Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Is a comprehensive set of malware scans a thing?


  • Please log in to reply
29 replies to this topic

#1 Staticshock

Staticshock

  •  Avatar image
  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:12:09 AM

Posted 10 December 2023 - 01:13 PM

So, I know that different malware scanners use different methods to find malware, and one scanner cant detect and remove everything.  I also know that its not usually recommended to have multiple scanning programs installed at the same time.

Say I were wanting to be proactive, and I would be willing to spend the time to install, scan, and remove each program as I use it...is there a list of scanners that all collectively cover pretty much everything that I could use one at a time to scan my PC? 

I get that this kind of thing probably isn't necessary for the average user....but I like to be thorough, and don't mind putting in the effort. 
 
Edit: forgot my Windows 10 build number - Version 22H2 (OS Build 19045.3693)

Edited by iMacg3, 10 December 2023 - 02:44 PM.
moved from Windows 10 to AV/AM Software


BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 33,826 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:09 AM

Posted 10 December 2023 - 01:51 PM

I recommend using windows defender actively and Malwarebytes passively.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#3 MoxieMomma

MoxieMomma

  •  Avatar image
  • BC Advisor
  • 2,346 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:09 PM

Posted 10 December 2023 - 01:58 PM

I recommend using windows defender actively and Malwarebytes passively.


You can use both actively (WD is perhaps the only "real" AV/AM with which MB runs without conflict).

Just configure Malwarebytes to "not register in Windows security center".
(You can also set mutual exclusions between WD & MB, but it's not strictly necessary.)

https://support.malwarebytes.com/hc/en-us/articles/360039024313-Register-Malwarebytes-for-Windows-v4-with-the-Windows-Security-Center

https://support.malwarebytes.com/hc/en-us/articles/5479973703571-Malwarebytes-Security-v4-and-other-antivirus-software

#4 MoxieMomma

MoxieMomma

  •  Avatar image
  • BC Advisor
  • 2,346 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:09 PM

Posted 10 December 2023 - 02:07 PM

Getting back to the original question:

Many of the most powerful scanning tools are specifically designed to be used ONLY by those with special training. Going the "DIY" route can lead to serious system damage.

Do you think you are infected?

#5 Staticshock

Staticshock
  • Topic Starter

  •  Avatar image
  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:12:09 AM

Posted 10 December 2023 - 03:19 PM

I'm not necessarily looking to use the most powerful tools.  Just looking for a set of commercial products that cover all the bases that I can just run through once or twice a year.  Like some AV programs use signatures, others use behavior based, some use imphashes, I think its called.  There are probably others I'm not aware up. But there are different ways to detect malware, and I know the list is finite.  And I guess I could be wrong, but I'm guessing Windows Defender and Malwarebytes don't cover that full list.  

I do use Windows Defender actively and malwarebytes passively (ill scan every few months when I think about it).  But I look at this like a car.   You routinely put gas and anti freeze (Windows Defender).  Then you do oil changes every few months and swap the wipers every year (Malwarebytes).  And then there's transmission flushes, new tires, and spark plugs that you do every couple of years.   So I'm looking for a set of commercial products that cover most (if not all) the different detection methods that I can run through once a year.  A bit over the top, yes.  And a bit of a weird request, sure.  But I'm hoping the information exists and someone will be gracious enough to provide it to me.

I don't think I've been infected...persay.  Just odd things that I've noticed that could easily be nothing.  Sometimes Ill notice a phantom window out of the corner of my eye on the task bar.  Like something opens and then closes a split second later.  But slow enough that I see the tile appear and then disappear on my task bar.  That could easily be a background windows application...but what if it's not? This morning I saw some black boxes appear on my browser window that could have easily been GPU related...but what if it's not?  Stuff like that.  WD and MB both come up clean.  But because I know neither of those cover all the detection methods...what if I do have something and its evading WD and MB because they aren't looking with the method this thing uses?

Im a bit of DIY home tech tinkerer, and I've been tinkering for over a decade up to this point.  So I'm definitely not a novice, and Im very capable of reading instructions and not pushing random buttons without knowing what they do.  I just never really dipped much into malware detection, which is why I am here instead of googling.  I very much enjoy tinkering with my computer, and I view this as somewhat of a project.  So while I would agree, most threats might not need something like imphashes to be detected...i think it would be fun to run through a series of programs, and also give myself piece of mind at the same time. 


Edited by Staticshock, 10 December 2023 - 03:25 PM.


#6 Staticshock

Staticshock
  • Topic Starter

  •  Avatar image
  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:12:09 AM

Posted 10 December 2023 - 03:20 PM

Also, thanks @imacg3 for the thread move.  I should have looked harder to find the right forum to post to.



#7 lenjack

lenjack

  •  Avatar image
  • Members
  • 287 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central PA, US
  • Local time:12:09 AM

Posted 10 December 2023 - 04:32 PM

I recommend using windows defender actively and Malwarebytes passively.

Totally agree.



#8 digmor crusher

digmor crusher

  •  Avatar image
  • Members
  • 217 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:09 PM

Posted 10 December 2023 - 05:04 PM

Programs like Windows Defender use real time protection, so in theory you shouldn't need to scan at all, either it catches something in real time or it doesn't. So a scan would be the same, it either catches it or not.

 

Why not use a portable scanner, the best 2 in my opinion are Emsisoft Emergency Kit and Kaspersky Virus Removal tool, I use both. Another option is Eset Online scanner.



#9 lenjack

lenjack

  •  Avatar image
  • Members
  • 287 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central PA, US
  • Local time:12:09 AM

Posted 10 December 2023 - 05:15 PM

Been using the paid--real time scanning-- version of Malwarebytes, and Defender for years with no issues. Free version is OK, but you need to initiate regular scans. I was lucky. Bought it early, for lifetime license. No need to repurchase yearly.



#10 Staticshock

Staticshock
  • Topic Starter

  •  Avatar image
  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:12:09 AM

Posted 10 December 2023 - 08:20 PM

I appreciate the chiming in for Windows defender and malwarebytes for most average uses.  However, as I have highlighted, I do that.  Its also not what I am asking for, unfortunately.

Unless someone corrects me (and please do if I'm wrong), and unless WD and MB each cover a bunch of different types of ways to look for malware, they aren't covering the full list. They seem to just be covering the common things you'll encounter.

The question I am asking is not a "what AV should I use?".  I am looking for information on "there are these X numbers of ways AV can identify malware, and these Y number of programs all have features or method to cover most or all those methods".  And then the names of those programs.  

If I am asking for something that doesn't exist, thats OK.  I would like to know why.



#11 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 33,826 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:09 AM

Posted 10 December 2023 - 08:28 PM

They all use the same principles of detection and removals

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#12 MDD1963

MDD1963

  •  Avatar image
  • Members
  • 899 posts
  • OFFLINE
  •  
  • Local time:02:09 PM

Posted 10 December 2023 - 08:29 PM

Malwarebytes Antimalware and Sophos/Hitman Pro are a few defacto 2nd opinion scanners that many resort to, myself included...


Asus Z270A Prime/7700K/32 GB DDR4-3200/GTX1060


#13 Staticshock

Staticshock
  • Topic Starter

  •  Avatar image
  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:12:09 AM

Posted 10 December 2023 - 08:45 PM

Ok, if they all use the same strategies, then how do you detect or stop malware that requires other strategies to find?

Like, windows security uses signatures and heuristics.  Malwarebytes also uses I believe signatures and heuristics, as well as behavior analysis.  

Those aren't the only strategies out there, and they don't catch everything, or every person posting here would have their issues solved, and there wouldn't be these other more powerful options that was mentioned up above.  So it stands to reason they miss some things.  How do you find those things?  Are there commercial programs that do that?  I feel like there has to be, but maybe not. 


Edited by Staticshock, 10 December 2023 - 08:46 PM.


#14 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 33,826 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:09 AM

Posted 10 December 2023 - 09:02 PM

Different PCs are different ecosystems like humans you may get a vaccine gave no issues your wife may get the same vaccination you did at the same time and she end up paralyzed.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#15 Staticshock

Staticshock
  • Topic Starter

  •  Avatar image
  • Members
  • 60 posts
  • OFFLINE
  •  
  • Local time:12:09 AM

Posted 10 December 2023 - 09:05 PM

Are you trying to say that the method to finding stuff that WD and MB misses is different, and depends on the computer?  And that because of the individual nature, there can't be a commercial solution? 






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users