Protecting your computer from malware.

[Seth1968]

I just heard a computer security "expert" on 770 CHQR. He was giving advice on how to protect your computer from malware. Thing is, not only did he not give any relevant advice, he gave bad advice.

He claimed the most important aspect of security was a router, and that all uses should have one. That's not helpful given that:

- Most users already have a router.

- A router does nothing to protect a system from malware. 90%+ of the computers I disinfect are using a router.

Here's some good advice on protecting your computer:

1) Do not use one of the "Big Three" antivirus programs (Norton, AVG, Mcafee). Due to their popularity, they are highly targeted. That is, malware coders will often write the infections to deliberately bypass/shut down those apps.

I suggest Eset NOD32 for a paid antivirus, and Microsoft Security Essentials for a free one.

2) No experienced computer tech would suggest using only one antimalware program in real time. Reason being, no antimalware program is 100% effective, and if something happens to corrupt that one program, then your system is totally vulnerable.

I suggest an antivirus along with the professional version of SuperAntiSpyware and a weekly scan with MalwareBytes free edition.

[se7en]

combofix from bleeping computer for the win.

also, zone alarm or something equivalent.

[Seth1968]

Originally posted by se7en
combofix from bleeping computer for the win.

also, zone alarm or something equivalent.

+1 for CF when it is used properly.

I don't much like third party firewalls, as the info is often too obscure for the average user to decipher. As such, they end up either allowing everything, or denying everything. Both of which are worse than not having a firewall.

[takkyu]

Combofix is usually reserved as a last effort. I wouldn't suggest people run that whenever they think they are infected as it can potentially flag a system file and move it to quarantine causing instability of your os. I have run into this issue once already a couple months ago.

I am not suggesting Combofix is bad, I have used it many times after malwarebytes/superantispyware/spybot/hijackthis have failed to clean a particular infection. Just don't use it as a front line defense after an infection.

[bball2]

If you think you have spyware / malware on your computer, run:

1. Spybot S&D

2. Malwarebytes

3. Combofix

Otherwise use microsoft security essentials for everyday protection. All free

[Seth1968]

I don't use HT very much anymore, other than to check the host files.

http://www.populartechnology.net/200...ijackthis.html

I haven't used Spybot in years. It flags harmless cookies as ominous sounding malware, doesn't even come close to the detection and removal ability of MB or SAS, and can prevent decent antimalware apps from removing infections. That's precisely why professional malware removal sites recommend disabling Spybot's Tea Timer.

Once a system is disinfected with the proper tools, Google "MalwareBytes", "Microsoft Security Essentials", or "Spyware Removal". If the results are redirected, then CF is in order. To run CF properly:

- Run it from Safe Mode With Networking.

- Make sure your real time protection is disabled. Note that most will be disabled in SM, but some will still run in SM and you'll have to disable them manually.

- If the above is done, ignore CF's message that "such and such" antivirus is running.

- Install the Recovery Console if requested.

- Don't use the computer until CF's log appears.

- CF should only be used on 32 bit systems.

[adam c]

No he is right, there are viruses out there that search for open networks that do not have routers/firewalls, I know because I got infected with one right after reformating a computer a couple years ago

The big ones I use and don't have any problems with are
Malwarebytes
Super Anti Spyware
I haven't used Spybot in years

For free antivirus either Avira or Avast
For paid I would use either Trend or Kaspersky

After using ESET Nod32 in a corporate environment and having it render everything useless, I will never touch that garbage again

[Disoblige]

I use ESET NOD32 Anti-Virus and love it.

[Seth1968]

After using ESET Nod32 in a corporate environment and having it render everything useless, I will never touch that garbage again.

Meaningless rhetoric which is due to IT ignorance or other computer problems that the IT doesn't know. Note that IT's know little about computer repair, let alone the specific field of internet security.

BTW- I dare you to say that on ANY malware removal site. If you do so, refer them to this thread.

Good luck with that.

[adam c]

Originally posted by Seth1968


Meaningless rhetoric which is due to IT ignorance or other computer problems that the IT doesn't know. Note that IT's know little about computer repair, let alone the specific field of internet security.

BTW- I dare you to say that on ANY malware removal site. If you do so, refer them to this thread.

Good luck with that.

it's my personal experience and I am a Systems Admin
Administration kit never worked properly
Agents didn't respond to anything
Blocking network shares to the point where some programs had to be installed locally

Mind you this was 2 years ago, maybe they got this shit straight

[Seth1968]

Sorry Adam.

I didn't mean to come across as a prick in my previous post.