Bill Bennett
knowledge workers – for people paid to think for a living

Archive for the ‘Malware’ tag

Panda Cloud Antivirus is a hidden gem

with 7 comments

When it comes to free PC security applications Panda Cloud Antivirus is hard to beat. I first wrote about it in August, since then it’s moved forward slightly, but the software is still relatively unknown. However, I suspect it will quickly gather momentum as people catch on to the software.

Unlike other security tools, Panda does most of its work in the cloud – that is, it is a software-as-a-service application. It sends data about dangerous looking files off to its servers for closer inspection.

Because your computer doesn’t have to do the hard work, Panda imposes almost no overhead. When I benchmarked my PC there was no performance difference between the system running the software and having the software switched off – there may however be a network overhead, but again, nothing I could measure.

Panda’s other big advantage is the malware checking database is always bang-up-to-date. There are no signature files to download.

One issue I have with Panda is the program is so trouble-free, it is easy to forget. You barely notice it. I previously described Microsoft’s Security Essentials as “barely there” – Panda Cloud is even more nebulous.

The program also appears to be better than the other free antivirus products at trapping malware. I previously ran it for a month without any issues and have run it for the past three or four days with no ill effects.

I’d say it is the most promising free anti-virus application on offer. Presumably at some point the developers will need to make some money. I’ll be interesting to see how that develops. For now, this is possibly the best free choice.

Of course, you may prefer not to leave your computer’s protection in the hands of free software makers.

Reblog this post [with Zemanta]

Written by Bill Bennett

November 9th, 2009 at 4:39 pm

Watch out for fake antivirus

with 2 comments

Symantec’s SMB director for the Pacific Region Steve Martin says crooks have duped millions of customers into buying fake security software products. And the middlemen peddling the dodgy wares have grown fat on the proceeds.

At best the programs do nothing to protect computers from viruses and other threats. However, some of the fraudulent applications on offer contain malicious code which can give crooks access to data or worse.

Martin warns the companies selling these programs online have a plausible-sounding sales pitch. In some cases they place advertising with Google and other ad networks. But more often visitors to web sites stumble across pop-ups delivering what looks like a legitimate message telling people their web site security needs updating.

Perhaps the most frightening aspect of the scam is the way people are lead to a safe-looking payment page asking for credit card and other details. Many unwitting consumers who have handed over these details find their private information is then passed on to other crooks who can extract more money from their accounts.

Symantec’s warning stems from an internally produced study report on rogue computer software.

Reblog this post [with Zemanta]

Written by Bill Bennett

October 22nd, 2009 at 6:01 pm

Posted in Uncategorized

Tagged with Malware, Security, Symantec

Computer security guide: 3 defensive software

with 2 comments

Measure of Security
Image by B Tal via Flickr

A whole range of security products can help protect your computer. Some are traditional packaged software others are online services. Here’s a list of the types of security software applications you are most likely to need:

Anti-virus

Designed to keep your PC free of infection, anti-virus programs generally use two different approaches. First, they use large databases – known as signatures – which are matched against incoming files to identify potential threats and block them.

Although signature files are updated regularly, with some vendors running daily updates, while others updating signatures every hour or so, this isn’t always enough. Virus writers are engaged in a constant battle of wits against antivirus specialists and aim to ‘fly under the radar’ with fresh malware.

The worst code can often spread faster than distribution of signature updates. So most antivirus programs now include tools designed to identify suspicious virus-like behaviour from unknown files. These files are then flagged as potential threats and treated accordingly.

Anti-virus is a misleading name these days. Almost every anti-virus program provides protection from a range of different mal-wares.

Firewalls:

Firewalls control the flow of internet traffic to and from your computer. They can be hardware devices – if you use a router it may have a built-in firewall – but in most home set-ups they tend to be software.

Firewalls have two main functions. They act as a gate, stopping unwanted traffic from entering your system. At the same time, they should stop unapproved traffic from leaving your system. For example, if there’s a spyware program on your computer monitoring your activities, a properly configured firewall will stop that information from being sent. Equally, if you are infected by, say, a worm, a firewall won’t let it get out and infect others.

Be warned that the firewall in Windows XP only stops incoming traffic; it will only protect you up to a point. You should invest in a commercial firewall product – they are all bi-directional.

Unlike antivirus programs, which can be installed and forgotten, firewalls can be complex to operate. If you set things up incorrectly, you may leave your computer vulnerable. Alternatively, you may hinder legitimate traffic – this can be especially difficult if you operate a home network. The best firewalls will automatically configure themselves, but they tend to err on the side of caution blocking any unusual application.

Anti-spyware

Also known as spyware blockers. There’s a thin line between antivirus and antispyware tools – in fact some commercial security products now combine the two functions in a single application. Good antispyware products will detect and remove both spyware and adware from your computer. It should also block this kind of software from being installed. Some spyware will be detected by a firewall when it first attempts to send data back to base.

Spam Filters

A program designed to stop, or at least drastically reduce, the amount of spam turning up in your email in-box. Spam filters can save you time and money sorting through rubbish emails but most home and small business computer users don’t need to worry about filtering spam. That’s because many ISPs and web-mail providers now use anti-spam filters to check mail before it is downloaded to your computer or read in your web browser. Also, modern email programs, like Microsoft Outlook 2007, have built-in spam detection tools.

See also:

Computer security guide: 1 introduction
Computer security guide: 2 what are the main threats?

Computer security guide: 4 how to buy security tools
Computer security guide: 5 what to buy or download for free

Reblog this post [with Zemanta]

Written by Bill Bennett

February 15th, 2009 at 9:17 pm

Computer security guide: What are the main threats?

with 13 comments

The online security problems facing home users and small businesses are different from those facing larger companies and corporations. Here’s a list of threats you may encounter:

  • Malware: Is the generic name for all malicious software. Some people also talk of greyware which refers to software that’s annoying rather than dangerous.
  • Virus: A small program designed to automatically copy itself from one computer to another. Viruses are attached to other pieces of software or hidden inside images, games and music files. They usually travel from machine to machine by email, instant messaging or file transfers. Although some viruses are harmless, most are disruptive, the worst can stop a PC from working.
  • Worm: Also a self-replicating program, but unlike viruses, worms can automatically travel from machine to machine without being attached to other pieces of software. This means in addition to any other damage they slow networks because they can consume bandwidth.
  • Trojan: The name given to a program which looks harmless, but has an unexpected malicious purpose. Some start their mischief immediately they are loaded, others may wait for a period of time, possibly collecting data without the computer owner’s knowledge.
  • Spyware: A program designed to collect information about a computer and its user that the spyware author can use to make money. Typically spyware may monitor your web browsing and target pop-up advertising at you or divert you to other web sites.
  • Rootkit: A program designed to modify a computer’s operating system to hide the behaviour of other malware.
  • Keylogger: Software that collects keyboard input – possibly to collect passwords or important account information. Keyloggers can then send this information back to criminals allowing them to impersonate users and, for example, robbing their online banking accounts.
  • Botnet: Programs used to control, update or trigger activity in previously infected systems.
  • Backdoor: A way of getting undetected access to a computer system.
  • Zombie: A computer being controlled by another user to perform some malicious online tasks.
  • Spam: Unwanted email, instant messages or other form of electronic communication. Spam clogs email inboxes and the sheer volume of spam (as much as 95% of all email traffic) slows networks.
  • Phishing: is when someone fraudulently tries to get hold of important information such as passwords and bank account details by pretending to be a trustworthy source. Phishers may send authentic-looking emails asking for the data or with links to a fake web site.
  • Adware: Strictly speaking this isn’t a threat, but an annoyance. It refers to any software that bombards you with unwanted advertising.

Computer security guide: 1 introduction
Computer security guide: 3 defensive software
Computer security guide: 4 how to buy security tools
Computer security guide: 5 what to buy or download for free

Reblog this post [with Zemanta]

Written by Bill Bennett

February 14th, 2009 at 4:40 pm