About Antivirus Software

How to remove Windows Virus Blocker

2013-01-24T02:52:00.000-08:00

      Currently, the computer of every person is quite susceptible to the threat of computer viruses. Viruses can pick up on the Internet, using a variety of social services, peer to peer file sharing networks, or simply surfing the internet in search of something interesting. Most often the victims of viruses are careless users, wandering on the internet just to find interesting, they are able to click on all advertising banners, almost inviting viruses to your computer. A major risk also represent online scanners, yes, yes, that online scanners from unknown manufacturers can install on your computer malware. It is such a way to "breed" virus blockers Windows. If you are a victim of this virus, it is necessary to remove the virus blocker Windows, and as soon as possible.
     How do I know that the virus blocker installed on your Windows computer? The most basic feature - the inability to use a computer. You will become an involuntary spectator windows virus, which usually has a very, very bad form and may contain pornographic images. Message, which will give you a virus, may be different, for example, it is able to charge you to visit any prohibited sites that contain videos with elements of child abuse, child abuse, or various types of pornographic material. Agree, very damning report, any person, even if he did not visit such sites, will never dare to confess to getting this kind of accusation. Are counting on manufacturers virus blockers Windows. The only solution they offer is to pay them a certain amount of money. Remember that under no circumstances you should not pay them or disclose their phone number. Ignorant people, who have decided to pay to unlock your computer, have committed themselves to the daily debit of money and the promised code to unlock. Making sure they paid for nothing, novice users familiar cause of computer wizards to remedy the situation and remove the virus blocker Windows.

   Most Windows blockers use names kakih-nibud governmental organizations to look more convincing, blaming the user what he did. Please be patient with a similar message, no organization has the right to lock the computer the average user and even more require him to pay a fine in the terminal. These viruses are the only means of extorting money, and will have to pay fines after a while their creators, while the price paid for extorting money may not be limited to fines.     What do you do if you are involved in such an unpleasant situation? Call computer wizard once you see the blocking message, no one would ever think that the charge brought you this message, justified. Such viruses may be waiting for you on the pages of sites with various subjects from football to craft, they often lurk in the most "harmless" sites with popular themes. Therefore we advise you to visit the only proven and safe web page. If you are an experienced user or just do not spend money on holite call a programmer, you can take advantage of special instructions that we have prepared for you. We tried to make them as accessible as possible. The biggest obstacle to removing the virus may be a blocker Windows Registry Editor disability, task manager or block access to safe mode. Usually blocked one thing, so you need to use the rest to the maximum.

   So, to remove the virus blocker Windows you can use the following instructions (you will need to perform their other computer):
1. Go to the website of Kaspersky, you need a page "Service deactivation ransom-blockers."
2. Next, type in the line number or account number to which you ordered to put some money in the terminal. Then click "Get an unlock code" and when the code is highlighted.
3. Paste the code in the locker and he withdrew.
4. Scan your computer for viruses by using any updated antivirus program.
     If the above method does not help you solve the problem, or the code for this kind of virus is not in the database of Kaspersky, then you can try to use the same code base for virus release from DrWeb Windows blockers or any other manufacturer antivirus obespecheniya.Tak also have the opportunity to use some Utilities for removing viruses, such as Dr.Web CureIt!

     If something does not work, then try to start the computer in Safe Mode:
1. Restart your computer, and take the download button F8. Click this button for as long as you do not see a black screen with the menu.
2. Select Safe Mode from the menu using the arrow keys and press Enter.
3. Then you can run any anti-virus or anti-virus utility program that lets you use it in safe mode.

    If safe mode is locked and not loaded, then you should use the following instructions.
1. Now, reboot your computer, as described above, intercept boot Windows by pressing F8.
2. You'll see a menu, instead of safe mode, click Start the command line and press Enter.
3. Type msconfig and press Enter.
4. You will see the StartUp tab, where you should turn off autorun virus. You can find it by the name, which is presented to you the message that you see in a normal boot Windows, or you can find it on a random name, which consists of a number of selected random numbers and letters.
5. Certainly after this you need to start your computer in normal mode (restart) and scan your computer for viruses. To scan you can use any anti-virus program that is available to you. If you are going to use antivirus program, which is already installed on your computer, then you have to reinstall it and update.

   There is also another very effective method that you can use. There are cases when pressing keys, which usually cause the task manager (ctrl + shift + del and ctrl + shift + esc), leads to a calculator. In that case you need to use these magic instructions here:
1. Download Special unlocker from any manufacturer of antivirus software and utility avz on another computer and they throw off the stick.
2. Then try to open Task Manager, as usual ctrl + shift + del or ctrl + shift + esc, in your situation, you will see the calculator - do not panic.
3. Click Help, and then click About and License Agreement.
4. Then again, do not worry, you'll see ... Notepad! Select File, then Open.
5. Insert the USB flash drive, then in the notepad click File, then Open, and these actions will open your stick.
6. You just have to run your utility from the stick and remove their blocker.

Firewall or party-firewall?

2013-01-10T03:08:00.000-08:00

In fact it is almost the same ... And can not the same thing? The firewall is more dynamic in the plans setting than that. A firewall is a very easy to use, low settings. Why do we need firewall / party-firewall:

Control over applications using the ports (in case of change of a virus or Trojan applications are set as the plug-ins, applications network activity is blocked);
Appointment of separate rules for different users without additional network authentication;
In the firewall learning mode when the first time a program of network resources the user is prompted (usually of the form "always deny, deny once, always allow, allow once, create a rule"). Tabulated The firewall exceptions for programs;
Mixed-mode filter (in which checks various parameters at different levels of network protocols - from the second (test for falsification MAC-address) to 4 (port filtering) ... simple words control all incoming from the Internet through ports. This is very important!

NOTE: When setting the firewall disable native Windows firewall, and vice versa - this is done in order to avoid a conflict.What do you choose? My advice to you - if your computer has valuable information (such as passwords, bank account or your computer participates in any monetary transactions, etc.), one can argue that you need a firewall. If you have a PC of the most valuable is the password on Vkontakte and Odnoklassniki, then you have enough head and the mother a properly configured firewall native Windows Vista and Windows 7, that is for home use. However, I would note that in the first case (when your computer is a "money bag") can use the native firewall Windows, but only if you have a head on your shoulders and you do it well, that is written in this book. However, international experience suggests that the "<cooler" did firewall.
If you are interested in firewalls, then three of the best of the best are:
COMODO Firewall FreeZoneAlarm Firewall FreeAgnitum Outpost Firewall Free
All three of the above, I chose firewall free (Free-version), ie they lack some of the modules, than the paid version (Pro-version). If you still want a paid version of the firewall, you have this version or buy, or download, and then look for clues on the internet ... that's key, not cracks, keygens ... because the concept of "crack" (English Crack or "crack" (English keygen, key generator) is very dangerous to your computer in terms of viruses, because it is in their common viruses! Therefore, if you can not live without a crack or keygen it is better to download them from torrent trackers, but I strongly advise you not to use them ... for your own good! But I would note that COMODO Firewall Free from free firewalls are more or less good, but the choice is always yours! Besides, this firewall can compete with paid versions of other firewalls. Also available in Russian language settings. Therefore, to look for clues and do not waste of money, I advise COMODO Firewall Free - simple, free, safe! In addition to the built-in COMODO Firewall "sandbox» sandbox, in which we can test the program without harm from the fact that the program has a virus! Of course, Pro-version firewalls (paid) improved security through additional functions. But everything is in your hands - you can download the paid version, but then to seek the keys. And one of the best paid firewalls certainly is Agnitum Outpost Firewall Pro.You only need to find the keys on the Internet ... or buy.

Installation and Configuration for Agnitum Outpost Firewall:
Agnitum Outpost Firewall
Agnitum Comodo Firewall
ZoneAlarm

How to clear the Temporary Internet Files - Temporary Internet Files

2013-01-10T02:22:00.000-08:00

Cleaning temporary files in the browser Internet Explorer (video)
By default, the cache is located at - C: \ Users \ User-Name \ AppData (hidden folder) \ Local \ Temp \. Find the folder, open it and remove all its contents.

Or make the browser. Start Internet Explorer, select "Tools -> Internet Options -> General -> Browsing History and vyberaem Delete ...

Or press ALT+CTRL+DELETE, in new window choose need options (recomended all) an then press OK

Tips for protection against computer viruses

2012-11-09T03:59:00.000-08:00

Antivirus The first and necessary step is to install anti-virus protection and proper use of antivirus software. Without it, there is no protection and security of your computer. Do not wait when it will collapse under the pressure of a computer virus - especially if you use the internet. Installing antivirus software is simple in principle. Price is not an obstacle and can not be an excuse for his absence. Given that the majority of well-known manufacturers can find a few that provide antivirus software for home users for free.
Antivirus software regularly scans files and computer memory. And as a rule, shows the appearance of the infected files, or computer viruses and worms. Followed by warning users and appropriate action taken in accordance with the configuration parameters that can, for example, delete the infected files. Ideally, the user will be warned in time, and prevent damage to the system. Just read the instructions carefully, and do not forget to regularly update anti-virus databases, which ensures the correct operation of antivirus software. To make this clearer, I will compare all the "medical" example.

Antivirus software and all its actions are somewhat similar to the process of vaccination against infectious diseases. It would make sense to vaccinate if you vaccinated appropriate type of vaccine, and your body produces antibodies increases immunity to most infectious diseases. Since it is impossible to predict all types of computer viruses that can come into contact with you, then vaccination is against those for which there is the greatest probability of a collision. But there is a new disease. The old vaccine were received before will not protect you from him. Security You get only when you receive new vaccines that will give you protection against new diseases. Similarly, anti-virus software can not know in advance what will be the new computer viruses and worms. Therefore, your software will help you to successfully detect all known viruses. You do not have to purchase and install a new version every time there is a new computer virus. Antivirus programs are designed so that the information about the discovery of new viruses and worms can be added later. This is the aforementioned anti-virus database - the file containing the information required for detecting computer worms and viruses that need to be updated regularly. Whatever anti-virus software in their daily work have found new viruses. If the database can not be updated regularly, antivirus quickly becomes useless because it will not be able to cope with the new computer viruses that appear every day. The settings may be different depending on the products you use. But basically all come down to visit the manufacturer's website and download the file to the appropriate directory. Next run the appropriate settings in the software, and then the whole process is automatic.

Some Tips Of Computer Virus

2012-11-09T03:47:00.001-08:00

Precautionary measures

Will be essential, in addition to anti-virus, if in your daily work, you develop certain habits that will significantly reduce the chance of infecting your computer.
Mass of computer worms distributed via e-mail. Therefore, under the mail Be careful. When you receive a new message from an unknown sender, do not rush to open files attached to the message! Similarly, care must be taken to messages from known senders. Especially if you get them unexpectedly. Often writers of malicious worms turn to curiosity users. So do not rush to open suspicious files attached to e-mail, even if the content promises interesting information.

Computer viruses and worms can be disguised in a file that supposedly contains movies, pictures, or humorous content, special attention should be paid to the file with a double extension (for example, .Exe, .Bat; .Com, .Vbs, .Doc, .Dot, .xls, .dll, .ppt, .mdb, .jpg), which clearly indicates that this could be a computer virus. When viewing an infected message your computer can not get infected because it takes to run the attached letter to the file. What compels you so akivno message.
For file infection computer virus remains in memory as a Windows resident program and stored in Windows-files are executed. To send infected messages, computer virus to disassemble the internal format of the email databases and added to outgoing messages with an infected attachment (attach). Ie computer virus sends itself to the Internet. Similar precautions should also be saved when downloading and installing software from the Internet.
Download software from trusted sources, such as specialized web sites that collect, evaluate and classify such software. You can get a variety of tools for P2P-peer file sharing (Kazaa, E-donkei ...), and therefore need to be very careful, especially when downloading executable or installation file. In no case do not trust untested "friendly" advice from anonymous sources. Because they not only protect your system, but that likely will lead to its collapse. In the end, make a habit of doing your important data. Despite all of the above measures, things can go wrong. If a computer virus is still infecting your computer, the presence of a backup (Backup) ensures that your critical data is not lost, because even after a complete reinstallation of the system can be easily returned.

How to protect your computer from malware and hacker attacks?

2012-11-09T03:20:00.000-08:00

You can protect your computer from malware and hacker attacks, if you follow these simple rules:

* Installed on your PC protection solution against information threats.

    *   Always install updates for your operating system and applications are designed to fill gaps in their security. If you are using Microsoft ® Windows ®, you do not need to manually download the updates every month, sufficient to establish the automatic mode - Start | Control Panel | Security Center, Windows ® (Start | Control Panel | Security Center). If you use a software package Microsoft ® Office, do not forget to install the update it regularly.
    * If you received an e-mail message with an attached file (document Word, spreadsheet Excel, an executable file with a. EXE, etc.), do not open the attachment, if the sender of the letter you do not know. Do not open attachments unless you are expecting to get such a message. UNDER NO CIRCUMSTANCES do not open attachments sent in spam messages (spam).

*    Regularly (at least once a day) install software updates to ensure the safety of your computer.
    *    Use at your own computer user account with administrator rights only in cases where you need to install programs or change system settings. For everyday use, create a separate account with limited user (you need to go to the "User Accounts" in Control Panel). This is important because when you attack the malicious code gets the same level of rights to which you are logged on. If you are logged in as root, the same level of rights will have the virus, worm, or Trojan, and malware have access to key data stored in the system.
       * Regularly save a backup copy of your data on CD-ROM (CD), DVD-ROM or external USB-drive. In case of damage or malware, encryption of data on the hard drive, you can restore it from the backup copy.

Computer virus Trojan.MSIL.Pakes.bo

2012-11-07T04:03:00.003-08:00

Trojan. It is a Windows. NET (PE-EXE file).
Size: 579,584 bytes.
MD5: aac63d4ebb5e40428ae84f2addc617a2
SHA1: e9348d3db8221f8ed118c5a0e7a3a2ebdfb3da9a
Destructive activities
When launched, the Trojan does the following:

creates files:

    % AppData% \ DalxI.txt
    % AppData% \ chrome.exe
    % AppData% \ chrome

creates the following registry keys:

[HKLM \ System \ ControlSet001 \ Services \ SharedAccess \ Parameters \FirewallPolicy \ StandardProfile]

"DoNotAllowExceptions" = 0

[HKLM \ System \ ControlSet001 \ Services \ SharedAccess \ Parameters \

FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
"% WinDir% \ Microsoft.NET \ Framework \ v2.0.50727 \ vbc.exe" =
"% WinDir% \ Microsoft.NET \ Framework \ v2.0.50727 \ vbc.exe: *: Enabled: Windows Messanger"
[HKLM \ System \ ControlSet001 \ Services \ SharedAccess \ Parameters \
FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
"% AppData% \ chrome.exe" = "% AppData% \ chrome.exe: *: Enabled: Windows Messanger"
[HKCU \ Software \ VB and VBA Program Settings \ SrvID \ ID]
"CBNCSPGZT2" = "chrome"
[HKCU \ Software \ VB and VBA Program Settings \ INSTALL \ DATE]
"CBNCSPGZT2" = "<Date>"

Where <Date> - date when the Trojan was installed on the infected computer in a format «October 13, 2011."

identify the country of location of the infected computer by accessing the website:

ipinfodb.com

provides networking with the host:

   rapeme.zapto.org: 3333
Removal
      If your computer was not protected by Antivirus and is infected with this malware, then to delete the following:

     1.     With the Task Manager to terminate the Trojan process.
     2.     Delete the original Trojan file (the location of the victim will depend on how the program originally penetrated the victim machine).
     3.     Delete files:
   % AppData% \ DalxI.txt
   % AppData% \ chrome.exe
   % AppData% \ chrome     4.     Remove the registry keys (how to work with the registry?)

    [HKLM \ System \ ControlSet001 \ Services \ SharedAccess \ Parameters \FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
"% WinDir% \ Microsoft.NET \ Framework \ v2.0.50727 \ vbc.exe" =    "% WinDir% \ Microsoft.NET \ Framework \ v2.0.50727 \ vbc.exe: *: Enabled: Windows Messanger"
    [HKLM \ System \ ControlSet001 \ Services \ SharedAccess \ Parameters \FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
   "% AppData% \ chrome.exe" = "% AppData% \ chrome.exe: *: Enabled: Windows Messanger"
    [HKCU \ Software \ VB and VBA Program Settings \ SrvID \ ID]
   "CBNCSPGZT2" = "chrome"
    [HKCU \ Software \ VB and VBA Program Settings \ INSTALL \ DATE]
    "CBNCSPGZT2" = "<Date>"

     5.     Change the value of a registry key to the home (how to work with the registry?)
    [HKLM \ System \ ControlSet001 \ Services \ SharedAccess \ Parameters \
    FirewallPolicy \ StandardProfile]
    "DoNotAllowExceptions" = 0     6.     Perform a full system scan with any Antivirus Update your antivirus databases (or download a trial version).

Tools and techniques to protect information from viruses

2012-11-06T22:55:00.000-08:00

     Computer viruses are called small-size program that can attach itself to other programs and perform unwanted actions to the user. The life cycle of a virus consists of: Introduction. Incubation period. Reproduction. Destruction. The signs of the emergence of the virus are: Slowing of the PC. You can not boot the OS. Freezes or crashes frequently the PC. Reducing the amount of free RAM. The destruction of the file structure.
     Classification of computer viruses on the principles of: Habitat. OS. Features of the algorithm. Destructive capabilities. Depending on the habitat viruses are divided into: boot, file, system, network, macro viruses, and their combination. Boot - the boot sector of the disk. File - embedded in file execution. System - occur in the module system. Networking - use network protocols and e-mail. Macro viruses infect documents, spreadsheets and presentations. OS - Affected OS.

     The peculiarities of the algorithm is divided into: Residential - leave in the memory-resident portion of your PC, which then hooks OS appeal to other objects. Non-resident - use special techniques to hide their presence. Invisible Man - lead to overflow of main memory. Replicator - create copies that differ from the original. Program mutants - do not infect the operating memory and are active for a limited time. By destructive actions: Harmless. Non-hazardous. Dangerous. Destructive. Anti-virus protection.
     In general, PC antivirus system includes several components: scanner with graphical interface. Scanner with a command line interface. Resident caretaker. Mail guard. Scheduler. Update module. Virus scanner checks the media for viruses, detects and neutralizes viruses in computer memory, on disk, and in the email. Resident caretaker notifies the user when it detects infection or suspicious files. Mail guard inspects incoming and outgoing e-mail. Task Scheduler allows you to automate startup programs that make up the virus scan. The Updater is designed to receive the updates antivirus databases, new versions of software components. Computer virus written specifically, small-scale program that causes disruption of the normal performance of various user programs, corruption of files, create different interference of the PC. Computer virus can disrupt the entire computer, or operation of its operating system, disrupt the individual user programs.
     Antivirus: Norton, Kaspersky, Dr. WEB The basis of most anti-virus programs on the principle of searching virus signatures. Virus signature is a unique characteristic of the virus program, which gives the presence of the virus in the computer system. Usually in the anti-virus software is regularly updated database of virus signatures. Antivirus program scans the computer system by comparing and finding compliance with the signatures in the database. When it finds a match, it tries to calculate the detected virus.
     By the method of anti-virus programs are classified as: filters, reside in memory, as a resident, and intercept all requests to the operating system to perform additional actions, ie operations used for viruses to replicate and damage information and software resources in the computer, including reformatting the hard drive. Auditors, remember the initial state programs, folders, and system areas of the disk when the computer has not been infected with the virus and then periodically compare the current state of the source. In identifying inconsistencies message about this to the user. And doctor-detected and "treat" infected programs or disks "vykusyvaya" from the body of the virus infected programs. Detectors, can detect files infected by one or more well-known software developers viruses. Vaccine, they modify the program and drive so that it does not affect the program, but the virus from which the vaccine is produced, said they have already infected and is not embedded in them, etc.

"Doctor Web" and "Megaphone" epidemic Trojan.Winlock

2012-11-06T01:25:00.002-08:00

     Russian developer of IT security "Doctor Web" and the company "MegaFon" announce the launch of a joint project of the epidemic Trojans extortionists family Trojan.Winlock, blocking Windows on users' computers. Now unlock your computer "MegaFon" is enough to send a free SMS to a special number.
     Trojan.Winlock - the family of malicious programs, extortionists, blocking or impeding work with Windows and require the transfer of money to restore the attackers PC operation by sending an SMS message to a premium-billing. The spread of such viruses Trojan.Winlock and varied, but in most cases the infection occurs through vulnerabilities in web browsers when viewing the infected sites. Trojan.Winlock disables the Task Manager does not allow the boot not only in safe mode, and load another system from another hard drive of the computer.
     Now, subscribers to the actions Trojan.Winlock unable to access the Internet from your computer, Windows will prompt to unlock your mobile phone. To get the unlock code to send to the number 5665 free SMS-message in the following format: "HHHH_YYYYYYYY" where XXXX - the number to which criminals are asked to send SMS, YYYYYY - text SMS. In response to subscribers free of charge receive the activation code unlocks Windows. When you have a phone with Internet access, you can also use the mobile site "Doctor Web" with free razblokirovschikom from Trojan.Winlock -

best Kaspersky programs to remove viruses

2012-11-05T23:27:00.001-08:00

Kaspersky WindowsUnlocker - a special utility in the image Kaspersky Rescue Disk 10 to combat software-extortionists.
   Download

______________________________________________________________

Kaspersky Virus Removal Tool - a program for treatment of an infected computer from viruses and other types of malicious programs.
   Download
______________________________________________________________

TDSSKiller - treats Rootkit. Win32.TDSS; Rootkit.Win32.Stoned.d; Rootkit.Boot.Cidox.a; Rootkit.Boot.SST.a; Rootkit.Boot.Pihar.a, b; Rootkit.Boot.Bootkor.a ;
Rootkit.Boot.MyBios.b; Rootkit.Win32.TDSS.mbr; Rootkit.Boot.Wistler.a; Rootkit.Win32.ZAccess.aml, c, e, f, g, h, i, j, k; Rootkit. Boot.SST.b; Rootkit.Boot.Fisp.a; Rootkit.Boot.Nimnul.a; Rootkit.Boot.Batan.a; Rootkit.Boot.Lapka.a; Backdoor.Win32.Trup.a, b; Backdoor. Win32.Sinowal.knf, kmy; Backdoor.Win32.Phanta.a, b; Trojan-Clicker.Win32.Wistler.a, b, c; Virus.Win32.TDSS.a, b, c, d, e; Virus. Win32.Rloader.a; Virus.Win32.Cmoser.a; Virus.Win32.Zhaba.a, b, c; Trojan-Dropper.Boot.Niwa.a.
   Download
______________________________________________________________

XoristDecryptor - treats Trojan-Ransom.Win32.Xorist
   Download
______________________________________________________________

RectorDecryptor - treats Trojan-Ransom.Win32.Rector
   Download
______________________________________________________________

KidoKiller - treats Net-Worm.Win32.Kido
   Download
______________________________________________________________

SalityKiller - treats Virus.Win32.Sality.aa, ae, ag, bh
   Download
______________________________________________________________

VirutKiller - treats Virus.Win32.Virut.ce, q
   Download
______________________________________________________________

ZbotKiller - treats Trojan-Spy.Win32.Zbot
   Download
______________________________________________________________

RadminerFlashRestorer - treats Worm.Win32.Radminer
   Download

______________________________________________________________

klwk.com - utility for the treatment of viruses:
I-Worm.Zafi.b
I-Worm.Bagle.at, au, cx-dw
Virus.Win32.Implinker.a
Not-a-virus.AdWare.Visiter
Trojan.Win32.Krotten
Email-Worm.Win32.Brontok.n
Backdoor.Win32.Allaple.a
Trojan-Spy.Win32.Goldun.mg
Email-Worm.Win32.Warezov
Virus.Win32.VB.he
IM-Worm.Win32.Sohanad.as
P2P-Worm.Win32.Malas.b
Virus.Win32.AutoRun.acw
Worm.Win32.VB.jn
Trojan.Win32.KillAV.nj
Worm.Win32.AutoRun.cby
Trojan.Win32.Agent.aec
Trojan-Downloader.Win32.Todon.an
Trojan-Downloader.Win32.Losabel.ap
Worm.Win32.AutoRun.czz, daa, dhq, dfx
Net-Worm.Win32.Rovud.a-c
Trojan.Win32.ConnectionServices.x-aa
Worm.Win32.AutoRun.dtx
Worm.Win32.AutoRun.hr
Backdoor.Win32.Agent.lad
not-a-virus: FraudTool.Win32.UltimateDefender.cm
Trojan-Downloader.Win32.Agent.wbu
Backdoor.Win32.Small.cyb
not-a-virus: FraudTool.Win32.XPSecurityCenter.c
not-a-virus: Downloader.Win32.VistaAntivirus.a
not-a-virus: FraudTool.Win32.UltimateAntivirus.an
not-a-virus: FraudTool.Win32.UltimateAntivirus.ap
Trojan-Spy.Win32.Zbot.dlh
Trojan-Downloader.Win32.Small.abpz
Rootkit.Win32.Ressdt.br
Worm.Win32.AutoRun.lsf
Worm.Win32.AutoRun.epo
Worm.Win32.AutoRun.enw
Backdoor.Win32.UltimateDefender.a
Worm.Win32.AutoRun.pwi
Worm.Win32.AutoRun.pfh
Worm.Win32.AutoRun.qhk
Worm.Win32.AutoRun.ouu
Worm.Win32.AutoRun.bnb
Worm.Win32.AutoRun.ll
AdWare.Win32.Cinmus.sxy
Trojan.Win32.Autoit.eo
Worm.Win32.AutoRun.sct
Worm.Win32.AutoRun.qkn
not-a-virus: AdWare.Win32.Cinmus.wsu
Trojan-Ransom.Win32.Taras.a, c
Trojan-Dropper.Win32.Agent.ztu
Trojan-Downloader.Win32.Agent.Apnd
Worm.Win32.Autorun.qpa
Net-Worm.Win32.Kido.j
Worm.Win32.Autorun.dcw
Trojan.Win32.Feedel.gen
Trojan.Win32.Pakes.mak
Net-Worm.Win32.Kido.r
Net-Worm.Win32.Kido.t
Worm.VBS.Autorun.cq
Worm.Win32.Pinit.ac
Worm.Win32.Pinit.ae
Worm.Win32.Pinit.af
Worm.Win32.Pinit.gen
Net-Worm.Win32.Kido.bw
Net-Worm.Win32.Kido.db
Net-Worm.Win32.Kido.fk
Net-Worm.Win32.Kido.fx
Net-Worm.Win32.Kido.fo
Net-Worm.Win32.Kido.s
Net-Worm.Win32.Kido.dh
Net-Worm.Win32.Kido.ee
Net-Worm.Win32.Kido.gh
Net-Worm.Win32.Kido.fa
Net-Worm.Win32.Kido.gy
Net-Worm.Win32.Kido.ca
Net-Worm.Win32.Kido.by
Net-Worm.Win32.Kido.if
Net-Worm.Win32.Kido.eo
Net-Worm.Win32.Kido.bx
Net-Worm.Win32.Kido.bh
Net-Worm.Win32.Kido.bg
Net-Worm.Win32.Kido.ha
Net-Worm.Win32.Kido.hr
Net-Worm.Win32.Kido.da
Net-Worm.Win32.Kido.dz
Net-Worm.Win32.Kido.cg
Net-Worm.Win32.Kido.eg
Net-Worm.Win32.Kido.eq
Net-Worm.Win32.Kido.bz
Net-Worm.Win32.Kido.do
Net-Worm.Win32.Kido.fw
Net-Worm.Win32.Kido.du
Net-Worm.Win32.Kido.cv
Net-Worm.Win32.Kido.dv
Net-Worm.Win32.Kido.dq
Net-Worm.Win32.Kido.ed
Net-Worm.Win32.Kido.em
Net-Worm.Win32.Kido.bo
Net-Worm.Win32.Kido.bk
Net-Worm.Win32.Kido.bm
Net-Worm.Win32.Kido.cs
Net-Worm.Win32.Kido.ia
Net-Worm.Win32.Kido.gg
Net-Worm.Win32.Kido.cy
Net-Worm.Win32.Kido.gb
Net-Worm.Win32.Kido.hf
Trojan.Win32.Autoit.vu
Worm.Win32.Pinit.ft
Worm.Win32.FlyStudio.bh
Worm.Win32.Bezopi.cw
   Download
______________________________________________________________

clrav.com - Utility for aftercare viruses:
I-Worm.BleBla.b
I-Worm.Navidad
I-Worm.Sircam
I-Worm.Goner
I-Worm.Klez.a, e, f, g, h
Win32.Elkern.c
I-Worm.Lentin.a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p
I-Worm.Tanatos.a, b
Worm.Win32.Opasoft.a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p
I-Worm.Avron.a, b, c, d, e
I-Worm.LovGate.a, b, c, d, e, f, g, h, i, j, k, l
I-Worm.Fizzer
I-Worm.Magold.a, b, c, d, e
Worm.Win32.Lovesan
Worm.Win32.Welchia
I-Worm.Sobig.f
I-Worm.Dumaru.a-m
Trojan.Win32.SilentLog.a-b
Backdoor.Small.d
I-Worm.Swen
Backdoor.Afcore.l-ad
I-Worm.Sober.a, c
I-Worm.Mydoom.a-b, e
I-Worm.Torvil.d
I-Worm.NetSky.b-d
TrojanDownloader.Win32.Agent.a-j, n-r
I-Worm.Bagle.a-j, n-r, z
Worm.Win32.Sasser.a-d, f
Backdoor.Agent.ac
Trojan.Win32.StartPage.fw
   Download
______________________________________________________________

KatesKiller - treats Trojan-PSW.Win32.Kates
   Download
______________________________________________________________

XpajKiller - treats Virus.Win32.Xpaj
   Download
______________________________________________________________

PMaxKiller - treats Rootkit.Win32.PMax
   Download
______________________________________________________________

KL Anti-FunLove - treats Win32.FunLove
   Download
______________________________________________________________

Anti-Nimda - treats I-Worm.Nimda
   Download
______________________________________________________________

Digita_Cure - treats Trojan-Ransom.Win32.Digitala
   Download
______________________________________________________________

CSRCS - treats Trojan-Downloader.Win32.AutoIt.fn
   Download

Removal recomndations for Backdoor.Win32.Banito.ayg

2012-11-05T22:47:00.000-08:00

     A malicious program designed for remote control over an infected computer. In terms of functionality, Backdoors are similar to many administration systems designed and distributed by software developers.
     These malicious programs can do with the computer all that the author wants: send and receive files, launch and delete them, display messages, delete data, reboot the computer, etc.
     This type of malware is often used to connect computers to the victims of the so-called "botnets", centrally controlled by hackers for malicious purposes.
     Is also a group of Backdoors which are capable of spreading via networks and infecting other computers as Net-Worms do. Distinguishes such Backdoors worms is that they do not propagate through the network automatically (as worms), but only for a special "command" that controls the malicious program.
       Technical details
     A malicious program that provides the user remote access to an infected machine. It is a Windows (PE-EXE file). Has a size of 221,184 bytes. It is written in C.
        Installation
     After starting the backdoor key looks in the following branches of the system registry:
                      [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]

In this backdoor attempt to overwrite the contents of the file, the path to which is specified as the values enumerates key contents of your original file. In this case, to counter the anti-virus signature scanners in the copy modified 4 bytes:

          At the time of writing, created copy was detected only heuristic analyzer Kaspersky Anti-Virus ("HEUR: Backdoor.Win32.Generic").

      Payload
    After starting the Trojan does the following:

to control the uniqueness of its process in the system creates a unique identifier with the name:

{A37340FD-F043-41e3-9C16-2F2632387199}

Trying to unload the system memory processes whose names contain the substring:
almon
alsvc
alusched
apvxdwin
ashdisp
ashmaisv
ashserv
ashwebsv
avcenter
avciman
avengine
avesvc
avgnt
avguard
avp
bdagent
bdmcon
caissdt
cavrid
cavtray
ccapp
ccetvm
cclaw
ccproxy
ccsetmgr
clamtray
clamwin
counter
dpasnt
drweb
firewalln
fsaw
fsguidll
fsm32
fspex
guardxkickoff
hsock
isafe
isafe
kav
kavpf
kpf4gui
kpf4ss
livesrv
mcage
mcdet
mcshi
mctsk
mcupd
mcupdm
mcvs
mcvss
mpeng
mpfag
mpfser
mpft
msascui
mscif
msco
msfw
mskage
msksr
msmps
msmsgs
mxtask
navapsvc
nip
nipsvc
njeeves
nod32krn
nod32kui
npfmsg2
npfsvice
nscsrvce
nvcoas
nvcsched
oascl
pavfnsvr
PXAgent
pxagent
pxcons
PXConsole
savadmins
savser
scfmanager
scfservice
scftray
sdhe
sndsrvc
spbbcsvc
spidernt
spiderui
spysw
sunprotect
sunserv
sunthreate
swdoct
symlcsvc
tsanti
vba32ldr
vir.exe
vrfw
vrmo
vsmon
vsserv
webproxy
webroot
winssno
wmiprv
xcommsvr
zanda
zlcli
zlh

Establishes a connection with the following host:

                                          221. *** .209

     After this backdoor team attacker can boot the infected computer malware and other executes them. Downloaded files are saved in the directory:
                                                % APPDATA% \ <rnd1> \ <rnd2>

where <rnd1>, <rnd2> - random sequence of characters.
At the time of writing, the server with the IP-address does not work.

      Removal recomendations
     If your computer was not protected by Antivirus and is infected with this malware, then to delete the following:
    1. Restart the computer in "safe mode" (at the beginning of the boot, press and hold down the «F8», then select «Safe Mode» boot menu of Windows).
    2. Check the contents of files registered in the system registry:
   [HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
   [HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
Remove copies created backdoor.
   3. Delete files:
                                  % APPDATA% \ <rnd1> \ <rnd2>

     4. Clear the directory Temporary Internet Files, which may contain infected files.
     5. Perform a full system scan with Kaspersky Antivirus Update your antivirus databases.

       Other names
Backdoor.Win32.Banito.ayg («Kaspersky Lab") is also known as:
    Trojan: Generic BackDoor! Cup (McAfee)
    Mal / Generic-L (Sophos)
    W32/OnlineGames.F.gen! Eldorado (FPROT)
    TrojanDownloader: Win32/Unruy.I (MS (OneCare))
    Win32/Agent.OCR trojan (Nod32)
    Gen: Variant.Unruy.5 (BitDef7)
    Trojan.DL.Unruy! Pyou0VCWMo4 (VirusBuster)
    Win32: Malware-gen (AVAST)
    Trojan-Downloader.Win32.Unruy (Ikarus)
    TR/Agent.221184.BZ (AVIRA)
    W32.Unruy.A (NAV)
    W32/Obfuscated.FA (Norman)
    Backdoor.Win32.Gpigeon2010.yf (Rising)
    Backdoor.Win32.Banito.ayg [AVP] (FSecure)
    Trojan.Win32.OnlineGames (Sunbelt)
    Trojan.DL.Unruy! Pyou0VCWMo4 (VirusBusterBeta)

Hackers have posted the source code on theNorton Antivirus

2012-10-29T00:18:00.000-07:00

Symantec has for several days been negotiating with the hackers to avoid getting source PCAnywhere and Norton Antivirus in the Network. According to the source, the hacker under the alias Yamatough, posing as one of the activists of Anonymous, require developers the amount of $ 50,000. Responsible for the talks was the alleged employee Symantec Sam Thomas (Sam Thomas), in another version - an FBI agent. Early communication company agreed to comply with the hacker, but has put forward its own terms: "We'll pay you $ 50,000. But we must be sure that after the payment you publish the code. We will pay $ 2,500 per month for the first three months, starting next week. After this time you will have to convince us that the code is destroyed, and only then we will pay you the balance. We hope that the deal is fair. " Symantec representative confirmed that, during the negotiations on the part of the hacker was the obvious extortion: "In January, a group of hackers calling themselves part of an international network of Anonymous, trying to get money from Symantec, in exchange for the public offering of the stolen code, which, according to their statement were available to criminals. The company conducted an internal investigation into the incident and contacted the police, report the facts of extortion and theft of intellectual property. Relationship with a person who was trying to get money from Symantec, was part of the FBI investigation. "
However, after several weeks of discussions on the evidence of the code and the transfer of money, negotiations failed and the transaction was not completed. In response, the hackers posted on Twitter about the fact that soon codes appear in Symantec Network. The company decided not to tempt fate and invited hackers as a sign of good will transfer $ 1,000 through PayPal, but Yamatough refused, saying that he agreed only on the amount specified in the ultimatum. The company did not immediately respond to this comment and patience hacker snapped: "Since the code we have not yet published, and our e-mails had not been traced, we give you 10 minutes to make the final decision. If we do not get a response, we perceive it as a rejection of the deal. " Symantec tried to tell the hacker that the company needed a little time to determine the solution, but the actions Yamatough not long in coming: February 6, at 21:15 file named "Symantec's pcAnywhere Leaked Source Code", weighing 1.2 GB was posted on the Pirate Bay.

European Parliament voted against the ratification of anti-piracy agreement ACTA

2012-10-28T23:34:00.001-07:00

     The European Parliament in Strasbourg voted against ratification of anti-piracy agreement ACTA toughens penalties for copyright infringement.     International agreement ACTA (The Anti-Counterfeiting Trade Agreement) provides for the establishment of the international association, which is a complex hierarchical system of enforcement of copyright in the developed countries.
     In 2008, the European Commission, the U.S., Australia and the Government of a number of other countries have confirmed their participation in the preparation of ACTA, however, refused to publish the text of the preliminary contract and to discuss details.
     October 5, 2011 ACTA signed the U.S., Australia, Canada, Japan, Morocco, New Zealand, Singapore and South Korea. January 6, 2012 to the Agreement of the European Union, but it has yet to be ratified by member countries. The European Commission, which is the highest executive authority of the EU, however, asked the supreme court to assess compliance of union agreements other obligations of the EU, in particular, the European Charter of Fundamental Rights.
     Up to an opinion by the court ACTA ratification by the parliaments of the EU countries have signed it was suspended. That the agreement came into force in the EU, it should ratify the European Parliament and all States signatories. After this agreement was to give final approval to the EU Council.     Meanwhile, a number of member countries postponed the ratification of the agreement in the face of a wave of civil protests in the streets, as well as to the increasing cyber-attacks on websites of government agencies.

     In February, a protest against the treaty took place in Germany, Austria, Finland, France, Slovakia and Bulgaria. ACTA opponents agree that the program is an integral part of the process of globalization, and the bulk of the profits from its adoption will have major international corporations. At the time of ratification of the agreement delayed in Poland, the Czech Republic, Slovakia and Germany.
     In the event that ACTA will allow, for example, customs officials inspect laptops, MP3-players and cell phones for storing files they related to the violation of the copyright law. It also assumes the introduction of new requirements for Internet service providers, which include partial disclosure of information related to user activity, and tool use network security.
      Currently, similar measures have been adopted in the U.S., where the customs may ask you to provide your laptop to see specialists. If your hard drive is encrypted, you are prompted for a password. If you refuse - you can refuse entry.

Removal and treatment of computer viruses on your computer and laptop

2012-10-24T06:09:00.004-07:00

     Hang, crash programs, incomprehensible excess traffic, other oddities in the computer or laptop say that most likely, it's infected by some kind of virus.
     If a computer virus does not prevent to live many people do not pay attention to him. And absolutely for nothing - many viruses are waiting for an opportunity to play a prank on the full program - the theft of accounts, with the removal of information and so on. And, suddenly, without any professional assistance is necessary.
     The specialists of our service center to clean your computer from viruses in Kiev at home. In addition, we install antivirus software and protects your system.
     We have all the right in such cases, a professional software - is antivirus software, special tools and anti-rootkits, but the important thing is that we have - it's a wealth of experience in the treatment and removal of all viruses in the administration systems of any complexity. With that we come to you and diagnose the status of the computer, let's deal with any problem.
Our advantages are:
• highly qualified professionals with rich, unique experience with computers;
• We quickly come to your home or office and immediate way remove a computer virus;
• working with personal computers and local networks of all sizes.

     If you use a good Antivirus - it does not mean that no malicious programs not fit into your computer. There is always a risk of self-download and install the virus under the guise of a useful program, even downloading it from known resources.
     Therefore, to avoid contamination, is not only to establish a powerful antivirus and firewall, but also comply with the following rules: do not visit questionable resources, upload suspicious files. Remember - in most cases the infection is to blame the user.
     By calling our master, be sure - it will eliminate any effects negligence and clean your computer from viruses. We can even remove virus-extortionist, if Windows is locked for viewing porn. Also scan your entire hard drive, we will remove all hidden viruses, relieve you of trojan or worm and spyware.
     If you need to urgently remove a computer virus in Kiev - hurry dial telephone (097) 415-67-50 - and know that the master is on the way.
     In addition to removing viruses, we provide all computer services in Kiev - both on the software (installation, reinstallation, delete), and hardware - repair and upgrading computers and laptops. Also, if the actions of viruses in data loss - we will return information.
     Work in all areas of Kiev - Akademgorodok, squirrel, growers, Darnitsa, Limes, Otradny, Poznyak, rainbow, raw, Troyeshchyna, Kharkov and other, as well as in the suburbs of Kiev - Toompea, Boryspil Bucha, Brovary Irpen, cherry

What is a computer virus and who is the author?

2012-10-15T05:52:00.001-07:00

     Computer virus - a malicious code or computer program. The virus also can perform arbitrary actions without the user, and the harm to the user or computer.
     Even if the creator of the virus did not program malicious action, the virus can lead to computer crashes due to errors. Viruses can occupy a certain place in the storage, hard drives and removable storage devices, selects some system resources. Therefore, the virus belongs to malware.
     Often, inexperienced users are subject to computer viruses other malware: spyware, etc. To date, thousands of known viruses, which are spread throughout the world via the Internet.
     Diffusion and creation of computer viruses, in Russia, is pursued by the Criminal Code. Under the doctrine of the information media in Russia are held legal scientists in ways in schools, colleges and universities for the Protection of computer information, combating destkoy information and computer viruses.
   Computer virus appeared, thanks to the idea of the American Programmer Bob Thomas, who at the end of the 70-xx's. devised a program data between two networked computers - "Slider". The program was developed for air traffic control and had to pass the current data on the status of an aircraft in the airspace between computers network connection.
     Thomas created a program to copy itself from one machine to another, and moved across the network, a message: "Catch me if you can! ". "Slider" moves between network nodes and entertained system administrators and users - so little program got its fame and history - continued.
   Bob Thomas has revived the idea of the novel science fiction writer John Brunner. The basis of the work, which became a best seller, has laid down a modified history with the program "slider", with which the novel's hero fought against dictatorship and tyranny of the government. A similar program, "Worm", "travel" through a computer network, destroying the information.     With this novel, Hepp and Shock - employees of Xerox, which published the PC can be connected to a local network, decided to write a program like "worms" and named after the hero of the novel Brunner - "worm." By design, the program has a "worm" was a positive mission - moving from the network and check the network operating system PC for hidden defects and eliminating them.    However, it happened just the opposite - after the pilot run of the program, all of the company's computers were found in the morning, "hovering" state. This happened because of a minor error, which played a role in the uncontrolled proliferation of "worms" and block the work of the center. Happy Shock and had to sit down to work on a program-destroyer.     Thus began the emergence of an "era of computer viruses", which now have their wide distribution

Which free antivirus is better to choose

2012-10-12T02:53:00.000-07:00

     Today, no one doubts, than we need to use antivirus programs. The number of known viruses are millions and they're growing daily. Hackers gain equals narco-traffickers income. Antivirus comparable to the cost of the armed forces of a small country and any reasonable person question whether you can save money on security, more precisely - how best protect your computer and its data, spending minimal money.
     Now, not a lot of the bad news. None of the most expensive and even with the latest updates can't protect you computer in 100%. Experience shows that most rarely cling viruses safe and considerate people to observe basic safety principles, which do not visit suspicious sites and do not download suspicious files. Some antivirus software can prevent users from doing this, but they are too paranoid and many sites will simply not open to you. Therefore, all the same, the best and most in control, but of course will need more and reliable assistants.
     If you use your computer for business purposes, in the office or in the shop, you'll need the licensed version of the antivirus. If your office has a lot of computers and a system administrators, I recommend the use of special, corporate version of antivirus software. On licensed and corporate antivirus software, I will write in other articles, and in this case I want to tell you about using free Antivirus Software.
     Free anti-virus, as I said, are for private (home) use. In this case, it is not reduced, limited-time version, and a full-fledged antivirus sufficient for most users. In its primary function - detection and removal of viruses, they are not inferior paid anti-virus in the same class. The main advantages are the absence of a paid version of the daily advertising and the availability of technical support during the installation of anti-virus protection and removal of viruses. Again, paid antivirus programs have extended functionality that might be useful to you.

There are the most common free antivirus in the world:

      - Avira AntiVir Personal Edition. Excellent, reliable antivirus with daily updates, not demanding of computer resources. Avira better than many other antivirus programs detect viruses and rootkits, so we set up a new computer it up. There is at this antivirus and disadvantages. This anti-spyware and antivirus is not built the email client.

     - Avast! Free Antivirus. The most popular free antivirus software in the world. Provides additional functions, is not demanding of computer resources. The new version of this antivirus contains functions that can not boast of most paid antivirus. Avast has all modules included in the free version.

      - AVG Anti-Virus Free Edition. Also quite popular antivirus containing additional modules. In addition to its anti-virus, the package contains anti-spyware module, a control system for phishing and scanner eMail. The paid version, in addition to anti-virus software provides configuration and accelerate Windows, parental controls and others.

     - Microsoft Security Essentials. If you are the proud owner of a licensed copy of windows, you can use a free antivirus from Microsoft. It is very simple to use, but refuses to work on computers with licensed operating system transmits more viruses than other antivirus programs, in addition, he was the most vulnerable of all the vendors. Many malicious viruses eat it at times.

    - Panda Cloud Antivirus - the first free, "cloud" anti-virus, whose work is based on the principle of the protection of "the cloud" in real time. Its advantages are a very compact size, not demanding, up to date anti-virus database and advanced heuristic technologies. The main disadvantage - does not work in the absence of the Internet or low speed.

     At the end of this article I want to remind the ground rules:
Download antivirus manufacturer's website.
Do not mix two or more anti-virus, your computer just can not work effectively.
     If you switch from one to the other anti-virus, make sure to completely remove the first, and sometimes it requires special tools.
     Do not use pirated versions of paid anti-virus, they may contain viruses, in addition to the sites which they apply may not be safe.
     In addition to anti-virus, you may need additional applets and protection modules. So, we usually set the program to check and block the spread of viruses through the stick and the Anti-Banner for major browsers.

Effective protection is not always expensive!

Installed a second antivirus and computer hung?

2012-09-25T03:00:00.000-07:00

It so happened that you are inexperienced installed on your computer two antivirus and now your Computer literacy freezes, you can not start the program and remove one of the antivirus software also does not work? In this case, proceed as follows:

Starting up in Safe Mode (press F8 before loading Windows, wait until the boot menu appears, select Safe Mode)
At this stage, you can try to remove one of the antivirus programs through Add or Remove Programs in Control Panel and in this case will be finished, and you can restart the computer in normal mode. But not all anti-virus software can remove so that as many of them installed and removed using packages msi, work with that in safe mode is not supported by Windows. In this case, proceed to the next step.
Open the folder "C: \ Program files" and find there a folder with a antivirus. For example, it may be a folder Eset, DrWeb, Avast, Kaspersky, Symantec, Panda, etc. In general we find the folder with the antivirus software that you have installed, and rename the folders to add to the folder name, such as an underscore. That is Eset rename to _Eset, DrWeb rename to _DrWeb etc. It is necessary to reboot in normal mode antivirus could not boot normally. Some antivirus programs do not allow to rename their directories, changing the NTFS permissions set appropriately. In this case, rename at least one of the folders.
Restarting the computer in normal mode. Antivirus programs do not work, how to change the path to the files. Rename the folder to the original name of antivirus, that is, remove the underscore. For example, _Eset will again Eset, and will again be _DrWeb DrWeb etc.
Do not restart your computer go to the Control Panel-> Add or Remove Programs and remove it one of the anti-virus, leaving only one to work with.
Reboot your computer and voila, it works!

About antivirus software and how do they work

2012-09-25T02:43:00.002-07:00

     Today, in the digital era, the most topical problem is information and system protection. For many, it is no stranger to the fact that computer technology makes it possible for a malicious file to someone else's private life information, Manage other people's computer, and Steal info or even money, so the question naturally arises - how to protect yourself?

     In his defense may be different, this is just a means to turn off the computer, disconnect internet and check every suspicious file, but today it is the most popular to use antivirus software.

     This article is to understand what is and what types of viruses are divided into the computer, which antivirus is better in the given situation and the rules how to protect our computer - to minimize the risks.

     Antivirus has two action principle. These are:

       Virus detection, based on the database - all Antivirus Company has back several laboratory and human experts. These people 24 hours analyze the new viruses, they make up the "fingerprint" and placed them on their server, and user's machine downloads by installed software (antivirus software Update) using the internet.
     Evristican detect viruses (proactive) method, based on user experience - tere are situations, until a new virus "fingerprint" have been downloaded on antivirus database, up until a new virus attack system. In this case, virus scan method based on the antivirus database is powerless, but it will not be exposed up to the end - there is a second method, which is called Evristican. All of the program's actions are analyzed in real-time and blocks suspicious programs. So, having a good Antivirus software, up to 95% of cases - user is protected in any way.

     Anti-Virus, in turn, is determined by a number of categories:

    Antivirus - virus prevention program
    Antivirus + FireWall - virus prevention program, and traffic controls

      Full Protection Packages - 2nd category there're added many needless features, including prevention of spam, parental control, data backup, system optimization, and other modules.