>Was wrestling with a trojan infection on a machine here yesterday. The machine was running AVG AV, firewall, etc... Signatures were up to date. It still let the thing in. AVG reported it, but could not remove it. And AVG reported it as "agent_r.xj", which appears to have been misleading. Was able to remove it with Kaspersky's TDDSKiller program. This is the second experience where something got past AVG in approx 1.5 years. Not sure if thats a good or bad record. But was impressed with Kaspersky. Can anyone comment on their experience with Kaspersky?
>
>An interesting description of TDDS by Kaspersky here....
>
>http://www.securelist.com/en/analysis/204792131/TDSS
>
>The latest version of this malicious program implements state-of-the-art virus-writing technologies. Apart from developing the rootkit proper, the authors have consistently worked on improving its self-protection capabilities, bug-fixing, developing the payload, and reacting promptly to new detection technologies developed by antivirus companies.
>
>A detailed analysis of everything relating to TDSS seems to indicate that the author or authors are Russians or Russian speakers. They constantly update the malware while retaining control over it - TDSS itself has never been available for purchase. Rather, it is the botnets controlled by TDSS, typically made up of some 20,000 infected computers, which get sold.
>

Make sure you don't let Kaspersky scan inside database files - it can seriously slow your systems