Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can I Have More Than One Antivirus Installed?


  • This topic is locked This topic is locked
15 replies to this topic

#1 J-son

J-son

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 24 May 2008 - 06:07 PM

I know you are not supposed to have more than one antivirus running real-time on your system, but I was wondering if I could have a few different antivirus installed, but keeping only one of them always active, so that I could scan my system with the other two whenever I want?

BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:10:47 PM

Posted 24 May 2008 - 06:13 PM

what do you presently have installed and what WERE you thinking of adding to the 'mix'?

you of course realise that thre are plently of ON LINE scanners you can utilise?

I can also envisage a computer being overloaded with antivirus programs ' on standby'

be interesting to see how others pass comment on your ' suggestion ' :thumbsup:

#3 J-son

J-son
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 24 May 2008 - 07:03 PM

I have Avira antivir installed on C, and I was going to download and install Avast and AVG on C, but I was going to only use Avira on real-time.

The reason I want to do this is im not sure exactly how avira is doing. Windows security reports that there is no antivirus installed (it used to detect it fine). And I always update avira, but every time I restart Avira tells me it hasn't updated in over 3 days. Even if I update, then restart, it Avira will say it hasn't updated in over 3 days. So im not sure whats going on.

Also, windows security tells me windows defender is off, and it wont let me turn it on. Also, windows update isn't working. If I try to update, some of them will succeed and some of them will fail, but when I restart they will all be there again, even the ones that "succeeded".

I'm pretty sure there is something seriously wrong with my computer. I am aware of many online virus scanners, and If I have to I'll use those instead. I was just wondering if there where any con's in my idea above, because it would be easier to just install them and use them and update/scan with them whenever.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 33,405 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:47 PM

Posted 25 May 2008 - 07:43 AM

Using more than one anti-virus program is not advisable. The primary concern with using more than one anti-virus program is due to conflicts that can arise when they are running in real-time mode simultaneously. Even when one of them is disabled for use as a stand-alone scanner, it can affect the other. Anti-virus software components insert themselves into the operating systems core and using more than one can cause instability, crash your computer, slow performance and waste system resources. When actively running in the background while connected to the Internet, they both may try to update their definition databases at the same time. As the programs compete for resources required to download the necessary files this often can result in sluggish system performance or unresponsive behavior.

Each anti-virus will often interpret the activity of the other as a virus and there is a greater chance of them alerting you to a "False Positive". If one finds a virus and then the other also finds the same virus, both programs will be competing over exclusive rights on dealing with that virus. Each anti-virus will attempt to remove the offending file and quarantine it. If one finds and quarantines the file before the other one does, then you encounter the problem of both wanting to scan each other's zipped or archived files and each reporting the other's quarantined contents. This can lead to a repetitive cycle of endless alerts that continually warn you that a virus has been found when that is not the case.

Anti-virus scanners use virus definitions to check for viruses and these can include a fragment of the virus code which may be recognized by other anti-virus programs as the virus itself. Because of this, most anti-virus programs encrypt their definitions so that they do not trigger a false alarm when scanned by other security programs. However, some anti-virus vendors do not encrypt their definitions and will trigger false alarms if used while another resident anti-virus program is active.

To avoid these problems, use only one anti-virus solution.

Most anti-virus vendors recommend that you install and run only one anti-virus program at a time:
Symantec's statement.
Avast's statement.
AVG's statement.
Dell Support advises the same for their systems.
Microsoft MVP - Consumer Security 2007-2014 MVP.gif

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#5 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:10:47 PM

Posted 25 May 2008 - 10:07 AM

if this is a vista machine a vista machine (?) and we now think it to be infected?

throw both of these at it


Superantispyware; guide on how to install and run


If you have not already got a Downloads folder , I suggest you create a new folder in My Documents, and name it Downloads ;

Installing superantispywareSuperantispyware is found here


http://www.superantispyware.com/index.html

Download to the Downloads folder the free exe to superantispyware from here


http://www.superantispyware.com/downloadfi...ANTISPYWAREFREE

you install superantispyware by clicking on the icon in the downloads folder ;
it will launch the installation process;
follow the instructions and I suggest you ask for a default installation ;
ensure it creates a desktop icon for you ;
once the program has been installed it should ask you if you wish to update the program ; say YES

if it does not ask you , you need TO fully update the definitions by opening the program and find the ‘check for updates ‘tab in the bottom left of the menus you see; click on it and it will do the update for you ;
I suggest you ask it to check for updates again once the first update is complete just to be sure


please then reboot your computer ; it is preferable to run the scan in your computers safe mode;

please open this program from the desktop icon
please run the scan while you are OFF line and do not have the computer doing any other work while the scan runs

go to the preferences tab on the right
on the General tab I suggest you disable the scan on start up

on the Hijack protection tab I suggest you tick BOTH items; this enables the program to give you a Hijack home page alert if your home page gets changes ; if you DO get a home page hijack, when you boot up the computer superantispyware will open and tell you the home page has changed and will ask you if this is a legitimate change;

in statistics/logs- go to the bottom and you will see two boxes asking about keeping a log of scanning results and saving empty logs?

Tick both of them

Then go back to the main screen and see the tab that says scan your computer? Do you see that ?

Click on it

A screen will open ;on the left hand side ensure your FIXED drive ( most probably the C drive) is ticked;
Also tick in there any other section that is used and attached .
On the right had side you see three scanning options?; please click the Complete scan option

OK; you are now set to scan

Please then click on the ‘next’ tab and let the scan run please run the scan while you are OFF line and do not have the computer doing any other work while the scan runs

From my experience running this program the complete full scan CAN take many hours to run depending on how much is on your computer so be patient and let it run; maybe go for a cuppa or watch a favourite program while this one runs

Once the scan IS complete you will be presented with a box telling you what the scan has found ( if anything); if harmful objects have been found click on the OK button ; on the next screen all the harmful objects should have a check mark beside them, ; click ‘next’


A notification should appear that

‘quarantine and removal is complete’

click ‘ok’
and then the Finish button to get returned to the main menu


If you have run the scan in computers safe mode you will need to reboot to computer normal mode

If you have run in computer’s normal mode I suggest you reboot to enable the ‘fix’ the program has performed to consolidate

You then need to retrieve the scan result

Open the program and return to the statistics /logs section ; locate the most recent log ; left mouse click on it to highlight it and click the ‘view log’ tab

The log should appear in maybe note pad ; you need to copy and paste that log for examination
Once you have posted the log please close the superantispyware program


and
from this thread
quote Boopme Mod

http://www.bleepingcomputer.com/forums/ind...l=malawarebytes

Please download Malwarebytes Anti-Malware and save it to your desktop. Do Run from normal mode.
alternate download link 1 http://malwarebytes.gt500.org/mbam-setup.exe
alternate download link 2 http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.html
Make sure you are connected to the Internet.
Double-click on Download_mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
Make sure the "Perform Quick Acan" option is selected.
Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.



you should then have TWO scan reports to post ( one from superantoispyware and one from malawarebytes)for examination please for folks to see what MIGHT be happening and advise accordingly

#6 J-son

J-son
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 25 May 2008 - 02:03 PM

Hey thanks for all the help!

I had already run SuperAntispyware overnight, so rather than redoing it in safe mode I though I should just post the log file from that scan:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 05/24/2008 at 10:10 PM

Application Version : 4.1.1046

Core Rules Database Version : 3468
Trace Rules Database Version: 1459

Scan type : Complete Scan
Total Scan Time : 00:56:47

Memory items scanned : 387
Memory threats detected : 0
Registry items scanned : 7647
Registry threats detected : 0
File items scanned : 41730
File threats detected : 16

Adware.Tracking Cookie
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@tacoda[2].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@eb.adbureau[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@revsci[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@ads.revsci[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@bizrate[2].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@hc2.humanclick[3].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@hc2.humanclick[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@ads.overclock[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@ads.ookla[2].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@kontera[2].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@ads.shvoong[2].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@anad.tacoda[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@imageads8.googleadservices[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@tracking.foxnews[1].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@imageads8.googleadservices[3].txt
C:\Users\David\AppData\Roaming\Microsoft\Windows\Cookies\Low\david@tremor.adbureau[1].txt





And here is the Malwarebytes Scan Log:

Malwarebytes' Anti-Malware 1.12
Database version: 786

Scan type: Quick Scan
Objects scanned: 32583
Time elapsed: 2 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 2
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Windows\System32\SYSTEM32 (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Windows\System32\SYSTEM32\DRIVERS (Trojan.Agent) -> Quarantined and deleted successfully.

Files Infected:
C:\Windows\System32\SYSTEM32\DRIVERS\RTL85n64.sys (Trojan.Agent) -> Quarantined and deleted successfully.

#7 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:10:47 PM

Posted 25 May 2008 - 03:29 PM

suggest; empty your temp internet files folder ; update BOTH programs; reboot; run BOTH programs on full deep scans ; that should return log reports that are OK

then you need to work out which ONE installed antivirus program you will have and fully update IT

#8 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:03:47 PM

Posted 25 May 2008 - 04:44 PM

J-son, per your request, I have closed your May 8th HJT log and re-opened this topic.

Edited by TMacK, 26 May 2008 - 10:28 AM.

Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#9 J-son

J-son
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 26 May 2008 - 02:56 PM

Superantispyware didn't detect anything running it a second time in safe mode. Malwarebytes detected 2 more Trojan.Agents in safe mode. Avira Antivir detected 2 more trojans in safe mode called Dldr.zlob.nvx.

I am still not completely at peace of mind. My two roommates trash my computer without regard. They like to click on every porn popup they see and download every crack/keygen on the internet.

I tried running a couple of the online antivirus scanners (in order) recommended in the sticky but I ran into a few problems:

aumha - I'm not sure if they support any parasite scan anymore but none of the links are working, and couldn't find anything on the site

BitDefender - says "Failed to load interface -- You must have administrative rights on this computer; you also must have the Internet Explorer security settings to the Medium level. " Ofc, I am admin an I have ie security on medium. Not sure whats going on here.

eTrust - says " This scanner requires a browser such as Internet Explorer which is capable of rendering ActiveX objects. " And IE blocks the ActiveX when I try to install it.

F-Secure - doesn't support vista 64-bit

Housecall - after receiving this error repeatedly, I was still able to run the scan and I left it on overnight. It detected 15 different different malware/dialers. I attempted to clean them and every single one of them failed. It told me to check the information on them to learn how to clean them properly, and not a single one of them had any information. I attempted to delete all of them, and my browser froze, and I had to end program.

As you can see I am unsuccessfully working my way down the list. Let me know of any recommended programs I should use to scan with.

Edit: ive been running McAffe online scanner for only a minute and its already detected 5 infections.

Edit 2: I should probably mention that windows Update isn't fixed yet either, there are always 6 updates that fail to update every time.

Edited by J-son, 26 May 2008 - 03:15 PM.


#10 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:10:47 PM

Posted 27 May 2008 - 07:40 AM

an idea; can you see for starters;if your system restore is enabled?
http://www.bleepingcomputer.com/tutorials/windows-vista-system-restore-guide/

and if so how far back it goes?
also there must be a way IN vista to restrict users on the computer to YOU which might seem to be a virtual priority to prevent further trashing of the comp??

can you try and run the malawarebytes scanner again in computer normal mode and try a FULL system scan? post ITS report

if things are THAT bad you may wish to go FOR an HJT log? unless the Admin team can suggest some stronger tools for OUTSIDE the log section?

#11 J-son

J-son
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 29 May 2008 - 02:20 PM

System restore is enabled, and I can scroll down to restore points starting at may 7th. Im not sure if they go earlier than this and the list just stops at may 7th. But I like system resore, it's saved my life in the past.

I ran a full scan with Avira again last night and it detected 3 worms called IrcBot.1478656

I ran malwarebytes again in full scan in normal mode and it detected more:
Malwarebytes' Anti-Malware 1.12
Database version: 786

Scan type: Quick Scan
Objects scanned: 32583
Time elapsed: 2 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 2
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Windows\System32\SYSTEM32 (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Windows\System32\SYSTEM32\DRIVERS (Trojan.Agent) -> Quarantined and deleted successfully.

Files Infected:
C:\Windows\System32\SYSTEM32\DRIVERS\RTL85n64.sys (Trojan.Agent) -> Quarantined and deleted successfully.


Also, somebody on another forum recommended www.hitmanpro.com . Have you ever heard of this and does it work? He said "uninstall every antiviur you have and run this, if theres something on your computer this will find it."

OH YEA and my browser is acting very weird. Its slow to load up, and it keeps logging me out from everywhere randomly. Sometimes it gives me this error. And whenever I open a new window I have to relog-in. It doesn't just happen on this forum, it happens everywhere, (other forums, gmail etc). It didn't use to do this yesterday.

Edited by J-son, 29 May 2008 - 02:23 PM.


#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 33,405 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:47 PM

Posted 29 May 2008 - 02:47 PM

Hitman Pro is a freeware tool that automatically downloads and installs a number of well known anti-spyware programs (Ad-Aware SE, SpyBot Search & Destroy, Spy Sweeper, Spyware Doctor, CWShredder, Spyware Blaster, NOD32, Sysclean package) into what it claims as "one integrated solution". BC does not recommend this tool becauase there have been questions/concerns about the vendor using some of the noted security programs without the authors consent or permission.

Please read the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log" and complete all the steps. There are instructions for downloading and running Deckard's System Scanner (DSS) which will create a hijackthis log for you, or automatically download and install the most current version of HijackThis if it's not already installed on your computer.

When you have done that, post your log in the HijackThis Logs and Malware Removal forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the HJT Team.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.
Microsoft MVP - Consumer Security 2007-2014 MVP.gif

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#13 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:10:47 PM

Posted 29 May 2008 - 03:03 PM

Have you ever heard of this and does it work? He said "uninstall every antiviur you have and run this, if theres something on your computer this will find it."


found that part of this comment 'enlightening' to say the least
rather a sweeping statement would you not agree?

might it 'find ' vital parts OF your computer...and erase them? :thumbsup:

#14 J-son

J-son
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 29 May 2008 - 03:46 PM

I made a post in the HJT log forums: http://www.bleepingcomputer.com/forums/t/149568/dss-log-please-help-with-viruses-worms-trojans-and-weird-browser/

found that part of this comment 'enlightening' to say the least
rather a sweeping statement would you not agree?

might it 'find ' vital parts OF your computer...and erase them? :thumbsup:


thats also somewhat of a misleading statement wouldn't you say?

Shouldn't it be "find INFECTED files IN your computer and clean them"?

#15 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:10:47 PM

Posted 29 May 2008 - 04:13 PM

I made a post in the HJT log forums: http://www.bleepingcomputer.com/forums/t/149568/dss-log-please-help-with-viruses-worms-trojans-and-weird-browser/

found that part of this comment 'enlightening' to say the least
rather a sweeping statement would you not agree?

might it 'find ' vital parts OF your computer...and erase them? :trumpet:


thats also somewhat of a misleading statement wouldn't you say?

Shouldn't it be "find INFECTED files IN your computer and clean them"?

one would hope that that is what the program would do, yes; however, when a rogue or 'unreliable' program is run you really do not know what will happen do you :flowers:

lets see what the Experts find in your log :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users