Quick Heal - a question.

[Arc]

Today I attached my pendrive in a computer with QuickHeal installed. That pendrive was virus infected earlier, but I cleaned it up , folling Corrine's guidance as per the thread http://www.sevenforums.com/system-security/210515-whit-link-runner-virus.html .

When I took it out with me, I scanned it with Avast free and malwarebytes, no threat was there at all. But QuickHeal detected 47 viruses and trojans ... within a few seconds :huh: Actually that pendrive contained 3 word documents only.

I want to ask, what is the matter ? Who is right ?

 

[karlsnooks]

First make sure that your system is not set to autorun a usb stick.

Next use WDO to check the stick.

Link to WDO in my signature.

 

[Arc]

First make sure that your system is not set to autorun a usb stick.

Next use WDO to check the stick.

Link to WDO in my signature.

Karl, I followed your instructions, in my laptop , using the usb stick. No threat is found. Maybe due to the reason that QuickHeal killed all the 47 threats ?

 

[EzioAuditore]

Today I attached my pendrive in a computer with QuickHeal installed. That pendrive was virus infected earlier, but I cleaned it up , folling Corrine's guidance as per the thread http://www.sevenforums.com/system-security/210515-whit-link-runner-virus.html .

When I took it out with me, I scanned it with Avast free and malwarebytes, no threat was there at all. But QuickHeal detected 47 viruses and trojans ... within a few seconds :huh: Actually that pendrive contained 3 word documents only.

I want to ask, what is the matter ? Who is right ?

Regarding the sudden appearance of 47 threats by quickheal, its quite natural. Often times, these reside in randomly named hidden folders in the form of multiple exe's.
I saw it when i inserted an infected pendrive to my linux box.

 

[EzioAuditore]

First make sure that your system is not set to autorun a usb stick.

Next use WDO to check the stick.

Link to WDO in my signature.

Karl, I followed your instructions, in my laptop , using the usb stick. No threat is found. Maybe due to the reason that QuickHeal killed all the 47 threats ?

Very likely its all clean now.
You can do an online scan too with Eset or Kaspersky. But that'd be an overkill though.
Now, if only someone could merge my this and the previous post? I'm currently typing this from my cell and multiquote doesn't work on it.

 

[karlsnooks]

More likely is that quickheal is detecting non-existent malware.

Be sure to run WDO over your entire computer.

I do not expect WDO to find anything, but with scareware, I'm always cautious.

Microsoft has released the latest version of MSE. I use, and only use, MSE. The only AV that I install or recommend. Link to MSE in my signature.

 

[karlsnooks]

Online scan, and Microsoft also offers an excellent one, are never to be preferred over an offline approach.

Online means that malware in your boot sector or other hiding locations is already running when you run the online scan. Smart malware detects your online scanner.

With an offline approach, you have booted from an external device which creates a ram disk and runs from within the ram disk. Thus you malware has not been started and is unaware that cleaning software is running.

 

[EzioAuditore]

Online scan, and Microsoft also offers an excellent one, are never to be preferred over an offline approach.

Online means that malware in your boot sector or other hiding locations is already running when you run the online scan. Smart malware detects your online scanner.

With an offline approach, you have booted from an external device which creates a ram disk and runs from within the ram disk. Thus you malware has not been started and is unaware that cleaning software is running.

I know that Carl and that's why i said him that it'd be an overkill. Its just for his satisfaction.
Eventhough, thanks for pointing that out.

 

[Arc]

Regarding the sudden appearance of 47 threats by quickheal, its quite natural. Often times, these reside in randomly named hidden folders in the form of multiple exe's.
I saw it when i inserted an infected pendrive to my linux box.

Ezio, it was a full formatted pendrive, only three word documents were copied to it just in this morning . It made me very strange wherefrom those 47 came. Avast and MBAM says my system is totally free from any risk, as the WDO saying ATM .

That quick heal installed computer is of my supervisor's office computer, and he scolded me for using infected drives

More likely is that quickheal is detecting non-existent malware.

I also thought the same. I wish I will get the full proof in the next Wednesday ... when I will meet him again. But he will not believe my point, I know !

 

[karlsnooks]

It's your call, but I would be insistent that the offending party is QuickHeal.

 

[Arc]

It's your call, but I would be insistent that the offending party is QuickHeal.

Another question to you, Karl Why and how the non-existent malwares are detected ? Just to show performance ? Or something else ?

 

[karlsnooks]

How does one detect the non-existent?