GudangAntiVirus.com

Specifications
————————————————-
Version: 1.3, Scan Engine: 1.8
Description: Portable AntiVirus Solution
License: Freeware
Packed size (zip): ± 370 Kb
Operating System: XP and VISTA
Company: vCikun sWare’s Lab

Testing AVS-32 AntiVirus
————————————————-
You can verify that AVS-32 works properly with the help of a special test file, known as EICAR Standard Anti-virus Test file. (EICAR stands for the European Institute of Computer Anti-virus Research). This is a dummy file, which is also detected by other anti-virus products.

No need to worry, because this file is not a real virus. All that EICAR.COM does when executed is to display the text ‘EICAR-STANDARD-ANTIVIRUS-TEST-FILE’ and exit.

The reason we do not include the file within the package is that we want to avoid generating any false alarms for those who use AVS-32 or any other scanner. However, the file can be created using any text editor, provided the file is saved in standard MS-DOS ASCII format and is 68 bytes long.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Save the file to any name with COM extension, for example EICAR.COM. >From now on, you can use this file to see what happens when AVS-32 detects a real virus.

Clamwin Portable Antivirus

ClamWin Portable is the popular ClamWin antivirus packaged as a portable app, so you can take your antivirus with you to scan files on the go. You can place it on your USB flash drive, iPod, portable hard drive or a CD and use it on any computer, without leaving any personal information behind.
ClamWin is a Free Antivirus for Microsoft Windows. It provides a graphical user interface to the Clam AntiVirus engine. It features:

* High detection rates for viruses and spyware
* Regular virus database updates. ClamAV team regularly updates virus databases to include a new virus/variant immediately after it appears
* Standalone Virus Scanner

Please note that ClamWin Free Antivirus does not include an on-access real-time scanner, that is, you need to manually scan a file in order to detect a virus or spyware. Also, ClamWin Portable has scheduled scans and updates disabled as they are not used in a portable scenario.

Computer viruses got their name because they spread just like biological viruses. There are other parallels as well; for instance, best practices. In the medical world they are called preventative measures, but really they are best practices. For instance, you should wash your hands in soap and water often. In the computer world, the equivalent is keeping your security software up to date and keeping your patches current. For computer users, if you follow this one best practice, your computer will stay healthy.

We wrote earlier about how the spammers are taking advantage of public concern about the swine flu. Now the malware writers have entered the game, too. Potential victims are going to get an email with a PDF attachment that promises to answer all questions about the much talked about swine flu. The attachment is named “Swine influenza frequently asked questions.pdf.” It is a real PDF file, and when opened it will show something like this:

Swine PDF

Unfortunately, if you get this far, you’ve been infected. Unlike the swine flu though, I have good news for you—if you followed the best practices guidelines, you’re safe. Symantec detects the malicious PDF file as Bloodhound.Exploit.6 and the dropped malicious file contained in the PDF as InfoStealer. Even better news: there is an Adobe patch for this known vulnerability, Adobe Acrobat and Reader PDF File Handling JBIG2 Image Remote Code Execution Vulnerability (BID 33751). If you haven’t already, it’s time to start following best practices and download the Adobe patch for your version of Acrobat and Adobe Reader.

Protect your health. Protect yourselves and your computer from the human swine that prey on our desire for information to keep us healthy. Keep your security software up to date, keep your systems patched, and be suspicious of unsolicited email that talks about topical subjects. Be very careful when such email includes attachments, links to websites, or videos that it says you should view.

Original source: http://www.symantec.com/connect/blogs/malicious-code-authors-jump-swine-flu-bandwagon

AVG provide you with a list of specialized utilities for virus removal. The utilities can be used to remove of some of the most common viruses. The list is updated on regular basis.
Win32/Sality

If the infected computer is connected to LAN, disconnect it and re-connect only after all other computers have been checked and cleaned.

* Download file rmslt.exe
* Then run the tool for removal of infected files. The tool will automatically scan all available discs and will try to heal the infected files. If an active virus is found in memory, the tool will ask the user to reboot the computer. Healing will be performed during operating system boot-up sequence, so any active virus cannot interfere with the healing process.
* Update your AVG after restart and run a complete test. Should any infected files be found, delete them or restore from backup.