Avira + Online Armor - what went wrong?

There are some features missing in the free OA (like full keylogger protection and run safer default,) but it still should have stopped infection.

 

Even the free versions of Avira & OA will provide equal or better protection than Comodo (CIS). CIS has a good FW & HIPS, but its antivirus is very weak.

I suggest you stay with Avira & OA and simply add Sandboxie. That combination will protect your computer to the nth degree.

 

Correct. It's strange he said it didn't stop it...

Those are my 3 musketeers.

 

Adding Sandboxie or DefenseWall (or both) will be good idea.

 

That looks like my setup

NeilC,

If you click on something or surf to a compromised site, more than likely it was an known exploit to a software you have installed that has a patch/update. I can't stress enough how important it is to keep your programs updated. Especially programs like Windows, browsers, Java, Flash player, media players, PDF readers, etc... See my signature to a Secunia link where you can get a free online scan to check if your important programs are vulnerable. Don't make it easy for the bad guys .

 

While I do agree Avira is a better AV product than Comodos AV, I have to disagree on the FW and Hips part. I like OA free but I feel Comodos FW and hips is a bit stronger when you enable Proactive config. Maybe the hips part of Comodo would have sent up a warning about the infection but then you need to make the correct choice Allow or Deny.

Ice

 

I am using Avira premium with Windows firewall. Do you recommend a good firewall?

 

Online Armor lol

 

What about ZA PRO ?

 

i wouldnt use ZA PRO, i even have a license for it, but im not using cuz i found it too heavy for me, and i just prefer the FW im currently using.

 

OK thanks for the tips.

The virus installed a file called Prunet.exe. It was a devil of thing. I created various DLLs and processes, some invisible to task manager. If I tried to use unlocker to unlock any of them to delete them it shut down windows. It locked me out of most security features and turned off the firewall.

 

Free version of Avira AntiVir does not protect against adware/malware. It only protects against viruses and trojans.

 

Not exactly, i have free version of Avira and my AV noticed me few times when i open infected sites and give me information about spyware which was there. So sometimes free Avira can warns you from spyware.
But of course i agree Premium version is better in that things.

 

i tested OA for over a year, and it's rock solid protection. if it flags something, it will halt it in it's tracks. smells like someone clicked allow when they should not have. my assesment anyway. going to Comodo is not the answer if one does not take the time to configure it, or read the pop-ups and respond correctly.


Mike

 

To avoid such things from installing and causing havoc try surfing under limited user account, or install GesWall free.
Or both!
In addition you can try browsing with SRWare Iron if you don't fancy running your favorite browser sandboxed..

 

No that is not the case. Various popups did appear and they were all responded to correctly. OA did stop the infection doing it's worst and blocked various attempts to run files and access the net but it didn't stop it getting in.

 

Neil,

Since this concerns OA, maybe it would be best to post on their forum and see what they have to say? http://support.tallemu.com/vbforum/

 

okay, you were there and i wasn't, not the first time i have been wrong....my apologies. the boogaloos are indeed getting crafty, when they can escape TallEmus' wonderfully engineered security tool. maybe a trip to "in the clouds" is worth evaluating.


Mike

 

Online free has partial HIPS features ( http://www.tallemu.com/comparisons.html ) but anyway they had to block and to alert the threat.

 

"In the clouds"?

I don't understand?

 

So are you guys saying that Avira free and OS free together provide 100% protection against all malware as long as the user responds correctly? We don't need any other form of script control, or whatever?

 

Actually oa alone with good usage would be more then sufficient.

 

So why don't you use that instead of F-PROT Antivirus + SpywareBlaster Pro + SUPERAntiSpyware Pro + Prevx Edge 3.0 Antimalware Beta 64
CCleaner

 

Maybe because OA doesn't support 64-bit yet.