SSD-inc
https://ssd-incorporated.com/forums/

Windows Defender Offline
https://ssd-incorporated.com/forums/viewtopic.php?f=23&t=5023
Page 1 of 1

Author:  Poundsey [ 13 Dec 2011 11:46 ]
Post subject:  Windows Defender Offline

I've used pretty much every anti-virus/anti-malware product on the market over the years and although they all have their different strengths and weaknesses they all have one common vulnerability - rootkit detection. How can you be sure that your av software has really cleaned your PC when the host operating system has been compromised at the lowest possible level? You can't. Even the mighty ComboFix and GMER (Google it noob) have failed to clean some rootkits that I've come across, leaving me to fart around with re-writing boot sectors and other manual grief that I can't be bothered with. A few people make offline scanners (McAfee, Symantec etc) but they generally need you to mess about creating a boot environment (using Windows PE or some such).

Came across Windows Defender Offline yesterday and have tried it on a few test machines that I had infected with various nasties. Looks like a great piece of software and will now be one of the primary tools in my arsenal against malware.

Here's the link, in Beta at the moment and comes in x32 and x64 flavours (dependant upon the version of Windows installed not your hardware), can be burned to CD or you can make a bootable USB stick (which is updateable via the setup software) straight from the downloader. Very easy to use and quick.

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

:ugeek:

Author:  towelie [ 13 Dec 2011 15:52 ]
Post subject:  Re: Windows Defender Offline

u sound like a salesman :P

Author:  Poundsey [ 13 Dec 2011 16:06 ]
Post subject:  Re: Windows Defender Offline

lol!

By the way, for scanning and cleaning machines I use the following:

Super Anti Spyware - http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
MalwareBytes - http://www.malwarebytes.org/products/malwarebytes_free
McAfee Viruscan Enterprise - Yeah I cheat, got a corporate account for that one :p
COMBOFix - Can seriously mess your machine!! http://www.bleepingcomputer.com/combofix/
GMER - http://www.gmer.net/
RootkitRevealer - For Windows XP and 2003, Vista and Win7 not supported - http://technet.microsoft.com/en-us/sysinternals/bb897445
Autoruns - http://technet.microsoft.com/en-us/sysinternals/bb963902
HijackThis - http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
Windows Defender Offline - Link above

And as an aside, I use AVAST not AVG for people who want free anti virus. Security Essentials doesn't quite cut it yet.

Author:  towelie [ 13 Dec 2011 16:12 ]
Post subject:  Re: Windows Defender Offline

I dont use that much,
avira and MWbytes for "daily use",
I use bitdefender online when I have to, havnt had any issue for long on my computer, last i had to brainstorm was for a colleague with a notebook but still succeded :)

Author:  Poundsey [ 13 Dec 2011 16:17 ]
Post subject:  Re: Windows Defender Offline

I tend to use varying combinations of those tools dependant upon how badly compromised the machine is.
Super Anti Spyware is quite good as it includes some fixes for damage that is commonly caused by malware, such as winsock errors. Can save quite a few headaches.

Author:  bob [ 13 Dec 2011 17:38 ]
Post subject:  Re: Windows Defender Offline

you can get eset for free. all you do is d/l the trial version. once the trial period is up. look for nod32 username/password on the net with your phone, or another pc. As the eset blocks some of the websites with the usernames passwords, says they nasty sites.... cough cough.. BS cough......



poundsey did sound like a sales man there though...

Author:  STEALTH NINJA [ 13 Dec 2011 18:01 ]
Post subject:  Re: Windows Defender Offline

i use a disc called windows 7 -64 bit.
Just put it in my disk drive, install it, and hey presto, it's like new :)


























Thansk for the help Dave :)

Author:  towelie [ 13 Dec 2011 18:02 ]
Post subject:  Re: Windows Defender Offline

doesnt work for MBR issues

Author:  Poundsey [ 13 Dec 2011 18:05 ]
Post subject:  Re: Windows Defender Offline

+1 If your MBR is infected, you just get hit again after you've reinstalled.

Author:  towelie [ 13 Dec 2011 18:11 ]
Post subject:  Re: Windows Defender Offline

faced one once, if i well remember i think I got it using UBCD, low level format :)

Page 1 of 1 All times are UTC [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/