Norton Antivirus 2003

[Agent_Steal]

Why is it that most av programs are not very good at detecting trojans ? You figure if your gonna sell a program to remove viruses etc etc you might as well make just as good to remove trojans.

Kinda beats the purpose of purchasing something which states that it can remove Trojans. But yet you need to purchase another program to remove what the other was not able to remove.

[nihil]

Why is it that most av programs are not very good at detecting trojans

This is a very good question, and I guess that the answer probably has something to do with the history of AV products and the nature of the malware?

Traditionally, AVs have relied on pattern matching and some heuristic analysis. they would tend to look for replicative behaviour either by infection (virus) or mail/network (worm).

The problem with trojans is they are generally unwittingly installed by the user or deliberately by a malicious third party, and so do not look that different from legitimate software for remote access/remote support for example.

I take the view that the "all singing, all dancing" solution tends to be over complex, and I think that the recent Norton products have tended to suffer from this?

What I think you need is:

1. A good firewall that stealths your machine and intercepts outgoing connections.
2. A registry protector to warn of changes.
3. A startup program protector.
4. A hosts file protector
5. A cookie killer
6. A script protector that prevents scripts from running from within browsers, e-mail, zip utilities etc.

This is in addition to a standard AV product.

Cheers

[al1aprize]

does some include NAV 2003?

[al1aprize]

well? does it?
again, i come about every so often so i cant edit since its been so long.
anyways, does some include NAV 2003

[Soda_Popinsky]

Must I do it again....

You will be answered if people feel like it. Dont be annoying.

edit:

by looking at your last question, I cant really tell what you are asking. I would help if I could.

[al1aprize]

has anyone here gone to Guardyourpc.com? it looks pretty suspicious to me.