Tag Archives: antispyware

Microsoft Security Essentials –“Here I Come To Save The Day”

imageOh, the embarrassment of it all! I haven’t had to deal with a malware issue (other than self infecting in AV product testing), for more than 2 years – until this past week. No big deal, except perhaps, for the way I got infected – that old, old, old, malware attack vector – an infected search engine result.

The manipulation of search engine results, exploiting legitimate pages, and the seeding of malicious websites among the top results returned by search engines in order to infect users with malware, continues to be a major threat to system security. And, why not? It bloody well works!

Over the years, I’ve written more than a few articles on search engine malware – the last – Search Engine Malware – The Same Old, Same Old – this past August.

From that article:

Here’s how the cyber crooks do it:

Cyber-crooks can exploit vulnerabilities on the server hosting the web page to insert an iFrame, (an HTML element which makes it possible to embed another HTML document inside the main document). The iFrame can then activate the download of malicious code.

When a potential victim visits one of these infected sites the likelihood of the downloading of malicious code onto the computer by exploiting existing vulnerabilities is high.

So there I was, happily bouncing along the Internet highway Googling a phrase I had read on another blog. Choosing the first Google return proved to be a very bad idea indeed, since I immediately stepped into an infected iFrame.

But thankfully, all was not lost – Microsoft Security Essentials (which incorporates antivirus, antispyware and rootkit protection), halted the malware – Trojan:JS/BlacoleRef.K – in its tracks!

image

So what’s the lesson here?

A couple really – AV settings are very important. In this case, as per the following screen shot – nothing moves into, or out of this machine, without being scanned. Microsoft Security Essentials makes it so simple – no esoteric choices.

image

The second lesson – a MOST important lesson – absolutely, positively, without fail, come hell or high water, ensure that AV definitions are updated at least daily. Preferably, more often.

You might be surprised to learn, that on the day I stumbled, while MSE recognized the intruder, the vast majority of AVs did not – as per the following VirusTotal report (partially reproduced here).

image

Since it was preposterous to assume that MSE had in fact eradicated the Trojan (paranoia has its upside don’t you know?    Smile), I then ran a full scan with Kaspersky Rescue Disk – a free Linux-based antimalware application (a live CD), which scans from the outside looking in. Malware generally can’t hide if it’s not running.

The result? The Kaspersky Rescue Disk scan was clean. MSE had in fact, sent Trojan:JS/BlacoleRef.K to malware hell. Yes!!

I suppose there’s one more lesson that can be dug out of this experience, and that is – those tech journalists who absolutely insist that “pay for” antimalware applications are superior to all free AVs (often, without ever having tested the damn product in real world conditions), should take a step back and reconsider their speculative approach to antimalware application ratings.

Worth repeating: Despite the fact that I’m provided with a free license for all the security applications I test (and then some), I have chosen to run with the following FREE  applications.

Microsoft Security Essentials (free) – an all-in-one antimalware application.

Immunet Protect – a free Cloud based companion antimalware application.

ThreatFire (free) – this application is built around a Host Intrusion Prevention System (HIPS), and behavior based blocking combination.

WinPatrol (free) – another HIPS application with considerable additional functionality. WinPatrol is the elder statesman of this application class and, it just keeps on getting better. A must have application.

PC Tools Firewall Plus (free) – PC Tools Firewall Plus is advanced Firewall technology designed for typical users, not just experts.  The “plus” refers to a HIPS component. Generally, if the ThreatFire HIPS component is triggered on my machine, PC Tools Firewall Plus is triggered as well.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

16 Comments

Filed under Anti-Malware Tools, Cyber Crime, downloads, Free Anti-malware Software, Freeware, Immunet Protect, Microsoft, Software, trojans, Windows Tips and Tools

Protect Your Bits With BitDefender Internet Security 2011

imageIf it’s true that 50% of computer users run without adequate security protection, as some statistics indicate, then I can understand why. Given the complexity of a typical anti-malware product in both setup and operation, it’s little wonder that many users throw up their hands in frustration.

To be sure, computer security is a complex issue, but that shouldn’t mean that the average end user of a security application, needs to be exposed to a labyrinth of choices in either application setup, or in monitoring activity.

It’s hard to overstate the fact that typical computer users require a simple, intuitive, and easy to use interface in order to get the most out of a security suite, and BitDefender’s Internet Security 2011 breaks new ground here. More on this later.

By combining an efficient Firewall, an Antivirus engine, an Antispyware engine, Spam filtering, a parental control system, privacy control, home network and game/laptop modes – BitDefender has built a suite of applications that provides powerful protection.

Taken together, the components provide excellent protection from hackers, cybercriminals, unauthorized software, network attacks, and more.

The application is straightforward to setup, customize, and run – as the following screen captures illustrate. (Click on any graphic to enlarge).

Following installation the application automatically runs a quick scan to ensure the system is clean prior to setup completion.

image

Very cool! No malware found on the test system.

image

BitDefender’s Internet Security 2011 is all about simple initial choices – average users can sit back and allow the application to choose the most appropriate settings.  Sophisticated users, on the other hand, can get their hands dirty.

image

The user has an opportunity to choose a simple, intuitive, and easy to use interface, rather than the more complex intermediate, or expert mode. When I installed this application, I did so with 10 average users in attendance – each one agreed that the “Basic View”, would be the most appropriate for their needs.

image

The additional tools menu is push button simple, as the following screen shot indicates.

image

On the completion of the installation, a summary of installed application modules is provided.

image

Finally, a guided tour is a helpful tool which makes it easy for an average user to become familiar with the application.

image

Fast facts:

Firewall

Antivirus & Antispyware

Antispam

Anti-phishing

Chat Encryption

Identity protection and privacy controls

Parental Control

Family Network Protection – Home network monitor

Smart Scan

Quick Scan

Smart Schedule

Smart Help

Smart Sense

System requirements: Windows XP SP3, Vista (SP1), Wind 7 (both 32 bit and 64 bit).

Note: Recommended hardware –

  • CPU: Intel CORE Duo (1.66 GHz) or equivalent processor
  • Memory (RAM):
  • 1 GB (Microsoft Windows XP and Microsoft Windows 7)
  • 1.5 GB (Microsoft Windows Vista)

Having tested this application on a number of machines, I suggest you don’t install this application unless your computer meets, or exceeds, these requirements.

Download 30 day trial version at: BitDefender

Purchase product at: BitDefender (3 PCs for 1 year $49.95).

A personal note: BitDefender is one of my favorite security providers, since it offers a bevy of free virus removal tools, as well as a number of free specialty security tools.

A final word: Choosing a security application correctly depends on a number of variables including – how you use a computer on the Internet. In the final analysis though, the application should simply work –  unobtrusively and silently, with a minimum of fuss and bother – without presenting complex questions that average users simply can’t grasp.

Overall, BitDefender Internet Security 2011 handles this issue very well, and its overall detection and malware removal rates, place it in the top tier of security applications.

A word of caution here regarding tests carried out by antimalware labs. By and large, these tests are one time “snap shots”, and are not always indicative of an applications strengths, or weaknesses. Applications tend to change relative positions based on these tests, very often.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

6 Comments

Filed under 64 Bit Software, Antimalware Suites, BitDefender, cybercrime, Don't Get Scammed, Don't Get Hacked, Malware Protection, Software, Software Trial Versions, spam, Spyware - Adware Protection, System File Protection, Windows Tips and Tools

Round Two: Download Next Generation Microsoft Security Essentials In Beta

image Microsoft Security Essentials, which incorporates antivirus, antispyware and rootkit protection, all under one roof, was released by Microsoft last year as a free  replacement application for Windows Live OneCare. MSE was initially released in June 2009 in Beta, which was replaced by the final release in September 2009.

Microsoft has just released a Beta for the second generation Security Essentials, which includes a number of substantial additional features (see the following), and thankfully, a faster engine.

Note: This is a limited beta available in English (U.S.), Israel, and Brazilian Portuguese (the beta will also be available in China in Simplified Chinese later this year), and is available to genuine Windows users on a first come, first serve basis, until the allotted spots for the beta have been reached.

What’s New in the Microsoft Security Essentials beta?

This Beta version of Microsoft Security Essentials includes these new features and enhancements to better help protect your computer from threats.

Windows Firewall integration: Microsoft Security Essentials setup allows you to turn on Windows Firewall.

Enhanced protection from web-based threats: Microsoft Security Essentials has enhanced integration with Internet Explorer which helps prevent malicious scripts from running and provides improved protection against web based attacks.

New and improved protection engine: The updated engine offers enhanced detection and cleanup capabilities and better performance.

Installation was not straight forward. Since I was running the final release as my primary AV, the installer attempted to perform an upgrade. Bad idea! It simply did not work, and caused some cleanup issues I had to deal with.

After cleaning up the mess, I uninstalled the prior version using my trusty Revo Uninstaller, and then did a successful clean install rather than an upgrade.

I heard it through the grapevine that I’m not alone in having run into this upgrade issue. So, if you have MSE installed, uninstall first, and then perform a clean install of the new Beta.

image

This new Microsoft Security Essentials Beta just like the final release is easy to set up and run, (on a clean install), particularly for new users. And, the interface is positively simple offering Quick Scan, Full Scan, or Custom Scan.

A simple command interface:

image

A simple scan result screen – in this case a “clean” result:

image

A simple settings/options screen. If you have been running the generation one final version, you find a number of impressive changes here.

image

Overall impressions:

Microsoft Security Essentials, including this Beta release, is a no cost viable alternative to overhyped, and often overpriced, more familiar security applications.

A simple, intuitive, and easy to use interface makes Microsoft Security Essentials straightforward to setup, customize, and run, for both less experienced and expert users alike.

Microsoft Security Essentials is a first class security application; fast, efficient, and effective – particularly with the additional features in the Beta release.

Provides full real time protection against viruses, spyware, and other malicious software. Very few “free” security applications, provide full real time protection which makes such an application valuable, only as an on-demand secondary scanner.

The second generation Beta, is definitely worth a close look.

System requirements: Windows XP, Vista, Vista x64, Win 7, Win 7 x64.

Download at: The Microsoft Connect Page (registration required).

Windows XP users: Please note that the network inspection system feature will not be enabled on Windows XP. The network inspection system requires the Windows Filtering Platform (WFP) in order to run, and WFP is available only in Windows Vista and Windows 7. However, if you are running Windows XP, you can still use all other beta features.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

9 Comments

Filed under Beta Software, cybercrime, Don't Get Scammed, Don't Get Hacked, downloads, Free Security Programs, Freeware, Microsoft, Software, Spyware - Adware Protection, System Security, Windows 7, Windows Tips and Tools, Windows Vista, Windows XP

No Bull! BullGuard Internet Security 9.0 Shines

image There are so many antimalware products in the market place, that I find it virtually impossible to keep track of them all. So when I was asked recently, to take a look at BullGuard Internet Security, my first though was – WHO?

After taking a closer look, I’m glad I did. With 10 million users BullGuard Internet Security is no newcomer to the antimalware market. And, it shows. BullGuard offers a well though out, and highly functional suite of antimalware tools – including a built-in Firewall.

BullGuard has taken a page out of my own book when they say “We don’t confuse our customers with functionality and information they don’t need, or questions they can’t answer …… you don’t really care how it works, you just want to know that it does work, and then leave the technical stuff to us”. Hmm, an antimalware company that finally gets it!

Installation:

Surprisingly, given the large number of built-in features, the installation process was relatively fast and efficient.

Setup:

Bullguard Internet Security’s wizard driven setup is easy to follow, making setup a breeze.

User Interface:

Each of the suite’s components is arranged in an inline button configuration, as the following screen captures illustrate. Pushing a button gives access to a familiar tab based interface – easy, straight forward, and efficient.

image

image

Fast facts:

Antivirus: Give computer viruses like Trojans and worms no chance.

Antispyware: Protect yourself from identity theft and online fraud. Protect your computer from unwanted intruders like hackers.

Antiphishing: Get web pages and e-mails authenticated, so you can surf, shop, and bank safely online.

Spamfilter: Keep your inbox clean from junk mail and phishing attempts.

Firewall – Protect your PC from unwanted intruders like hackers.

Backup: Includes 5 GB online backup for your valued files, photos and music.

Support: Free 24/7 support when you need it.

User-friendliness: User interface and installation so easy, anyone can use it.

Game Mode: Fast but safe game fun with minimal resource consumption.

Instant Message Protection: Interact and exchange files over IM programs like MSN, Yahoo and Skype.

Available Languages: English, German, French, Spanish, Danish, Swedish, Norwegian, Dutch, Italian, Portuguese.

System requirements: Windows 7, Vista, XP (SP2)

Download a 60 day trial at: BullGuard

Download size: 106 MB

Purchase price: $59.95 USD (3-PC license).

If ease of use is a primary consideration, take advantage of the generous 60 day trial period, and give yourself some time to determine if BullGuard Internet Security is right for you.

Update: Mike, has just advised that a 6 month trial for Version 8.5 – a single user; is available here.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

14 Comments

Filed under Anti-Malware Tools, Antivirus Applications, Backup Tools, Don't Get Scammed, Don't Get Hacked, downloads, Software, Software Trial Versions, Spyware - Adware Protection, Windows 7, Windows Tips and Tools, Windows Vista, Windows XP

Download Free Microsoft Security Essentials – You’ll be Glad You Did!

Today is the last day of a holiday weekend (Victoria Day – a celebration of our British heritage), here in Canada. So that yours truly can relax to the max, this article is a reposting of a previously published article.

image Microsoft Security Essentials, which incorporates antivirus, antispyware and rootkit protection, all under one roof, was released by Microsoft as a free  replacement application for the late, and unlamented, Windows Live OneCare.

I’ve been running Security Essentials for eight months, or so; first, as a beta tester, and now the final product, on my Win 7 machines. Backed up, of course, by Zemana AntiLogger, GeSWall, Immunet Protect,  and by my usual, on demand security applications, including Malwarebytes’ Anti-Malware and SUPERAntiSpyware.

Testing this application under real world conditions, has reinforced my initial positive review of Microsoft Security Essentials.

So, I’ll just cut to the chase here:

Microsoft Security Essentials is a no cost viable alternative to overhyped, and often overpriced, more familiar security applications.

A simple, intuitive, and easy to use interface makes Microsoft Security Essentials straightforward to setup, customize, and run, for both less experienced and expert users alike.

Microsoft Security Essentials is a first class security application; fast, efficient, and effective.

Provides full real time protection against viruses, spyware, and other malicious software. Very few “free” security applications, provide full real time protection which makes such an application valuable, only as an on-demand secondary scanner.

A simple command interface:

MS Security Essentials

A simple settings/options screen:

MS Security Essentials 2

A simple scan result screen – in this case a “clean” result:

MS Security Essentials 3

Or, a potential threat warning screen – following an injection, in this case, of a malware file:

image

Fast facts:

Easy to set up and run, particularly for new users.

The interface is positively simple offering Quick Scan, Full Scan, or Custom Scan.

Scans all drives including removable drives, and creates a system restore point

Full real time protection against viruses, spyware, and other malicious software.

The Dynamic Signature Service (DSS), a technology that helps ensure users are protected by the most current virus definitions available, without having to wait for the next scheduled download, is a major positive step for the average user.

Using DSS, Security Essentials validates suspicious files in near real time – a huge advantage for average users.

Actions from unknown sources such as unexpected network connections, attempts to modify privileged parts of the system or the downloading of known malware, all trigger requests for updates from DSS – another major advantage for the average user.

Runs unobtrusively in the background with an easy to understand warning system. Green – you’re good to go. Yellow – caution. Red – action required.

Very lightweight in terms of system resource usage – as opposed to some security applications that are well known resource hogs.

Malware identification and removal, in my experience, has been much better than average in real time extended testing, and not just in a 30 minute wonder test!

Quick scans are very fast, but full scans are slightly slower than average. However, if I’m infected, fast or slow is not a personal consideration – detection and removal of malware is.

System requirements: Windows XP, Vista, Vista x 64, Win  7, Win 7 x64

Download at: Microsoft

Microsoft Security Essentials is a first class security application; fast, efficient, and effective. I highly recommend that you take a close look at this program.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

31 Comments

Filed under Anti-Malware Tools, Antivirus Applications, cybercrime, Don't Get Scammed, Don't Get Hacked, downloads, Free Anti-malware Software, Free Security Programs, Freeware, Microsoft, Software, Windows 7, Windows Tips and Tools, Windows Vista, Windows XP

Free KeyScrambler – Encrypt Your Internet Input

KeyScrambler Personal – A Must Have Browser Plug-in

Keylogger pic

This article was prompted by a situation one of my Blogging buddies ran into recently. Apparently, a friend of his was having a problem with his Internet connection, and major problems with his email sign-ins.

This problem, as it turned out, was a typical case of a compromised password – not a particularly unusual event. To ensure your passwords are as safe as you can make them, consider adding KeyScrambler Personal to your Browser.

KeyScrambler Personal is a free plug-in for FireFox, Internet Explorer, and Flock web browsers which protects all input you type into the browser, by encrypting your keystrokes at the kernel driver level.

Cyber-crooks are relentless in their pursuit of your money and let’s face it – it’s all about the money. In the worst case scenario, your identity and your financial security can be severely compromised.

Despite the best efforts of AntiSpyware, AntiVirus, and other Internet security products, you still face substantial risks while surfing the Internet. One type of malware that can expose you to financial risk is the Keylogger.

A Keylogger is a form of spyware which, once installed on a computer, can record every keystroke that is made on that computer, and transmit those keystrokes back to a cyber-criminal. The function of a Keylogger is to steal passwords, bank account numbers, and other personal information.

KeyScrambler 2

When you type on your keyboard, the input travels along a path within the operating system before it arrives at your browser. Keyloggers plant themselves along this path and observe and record your keystrokes. The compromised information is then sent to the cyber criminal who will exploit your passwords, bank account numbers, and other personal information.

By encrypting your keystrokes at the keyboard driver level, deep within the operating system, a Keylogger can be beaten since it can only record the encrypted keys, which are indecipherable.

Unlike AntiVirus and AntiSpyware programs that depend on recognition to remove Keyloggers that they know about, KeyScrambler will protect you from both known and unknown Keyloggers.

I’ve been using this great little plug-in for over a year and I feel more secure logging in than I once did. Despite this, I change all of my passwords frequently, since doing so, is just common sense.

Quick facts:

Protects user input in all parts of the browser against key-loggers.

Protects login credentials, credit card numbers, passwords, search terms and more

Works with IE, FireFox, and Flock: Java, Flash, PDF Forms

Email protection including Yahoo, Hotmail, and Gmail.

No learning curve.

Protects against Keyloggers even on security compromised computers

Requires no effort on your part after installation

In the top 5 FireFox Extensions for security and privacy

System Requirements: Windows 2000, 2003, XP, Vista (32-bit and 64-bit), and Windows 7 (32-bit and 64-bit).

Download at: Download.com

Setting your password correctly is vitally important to ensure your safety and privacy, on the Internet. Read how to do this correctly by visiting TechPauls site, and taking a look at “A Word About Words — Passwords, That Is”, which includes a link to a freeware application which makes password management a snap.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

47 Comments

Filed under Anti-Keyloggers, Browser add-ons, cybercrime, Don't Get Scammed, Don't Get Hacked, downloads, Firefox Add-ons, Freeware, Internet Explorer Add-ons, Internet Safety Tools, Windows 7, Windows Tips and Tools, Windows Vista, Windows XP

Download Free Microsoft Security Essentials – Kill Malware DEAD!

image Microsoft Security Essentials, which incorporates antivirus, antispyware and rootkit protection, all under one roof, was released by Microsoft as a free  replacement application for the late, and unlamented, Windows Live OneCare.

I’ve been running Security Essentials for eight months, or so; first, as a beta tester, and now the final product, on my Win 7 machines. Backed up, of course, by my usual, on demand security applications, including Malwarebytes’ Anti-Malware and SUPERAntiSpyware.

Testing this application under real world conditions, has reinforced my initial positive review of Microsoft Security Essentials.

So, I’ll just cut to the chase here:

Microsoft Security Essentials is a no cost viable alternative to overhyped, and often overpriced, more familiar security applications.

A simple, intuitive, and easy to use interface makes Microsoft Security Essentials straightforward to setup, customize, and run, for both less experienced and expert users alike.

Microsoft Security Essentials is a first class security application; fast, efficient, and effective.

Provides full real time protection against viruses, spyware, and other malicious software. Very few “free” security applications, provide full real time protection which makes such an application valuable, only as an on-demand secondary scanner.

A simple command interface:

MS Security Essentials

A simple settings/options screen:

MS Security Essentials 2

A simple scan result screen – in this case a “clean” result:

MS Security Essentials 3

Or, a potential threat warning screen – following an injection, in this case, of a malware file:

image

Fast facts:

Easy to set up and run, particularly for new users.

The interface is positively simple offering Quick Scan, Full Scan, or Custom Scan.

Scans all drives including removable drives, and creates a system restore point

Full real time protection against viruses, spyware, and other malicious software.

The Dynamic Signature Service (DSS), a technology that helps ensure users are protected by the most current virus definitions available, without having to wait for the next scheduled download, is a major positive step for the average user.

Using DSS, Security Essentials validates suspicious files in near real time – a huge advantage for average users.

Actions from unknown sources such as unexpected network connections, attempts to modify privileged parts of the system or the downloading of known malware, all trigger requests for updates from DSS – another major advantage for the average user.

Runs unobtrusively in the background with an easy to understand warning system. Green – you’re good to go. Yellow – caution. Red – action required.

Very lightweight in terms of system resource usage – as opposed to some security applications that are well known resource hogs.

Malware identification and removal, in my experience, has been much better than average in real time extended testing, and not just in a 30 minute wonder test!

Quick scans are very fast, but full scans are slightly slower than average. However, if I’m infected, fast or slow is not a personal consideration – detection and removal of malware is.

System requirements: Windows XP, Vista, Vista x 64, Win  7, Win 7 x64

Download at: Microsoft

Microsoft Security Essentials is a first class security application; fast, efficient, and effective. I highly recommend that you take a close look at this program.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

12 Comments

Filed under Anti-Malware Tools, Antivirus Applications, Don't Get Scammed, Don't Get Hacked, downloads, Free Anti-malware Software, Freeware, Microsoft, Software, Windows 7, Windows Tips and Tools, Windows Vista, Windows XP

ZoneAlarm Pro 10 – Free Today Only!

image Check Point Software will once again offer a free (a $40 value), one day only, download of their highly rated flagship product, ZoneAlarm Pro. This free offer will also include a one year subscription to updates, support, and services.

Note: The offer is valid from 6am PST 10/13/09 – 6am PST 10/14/09.

I recall that the last free offer from Check Point Software (November 2008), was extremely popular, so get there early and avoid getting caught in server overload.

Fast facts:

Powerful multi-layered security and protection

Operating System Firewall

Network Firewall

Program Firewall

Anti-Spyware, Identity Theft Protection

Simple to install (step-by-step installation wizard gets you up and running quickly)

Easy to use (color-coded guides and secure “out of the box” settings)

Triple Defense Firewall protects against hackers and spyware

Anti-Spyware scans for and removes spyware

SmartDefense service keeps your security updated with the latest Internet threat information

ID and Privacy Protection

Email Security which detects and quarantines malicious email attachments

Automatic Wireless Security which detects and secures wireless networks

image

System requirements: Windows 7, Windows Vista, Windows XP

Download at: Zone Alarm

If you enjoyed this article, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

16 Comments

Filed under Don't Get Scammed, Don't Get Hacked, downloads, Free Firewalls, Free Full Versions, Interconnectivity, Online Safety, Safe Surfing, Spyware - Adware Protection, System File Protection, Windows Tips and Tools

Scareware Not Swine Flu – An Epidemic Nevertheless!

Cyber crooks are continuing to develop and distribute “rogue software”, also known as “scareware’,  at a furious pace; there are literally thousands of variants of this type of malware currently circulating on the Internet.

Unless you have had the bad experience of being trapped by this type of malicious software, you may not even be aware that such a class of software even exists. The average computer user that I speak with informally, has no idea that rogue applications even exist.  But they do, and distribution has now reached virtual epidemic proportions on the Internet.

It’s all about the money:

Rogue software is software that uses malware, or malicious tools, to advertise or install itself. After the installation of rogue software, false positives; a fake or false malware detection warning in a computer scan, are a primary method used to convince the unlucky user to purchase the product.

Rogue security software can write itself into multiple parts of the operating system, and in many cases it can hide its files, registry entries, running process and services, making the infection, in many cases, virtually impossible to find and remove.

As well, the installation of such malware can lead to a critically disabled PC, or in the worst case scenario, allow hackers access to important personal and financial information.

(Current Internet infections – courtesy of Panda Security)

The highest rated articles on this Blog, in the last 12 months, have been those associated with this type of malicious software. It’s easy to see why.

So how much money is really involved here? Lots -according to Panda Security, approximately 35 million computers are infected with scareware/rogueware each month (roughly 3.50 percent of all computers), and cybercriminals are earning more than $34 million monthly through rogueware attacks.

image

(An example of a current rogue security application)

Recently, a reader of this Blog made the statement “These people (cyber criminals), should stop doing this and get a real job”. The obvious answer to this of course is – this is their real job! How many jobs – a relatively easy job at that – could produce this type of income?

The following two examples taken from this Blogs readers’ questions, illustrate the consequences of becoming infected by rogue security software.

Victim #1What do you do if you were duped into buying the XP Antivirus software? Should I take any precautions such as canceling credit card and/or email passwords etc.? Is my home edition of avast! 4.8 Antivirus enough to keep me safe from bogus and/or rogue software???? Please help…my computer is my life! Thank you.

Victim #2I unfortunately fell for the “virus attack” after trying to remove it, gave in and bought the XPAntivirus. They charged me not only for what I had bought but charged me again, $ 78.83 for something which I hadn’t ordered, nor ever received. It was a nightmare trying to get in touch with anybody.

I finally connected with a guy with an accent, who told me to E-mail the billing service re: my problem. I wrote them tried to call, it’s been a week, and they still won’t contact me to clarify what occurred. I printed off a purchase order from them when I bought the XP which verifies what I received. Anybody know what state their in, I’ll notify the states attorneys office. These people are crooks.

(These two readers were responded to privately.)

If you become infected by this, or other scareware (rogue software), have your PC worked on by a certified computer technician, who will have the tools, and the competency, to determine if the infection can be removed without causing system damage. Computer technicians do not provide services at no cost, so be prepared for the costs involved.

If you feel you have the necessary skills, and you want to try your hand at removal, then by all means do so. The following removal solutions will be invaluable.

The individuals / companies, who wrote and developed these free tools, and who offer free removal advice, are to be congratulated for giving back, so freely, to the Internet community.

Without their generous efforts, those infected by rogue applications, would be faced, without the assistance of a professional, with the unenviable task of performing a complete system reinstall, with a strong probability of losing irreplaceable Hard Drive data.

Free resources:

Malwarebytes, a very reliable anti-malware company, offers a free version of Malwarebytes’ Anti-Malware, a highly rated anti-malware application which is capable of removing many newer rogue applications.

411 Spyware – a site that specializes in malware removal. I highly recommend this site.

Bleeping Computer – a web site where help is available for many computer related problems, including the removal of rogue software. This is another site I highly recommend.

SmitFraudFix, available for download at Geekstogo is a free tool that is continuously updated to assist victims of rogue security applications.

What you can do to reduce the chances of infecting your system with rogue software.

Be careful in downloading freeware or shareware programs. Spyware is occasionally concealed in these programs. Download this type of program only through reputable web sites such as Download.com, or sites that you know to be safe.

Consider carefully the inherent risks attached to peer-to-peer (P2P), or file sharing applications.

Install an Internet Browser add-on that provides protection against questionable or unsafe websites. My personal favorite is Web of Trust, an Internet Explorer/FireFox add-on, that offers substantial protection against questionable or unsafe websites.

Do not click on unsolicited invitations to download software of any kind.

Additional precautions you can take to protect your computer system:

When surfing the web: Stop. Think. Click

Don’t open unknown email attachments

Don’t run programs of unknown origin

Disable hidden filename extensions

Keep all applications (including your operating system) patched

Turn off your computer or disconnect from the network when not in use

Disable Java, JavaScript, and ActiveX if possible

Disable scripting features in email programs

Make regular backups of critical data

Make a boot disk in case your computer is damaged or compromised

Turn off file and printer sharing on the computer.

Install a personal firewall on the computer.

Install anti-virus/anti-spyware software and ensure it is configured to automatically update when you are connected to the Internet

Ensure the anti-virus software scans all email attachments

If you enjoyed this article, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Comments Off on Scareware Not Swine Flu – An Epidemic Nevertheless!

Filed under Don't Get Scammed, Don't Get Hacked, Firefox Add-ons, Free Anti-malware Software, Free Security Programs, Freeware, Internet Explorer Add-ons, internet scams, Malware Advisories, Online Safety, Panda Security, Rogue Software, Rogue Software Removal Tips, Scareware Removal Tips, Software, System Security, Windows Tips and Tools

Need Spyware, Virus, and Browser Protection? – Free Solutions

Searching out, downloading, and installing free security programs from the Internet may appear to be a “no brainer”, given the vast quantity of such programs out there in the wild blue of the Internet.

The problem, as I see it, for the casual computer user, is not the availability of these programs, but which ones work; which ones have a deserved reputation for quality and functionality.

I’ve been involved in system and Internet security for many years, and I have tested the following recommended applications and their updates over those years for reliability, functionality, and quality. These programs have a strong and loyal following that is well deserved.

Anti-virus software:

avast! Home Edition

This anti virus app is a real fighter, scanning files on demand and on access, including email attachments. Let’s you know when it detects mal-ware through its shield function. An important feature is a boot-time scan option which removes mal-ware that can’t be remove any other way.

AVG Anti-Virus Free Edition

AVG Anti-Virus Free now incorporates protection against spyware through a new combined anti-virus and anti-spyware engine as well as a “safe-searching component” which has been incorporated into the new AVG Internet Security Toolbar. This program scans files on access, on demand, and on schedule and scans email incoming and outgoing.

Avira AntiVir PersonalEdition Classic

This anti-virus program offers comprehensive protection with an easy to use interface. In the eight months I have been testing Avira I have been impressed with its performance, and I have come to rely on it as my primary anti-virus program. I highly recommend this one.

Anti Spyware Software:

Spyware Doctor Starter Edition

Spyware Doctor Starter Edition from PC Tools is an excellent choice, as a secondary line of defense. This free version of the award winning program, with its easy to use interface, is used by millions of people worldwide to protect their computers; it’s reported there are a million+ additional downloads every week. Be aware however, there is no real-time protection offered with this version and this is the reason I recommend this application as a secondary scanner only.

Spyware Terminator

Having tested virtually all of the major anti-spyware applications over the past year or more, I’ve settled, for now, on Spyware Terminator primarily due to its strong real-time protection against spyware, adware, Trojans, key-loggers, home page hijackers and other malware threats. Spyware Terminator excels in strong active protection against know and unknown threats. If anything, I find it perhaps a little overly aggressive. On the other hand, better this than the alternative.

Internet Browser Protection:

SpywareBlaster

SpywareBlaster prevents ActiveX-based spyware, adware, dialers, and browser hijackers from installing on your system by disabling the CLSIDs (a system used by software applications to identify a file or other item), of spyware ActiveX controls. A secondary but equally important function offered by SpywareBlaster, is its ability to block spyware/tracking cookies and restrict the actions of spyware/adware/tracking sites in Internet Explorer, Mozilla FireFox, Netscape, Seamonkey, Flock and other browsers.

Since SpywareBlaster doesn’t scan for or clean spyware, but as stated earlier, prevents installation only, you should use it in combination with Spybot Search & Destroy and/or Ad-Aware, in addition to your normal anti-malware security applications to gain the maximum amount of protection.

Web of Trust (WOT)

WOT is a free Internet Browser add-on (my personal favorite), that has established an impressive and well deserved reputation. WOT tests web sites you are visiting for spyware, spam, viruses, browser exploits, unreliable online shops, phishing, and online scams, helping you avoid unsafe web sites.

Adware Protection Software:

Ad-Aware – Anniversary Edition

In my view, Ad-Aware Free is the best free adware remover available. It does a good job of protecting against known data-mining, Trojans, dialers, malware, browser hijackers and tracking components. The only downside with the free version; real-time protection is not included.

Firewalls:

Comodo Firewall Pro

The definitive free firewall, Comodo Firewall protects your system by defeating hackers and restricting unauthorized programs from accessing the Internet. I have been using this application for 10 months and I continue to feel very secure. It resists being forcibly terminated and it works as well, or better, than any firewall I’ve paid for. This is one I highly recommend. Amazing that it’s free!

PC Tools Firewall Plus

PC Tools Firewall Plus is a powerful free personal firewall for Windows® that protects your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network. By monitoring applications that connect to the network Firewall Plus can stop Trojans, backdoors, keyloggers and other malware from damaging your computer and stealing your private information.

ZoneAlarm Basic Firewall

The free version of ZoneAlarm lacks the features of ZoneAlarm Pro’s firewall. Its program control asks you regularly whether to allow programs; for some this can be intrusive and annoying. But it’s been around forever it seems, and it can’t be shut down, or out, by mal-ware.

Additional System Protection:

WinPatrol

Do you want to get a better understanding of what programs are being added to your computer? Then WinPatrol is the program for you. With WinPatrol, in your system tray, you can monitor system areas that are often changed by malicious programs. You can monitor your startup programs and services, cookies and current tasks. Should you need to, WinPatrol allows you to terminate processes and enable, or disable, startup programs. There are additional features that make WinPatrol a very powerful addition to your security applications.

HiJackFree

If you are an experienced/advanced computer user and you’re looking for a program to strengthen your anti-malware resources, then HiJackFree is one that’s worth taking a look at. This free application, from EMSI Software, offers a potent layer of additional protection to add to your major anti-malware programs. The program operates as a detailed system analysis tool that can help you in the detection and removal of Hijackers, Spyware, Adware, Trojans, Worms, and other malware. It doesn’t offer live protection but instead, it examines your system, determines if it’s been infected, and then allows you to eradicate the malware.

HijackThis

HijackThis is a free utility by Trend Micro which heuristically scans your computer to find settings that may have been changed by homepage hijackers, spyware, other malware, or even unwanted programs.

This application has a well deserved reputation for being aggressive in tracking down unauthorized changes that have been made to your system/applications.

The program doesn’t target specific programs, but instead it analyses registry and file settings, and then targets the methods used by cyber-crooks. After you scan your computer, HijackThis creates a report, or log file, with the results of the scan.

Because of the heuristic methods (behavior analysis), used by HijackThis, the results of the scan can be confusing/intimidating to those who are not advanced users. On the other hand, the strength of this program lies in the large community of users who participate in online forums, where experts (voluntarily and for free), will interpret HijackThis scan results for you, and then provide you with the information you need to clean any infection.

Despite the fact that you may only need this small application infrequently, it deserves a place in your anti-malware toolbox.

ThreatFire

ThreatFire blocks mal-ware, including zero-day threats, by analyzing program behavior and it does a stellar job. Again, this is one of the security applications that forms part of my front line defenses. I have found it to have high success rate at blocking mal-ware based on analysis of behavior. Highly recommend this one!

SnoopFree Privacy Shield

SnoopFree Privacy Shield is a powerful application that guards your keyboard, screen and open windows from all spy software on Windows XP. I have been using this application for quite some time, and I have been amazed at the number of programs that have requested access to my keyboard and screen. In particular, programs that I am in the process of installing. If you’re serious about privacy, this is a must have addition to your security toolbox.

Sandboxie

Surfing the Internet without using Sandboxie is, to me, like jumping out of an airplane without a parachute. Deadly! This application creates a “Sandboxed” protected environment on your machine within which you browse the net. Data that is written to your hard drive is simply eliminated, (or not, your choice), when the sandbox is closed.

Utilizing this application allows you to surf the web without the risk of infecting your system with mal-ware or other nasties. This is another security application I have been using for over a year and it has yet to let me down.

KeyScrambler Personal

KeyScrambler Personal is a free plug-in for FireFox, Internet Explorer, and Flock web browsers which protects all input you type into the browser from Keyloggers. This free version of KeyScrambler encrypts your keystrokes at the kernel driver level.

By encrypting your keystrokes at the keyboard driver level, deep within the operating system, a Keylogger is beaten since it can only record the encrypted keys which are indecipherable.

Unlike AntiVirus and AntiSpyware programs that depend on recognition to remove Keyloggers that they know about, KeyScrambler will protect you from both known and unknown Keyloggers.

Good luck and safe surfing.

If you enjoyed this article, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

10 Comments

Filed under Anti-Keyloggers, Anti-Malware Tools, Antivirus Applications, Browser add-ons, Don't Get Scammed, Don't Get Hacked, Firefox Add-ons, Free Anti-malware Software, Free Firewalls, Freeware, Online Safety, Software, Spyware - Adware Protection, System Security, Windows Tips and Tools