Re: Bitdefender 8 setup questions - free version?

[Ron Lopshire]

willa19@nospambaby.org wrote:

> I just loaded the free version of Bit Defender 8, and although it's
> classified as an on-demand scanner, I noticed that it loads several dll
> files into startup.
>
> Is it safe to delete those or how can I continue to use it as an on demand
> scanner without it loading every time I start Windows? In summary, I just
> want it to run when I decide to use it as a secondary scanner - sort of
> like the way I have Ad-Aware installed.

***Against my better judgement, I will leave this cross-posted.***

I don't think that that is the way it works with most AV apps. Using
an installed AV app for on-demand scanning only, as opposed to
real-time enabled with scheduled scanning, only toggles a couple of
parameters. All components of the AV app are installed with the app
loaded as a Windows service, as you noted. It is still a resident app,
just not real-time enabled.

In most cases it is not advised to have more than one AV installed. I
can almost guarantee that if you have problems with such a setup, no
one will help you. If you want more than one opinion, try one of the
online scanners. Many of these require ActiveX, and will only work
with IE. I haven't checked these links lately, but you get the idea.

Kaspersky AV: Free Online Virus Scanner - detection only
(http://www.kaspersky.com/virusscanner)
Trend Micro HouseCall - detection and removal
(http://housecall.trendmicro.com/hous...start_corp.asp)
BitDefender Online Scanner - detection and removal
(http://www.bitdefender.com/scan8/ie.html)
Dr.Web CureIT! - detection and removal
(http://download.drweb.com/drweb+anti...free+services/)
F-Secure Online Virus Scanner - detection, virus removal only
(http://support.f-secure.com/enu/home/ols.shtml)
Freedom Online Scanner - detection only
(http://www.freedom.net/viruscenter/index.html)
CA's eTrust AV Web Scanner - detection and removal
(http://www3.ca.com/securityadvisor/virusinfo/scan.aspx)
McAfee FreeScan - detection only
(http://us.mcafee.com/root/mfs/default.asp?cid=9913)
Symantec Security Check
(http://security.symantec.com/sscv6/d...ductid=symhome)
DialogueScience
(http://www.antivir.ru/english/www_av/)
UNA AV
(http://online.una.com.ua/resulteng.php)
Virus Total
(http://www.virustotal.com/flash/index_en.html)
Microsoft Beta
(http://safety.live.com/site/en-US/default.htm)
Ewido
(http://www.ewido.net/en/onlinescan/)

Ron

[Ron Lopshire]

willa19@nospambaby.org wrote:

> Ron Lopshire <notron@ovbl.org> wrote in news:KQQqh.10363$pQ3.9760
> @newsread4.news.pas.earthlink.net:
>
>>I don't think that that is the way it works with most AV apps. Using
>>an installed AV app for on-demand scanning only, as opposed to
>>real-time enabled with scheduled scanning, only toggles a couple of
>>parameters.
>
> I installed this because I thought on-demand meant that I could just run it
> when I wanted to (I also have Antivir installed but that's in startup for
> real-time scanning).

That is what on-demand means. But it is still a resident AV
application. It must be installed, and in most cases, loaded upon
system startup. Which means that if you have more than one AV app
installed, you are especially prone to conflicts. And as I said, you
will play hell trying to get any help if something goes wrong.

> I've seen posts by some who have Kaspersky, NOD32, Avast or AVG running,
> but use ClamWin, Bitdefender and/or Dr. Web's Cure for a 2nd check.

Were they talking about online scanners? As I said, most resident AV
apps don't like each other.

> Is there a way to just burn the programs to CD, and have their engines just
> run the latest update files, without having the definition files?

Have you looked at Dave's Multi_AV? It uses the Sophos, Trend,
Kaspersky and McAfee Anti Virus Command Line Scanners. His script
retrieves the current signatures for each scanner, and is capable of
removing viruses, Trojans and various other malware.

http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/v2/got-a-virus.htm

If you have any questions, post back and I am sure that Dave can help you.

> I think I read where that was possible with some programs, although it may
> have had to run in DOS from a boot disk.

With KIS/KAV 6, Kaspersky added the capability to create a bootable
disk (based on Bart's PE CD) that includes the KAV engine and current
signature database. This is particularly important for detecting and
removing rootkits. IIUC, it is _not_ possible to remove a true rootkit
from an OS with a utility that resides on the same booted OS.

If and when you need it, you need to re-create the bootable disk with
the current signatures. It is not something that you generate to be
used in the future. You can Google for other AV vendors that provide
the same (Bart's PE) capability.

> What AV program do you have running?

I use KAV. In these NGs you will see KAV and NOD32 recommended quite
frequently as paid AV apps, and AVS, AVG, AntiVir, and Avast! as free
AVs. Each of these AV solutions has their aficionados.

KAV - Kaspersky Labs:
(http://www.kaspersky.com/us/products)
NOD32 - Eset
(http://www.nod32-av.com/products/products.htm)

Active Virus Shield - Kaspersky Labs, courtesy of AOL
(http://www.activevirusshield.com/ant...eeav/index.adp)
Do NOT install the toolbar, most people consider it to be spyware

AVG - Grisoft
(http://free.grisoft.com/doc/1)
Avast! - ALWIL Software
(http://www.avast.com/eng/programs.html)
AntiVir PersonalEdition Classic
(http://www.free-av.com/)

I am not sure exactly what you are trying to accomplish with multiple
AV scanners. Find one that you like, keep it updated, and practice
safe hex.

http://www.claymania.com/safe-hex.html

For a second opinion, you can use an online scanner for which I posted
several links. But as others have pointed out, do you really want or
need to? Letting some dipstick put a cookie on your HD is one thing.
Letting someone scan your HD with a JRE procedure or an ActiveX
Control is another matter. You have to really trust the vendor to
allow that.

Using multiple Anti-Spyware scanners is one thing. They each have
their strengths and weaknesses, and they generally co-exist quite
well. What I suggest for an AV solution is that you find one that you
like -- real-time or on-demand, resident or on-line, free or paid. And
then use the online services for specific files.

Virus Total Online Scan
(http://www.virustotal.com/)
Jotti's Online Malware Scan
(http://virusscan.jotti.org/)
Kaspersky File Scanner
(http://www.kaspersky.com/scanforvirus)
Norman SandBox
(http://sandbox.norman.no/live.html)
Dr.Web
(http://support.drweb.com/sendnew/)

I know that Virus Total, and maybe Jotti, will submit any new malware
samples to the participating vendors. Virus Total and Jotti are
particularly useful for investigating FPs. For example, many AV apps
do not like some of gkweb's FW tests. Download a few of his
executables, and see if your AV goes bonkers.

http://www.firewallleaktester.com/

No AV solution is a panacea. None will protect you from unsafe hex.
Choose one AV app, complement it with a FW (the Windows FW is fine),
and use one or more Anti-Spyware apps from time to time. And if you
use broadband, a router, at the very least, is a must.

Ron