PC Security Information

PC Security - Scan, Clean and Protect

<ADMINNICENAME> — Sat, 20 Oct 2007 16:38:40 +0000

PC Security - Scan, Clean and Protect

I’ve been talking with my friends David and Tom about PC Security and we all have different views on the subject. Mostly due to our background and what we do for a living.

The quotes are things they have said and then you’ll get my take on the subject.

So let’s get started!

“PC Security” works in 1 of 2 ways. If you lack the knowledge to handle it, an all out, kill it all approach is what the security package manufactorers have decided you need. Never mind what it breaks while “protecting” your computer.

The other path is to have software that can do almost anything, but passing on the burden on deciding what and when to do what to the user. And most people doesn’t have a clue about what the questions asked are all about.

Quote:

searching for virtually non-existent threats?

Eh, I would hardly call it non-existent (se next quote).

Quote:

Times evolve, threats evolve, sources of threats change. I just don’t agree with taking an approach that keeps piling on more and more stuff to deal with new threats and sources, and never removing the older stuff that’s obsolete.

I completely agree with the evolution part. But I don’t think there’s much to remove.

Quote:

Originally, viruses were little DOS programs that used common system calls to insert themselves onto the Interrupt Service Vectors that serviced disk reads and writes. They’d install themselves as “TSRs” and just create havoc with the hard drive. I don’t believe that Windows 2000, XP, or Vista will even allow ANY programs to access the Interrupt Service Vectors, let alone install themselves as TSRs. Windows does everything using DLLs now. TSRs went out after Windows NT was released.

TSR or “Terminate Stay Resident” programs were normal software that used a special interrupt to load and in a way stop showing the user they were loaed, and still keep on running.

Viruses have been using TSR techniques back in the dos days but far from all viruses used that. And the most important reason for using it was that a pc only ran 1 program at a time and unless you somehow faked people into beleiving they were running a program while actually runiing a virus, the only way to be in the loop was by intercepting interrupts.

With an event driven operating system with built in message queues there’s no reason to fiddle with interrupts anymore and as far as TSR goes, any one can create the gui version of an TSR fast and easy as almost any program used in a multitasking, even driven operating system can be used in the same way as the old dos TSR.

The best known “TSR’s” in the windows world can found among the services (autostarts and run in memory without the user doing anything) and other types of software like anything that is minimized down to the task bar or even just running without any icon.

Hiding processes and services under the radar by having them run under svchost is another often used method to keep a software “hidden” or “secret”.

Quote:

So why run security software that sifts through apps looking for signatures of viruses that are designed to run as TSRs? Every disk read and write gets inspected! That’s my beef. Over 80% of the threats most “security software” is looking for are obsolete.

I think it would be a logistic nightmare to have signature files with only exact the possible “infectant signatures” for every possible version of windows. Technically it could be done of course but with people running at least windows 95 and up there would be a lot more to keep updated compared to have all signatures in one file.

But to be honest, I’ve never seen exactly what is in a signature file so I can’t really say how much of the signatures are unique for obsolete code.

Inspecting every disk read and write seems reasonable for me as part of a signature can be certain ways of doing disk read or writes. Especially now as signature based virus (or threath) analysis is falling back more and more and heuristic analysis is coming strongly.

Signatur based threath analysis is still the fastest way but in many cases very insecure for any modern virus (and all the group of adware, spyware, trojans, badware, backdoors …) as the regeneration time and easy of mutating code has made it possible to change a signature in virtually no time at all.

As code makers gets more creative in their ways of hiding code and find new ways of using alternative infection ways and bad code installation methods like piggy backing on semi.harmless code or plainly managing to get a “harmless” piece of code into a computer and let that program in turn download and install the bad code in stages, the ways of finding, stopping and repairing has become equally complex.

Heuristic evaluation with MCA (Multi Criteria Analysis) and virtual machines where “suspicios code” can be run and tested are now common techniques to combant these problems.

The problem is that more complex threaths do increase the complexity of the code that is protecting you from the problems as well. Making an resource impact on the computer where they run.

Quote:

Nonetheless, people have been bamboozled into believing it’s necessary to suck up a huge percentage of CPU resources looking for these innocuous “threats”. Meanwhile, they get attacked from something new neither they nor their security software vendor has even heard about yet, and think they got hit by a “virus”. So they renew their subscriptions and update all of their anti-virus databases…. to what avail?

I do agree fully with the fact that the “security” industry is trying to push multi-bega-super-security packages into all the computers they can find. More of their code=more profit and less competitors that have software installed.

And so far I think no one of the big packages are usable. They all have massive amounts of crap bundled just to “give value for money” and the only thing the acomplish is to mess up computers.

And simple is alwas better then complex when it comes to security. The more pieces and configuration options there are, the less likely it is that it will work as promised.
[/quote]

Quote:

Is there a reason to upgrade your computer to a 3GHz machine with 2GB of RAM if the newest OS plus newest security software chew up half of that RAM and half of the CPU bandwidth, leaving you with a “brand new” 1.5 GHz machine with <1GB of usable RAM? Errr... why did you upgrade again?

That’s why I use AVG for antivirus and not symantec or panda for example. I can actually use my computer and still have AVG running!

Security Software

Software created to help you with your security, antivirus software, spyware remover, system cleaners, trojan killers, anti spam solutions and similar are a must today. No one should use a windows computer without having at least a firewall and an antivirus software.

I’ll be posting more thoughts and details about this subject soon.

There. some thoughts of my own and ultimately I think that what I said boiled down to more or less the same as what David thinks about security software, I just took another way to get there!
Kenth

Related blogs

The Business Protector
The Toolwiz Blog

Tags: Pc-security,scan,virus,threat,registry,spyware,trojan,clean-pc,fix-registry,repair-registry, bots,botnet,bot-net,root-kit

PC Security

<ADMINNICENAME> — Wed, 29 Nov 2006 12:04:37 +0000

Pc Security

Would you like to learn more about pc security, spam, intrusions, backups and a whole lot of other things related to your pc and the security related to owning a pc?

I thought so!

Go and get your free pc security ebook and start reading.

The best defence is to know your enemy, so read about it all and start improving your defences and protection today!

Tags: security, trojan, pc, spyware, virus, backup

Computer Security, Identity Theft, Information Loss, Trojans and Spyware

<ADMINNICENAME> — Mon, 06 Nov 2006 20:58:36 +0000

Trend Micro Study Reveals that Data and Identity Thefts Top Consumer Security-Worry List, But Many Admit to Poor Security

Consumers are concerned about data and identity theft with the vast majority banking and shopping online, yet many have not taken adequate security measures to protect themselves

Cupertino, California – September 18, 2006 – Trend Micro, Incorporated (TSE:4704, NASDAQ: TMIC), a leader in antivirus and Internet content security, today released findings from a study that reveals the extent to which consumers in the United States fear identity and data theft. In particular, the findings highlighted that the majority of respondents do bank and shop online and many store sensitive, personal or financial data on their laptops, however almost one third of respondents admitted to not securing their laptops against theft.

With the busy lives that people nowadays live, many carry laptops and other electronic devices with them, and so new risks and concerns beyond traditional security threats such as car theft and burglary, have emerged. According to the study by Trend Micro, over a third of respondents are very worried about data theft (32 percent) and identify theft (33 percent) in the cyberspace, while only 14 percent of participating consumers indicated that they are very worried about car theft.

The study also showed that 82 percent of respondents regularly make purchases online with a credit/debit card, while 71 percent bank online. This trend is a clear indication of an “on-the-go,” ever busy lifestyle, where technology plays a major role. Worryingly, around a third of respondents (31 percent) admitted to not protecting their laptops while almost 60 percent of participating consumers admitted to storing sensitive or confidential information on them.

Scan and Secure Your Computer Now

Among those consumers whose laptops are used to store sensitive information, a quarter of them do not take any measures to secure their laptops.

Overall, the study indicated that while the majority of users were aware of and concerned about security risks, a large group still lack sufficient security measures to protect them from identity and data fraud although they proactively conduct personal transactions online. Also, only one third of the consumers that participated in the survey (31 percent) indicated that they believe that retailers are doing enough to protect them during online transactions.

“It is reassuring to see how many consumers are now actively aware of the threats posed by computer related crime, but the large number of laptop users still without security is greatly disturbing,” said Carol Carpenter, vice president, marketing, consumer products and services, Trend Micro. “As laptop usage grows in-line with today’s Internet lifestyles, security-aware consumers are looking for advanced security solutions that extend beyond their computers and enable them to remotely protect themselves from data, identity theft and fraud.”

Key findings include:

• Consumers are slightly more likely to leave sensitive or confidential information on their laptops (58%) than in their cars (55%).

• 58% of consumers store sensitive or confidential information on their laptops. Among them:
- 84% store contact information (names, addresses, phone numbers, etc.) on their laptops
- 69% store personal digital content (photos, videos, music, games, etc.) on their laptops
- 63% store bank/credit card information on their laptops

• Of those surveyed, 31% of consumers do not have their laptops protected. Among those consumers who store sensitive information on their laptops, a quarter of them do not take any measures to secure their laptops.

• 82% of consumers reported that they regularly make purchases online using bank cards. 71% of them reported that they conduct online banking regularly.

• Close to half of the consumers would purchase security software if it enabled them to remotely lock down their laptops in the event that they are stolen.

• Only about a quarter of the consumers believe that their current security software on the laptop will adequately protect their sensitive information from being used if their laptops were stolen.

Trend Micro helps consumers stay secure with its Trend Micro™ Internet Security suite. The suite comprises the PC-cillin™ engine and anti-malware protection and TrendSecure™ a security solution purpose-built for computer-connected consumers. TrendSecure is currently available in English and Japanese. Designed with improved protections to combat malicious cyber-threats like rootkits, spyware, phishing, spam, hackers, viruses, WiFi attacks, smartphone threats and more, Trend Micro Internet Security suite offers active computer users comprehensive security in an automated, easy-to-use package whether they are on-the-go in cyberspace, or on-the-go in the physical world.

Additionally, users can further protect themselves using the new TrendSecure component which offers Remote File Lock™, enabling users to get on the Internet and remotely lock down their private/financial files in the event their laptop is lost or stolen. Transaction Guard™ uses a secret keyboard to protect users’ online transactions conducted at internet cafes or public WiFi hotspots where keyloggers can potentially steal passwords and other private information.

Trend Micro Inc.’s “Stay Connected. Be Protected.” Sweepstakes

Between 09/18/2006 and 11/30/2006, in North America, consumers who register with Trend Micro either by downloading a trial version of the new Trend Micro Internet Security, or upgrading to Trend Micro Internet Security or purchasing the new Trend Micro Internet Security, will be entered into Trend Micro’s “Stay Connected. Be Protected” Sweepstakes. Trend Micro will be giving away 5 Grand Prizes. Each Grand Prize includes a high-perfomance, wireless-ready Dell™ Laptop AND a $1,000 American Express gift card for an online shopping spree. For further information please visit: http://www.trendmicro.com/en/home/us/personal.htm or
http://www.trendsecure.com/subscription_info/subscription_info.php .

Survey Methodology:
The survey was conducted online in August 2006 among U.S. consumers who are aged 18 and above, drive a car and own a laptop for personal use. More than 700 consumers from across the United States responded to the survey.

About Trend Micro, Inc.
Trend Micro Incorporated is a pioneer in secure content and threat management. Founded in 1988, Trend Micro provides individuals and organizations of all sizes with award-winning security software, hardware and services. With headquarters in Tokyo and operations in more than 30 countries, Trend Micro solutions are sold through corporate and value-added resellers and service providers worldwide. For additional information and evaluation copies of Trend Micro products and services, visit our Web site at www.trendmicro.com.
# # #
Trend Micro, the t-ball logo, PC-cillin and TrendSecure are trademarks or registered trademarks of Trend Micro Incorporated. All other company or product names may be trademarks or registered trademarks of their owners.

Free Download and Scan of Your Computer!

Or read more about virus, security, trojans, identity theft, spyware and adware.

Tags: spyware, loss, theft, information, cyber, thief, laptop, trend, micro, symantec

Top 3 List of Spyware Removers

<ADMINNICENAME> — Fri, 03 Nov 2006 20:07:59 +0000

Come and See our Handselected Top 3 List of Spyware Removers

go to spyware-removers-reviews.com now!

Tags:spyware,adware,malware,trojan,ad-ware,antispyware,remove,infected,clean,bad,error,
problem,software ,unsolicited,error,virus,cleaning,delete,remove,fix,antivirus

Spyware Protection: A Must for Any Home Computer

<ADMINNICENAME> — Fri, 03 Nov 2006 19:57:35 +0000

“Our Selected Top Spyware Remover. Free Download & Scan!”

Now that spyware is the single most dangerous threat to home computers connected to the internet today, getting your hands on some sort of spyware and adware protection is critical. Spyware has outpaced computer viruses in its prevalence, and in the kind of damage it can do to your system.

If you plan on using your home PC to do anything on the internet, even minor emailing or a little light surfing, this kind of protection is a must-have.

What is spyware? Spyware is basically any kind of software that gets installed on your machine without your knowing it, and tracks your actions on the internet for marketing purposes, or causes your computer to perform tasks that you didn’t request.

You can accidentally get this stuff installed on your computer, by downloading trials and demos of certain programs that have it “bundled”, like a lot of file sharing programs, (a lot, but not all of them) viewing email attachments, or even just visiting certain websites. Sometimes you get lucky and all it does is put a cookie or two on your machine and influence the types of banner ads you see (based on your web surfing habits) or give you a few pop-up ads.

Increasingly, though, companies are getting away with distributing spyware that hijacks your web browser home page, adds unsolicited desktop icons, and pollutes other parts of your web browser, like the screen you see when you hit “search”, and the page you get sent to if you misspell a web address. Instead, all you’ll see are pages of ads. There’s now a new breed of spyware that works like a Trojan Horse virus. Many log your keystrokes, passwords, logins, etc, typed in over a week or so and deliver them to the perpetrator. This is so serious that my antivirus program even catches this spyware. If you let this happen to you, you’re leaving yourself open to some serious, serious privacy violations, not to mention likely fraud or identity theft.

Probably the most serious kind of spyware of all, however, affects your email programs. Some will send out a solicitation email to every person in your address book and “sent” items folder. Some spyware just tacks an annoying advertisement onto every email you send out. And these aren’t the kinds of solicitations you would want any association with, either. This kind of stuff is the most serious of all, in my opinion. How would you like to have your boss get an email from you telling him to visit a distasteful porn site?

You can probably see by now that getting good spyware protection is more important than anything else. Viruses aren’t really a huge deal anymore, because most people have some kind of antivirus programs, and viruses just aren’t produced and distributed as much as they used to be. But the problem is, even the best antivirus software out there still doesn’t take care of spyware; it’s a different classification.

One of the main reasons spyware is so widespread is that it’s mainly all still legal. Viruses aren’t as much of a problem anymore because the people who start them almost always get tracked down, and sent to jail. But with spyware, most of what these components do isn’t really malicious. You’d have to prove some kind of harm. So you saw a few ads. The case could often be made that you initiated whatever process got it on your machine anyway.

Anyone who tries to commit fraud against you by using spyware also won’t really be doing it out in the open, so they probably won’t get caught. It makes more sense to just get some good spyware protection and keep this from happening in the first place.

Two of the better programs out there meant to deal with this are Adaware and Spysweeper. I use both, but from what I’ve seen, Spysweeper seems to detect more different pieces of spyware that get on my system.

Also, while they’re meant to complement one another, one feature Spysweeper has that Adaware doesn’t is that it watches specific components of Windows for you, like your “Startup” programs, web browser “favorites” and your browser homepage. All changes get reported to you. You decide right then and there if you want to let it happen.

Adaware has a similar system, but lets you set it to deal with, and prevent any such changes to your system, without even asking you. It’s like having your own digital bodyguard, watching your computer for you while you’re free to surf.

If you’re serious about your PC’s security and your privacy on the internet, spyware protection is not an option, it’s a must!
Phil Moyers, writer of Build Your Own Computer Plan shows computer novices how to save a ton of money by putting together fast, high performance PC’s of their own with handpicked, quality parts.

“Free Download and Scan of Top Spyware Remover! Go Here Now to be Safe!”

Tags: spyware,protection,removal,virus,antivirus,antispyware,badware,adware,malware,key,loggers,
intrusion,email,unsafe,unsolicited