Discussion on:

138
Comments

Join the conversation!

Follow via:
RSS
Email Alert
Every limb should be removed. Therefore they can never type again and never create more malware.
0 Votes
+ -
Let's punish the real criminals. I'm referring to the politicians inside the Beltway who are determined to destroy net neutrality in a you scratch my back, I'll scratch yours deal with Comcast and other providers. The real danger of malware is the risk of infecting our national electronic infrastructure and our defense-related "hack-proof" networks. But the politicians are too busy squabbling with each other, intruding into our personal lives, encouraging companies to send IT jobs overseas, and begging for handouts on K-Street to protect our general welfare. That's why I believe in "Capitol" Punishment - let's get smart and vote everyone in both parties out of office.
You are correct; laws already exist -- in some countries -- to prosecute cyber-criminals, since their actions are criminal regardless of the medium involved. It just gets kind of frustrating when they seem to get away with it because they can't be found, or because they're in with the power structure wherever they happen to be operating. Sometimes when I get really frustrated, I tend to overreact a bit.
In the media and political mouthpieces, we have three feared horsemen of the Apocalypse; Cybercrime, Cyberespionage, Cyberwar.

They are all nothing new; same mundane crime, spying and warfare that's always gone on. They all get the "cyber" preface not because they involve implanting electronics in the body to mimic and enhance existing functions, but to make them sound like cool soundbites.

Crime accounts for the highest financial damages. Espionage accounts for the second highest. "cyberwar" accounts for very little true physical or financial damages. But the politicians gov contractors would really like you to ignore the reality of that last horseman.

So, which do we focus on? The answer from experts is.... none of them. They are all symptoms of our accepting shoddy products with ignored security defects. You fix the security defects and the three horseman go away. Crime and Espionage only use computer systems because the development quality enables them to. One does not have a computer break in because someone cracked there security; they have a computer break in because the computer system had unaddressed security flaws.

This focus on a "cyberwar" bookieman and need for a specialized branch of the military is also very much a US obsession.

It was a rather nice article to have pop up in my morning reading (TR's sister CNet no less):

http://news.cnet.com/8301-27080_3-20024210-245.html
0 Votes
+ -
A pattern???
jacobus57 8th Dec 2010
So, like the notoriously self-promoting, MS-kissing Deb Shinder, Brien Posey is ALSO an Microsoft MVP. Interesting that both of these "authors" are "award-winning." Methinks that TechRepublic needs to vet its contributors just a wee bit better...
0 Votes
+ -
also employs at least one MVP, and several writers with the same credentials, and nobody is accusing them of favoritism?

Now if you were to say this about ZDNet, I might agree, but then I hate ZDNet, so I digress.
I would personally rate Avast Free Anti-Virus higher than the AVG counterpart. Have been using Avast for 3 yrs now and comparing with other Anti-virus tools, I can say (from my personal experience) that it is better and much lighter than any of Norton and/or McAfee's paid versions (These are the only ones I've tried apart from Avast and AVG)..
0 Votes
+ -
Thumbs up!..
JCitizen 11th Dec 2010
thumbs_up
The author has missed the boat
Melwarbytes is the best program and it is not on the list, viurs scanners are NOT good melware removers
Windows Defender? I've never known it find anything more after I've run AVG, MBAM, SuperAntispyware, SpyBot and Spyware Terminator. That lot usually cleans up, with CCleaner, often using Safe Mode for some of it.
But some times the nasties are more than usually stubborn. The variety of responses just confirms this - the variability of installations and users means we all need to be open-minded, and regularly read stuff like this to see what other people have found useful.
I've just downloaded Hitman Pro to add to my list of Weapons of Muck Destruction.
0 Votes
+ -
I agree
philajr007@... 9th Dec 2010
There is no "Wonder Program" or "Wonder Combo Program" that wil fit all situation.

One thing I found to help is ClamAV Free AVG and Free MBAM
You can't go wrong with the combo of MS Security Essentials and MBAM. I used AVG in the past, but MBAM found malware AVG did not. I haven't looked back since. Best part is they're both free!
0 Votes
+ -
Article OBSOLETE!!...
JCitizen Updated - 11th Dec 2010
In today's threat-scape; definition based anti-malware/virus are totally obsolete.

Avast comes closer to a modern utility than most because of it's heuristic engine. But I have four(or more) freebees to add that will actually help mitigate an infected environment, if you do banking or shopping on line.

I realize this article is supposed to be about free malware utilities only, but that is just not going to cut it, and I try to draw attention to this every time I get a chance - SORRY!

1. To block SSL session riding - Rapport
2. To prevent keyboard and video spying - KeyScrambler
3. To prevent inputting private information to the hard drive- LastPass
4. To watch/stop file manipulation processes - WinPatrol
5. To totally prevent hard drive writing - Steady State(XP)
6. AdAware's AdWatch is actually one of the better free malware real time prevention utilities going, MBAM and SAS real time prevention are not free. I don't complain about RAM requirements, all my clients have over 1Gb of RAM anyway - it is not a factor now.

Some of these don't particularly need an update for definitions, only to harden and modernize, which they all do magnificently. Simply keeping all your applications, drivers, and operating system fully up to date, can keep many exploits from pwning your system regardless of defined threat! CNET's own update reminders can help, but also Secunia PSI and/or File Hippo's update checker will do a pretty thorough job of it.

For the newbies out there; learn how to set up a standard account and only use it for daily web work. If you have Vista/Win7 you will have to give installations administrative log on to those accounts. It is a lot easier than logging off and onto the administrative side of your PC as in XP.

The built in UAC is your friend an probably one of the best free processes that can keep you safe than any other single built-in feature, on Vista and Windows 7.
0 Votes
+ -
what bout avira?
BCheever 13th Dec 2010
I don't even see it on the list. The free edition works very well in my testing...
From Title to content, it was completely wrong. Most of what was said (including Avira) are virus scanners, not malware scanners.
0 Votes
+ -
I agree..
JCitizen Updated - 14th Dec 2010
I must admit though, that I personally look at the word "malware" as an all encompassing word.

In other words - a virus can be malware, but malware cannot be a virus. I know that is goofy, but since there isn't a very good industrial agreed definition; I've been running with that for a few years now.
Right?
So all viruses are malware, but not all malware are viruses.
Key-loggers, screengrabbers, trojans, and all that, it's malware too, and sometimes there's no point in differentiating.
Counter-malware apps however is a problematic term; is it catch-all software that tries to stop/detect/remove all the existing kinds of malware? Or is it a cover-term that includes specialized tools for detecting AND/OR stopping AND/OR removing even one of the types of malware?

That's the problem with the name of the blog.
The problem with the content of the blog is that it's not a good list.
0 Votes
+ -
Fer sure!...
JCitizen 16th Dec 2010
happy
0 Votes
+ -
Too slow...
JCitizen Updated - 14th Dec 2010
for older PCs anyway; my clients get hosed by known injection attack packets even though Avira recognized the definition.

They have a world class scanner though.
1 Vote
+ -
Avast! YES!
rroberto18 Updated - 13th Dec 2010
I've tried them all and although no one program catches everything, this comes the closest. Minimal learning curve, Updates fast. Few false positives. It's the one I run with. As cross-checks, I use (but do NOT run as resident/background): HitManPro (cloud), Emsisoft, Malwarebytes, SuperAntiSpyware. Gave up on MSSE because Windows Security Center wouldn't recognize it -- but that was an earlier version & I know many love it now.
well, darn i was hoping for something that would tell me WHY i keep get booted off facebook all the time.. sometimes i get a pop up about dr debug wormer.or something..i can't find anything about this and it makes me nuts.. it is only when on facebook i get completely booted off IE
The business model behind Facebook relies on you keeping the browser open and reloading the website. It's more likely something on your local machine causing your browser to crash. (not being physically present, I'm just guessing of course)
any idea what it could be as that is the only place i ever am when i get kicked off IE
0 Votes
+ -
Hopefully...
JCitizen Updated - 17th Dec 2010
it is just run-of-the mill nasty cookies or malware causing your problem. I can't do without the following list.

CCleaner
AdAware
MalwareBytes Anti-Malware(MBAM)[paid license]
SuperAnti-Spyware
SpywareBlaster

and of course I mentioned Avast already. CCleaner works amazingly well for getting rid of temporary files or cookies that interact with those misbehaving files.

I've been playing with the new MBAM outgoing malicious IP blocker, and I've found everytime I can't open a page, it is because of temp files trying to communicate with a bad server that is blocked by host file or MBAM. If I run CCleaner, it instantly fixes the communication problem, because it gets rid of the offending files FAST!

AdAware with AdWatch does this automatically, but I really like MBAMs IP blocker, as it tells me who the malware are trying to communicate with. Then I run a WHOIS search on that IP to get an idea who the bad guy is - providing it isn't some private address inside an ISP - in which case there isn't really a solution.

CCleaner is a quick, fast, down, and dirty solution that doesn't need signature files, so I like cleaning with it when researching bad sites. You must be logged into a standard account to keep safe on this - though. Perhaps you've heard of the limited account in Windows?

I have read that occasionally someone's account at FB gets compromised, and the owner has to change their password and have FaceBook reset the account to fix the infection or settings problem they are facing. Google for FaceBook security settings, to get a good look at how to configure your profile for security properly at FB.

FaceBook will never be secure, but at least one can mitigate the problem some.
for clearing out the rubbish?
When I looked at CC, I thought, okay - I'm too impulsive for this tool. I'd be reinstalling in no time wink
So it'd be great to hear which cleanups are safe to use, in your experience? I won't hold you responsible for them, don't worry about it.
0 Votes
+ -
For this particular problem..
JCitizen Updated - 18th Dec 2010
cleaning all temp and cookie files will do. Both in the system and browser files. In applications I check everything except in browsers.

I always delete:

Internet Casche
Cookies
Download History
Saved Form Information
Session

On the Windows tab in system:
Empty recycle Bin
Temporary Files
Clipboard

Windows Explorer:
Recent Documents
Run(in Start Menu)

In Internet Explorer:
Temporary Internet Files
Cookies
Autocomplete Form History

I never select all of them in Windows, unless I've been hosed by a bad installation or malware attack. Even cleaning "Wipe Free Space" can defeat some malware that hide in free space marked for deletion.

For cookies that need saving, click on Options>>Cookies and save the cookies you want there.

I use CCleaner a lot, because it is so effective and so damn FAST!! devil

(edited) You may need to close Mozilla to get a thorough cleaning.
0 Votes
+ -
files vs reg
Neon Samurai 13th Feb 2011
I don't add too much to the default checkboxes for file cleaning. The worst I've done is blow away browser cached passwords getting a little too zelous about clearing out browser cruft. I've not seen it lead to a reinstall yet.

Registry cleaning is another story; I've seen it lead to reinstalls depending on frequency of cleaning and tool used. CCleaner is probably the only reg cleaner I trust but even then I don't use that function unless there is clear reason to run a vaccum through the hive. Unless malicious, orphan entries don't slow the system down since the reg is a lookup database; random access versus tape storage.. so to say.
0 Votes
+ -
to muck up the registry, on purpose to see if the CCleaner registry backup worked. I did a repair, that I knew wouldn't work, but it was a junker and I didn't care. It put everything back in its place and never a problem since. In the hundreds of machines I've done registry cleans on, I've never hosed a system.

I only run it if I have just had a bad malware attack or if I've uninstalled some pesky software.
0 Votes
+ -
UAC alerts...
JCitizen 16th Dec 2010
I've had the Vista UAC stop files from FaceBook that can't be found in any definition or google anywhere.

Needless to say, you can be attacked on FB; I've been lucky! It took only logging in as far as user interaction on my part!

Have you tried Mozilla or Chrome?
1 Vote
+ -
no to Chrome..tried mozilla before .should i just use that all the time then??
i am kinda lost in this forum..trying to find comments..LOL.
so thanks for your answers..
0 Votes
+ -
Mozilla with NoScript is good...
JCitizen Updated - 17th Dec 2010
if you don't give a web-page too much permission. Avast has a page script scanner that looks for bad scripts and blocks them. It only occasionally slows IE8 down, but I like it even better than NoScript. However since FireFox is the only secure browser besides Chrome now, I use it with NoScript also, just because FF is such a good browser!

SpywareBlaster has a good active X blocker that can't hurt, because some crackers still put those kind of exploits on web pages, although they may not be as common now. Most of these solutions use little or no RAM at all. They leave the CPU processes light as well!
1 Vote
+ -
Pro
The above comments are excellent with many good recommendations.

Here are a few that were left out:
- rkill, so the others will work
- customizing the Hosts file to prevent infection, http://www.mvps.org/winhelp2002/hosts.htm
- using WinPatrol portable to remove BHOs that HijackThis! cannot remove
- using Nirsoft's IECacheView, IEHistory, IECookieView, MozillaCacheView, MozillaHistoryView, MozillaCookiesView to track down the source of the infection
I run AVG and MWB and never have a problem with IE. I run both freeware products and AVG runs constantly and I run MWB once a week with no problem.
1 Vote
+ -
I would count you lucky....
JCitizen Updated - 1st Jun 2011
as every one of my clients that have attempted to use AVG has ended up with a hosed system. Some of them were hosed by malware, and the rest were hosed by AVG!!!

(edited) You may be misunderstanding why I mention more than one AV here. AdAware Free does not run an active anti-virus, only a passive one. This is how I can run more than one anti-virus. You cannot run more than one AV real time protection scheme; I've seen some systems get hosed doing that.

Also you could add Prevx to that list, as it is a cloud based solution, that does not interfer with the installed AV. It is also a kernel space solution, that is impossible to conflict with anything other than other kernel space solutions. I quit using it because it is not as affective as Rapport for protecting against spy session riding, and it conflicts with Defense + in Comodo. Some of my clients like it though, as they either can't run the others or simply don't like them.

You cannot remove viruses with it though(Prevx), even though they say you can with the paid version. I found that it was better to let CCleaner or another AV remove the virus. I was glad to know I had the infection, or potential infection, though.

(edited) for clarity. Also - one must turn off the real time virus protection in the AdWatch part of the AdAware console. This is true even on the free one now. It is a paid in the pat-toot, but still worth it to me. I now understand Spybot Search and Destroy has finally come out with a new and improved version. One could switch to it and probably get almost as much real time protection as AdAware - perhaps even more - I need to re-evaluate it.
0 Votes
+ -
neon samarai
Harry Reinbot 13th Feb 2011
did you try running your machine in safe mode and then running your anti-virus and anti-malware software. Don't mean to make you sound silly, but LOTS of people would not think of this.
1. MBAM
2. Spybot S&D
3. Combofix

With friends and family constantly asking me to clean PC's & Laptops these 3 have never failed me. If you have a stubborn infection you cannot get rid of, disable System Restore, reboot & use these 3 programs for easy and free infection removal.
0 Votes
+ -
Wow, with the two previous posts I read, "definately"? (definitely misspelled!), and a complete lack of punctuation before that. Are these educated people? I'll go look at more of the site now, leave the couple guys that I saw to play with their Speak and Spells.
2 Votes
+ -
Moderator
Wow!
wizard57m-cnet 16th Feb
You do realize that you are posting to a thread that is over 2 years old?
Yet your primary concern is with grammar and spelling, and all you have
to say is some childish remark about other members.
Guess what Joe...the group already left this discussion 2 years ago and
you are talking to...an empty room. Feeling better about your command
of the English language and your Spelling Bee Championship from
elementary school that you were just awarded?
Wizard57M
TR Moderator
Keyboard Shortcuts:
Prev
Next
Toggle
Join the conversation
Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

Join the TechRepublic Community and join the conversation! Signing-up is free and quick, Do it now, we want to hear your opinion.