KAV and msblast

  • Thread starter Thread starter Daniel CLEMENT
  • Start date Start date
D

Daniel CLEMENT

From Kaspersky web site:

"Users of Kaspersky® Anti-Virus can be sure that this new worm will not harm
to their computers. All Kaspersky Labs products effectively detect both
modifications of "Lovesan", without requiring an update"

Hence, no removal tool, no instructions -- only technical details.

The only problem is that KAV doesn't block msblast at all.

Has it been (could it be) blocked by other AV software?

TIA,
 
Daniel said:
From Kaspersky web site:

"Users of Kaspersky® Anti-Virus can be sure that this new worm will not harm
to their computers. All Kaspersky Labs products effectively detect both
modifications of "Lovesan", without requiring an update"

Hence, no removal tool, no instructions -- only technical details.

The only problem is that KAV doesn't block msblast at all.

Has it been (could it be) blocked by other AV software?
Click to expand...

i think you may have a wrong-headed understanding of what "block"
means... msblast shouldn't run if you've got kav's on-access scanner
running, but there's little a scanner can do to prevent it from being
downloaded to your local machine...
 
Maybe KAV prevented some of blaster's effects. E.g. I didn't have unattended
restarts. But I had svchost error message and Internet connection troubles.

Yet, I'd have appreciated KAV just to warn that sth. was wrong, once the
worm in place. A complete scan reported nothing at all.

Have users of other (maybe better) AV software had better luck?

--

Daniel CLEMENT


kurt wismer said:
Daniel said:
From Kaspersky web site:

"Users of Kaspersky® Anti-Virus can be sure that this new worm will not harm
to their computers. All Kaspersky Labs products effectively detect both
modifications of "Lovesan", without requiring an update"

Hence, no removal tool, no instructions -- only technical details.

The only problem is that KAV doesn't block msblast at all.

Has it been (could it be) blocked by other AV software?
Click to expand...

i think you may have a wrong-headed understanding of what "block"
means... msblast shouldn't run if you've got kav's on-access scanner
running, but there's little a scanner can do to prevent it from being
downloaded to your local machine...
[...]
Click to expand...
 
Daniel said:
Maybe KAV prevented some of blaster's effects. E.g. I didn't have unattended
restarts. But I had svchost error message and Internet connection troubles.

Yet, I'd have appreciated KAV just to warn that sth. was wrong, once the
worm in place. A complete scan reported nothing at all.

Have users of other (maybe better) AV software had better luck?
Click to expand...

if a full scan did not detect blaster then there are some possiblities...

1) this event occurred before kaspersky labs put out defs that included
msblaster (ie. it was too new at the time)...
2) you weren't completely up to date....
3) there's something wrong with your installation and it isn't
detecting things when it should - you might want to try verifying the
sanity of your installation with the eicar standard anti-virus test
file (http://www.eicar.org/anti_virus_test_file.htm)...
4) there's a bug in kav...
 
Back
Top