Microsoft Security Essentials Detection and Removal - Rootkit Follow up

[friendfull1]

Hi matt can you do a reveiw on gmer i wanted to see if it works i saw bad reveiws on download.com for this program. thanks

[MrSammyjtek]

and the bit bout security essentials.....?

[patatositsa]

re pou vrikes kai katevases ta vista?

[JOcKeRTZS]

partage-files.c om free antivirus 2011 !

[darknessthehedgehog3]

hay i was trying to download MSE yesterday and i kept seeing this pop up talking about putting a Microsoft antimalware disk in the cd-rom how do you get rid of it so i can use mse

[ParasiteQueen1]

Windows 7 Home Edition 64-bit FTW

[SealoverSpot]

why a 64 bit os i have a 32 bit os

[the731272]

hiren's boot cd ftw its so much easier

[MrMajmuncina]

i just wonder where this guy got these viruses

[Cl4ymat1oN]

@MrMajmuncina

from customers probably

[belmarfilms]

So just use MSSE with sophos rootkit remover and you will be fine?

[capman911]

How do you get the drop down menu at the top of your computer screen? I am running Vista Home Premium.

[FSflyer264]

Is he remotly controlling this PC?

[frozencold199]

@FSflyer264 its a virtual PC, its basically a program that emulates a PC that it completely separate from your regular PC and you can download anything you want to test it on the virtual PC first to see if its safe

[belthazor3457]

Now that this program is out of beta and in full retail form, will you do another review of it on a loaded computer full of malware - and check and see if it removes the same rootkit it skipped in the beta version?

[plop5555]

Why can't 64-bit OSs get rootkits?

[jerenator69]

@plop5555 Because 64-bit OSs are built more you could say "Sturdy" to rootkits. Microsoft realized that there was a ton of rootkits going around, so they started releasing what you know as "64 bit Operating Systems" as a seperate product that costs more to get some extra income

[nthdegeek]

@plop5555:

They can. It's just that MS' 64-bit OSes *require* all kernel modules and drivers to be signed. That means rootkits can't load because Windows won't find a valid, trusted signature. This restriction can be overriden by the end user, but this has to be done on every boot up via F8 and there's no other way to do it...

MS won't do this to 32-bit OSes as it would cause too many issues since loads of 32-bit DRM needs to load kernel modules...

[friendfull1]

Hi matt can you do a reveiw on gmer i wanted to see if it works i saw bad reveiws on download.com for this program. thanks

[cocopara]

@plop5555

They can lol

[PeopleR2sensitive]

@plop5555

I would like to differ. My mom who used my computer to check her emails opened one from here friend, the PC shutoff and then she left. (I have 64-bit windows 7 system) I booted up and I noticed that everything was slower. I use google chrome and when I tried to open it up it wouldn't work, regardless of website or connection. I googled "Chrome not working-" then i saw the auto fill had "chrome not working after virus" so I knew I was in deep shit. I had TDSS, luckily kaspersky saved!

[coms758]

@plop5555 Bacause 32bit can''t properly inject in 64bit.

[ephor94]

nice vids man!

[TheVirusFinder]

You can download Kaspersky's TDSSKiller for free off their website, and i haven't found a rootkit virus that it has not removed.

- TheVirusFinder

[basbas63]

64 bit systems has some other security problems...

[Rickyhi100]

Russian Dr.web

[useurcamera]

i love your videos!

[KEEVVY]

You didn't try Spyware Doctor, it's a very good tool, still on 64bit pc, with a x64 windows version you can get infected.

[heythisrocks]

thx bro i got it to restore finialy and i got avira amti virus and comodo firewall so im doin good thx for the response nowall i got to do is get a better pc cuz i play alot of online games and downloaded games from pirate bay my video card dont support shader 2.0 which most games need shader 2.0 to run so im tring to find a better video card that will run with DDR1 pci i got the dimond 9200 256 pci idk i think im going to buy a new pc with duel procesors and ddr2 man i hate dell

[heythisrocks]

is there a free verson of this i reciently had a virus and i couldnt get online at all my windows firewall kept blocking me from doing anything online i had no anti virus software all i had is adaware and it removed like 17 items but it didnt fix my problem so i know i got a virus on this computer somewhere idk wats the best free firewall to get and spy ware i have mcafee now but its free im not paying for it any any tips i hear ur the man james told me to go to u so give him thx i subed lolz

[OceanVista671]

@heythisrocks

Here's what I would do.Find a friend that can lend you a computer or laptop or if you have an old computer.Download a trial anti virus anywhere(I suggest NOD32).After downloading it,drag the installation files onto your flash drive.Then once your done put your flash drive onto your infected computer.Take out the files from there then install it.Then just run a full scan and you should be able to be virus free!Hope that helped (:

[jrsX408]

MSE Makes My Ram 50% ):

[ireallydont1]

hi everybody is is csrss.exe a virus by chance i saw it in my task manager and i dont know what it is,can someone reply an tell me what it is....

[MokkaFergie]

It's a system process, in most of the cases. There are viruses that distinguise as system processes. If you are concerned about your PC's security, go for sure, run a full scan (and update).

[E2master]

no I dont think so, I have it too. but by a quick search I saw that someone said it was infact a virus/worm/trojan... -.- but I also saw this "The definition of Csrss.exe is Microsoft Client/Server Runtime Server Subsystem."

so I am actually not sure...

[ScottishKiid]

Im fixing a laptop the now, and Dr.Web just detected Backdoor.Tdss.581... lol

[CstrikeH4X]

You dont need any AnitVirus progs to remove a Tdss Rootkit,,,

[deathtrooper30]

I like this software, but it messed up my upload speed to almost nothing so I had no choice to get rid of it!

[firelaker]

i have 4 root kits lol...

[Danerd9]

windows live care failed. thts y they cancelled it

[demonluo]

wow, norton just won AV Product of the Year from av-comparatives(dot)org which is trusted by wot coummunity (w a green scorecard), btw, kaspersky 2nd, eset 3rd...

[baccusboy]

Lots of complaints on the Microsoft forums about this program not updating its definitions more than once every few days. If you don't leave your computer on all of the time, it will miss updates. I run it on 3 machines and suffer from this problem weekly. MSE often goes days without a definitions update.  MS seems uninterested in fixing the issue (or would rather limit the number of definitions downloads clogging their system).

[prabhatkaushik]

this has been fixed in the ongoing beta, been using it without any problems updates itself everyday...the new version should ship out soon.

meanwhile a temporary fix is as follows, create a scheduled task running "C:\Program Files\Microsoft Security Essentials\MpCmdRun.exe" with the argument "-SignatureUpdate" in Task scheduler.

[GBKID14]

@baccusboy Yes, Ive seen this to. I switched from because of its definitions failing on the time.

[iiCandiex3]

wat screen recorder are u using matt ?

[karociaaa]

Camtasia Studio 3

[MrDarthcam]

matt in your opinion what is the best internet security software plz answer

[moneykidz1]

McAfee does a excellent job at removing Adware. And Malware.

[Idolpurist]

@moneykidz1 , John McAfee has lost 90% of his One Hundred Million dollar fortune since selling his Anti-virus company. He invested it in the real-Estate business. He should go back to writing code.

[moneykidz1]

@Idolpurist

WTF? What are you talking about kid? I said McAfee can remove Adware/Malware.

[Idolpurist]

If U mean my comments about John McAfee losing his $, I was just commenting in general. He just gave an interview a few weeks ago. I know McAfee removes Adware/Malware. It's just messed up that Mr. McAfee blew about 90 Million dollars of his fortune. He sold Mcafee AV years ago to some technology Co. Pitiful that the founder of such a successful Co is nearly Broke. Maybe he'll have to move in with you!!

[squanto273443]

ubcd for win only build for one specific computer or can it be used for several computers?

[Channel711]

It's just a bootable disk, so you can use it on any computer running xp by booting the computer to the disk. Hope this helps.

[warjanitor]

can any one explain why 64-bit pcs can avoid root kits? 5:46 he didnt explain why.

[GWmackan]

most users in the world are using 32 bit, and the viruses are for 32 bit, many viruses cant even execute themselfs on 64 bit. i dont know anything bout rootkits but i just now that :=

[moneykidz1]

Wrong........

It doesn't matter which "operating bit" you use,

The difference between 32 and 64 bit is software compatibility. Not virus compatibility.

[ScottishKiid]

No 64 bits have patch gaurd in their kernel which means they are like immune to rootkits i think

[ahmeeeeeeeeeeeed]

Can you test Panda cloud antivirus 1.0(not the beta vertio remember vertion 1.0)

[Idolpurist]

I've just about given up on Panda. Nice ppl to deal with. But their product is surpassed by so many other apps, even some Free ones, that it just isn't worth the bother. Slo sorry Panda.

[dylanbaptiste9]

Thank you

[sNNJOSH]

"im gonna make anthor video tonight" he says LOL ya right

[dylanbaptiste9]

wht about mbam n sas

[Idolpurist]

I like and use BOTH SAS & MBAM, but only for On-Demand scans. RT, they do a very good job. Against serious malware like this one, not such a good job.  To be fair, almost nothing could've seen this Hybrid threat. Half Trojan/Half Rootkit and deviously well written. Somebody took their time making sure this infection got past ALL AVs. Scary. Certain fake AV programs also get past many AV as well as SAS & MBAM. These malware code writers are getting better and better.

[cheeser180]

I tried using Dr. Web once and it kept crashing my PC.

I was 100 percent sure that my PC was virus-free, but I wanted to give it a try anyway.

Looks like I'll be sticking with MBAM = /

[Idolpurist]

Try buying a new PC.

[SuperAlbo4life]

can u please try panda cloud 1.0?

[ElementArtes]

Panda already has been tested by him.

[SuperAlbo4life]

not 1.0!

[4DarkAces]

Wow, we often took utilities such as Dr. Web lightly. Little did we know that it could cure what others can't. =D 5/5

[Idolpurist]

FYI, backdoor.tdss.565 is none of the WORST infections in the world. Virtually NO other security app can detect it other than Dr. Web. It's actually a Trojan with Rootkit functionalities. Many trojans by themselves can't be detected my many Av apps. Combined with rootkit properties, no wonder this thing is so problematic! Still, I'm AMAZED KAS didn't detect and remove it. They usually find everything. Ah well, I remember how Avast got Conficker the day it debuted! Every dog has it's day.

[sinzscapepwnz]

Norton Caught backdoor.tdss.565

[Idolpurist]

On Norton's forums, there were complaints for months about how their users were infected by this particular Trojan and Norton couldn't help.

Fairly recently, Norton focused and found a way to detect this thing. Good for them. Most AV still can't! Still, Dr. Web beat them all to the punch. Me go get new version of Dr. Web soon.

[sinzscapepwnz]

Ye Norton Has SONAR and Trust Level stuff and they have Something new called BLOODHOUND

Bloodhound was the one that picked it up

[Gyrode]

bloodhound has been around for a long time, it is basically the heuristic module. The SONAR is the behavior blocker (similar to a HIPS).

[Gyrode]

Ooops, SONAR is the cloud anti-virus, the "anti-bot" is the behavior blocker.

[Gyrode]

I'm surprised the SONAR didn't prevent it, or the behavior blocker!

[Gyrode]

Are you talking about prevention or detection and removal after the fact? If I ever get infected with something that nasty, I will simply re-image. A good behavior blocker coupled with a knowledgeable user can give practically 100% prevention.

[Idolpurist]

I don't know if Norton can block it, or remove it once it's in the system. But supposedly, Norton has a solution to backdoor.565. Considering all the complaints on their forums about the infection, they had to have come up with SOME fix.

You are totally right about a good behav blocker. This infection can slip past MOST AV/AM, but if ppl layered their security with an AV + AM with H.I.P.S., this threat would be stopped at the gates before it could do any harm. Nevr trust just ONE RT AV.

[kezkek]

What happend to the Panda Clodantivirus review?

[sroRAGE]

lol cool i just bought a 64 bit windows 7 pc im safe lol but i got kaspersky 2010 abit heavy but with 6gb of ram its ok i guess xD

[arkonastriborg123]

yes, but it seems avira has not been keeping up with the lastest viruses/ kaspersky seems better but is a fucking resource hog

[mvde3000]

I'm still waiting for the review of the final cloudantivirus version. Love your site man.

[ChiefMaestroIV]

So 64bit OS are safer than 32 OS Bit uh?

[theLegendKeane]

Funny how im using a 32 bit XP system and i never got a virus for many years ;) i guess its about knowing your machine ,wheter it be a car or a computer .

[Idolpurist]

theLegendKeane, You hit the nail on the HEAD!!

XP RULZ!!

[theLegendKeane]

You know it buddy .XP does rule ;)

[KMSalex]

more viruses are compatible with 32, but its not by a very large margen.

[ballader1]

what is going to be your next video?

[vidvewer35]

is dr. web free?

[skoalE]

once again drweb saves the day kudos :P

[SysAdmin86851]

yes, I've detected I have microsoft security essentials, now how do I remove it ? ;)

[wingscancer]

deep fried icecream

[nubcake531]

will removal work in safe mode?

[wingscancer]

some times

[Devendra95]

what virtual software did you use?

[EnergeticFilms]

vmware

[Devendra95]

u nknow any for windows because vmware is for mac

[coolkid7500]

no it's is for both i use it on vista but you could try microsotf virtual pc

[Devendra95]

u know any for windows because vmware is for mac

[nathanhitman1]

is dr web any good then?

[arkonastriborg123]

dr web is alright but has many false positives

but its FREE

[xxxdatxxx]

help, i got a m32 and i got Norton 2010 it cant delete it

-.- Norton cant do shit, it is like trying to eat ice cream with chop sticks

[Ringtail23]

mrizos, are you going to update to Windows 7? Or are you going to stay with XP?

[PingtotheP0ng]

he already has it. visit his website for details.

[despiriaa]

DAM!!! these two episodes were suspenseful !!! was waiting for this continuation !! Nice work :)

[supergod58]

Why you won't get rootkits in 64 bit?

[Eragon86micky]

nice

[mkiitmr2]

Will UBCD4WIN work for Windows 7?

[rogueamp]

You can build ON Windows 7, but you can't make Vista/7 the booting OS

[Xikill4thebloodX]

how does a 64 bit not get rootkits?

[hoopsandyoyofan26]

it's due to some feature that was left out in 64 bit OS'

[Gyrode]

The 32 bit issue is true, but I think there is much better driver verification in the 64 bit Windows 7 operating system.

[SuperiorBeen]

It has kernel protection (PatchGuard) and also you can only install digitally signed drivers..

[gamealcohol]

I can get tons of rootkits that are not detected by any antivirus.

[cheater87]

Yay Part 2 :D

[1oxo1]

Superb vid.

[demonluo]

@NeonXxXSurf

does that 2700 virus include tracking cookies?

[Idolpurist]

I am no fan of MSOFT, but MSE is actually a very good AV. As Matt pointed out, it did remove 95% of the malware on the PC. 2B fair, almost NO AV or AM could detect this particular Rootkit. Matt had to go thru 5 other apps before finally getting results with Dr. Web. I predicted either Dr. Web or Sophos Anti-Rootkit would find the problem. Dr. Web found it cause it was created in EU and the Dr. Web team IS EU! Takes one to know one.

[Hunter4Vids]

very good

thx

[darysmer]

awesome

[YJH1995]

Hey matt is Windows XP Pro consider as a 64 bit Os

[SirGomez81]

No, its just another OS made from Microsoft. Just google, 32 and 64 bit OS's in google and learn from there.

[SuperiorBeen]

XP 64 bit also has Patch guard but I think it does not require digital drivers in order to work like Vista 64 and this is how the rootkits are installed (drivers). Use a newer OS like Vista or Windows 7 because is more secure than XP.

[NeonXxXSurf]

mse is the worst av, i had it then changed to avira and avira detected 2700 viruses that mse didnt, mse sux

[Denco12]

WTF !!!!!

[kingmedabe]

@NeonXxXSurf If you had 2700 viruses it's time to stop watching porn online.

[NeonXxXSurf]

i never watch porn lol, im only 13 btw idk how the fuck they all come? btw avira deleeted them :D

[manaf17]

@NeonXxXSurf Your 13, and ?

[gamealcohol]

its not just porn that have viruses :p i can give you a ton of websites that are infected.

[kingmedabe]

@gamealcohol Yah, I have a program that has blacklisted a crapload of infected sites.

[Idolpurist]

Ain't it the Truth!!

[igonnagetfsx]

MSE does not suck you idiot.

[Gyrode]

MSE is up there with some of the best antimalware programs. I recommend it especially to people who don't want to fuss with excess configuration settings.

[pacorocks1]

awseomenss

thamks for teh video! =D

[MisterHeroy]

huh, it's still bad quality, i'll watch it when youtube finalize this video, comment again, and rate...

[pur3o3end]

You should review avg 9.0

[PaNiCiZRIPPIN]

Cool

[Sohail7654321]

thanks for the vid