MyFox
 

DeweyDevil's Blog

by DeweyDevil from Plymouth Meeting

Last Post 174 days, 12 hours Ago


Recently some folks got into an uproar over something their "norton" picked up off of a website. I thought about it and I since I got no warning while visiting this website was I  infected? The answer is no. I am not infected nor did  I get a warning because I do not use norton or any "suite" of products to be my one stop shop for firewall,spyware and anti-virus.

I am not a hacker, but I do know most so called  "hackers" you hear about today are either script kiddies that are just teenagers trying out exe files they found on warez websites or botnet attacks which are dangerous and usually affiliated with organized crime.

So with that said. Do you have a suite of net protection all from the same company like norton offers and I believe mcafee does as  well? If you do and you also invest in the stock market, do you invest all your money in 1 stock or do you diversify? I would assume you have a 401k that diversifies your investment to get you the most reward while minimizing risk?

Well here is something to think about. Microsoft is the target of choice for hackers because its the most popular operating system. Hackers also love these suite or one stop shops of firewall,spyware and anti-virus. Why? Because they only need to really crack one program like your firewall to gain access to the other programs associated with norton  or mcafee or whatever your suite is. Its a domino effect. You also will get alot of false positive readings from these one stop suite packages. Like many did last night while visiting a particular website.

Something to also think about, these suites are resource hogs on your system slowing them down to a crawl at times while they update or scan.

Whats the solution? Have a seperate anti-virus, firewall and spywarekiller program all from different companies and different programmers. So you are thinking man thats gonna cost alot. Well my friends I am about to list programs that are free.

Thats right free!

Keep in mind I have used free firewall, anti-virus and spywarekillers for 6 plus years and have never had an infection on any of my systems and I goto some crazy sites.

So lets start with your firewall.

Microsoft xp and vista offer very minimal protection in their offerings. Think of that firewall as just a toll taker on a bridge. Not really much enforcement there and not much protection.

If  you are a comcast subscriber just goto your comcast.net homepage and sign in and download the mcafee firewall for free. It is a sound program that does a nice job.

If you are not a comcast subscriber try out comodo's free firewall located here.

http://www.comodo.com/products/free_products.htmla>

Now for anti virus- if you are a comcast subscriber and are using the mcafee offering for your firewall dont use the same company's anti-virus. You fall into the lack of diversity trap mentioned earlier.

I highly recommend  http://www.avast.com/eng/avast_4_home.html 

It is not a resource hog and updates its virus definitions regularly and constantly scans your system and e-mail.

Another excellent free offering is http://free.grisoft.com/doc/download-free-anti-virus/u
s/frt/0

Now grisoft-avg is more technical than other offerings and it can be a bit of a resource hog at times but it does an excellent job as well.

Finally- spyware/adware/malware.

Adaware and spybot search and destroy are very popular but in some ways too popular and the free versions sometimes dont update that often.

I will make only one recommendation here.

http://www.spywareterminator.com/

The above spyware scanner works in real time blocking anything it deems naughty.

Although they want you to install their webcrawler toolbar which you dont need if you use the google toolbar.

So in closing feel free to continue using the suite of protection you currently use if you think its best for you.

But there are options out there that have many advantages over a one stop shop.

I want to meet the hacker who can break through 3 different companies programs vs the hacker that can cut through just one companies programming department.

 

The hacker who can cut through three different independent programming departments almost deserves access to my system. lol

 

Blah the blog is acting up....  read everything and the links will take ya somewhere safe I just cant guarentee if they take you to the exact program but they are all good. lol

 

 

 

7 Comments |  Add a Comment

Member Comments Total Comments: 7
Page 1 of 1
snowbrain read my blog view my photos
Aug 6, 2007 | 8:28 PM

terrific information, i will download the free protection tomorrow

you are truely MISTER KNOW IT ALL

electrons read my blog
Aug 7, 2007 | 7:31 AM

Actually, it is better to have a "hardware" firewall in todays networking. If you have a DSL or cable modem at home, you most likely have one built in if you turn it on. Most people do not even know a firewall is built in, so use it! Many experts have proven it is OK to remove software firewalls as long as the hardware firewall is active. You can also block all outbound traffic from specific ports and tweak your system as you like. As the above mentions, most software firewalls (especially XP) are in a sense, useless.

Though viruses and spyware protection mentioned above is important, BotNets are still the #1 threat out there right now and no virus protection can stop them. That, my friends takes lots of common sense on the web. Once you are infected with a Botnet, the ONLY solution is a complete re-install. Most BotNets know how they are trying to be removed and replicate during the process. I wrote a long blog about BotNets if you wish to educate yourself.

In addition, be careful what you download! Some programs claiming to be virus and spyware removers are spyware themselves. When evaluating one of them, I found it had turned my printer into an SMTP mail server which was used to send emails. Not cool! I notified the authorities. Be paranoid.

Be careful out there...

DeweyDevil read my blog view my photos
Aug 7, 2007 | 10:02 AM

I use a router as well. I did not recommend it because social engineering can have people disable certain aspects of their router and they wont even know they are doing it if they are not familiar with port settings etc.

I like double redundancy with a software and hardware firewall.

electrons read my blog
Aug 7, 2007 | 12:43 PM

On paper, it seems like redundancy, but in reality, it is not. BotNet payloads install themselves in pieces or chunks of code. No consumer level "free" antivirus or malware software will catch this technique. From this point, the payload uses actual windows files to make or "compile" itself into the program it was designed to be. I told you these guys are good! I did a security study for a company once and what we found was disturbing. The network had layers upon layers of security, yet it was infected and no one knew it for months. What finally discovered it was monitoring outbound traffic on all segments for certain patterns.

Great topic Dewey! I can talk about this one all day. P.S. While we are on the subject, I bet 99% of people in Philadelphia have the default settings in their wireless routers, making them open to everything no matter what they have installed. For instance, go to http://192.168.1.1 If a user and password pop up, rather than me telling you that anyone can get in at this point, let me please tell you to change your default IP address!!!

DeweyDevil read my blog view my photos
Aug 7, 2007 | 1:20 PM

oh yah lets not forget an oldie but not just a goodie... but a greaty!!

www.grc.com

The shields up test is still a great way for folks to see how they are doing securitywise.

ibejim read my blog view my photos
Aug 18, 2007 | 1:51 PM

Good stuff dewey. Norton av or thier suite is sheer bloat-ware. It found one trojan on my computer in the three years i used it ,and it could'nt remove it!I had to go to thier website and follow the instructions which included editing the windows registry! Real fun for the average computer user.Now lets talk about deleting norton,can't do it using windows add/remove program. You have to download the norton removal tool,and that still might not get everything! I've been using avg for two years and it's been fine,and it's free.Avast's boot-time scanner is a plus (if you have two av programs don't have real time protection running for both!).A couple of free programs i want to mention...hijackthis!,Autoruns & process explorer from sysinternals (to bad these guys got gobbled up by microsoft,you must download them from microsofts website)ccleaner is an exellent drive cleaner that comes with a bare bones registry cleaner which is safe for the novice user to use. Hijackthis is an excellent program, because you can run it, Save the logfile and post it on websites that will anylize your logfile and tell you what you need to do.Just don't remove anything unless you know what your doing! Go to majorgeeks.com if you want to download any of these files. I highly recomend majorgeeks for just about any kind of computer related downloads you desire,an absolute treasure trove!

David_Aldrich read my blog view my photos
Sep 12, 2007 | 11:32 AM

DeweyDevil read my blog view my photos
Sep 12, 2007 | 10:39 AM

ms word? re-paved hard drive?


mmmm

geek talk gets me all tingly!

________________________

In a word. Scary. LOL.

Page 1 of 1


Write your comment below:




DeweyDevil

Hot summer nights and my radio!

Member Since: 2/13/2007