Anti-Rootkit or any other essentials?

[clanderson]

Hey, I got this new laptop and I've got AVG Free and Malwarebytes Pro installed on it as the only two security programs.

Is there anything else I should get? Maybe an anti rootkit? I just downloaded TDSSKiller but I have no idea what is best. Any educated suggestions are very welcome!

Thank you,

Clay

[daledoc1]

Hi, clanderson:

Welcome to MBAM forum.

I'm just a home user, so I expect the more expert folks will have some additional recommendations for you (such as a software or hardware firewall).

Many of the more robust AVs today offer at least some protection against rootkits -- for example, I use KIS, and it includes rootkit scanning.

I know that several folks here use AVG with MBAM PRO, but I'm not familiar with its protection features.

As for TDSSKiller, I could be wrong, but I understand that to be an on-demand rootkit removal tool, NOT any sort of real-time protection software or something that you'd routinely install or run on your system.

You may find some of the following links to be helpful for setting up your computer's security protection:

How Did I Get Infected: http://forums.malwar...?showtopic=9365

MS Safety/Security Center: http://www.microsoft...ty/default.aspx

Bleeping Computer: http://www.bleepingc...opic407147.html

Forum mod Miekiemoes' tips: http://users.telenet...prevention.html

HTH,

daledoc1

[Maurice Naggar]

Hello,

TDSSKILLER should only be used under guidance by an expert (trained) helper. It was never intended as a general-computer-user app.

As a sidebar, IF this laptop had McAfee or Norton Symantec edition of any sort, you should insure to de-install that pronto, since you have AVG 2012.

The suggestion is for you to follow a layered defense and also observe safe "clicking" / "surfing" / "viewing" / "downloading" + keep all your utility apps always, but always up-to-date.

• Configure your Antivirus software to check for updates daily, at a time in which you are sure the computer will be on.
  
• Check in at Windows Update and install any Critical Updates offered.
  
• Make certain that Automatic Updates is enabled.
  How to configure and use Automatic Updates in Windows
  http://support.microsoft.com/kb/306525
  
• Check on other update issues as well, visit Secunia Online Software Inspector (OSI)
  See How to detect vulnerable and out-dated programs using Secunia Personal Software Inspector
  
• Download, install, and keep updated Spyware Blaster (free): http://www.javacoolsoftware.com/spywareblaster.html (all Protections should be enabled at all times)
  
• I'd recommend that you get and use MVP Mike Burgess' custom hosts file http://mvps.org/winhelp2002/hosts.htm
  See the FAQ page http://mvps.org/winhelp2002/hostsfaq.htm
  That would help to keep your browser away from known spyware/malware sites.
  
• Consider using Web of Trust WOT add-on for your browser(s)
  http://www.mywot.com/en/download
  http://www.mywot.com/en/faq/add-on
  
• Make regular backups of your system to removable media: DVD, USB external hard drive, etc.
  Having a total image backup of your system stored on DVD/CD is highly important.
  Get and make use of imaging-backup utilities and save them to offline media. That way you have something to fall back to if another disaster hits.
  Examples of image backup software: Acronis True Image, or the free (for personal use) Macrium Reflect http://www.macrium.com/reflectfree.asp
  or Paragon Backup & Recovery http://www.paragon-software.com/home/br-free/download.html
  On some regular schedule, it is a good idea to do an online scan for viruses and malware. Here is a very short list of sites where this may be done:
  ESET Online Scanner
  Panda ActiveScan
  Trend Micro Housecall
  F-Secure Online Scanner
  
• See Six tips to help you stay safer online
  
• Never, ever download free games, free tools, videos, mutli-media files or anything free unless you can be absolutely sure the source is safe !
  

[daledoc1]

Thanks, Maurice Naggar!

(I knew I'd seen you post something like this for OPs in the HJT section, but I didn't have a good link. It contains a ton of helpful info. Perhaps this could be a sticky topic pinned somewhere?)

daledoc1

PS If you need to remove McAfee, here's the link to their removal tool: http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS101331. You may need to run it more than once, rebooting each time. (Offered as a McAfee survivor... )

[Maurice Naggar]

P.S.S. Have a harware router between your incoming-internet connection and your pc (and network). { Thanks Daledoc1 for reminder).

Also, for safety, I'm sure you got Windows 7 ---->> make sure you make a Windows 7 Repair disc and keep it in a safe place.

see http://windows.microsoft.com/en-US/windows7/Create-a-system-repair-disc

this along with offline mirror-image-backups will save your investment and data should there be a catsatrophe.

{see above for examples)

[clanderson]

Right on. Thanks guys. I use Opera, and as far as I know, it's quite a bit more secure than IE and Firefox. The Spyware Blaster won't work since Opera isn't supported, and I'm not sure about the hosts. But thank you very much for prompt and very informative responses!

[clanderson]

Oh - and it's an Asus K53E laptop from xoticpc.com - I had a clean install, so there was no bloatware/free trial junk. I know AVG/Malwarebytes don't get along with some other antivirus programs

[daledoc1]

You're welcome!

Since this is a laptop, I expect you'll be taking it with you to school or work or other places away from home? In that case, perhaps a software firewall might be a good idea?

(FWIW I'm not sure about Opera's being more secure than Firefox -- Firefox has a number of really excellent security extensions (WOT, Better Privacy, NoScript, AdBlock Plus, etc) that make it quite secure, especially if one follow's Maurice's advice about safe surfing .)

Cheers,

daledoc1