed $8bn acquisition of rival antivirus provider Avast has now closed, with the regulator concluding that a tie-up could indeed reduce competition in the marketplace.
"Advanced discussions" concerning a merger of the two security vendors first surfaced in July 2021, when NortonLifeLock investors were told that a combination with Avast "would bring together two companies with aligned visions, highly complementary business profiles and a joint commitment to innovation that helps protect and empower people to live their digital lives safely."
By August, a deal had been agreed where NortonLifeLock would acquire all Avast shares for $8bn followed by the combined companies listing on NASDAQ.
Germany-based security biz Avira's antivirus has enabled a new feature: "Avira Crypto". It's opt-in, but if you click "yes", the AV will use your computer to mine Ethereum.
Opinion Game knows game. Thus it came as little surprise that Norton's consumer security software not only sprouted a cryptominer that slurps your computer's life essence and skims a cut, but that it's hard to turn it off.
A marriage not made in heaven but the other place: consumer-grade antivirus software has always had an uneven reputation, much of which it richly deserves. But how did we come to carry such a high parasitical load in 2022?
Some of this is technical. Early generations of PC malware established standard techniques to propagate and protect themselves. Rootkit methods were common, monitoring and modifying operating system calls to defect target files and infect them, and to deflect scans or probes by returning false information. This means sinking hooks into the operating system at its lowest levels and taking control – which is precisely the same techniques early AV software used to detect and nullify viruses while defending itself from attacks in turn.
Updated Norton antivirus's inbuilt cryptominer has re-entered the public consciousness after a random Twitter bod expressed annoyance at how difficult it is to uninstall.
The addition of Ncrypt.exe, Norton 360's signed cryptocurrency-mining binary, to installations of Norton antivirus isn't new – but it seems to have taken the non-techie world a few months to realise what's going on.
Back in June, NortonLifeLock, owner of the unloved PC antivirus product, declared it was offering Ethereum mining as part of its antivirus suite. NortonLifeLock's pitch, as we reported, was that people dabbling in cryptocurrency mining probably weren't paying attention to security – so what better way than to take up a cryptocurrency miner than installing one from a trusted consumer security brand?
The UK's Competition and Markets Authority has invited comments from industry and interested parties about NortonLifeLock's proposed $8bn purchase of fellow infosec outfit Avast.
The merger inquiry will run until the 16 March when the comments will be collated and assessed to determine if there is sufficient concern to warrant a deeper investigation.
"The CMA is considering whether it is or may be the case that this transaction, if carried into effect, will result in the creation of a relevant merger situation under the merger provisions of the Enterprise Act 2002," it said.
The UK's Competition and Markets Authority (CMA) has unveiled compliance principles to curb locally some of the sharper auto-renewal practices of antivirus software firms.
The move follows the watchdog baring its teeth at McAfee and Norton over the issue of automatically renewing contracts.
The CMA took exception to auto-renewal contracts for antivirus software that customers in the UK signed up for and found difficult to cancel. Refunds and clearer pricing information (including making sure consumers were aware that year two could well end up considerably costlier than the first) were the order of the day.
The UK's Competition and Markets Authority (CMA) has reached agreement with antivirus vendor McAfee that means some customers whose software subscription was automatically renewed will be able to get a refund.
The deal follows a lengthy investigation into the antivirus sector that kicked off in 2018 amid concerns that "some firms in the industry may not be complying with consumer law."
It's quite the slap on the wrist for McAfee, whose software tends to be bundled with a large number of devices sold in the UK. Customers who signed up with the company may not have understood the ins and outs of auto-renewal, hence the CMA action.
Biting the hand that feeds IT © 1998–2022