Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trend Micro product questions?


  • Please log in to reply
4 replies to this topic

#1 Eric RBA

Eric RBA

  • Members
  • 252 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:State College, PA
  • Local time:03:13 AM

Posted 12 April 2009 - 08:00 PM

I have general questions about these two products. I have been using RUBotted on my home laptops and PC and work PC, one laptop running Vista the rest are XP. I have recently (yes, since the April 1st Conficker issues have been made news to hear) gotten notices on each machine that I have a bot trying to connect out, noting a malicious DNS query. As expected, after the notice it prompts the user to clean with HouseCall, which you can download and try for free, but it turns into a trial download of TrendMicro Internet Security.

So here's the questions:

1. Is RUBotted trustworthy and reliable? Would it present false alarms (even possibly in a timely manner) in order to "scare" a user into downloading the trial version of TrendMicro Internet Security? Can I trust that what it is telling me is true? I am not an amateur to bots and malware issues that might be infecting me, but I'm not sure that every notice from RUBotted is legit.

2. Is it worth verifying that I have no bot infections by installing Trend Micro's product, Internet Security? In order to do so, it would require me to remove AVG, Zone Alarm, McAfee Site Advisor and Spybot S&D so far. I stopped at that point before it likely asked me to remove Malwarebytes and Spywareblaster, which would render my computer rather unprotected, relying on a product that is a trial version which I am not so familiar with.

So, it TM RUBotted trustable, and is their TIS product worth paying for in spite of using MBAM, Spybot, ZoneAlarm, AVG & others?

Edited by Eric RBA, 12 April 2009 - 08:03 PM.


BC AdBot (Login to Remove)

 


#2 Eric RBA

Eric RBA
  • Topic Starter

  • Members
  • 252 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:State College, PA
  • Local time:03:13 AM

Posted 14 April 2009 - 11:08 AM

I am still looking for some help and answers, if someone has a minute or two and some thoughts?

#3 Stang777

Stang777

    Just Hoping To Help


  • Members
  • 1,821 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:13 AM

Posted 14 April 2009 - 09:58 PM

I had never heard of that program until I read your post but I did a google search on it and found this forum that might be of interest to you. Seems a few people here had the same problem back in November as you are having now. No other program found anything suspicious on their computers.

http://forums.anandtech.com/messageview.as...hreadid=2250015

Personally, I would not install anything that wanted me to uninstall all of my protection.

You might want to run a scan with SuperAntiSpyware and see if it finds anything.

#4 Galadriel

Galadriel

    Bleepin Elf


  • Malware Response Team
  • 2,753 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Missouri, USA
  • Local time:02:13 AM

Posted 14 April 2009 - 10:27 PM

This program had been discussed previously. See this topic.

Since it is still in beta stage, I would hardly consider its results trustworthy. And as for uninstalling other security programs just for a scan with their suite, is a bit much. Think of it like asking a doctor for a second opinion, you don't ask the same doctor that gave you the first now do you?

Back to RUBotted. I am still not sure how it identifies bot-like behaviour. If it does this by looking at port activity, the results could very well be false positives. You'd have to study your firewall logs to know for sure.

To be honest, while the idea behind the tool is interesting, to me it feels somewhat gimicky. Maybe it's my cynical side speaking though.
I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'

Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook

#5 Eric RBA

Eric RBA
  • Topic Starter

  • Members
  • 252 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:State College, PA
  • Local time:03:13 AM

Posted 17 April 2009 - 02:45 PM

Thanks for the help and the links guys. I've decided that I'll just stick to what I have been using and remove RUBotted. At least for now. I do like how it operates, so I'll look at it again when it's not Beta.
I would never ask a person to do something that I wouldn't do myself.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users