Comments on: Internet Security 2010 Rogue, Winlogon2.exe and Other Fun Things for this Week… http://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/ Antivirus Reviews For 2011 / 2012, Tools and How To's Thu, 17 May 2012 16:32:00 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Tweakhttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5790 Tweak Thu, 25 Feb 2010 00:35:24 +0000 http://remove-malware.com/?p=1985#comment-5790 @ Dan, use a bootable repair disc such as UBCD4Win and load the registry hives with whatever app (there are several that allow for this) you have on your bootable disc that allows offline registry editing and you can change the settings mentioned above by Matt. I often find myself using pretty much the same methods he described above but go a bit further with a Dr Web and SAS portable scan and still prefer Avira in most cases due to both reviews and personally seeing it detect more than most other options. hope this helps. For s step by step check this out Dan. http://windowsxp.mvps.org/peboot.htm @ Dan, use a bootable repair disc such as UBCD4Win and load the registry hives with whatever app (there are several that allow for this) you have on your bootable disc that allows offline registry editing and you can change the settings mentioned above by Matt. I often find myself using pretty much the same methods he described above but go a bit further with a Dr Web and SAS portable scan and still prefer Avira in most cases due to both reviews and personally seeing it detect more than most other options. hope this helps. For s step by step check this out Dan. http://windowsxp.mvps.org/peboot.htm

]]> By: Woodrowhttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5565 Woodrow Tue, 02 Feb 2010 08:41:34 +0000 http://remove-malware.com/?p=1985#comment-5565 FYI! Test with rouges over at: http://malwareresearchgroup.com/?page_id=2 FYI!
Test with rouges over at: http://malwareresearchgroup.com/?page_id=2

]]> By: Christoshttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5558 Christos Fri, 29 Jan 2010 19:32:04 +0000 http://remove-malware.com/?p=1985#comment-5558 What antivirus did your client have on his computer? What antivirus did your client have on his computer?

]]> By: ssj100http://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5557 ssj100 Fri, 29 Jan 2010 08:25:02 +0000 http://remove-malware.com/?p=1985#comment-5557 It's not bad. It's just completely off topic to be suddenly talking about Wilders members being "freaks".And sure, some people don't run ANYTHING at all (not even an Antivirus) and run as ADMINISTRATOR. I know one Wilders malware analyst that only uses the Opera browser as his "security setup". And I bet he never ever gets infected, simply because he has good common sense etc.However, I often purposefully play with malware and visit sites that may contain drive by malicious attacks. Why do I do that? Well, simply because I have the supreme confidence of Sandboxie + LUA + SRP + Hardware DEP - I just can't seem to get infected. I even asked on Wilders for people to PM me malware samples that can bypass my setup. None succeeded.That's a good thing, and thus gives me the confidence of doing anything I want with little fear of getting attacked. It’s not bad. It’s just completely off topic to be suddenly talking about Wilders members being “freaks”.

And sure, some people don’t run ANYTHING at all (not even an Antivirus) and run as ADMINISTRATOR. I know one Wilders malware analyst that only uses the Opera browser as his “security setup”. And I bet he never ever gets infected, simply because he has good common sense etc.

However, I often purposefully play with malware and visit sites that may contain drive by malicious attacks. Why do I do that? Well, simply because I have the supreme confidence of Sandboxie + LUA + SRP + Hardware DEP – I just can’t seem to get infected. I even asked on Wilders for people to PM me malware samples that can bypass my setup. None succeeded.

That’s a good thing, and thus gives me the confidence of doing anything I want with little fear of getting attacked.

]]> By: Carloshttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5554 Carlos Fri, 29 Jan 2010 07:44:50 +0000 http://remove-malware.com/?p=1985#comment-5554 SSJ100,For your information: I do not use Sandboxie as an everyday software. I tried it to catch some malware (specially Fake AVs) so they could not intereact with my system while being accessed/downloaded. I removed it afterwards. I also remember I wrote that SBIE 3.42 has some bugs that may need to be addressed by its creator. The reason behind me not posting this info over at SBIE forums is because I'm not actively using SBIE on everyday basis. I just wanted to experiment with it and I'm done.By the way, I also wrote here that I'm running Windows 7 Professional 32-bit with UAC enabled. The only security applications on my computer are: ESET NOD32 4.0.474, Windows Defender (it comes with the operating system so I didn't install it), Ad Muncher PAID version (basically, I use it to block those annoying banners on IE8 that otherwise take up much bandwidth and, sometimes redirect you to Fake AVs domains), Windows Firewall (comes default on this OS), McAfee Site Advisor FREE version, Firefox 3.6 with NoScript and...a hardware router SPI for my laptops at home. Is all this being paranoid or having too many applications on my PC?I repeat: I'm running as ADMINISTRATOR right now on my Win 7 box and with that security setup, and I haven't been infected (knock on wood) neither before nor now.I talk about Wilders because over there you probably know that there are a bunch of security freaks that change their security configurations like changing underwear.Comparing house alarm/car alarms to having dozens of security programs on your PC is comparing apples to oranges in my opinion.Lastly, if I mentioned Wilders in my previous posts is because I know you from there. Is that bad? SSJ100,

For your information: I do not use Sandboxie as an everyday software. I tried it to catch some malware (specially Fake AVs) so they could not intereact with my system while being accessed/downloaded. I removed it afterwards. I also remember I wrote that SBIE 3.42 has some bugs that may need to be addressed by its creator. The reason behind me not posting this info over at SBIE forums is because I’m not actively using SBIE on everyday basis. I just wanted to experiment with it and I’m done.

By the way, I also wrote here that I’m running Windows 7 Professional 32-bit with UAC enabled. The only security applications on my computer are: ESET NOD32 4.0.474, Windows Defender (it comes with the operating system so I didn’t install it), Ad Muncher PAID version (basically, I use it to block those annoying banners on IE8 that otherwise take up much bandwidth and, sometimes redirect you to Fake AVs domains), Windows Firewall (comes default on this OS), McAfee Site Advisor FREE version, Firefox 3.6 with NoScript and…a hardware router SPI for my laptops at home. Is all this being paranoid or having too many applications on my PC?

I repeat: I’m running as ADMINISTRATOR right now on my Win 7 box and with that security setup, and I haven’t been infected (knock on wood) neither before nor now.

I talk about Wilders because over there you probably know that there are a bunch of security freaks that change their security configurations like changing underwear.

Comparing house alarm/car alarms to having dozens of security programs on your PC is comparing apples to oranges in my opinion.

Lastly, if I mentioned Wilders in my previous posts is because I know you from there. Is that bad?

]]> By: ssj100http://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5553 ssj100 Fri, 29 Jan 2010 05:37:53 +0000 http://remove-malware.com/?p=1985#comment-5553 Actually Carlos, I really don't understand your reply there and consequently we've gone completely off topic. This was my post:"The best form of defense against rogues will always be user education. Unfortunately (or fortunately for Matt), not everyone will receive this education for various reasons."Why are you suddenly talking about Wilders? Actually Carlos, I really don’t understand your reply there and consequently we’ve gone completely off topic. This was my post:

“The best form of defense against rogues will always be user education. Unfortunately (or fortunately for Matt), not everyone will receive this education for various reasons.”

Why are you suddenly talking about Wilders?

]]> By: ssj100http://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5552 ssj100 Fri, 29 Jan 2010 05:35:13 +0000 http://remove-malware.com/?p=1985#comment-5552 I haven't changed my security setup for nearly 6 months (except for removing Comodo Firewall). I also ran with no security software for years and also as administrator, and I never got infected.So why do I run as LUA with SRP enabled and why do I use Sandboxie?Well, why do you have a house alarm installed? Why would you have a car alarm? Why do you put your money in a bank?It's called "peace of mind".Also Carlos, the only third party security software I'm running actively at the moment is Sandboxie. That's one security program. How many are you running?And I agree, the Wilders forum is getting worse and worse. They have nothing better to do than to test out new security software and change their setups daily.As I said, rather than promoting Antivirus A or Antivirus B or Firewall C or Firewall D, we should all be promoting LUA/SUA + SRP/Applocker. But then that's my opinion. I haven’t changed my security setup for nearly 6 months (except for removing Comodo Firewall). I also ran with no security software for years and also as administrator, and I never got infected.

So why do I run as LUA with SRP enabled and why do I use Sandboxie?

Well, why do you have a house alarm installed? Why would you have a car alarm? Why do you put your money in a bank?

It’s called “peace of mind”.

Also Carlos, the only third party security software I’m running actively at the moment is Sandboxie. That’s one security program. How many are you running?

And I agree, the Wilders forum is getting worse and worse. They have nothing better to do than to test out new security software and change their setups daily.

As I said, rather than promoting Antivirus A or Antivirus B or Firewall C or Firewall D, we should all be promoting LUA/SUA + SRP/Applocker. But then that’s my opinion.

]]> By: JimBobhttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5550 JimBob Thu, 28 Jan 2010 23:41:34 +0000 http://remove-malware.com/?p=1985#comment-5550 Matt,So, how do you do your remote repairs with infections like that? I don't see how that's possible over the net. What software do you use? Do you use Teamviewer? Matt,

So, how do you do your remote repairs with infections like that? I don’t see how that’s possible over the net. What software do you use? Do you use Teamviewer?

]]> By: Dieselmanhttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5548 Dieselman Thu, 28 Jan 2010 18:08:37 +0000 http://remove-malware.com/?p=1985#comment-5548 LOL. Good one Carlos. Like I said Wilders people are paranoid security freaks. LOL. Good one Carlos. Like I said Wilders people are paranoid security freaks.

]]> By: Carloshttp://remove-malware.com/antimalware/anti-malware-howto/internet-security-2010-rogue-winlogon2-exe-and-other-fun-things-for-this-week/#comment-5546 Carlos Thu, 28 Jan 2010 16:25:02 +0000 http://remove-malware.com/?p=1985#comment-5546 Dear SSJ100,I know you from Wilders forums and from what I have learned you change security configurations more often than changing shirts.May I ask why? What are you afraid of?I might not be a computer savvy like probably you are but I have been running as Administrator since the days of Windows NT 4.0 and...listen to this, I have NEVER got infected by any virus, trojan or else. I used Win 2000, XP, Vista, and now 7 and I haven't been hit by a virus and that's without taking all the measures you take or installing all the bunch of software you have installed. How do you explain this? Dear SSJ100,

I know you from Wilders forums and from what I have learned you change security configurations more often than changing shirts.

May I ask why? What are you afraid of?

I might not be a computer savvy like probably you are but I have been running as Administrator since the days of Windows NT 4.0 and…listen to this, I have NEVER got infected by any virus, trojan or else. I used Win 2000, XP, Vista, and now 7 and I haven’t been hit by a virus and that’s without taking all the measures you take or installing all the bunch of software you have installed. How do you explain this?

]]>