Securing your Computer

**harrybarracuda** · 07-05-2012, 04:20 PM

With all the mass of malware out there, I thought it might be worth starting an up-to-date thread to help people learn how to protect their PC's from infection.

Feel free to post a description or review of your favourite Antivirus, Antispam, AntiRootkit, AntiAdware, Firewall, or other general security articles here.

I'll start by reminding everyone of the excellent Panda USB Vaccine which stops automated infections from USB drives and other storage media, and inoculates them so that they can't be infected when they are plugged into other PCs.

Of course this is not an issue unless you are still running Windows XP or Vista (pre-SP1), in which case you should turn Autorun off. And if you think it isn't much of a risk:

Autorun-based threats account for 12% of global infections

Posted on 03.05.2012

Bitdefender announced that more than four years after Autorun was eliminated from operating systems, worms that take advantage of the antiquated feature account for more than one of every ten computer infections worldwide.

Autorun-based threats, spread when users insert infected USB sticks without checking them for viruses, caused a whopping 12 percent of global infections in the first quarter of 2012. The threat persists even though the Autorun feature was eliminated from operating systems starting with Windows Vista SP1 in 2008.

“The magnitude of this threat - so many years after it should be extinct - is astonishing,” said Catalin Cosoi, Bitdefender’s Chief Security Researcher. “Some of the heavy-hitters of the virus world - such as Downadup and Stuxnet - spread this way. Prevention should be a simple matter.”

The mass introduction of USB storage devices and the apparition of the Autorun feature in Windows have been widely exploited since the early 2000s. Within five years, Autorun worms reached epidemic proportions, Autorun-based threats have dominated the malware landscape report since.

Five facts about Autorun-based malware:

1. The Autorun.inf file is not malicious itself. It is used by some families of malware that copy themselves on USB sticks to force the computer to automatically execute them when an infected stick is plugged into a Windows-based PC.

2. Among the most important families of malware that use the Autorun exploitation to spread are Stuxnet, Downadup, Sality, Rimecud or OnlineGames.

3. Autorun-based malware can copy itself on MP3/MP4 players, mobile phones, CF cards (such as those in digital cameras) and other devices. When plugged in other PCs, the malware is executed automatically.

4. Since autorun.inf files are plain-text files that can be opened and analysed, malware creators obfuscate their creations to make them unreadable by humans. However, this is also their weak point. This degree of obfuscation is uncommon in text files and triggers AV detection.

5. Trojan.AutorunInf (a detection that intercepts rogue autorun.inf files) has been the number one source of infection for more than three years in a row. During this time, it has helped various malware families infect millions of computers worldwide.

**harrybarracuda** · 07-05-2012, 04:38 PM

ZoneAlarm - Free Antivirus and Firewall

Free, integrated antivirus and firewall solution

Posted on 02 May 2012.

Check Point announced ZoneAlarm Free Antivirus + Firewall 2013 - a free Internet security solution that protects consumers against hackers, viruses, spyware, and malware.

“Most consumers are unwittingly making themselves an easy target for cyber criminals,” said Bari Abdul, Vice President and Head of ZoneAlarm, Check Point Software Technologies’ consumer business. “They lack a strong 2-way firewall, are unwilling or unable to pay for security, or they have just left their security on the back burner. People are putting themselves at serious risk by not having minimum security, which at least includes a firewall and antivirus software. It’s basically like leaving your home without locking the doors."

ZoneAlarm’s two-way firewall operates quietly in the background, monitoring incoming and outgoing traffic to and from a PC and the Internet. It blocks hackers from getting into a PC and stops them from launching attacks, stealing information, and sending data back to their home servers to conduct malicious activities.

This functionality is powered by ZoneAlarm DefenseNet, a cloud-based service that automatically verifies the safety of a program by analysing data from more than 60 million users through the cloud, eliminating overwhelming alerts and interruptions.

Meanwhile, ZoneAlarm’s powerful antivirus engine scans, detects, and removes any malicious programs. To further insulate a user’s system, ZoneAlarm’s OSFirewall adds an additional layer of protection by spotting and stopping any suspicious behavior and new attacks.

**Butterfly** · 07-05-2012, 04:39 PM

how do you turn off the Autorun thing ?

**Neo** · 07-05-2012, 04:40 PM

Good security and anti-malware programs are essential, but good browsing practice is just as important, the less you put your computer at risk the less likely it is that your security will let you down.

**Kwang** · 07-05-2012, 05:00 PM

Originally Posted by Neo

good browsing practice is just as important, the less you put your computer at risk the less likely it is that your security will let you down.

Very true, that is the great thing nowadays with these tablets, iPads and whatever, especially where kids sharing your PC are concerned. They will click on anything

**raycarey** · 07-05-2012, 05:43 PM

Originally Posted by Butterfly

how do you turn off the Autorun thing ?

this is probably the easiest way....

How to disable the Autorun functionality in Windows

scroll about a third of the way down the page and under "disable autorun", click "fix it"

looks like this:

**Marmite the Dog** · 07-05-2012, 05:55 PM

Originally Posted by raycarey

scroll about a third of the way down the page and under "disable autorun", click "fix it"

But that doesn't screw up your registry...

**harrybarracuda** · 07-05-2012, 06:52 PM

Originally Posted by Butterfly

how do you turn off the Autorun thing ?

Oh please, Buttplug, after you spent all that time telling people what a fucking expert you are on Windows XP?

**Butterfly** · 07-05-2012, 08:42 PM

^ it was a fucking joke, harryxbox, glad you liked it

**DrAndy** · 07-05-2012, 10:27 PM

most antivirus programs scan the data on a USB stick and let you know if there is a problem

so why bother?

**harrybarracuda** · 07-05-2012, 10:39 PM

^ Because 0-day malware means AV software can miss it, and be disabled.

This is what Conficker did (and still does in some cases).

**harrybarracuda** · 07-05-2012, 10:40 PM

Originally Posted by Butterfly

^ it was a fucking joke, harryxbox, glad you liked it

We believe you Buttplug. God told you to say it, didn't he?

**PlanK** · 10-05-2012, 09:30 AM

Free anti-virii tip...

The virus definitions update automatically, often the software doesn't. Go into the settings every so often to update manually.

**harrybarracuda** · 10-05-2012, 11:35 AM

I installed that Zonealarm on one of my office computers yesterday. Initially it seemed to slow things down, but as I used it more it sped up, so I'm guessing this is part of the process of learning which apps you use regularly and whitelisting them.

Other than that it's been invisible.

It does ask you to remove all other AV though, whereas Avast is quite happy coexisting with MS Security Essentials.

**FlyFree** · 10-05-2012, 12:19 PM

Here's another handy accessory.

In 500 years on computers I have had about 2 virus infections. A simple antivirus and firewall.

Those who constantly worry about dying of cancer die a million deaths instead of one.

A much better use of energy and time.

**harrybarracuda** · 10-05-2012, 01:56 PM

All of which I doubt.

But no arguments with the last bit.

**sandystevees** · 10-05-2012, 07:57 PM

My favourite antivirus software is avast.It is free and easy to downloadavast! Internet Security provides complete antivirus, anti-spyware, antispam, and firewall protection, complemented by avast! SafeZone™ and new hybrid cloud technologies, for best protection against viruses, spyware, and other types of malware in 2012.SafeZone creates a private and isolated virtual window on your desktop for safely making your sensitive financial transactions when shopping or banking online.

**FlyFree** · 10-05-2012, 08:13 PM

Originally Posted by sandystevees

My favourite antivirus software is avast.It is free and easy to downloadavast! Internet Security provides complete antivirus, anti-spyware, antispam, and firewall protection, complemented by avast! SafeZone™ and new hybrid cloud technologies, for best protection against viruses, spyware, and other types of malware in 2012.SafeZone creates a private and isolated virtual window on your desktop for safely making your sensitive financial transactions when shopping or banking online.

Great stuff.

What does it do for you if you are broke?

**harrybarracuda** · 10-05-2012, 08:21 PM

I generally use Avast, but I thought I'd try out Zonealarm since we use their appliances for corporate network protection.

I don't see much of a Checkpoint fingerprint on it mind you, but then again I haven't installed it on Win 8 yet, on which Avast works flawlessly with MSE.

**Fondles** · 10-05-2012, 08:32 PM

I use MSE/CCleaner/Malwarebytes/Spybot.

I visit some real dodgy websites and download all sorts of stuff and (touchwood) have never gotten a virus/hijacker of any sorts.

**baldrick** · 10-05-2012, 08:37 PM

with my win 7 installs

I use defender - nothing else

except , maybe you can call using firefox , adblock , noscript , noflash , ghostery something

**Marmite the Dog** · 10-05-2012, 08:46 PM

I used to use ZoneAlarm a few years ago, but it was a pain in the arse.

Now I just use AVG Free. It seems to work.

Thread: Securing your Computer

Thread Tools

Display

Securing your Computer

Thread Information

Users Browsing this Thread

Posting Permissions