Antivirus solutions

[JamesAnderson]

I've heard much good about the Microsoft offering. I would think that using that, Cloud Antivirus, and K9 content filtering with its spyware/malware sources/effects ratings would trap almost everything. I've also heard that Kaspersky is good for a home user as well.

[crees]

I think the biggest problem I find with major antivirus companies is that they lask the ability to protect from the new wave of malware, spyware, rootkits etc. Most of all the infections today are unorthodox to the traditional virus infection methods. Todays infections use tricky Trojan Horse methods to get you infected. Many computers that I have cleaned had fallen victim to bogus emails, compromised websites and free media sites that kids visit etc.

Now on topic.... here are SOME of the ones I personally found to be effective

Protection and removal:
Kapersky Antivirus
Comodo Antivirus (Free and paid versions)
AVG (Free and Paid versions)

Detection and Removal Programs:
Malwarebytes (free and paid versions)
Kapersky's removal tools (free and paid)
Hijaththis (Free HOWEVER only for experienced users)
ComboFix (Only to be used in conjuction with a qualifed computer tech)


FYI the latest outbreak of malware seems to be using the tdss rootkit clas type of infections. If you find that your browser searches are being redirected and you are getting any fake windows restore and bogus windows antivirus programs, then you may have a rootkit infection (one of the hardest to remove and fix) Using tools from Kapersky (tdss killer) and malwarebytes will usually clean this type of infection however you must be carefull since it deals with system files and registry and could easily brick your windows OS (could require you to reload your os)

[JamieLBradley]

I recently attended a Symantec anti-virus seminar and yes they say it takes on average 45 days from the day they identify a new virus to when they release a fix/update. the viruses are becoming more complex or more completely simple, they are getting very hard to detect.

Your best defense is:
- Safe Browsing (know where you are going, Look at the address before you click the link. The address to a link is usually shown at the bottom of your browser window when you point at a link, if it does not show up there is usually an option to turn it on.)
- Limit Popups (use a popup blocker)
- Antivirus (keep it on and updated)
- Malware remover (keep it updated and do a FULL scan about every 2 weeks)
- Email Safety (if you don't know the person the email is from or it looks suspicious do not open it. Email is not secure!!! Don't send Financial info, ie credit card, bank account numbers, in an email. Banks do not use Email for financial info you should not either.)


I would like to add to crees list of good software:
Eset - NOD32 Antivirus (about the same price as others, does not take up alot of system resorces and I found in 2 cases it finds stuff the others did not find.
Malwarebytes (worth mentioning again - Free and Paid version)
Spybot Search and Destroy (a good Malware and spyware remover - Free)

[Mikerowaved]

Your best defense is:
- Safe Browsing (know where you are going, Look at the address before you click the link. The address to a link is usually shown at the bottom of your browser window when you point at a link, if it does not show up there is usually an option to turn it on.)
- Limit Popups (use a popup blocker)
- Antivirus (keep it on and updated)
- Malware remover (keep it updated and do a FULL scan about every 2 weeks)
- Email Safety (if you don't know the person the email is from or it looks suspicious do not open it. Email is not secure!!! Don't send Financial info, ie credit card, bank account numbers, in an email. Banks do not use Email for financial info you should not either.)

I'm surprised they left off one of the most important defenses and that's to always keep your OS and apps fully patched and up to date. There's a lot of older malware out there still running strong that exploits long since patched vulnerabilities, only because people (and businesses) haven't applied the free patches.

[russellhltn]

Keeping the apps up to date isn't easy. Adobe seems to require as much patching as Windows. Java and Apple Quicktime has their problems as well. The internal updaters is not always the best. I use the Secunia on-line scanner. Home users can use the Personal Software Inspector.

[chromed]

i used mac ever since and its been safe for any virus out there only thing is there not much apps available for mac but for security i put my money on the best OS out there

but since i work as a IT we put NOD32 as the antivirus software and as far as we tested NOD32 is on the top of list on every antivirus we tested not to mention its important that its always updated

[jbowne]

Having worked in the technology industry for over 20 years I have seen the extreme on both ends - no protection and everything works fine - to lots of protection and still have pretty major issues. The best solutions I have seen so far for the least cost include:

Microsoft Security Essentials - yes this is only a windows product, but in context to windows - this one is available via windows update, which sometimes if malwrare or a virus gets on you can't get to the internet as it hijacks the browser. Hackers are getting smarter and trying to block windows update, but this is a good one to know. The Microsoft Security Essentials is free and it is the same agent / operations as the Enterprise solution (named Foreront Endpoint Protection) so you are getting commercial grade AV/AM for free - the difference is just how the solution is managed (i.e. you manage it yorself on the free version). The other thing I like about this solution is the premise of what Microsoft looks for in regards to malicious behavior is just that behavior analysis, not just the standard (problem, create pattern to fix problem, push pattern , fix problem) approach. Who better to know what kind of behaviors are malicious than the makers of the OS. To me this is a much more sustainable type of system as it lends to the potential of being able to detect and block malicous behavior without an updated pattern needing to be created (notice I said potential

Smart browsing - not a solution but talked about in another thread. Don't go to questionable sites. If you are on windows - go get IE9, the improvements on security / in private browsing to secure your info etc.. are well worth it.

Keep OS / apps / patters up to date - also mentioned by Mike I think. If on windows ensure you are on the latest service pack level and all patches are applied. Set your windows update service to download and install patches automatically so you don't forget. Personally I run windows 7 ultimate (you really only need Home premium) and I reboot my system 1 time every 2 weeks - otherwise I leave it on and utilize power management etc.. that way all my maintenance happens overnight (patching, defragging etc...) and I have yet to have ANY issue with viruses / malware etc.. The biggest pains to me are iTunes and Adobe software - I have to update these applications literally 1 to 2 times a week, this puts microsoft patching to shame IMO.

On a side note - mac systems are ok, it is more of a preference. I would not say they are more secure as they were recently rated #1 as the most vulnerable OS followed by Oracle then Microsoft. I was surprised at this but it makes sense at a higher level with hundreds of millions of copies of windows and the sheer volume of windows in all verticles of business - it is the most targeted OS. When Apple gets there they will get attacked just as much. Just my thoughts.

[RatietaT]

What antivirus software do you guys used? I have been using Kaspersky and have been pretty happy with it so far.......

[RatietaT]

Thanks for the information. I have been using Kaspersky and so far, very happy with it....

I think the biggest problem I find with major antivirus companies is that they lask the ability to protect from the new wave of malware, spyware, rootkits etc. Most of all the infections today are unorthodox to the traditional virus infection methods. Todays infections use tricky Trojan Horse methods to get you infected. Many computers that I have cleaned had fallen victim to bogus emails, compromised websites and free media sites that kids visit etc.

Now on topic.... here are SOME of the ones I personally found to be effective

Protection and removal:
Kapersky Antivirus
Comodo Antivirus (Free and paid versions)
AVG (Free and Paid versions)

Detection and Removal Programs:
Malwarebytes (free and paid versions)
Kapersky's removal tools (free and paid)
Hijaththis (Free HOWEVER only for experienced users)
ComboFix (Only to be used in conjuction with a qualifed computer tech)


FYI the latest outbreak of malware seems to be using the tdss rootkit clas type of infections. If you find that your browser searches are being redirected and you are getting any fake windows restore and bogus windows antivirus programs, then you may have a rootkit infection (one of the hardest to remove and fix) Using tools from Kapersky (tdss killer) and malwarebytes will usually clean this type of infection however you must be carefull since it deals with system files and registry and could easily brick your windows OS (could require you to reload your os)

[skiddlyarcus]

This thread started in 2007 and is still running ... and it will keep running forever if we continue to try to solve this problem using signature based anti-malware solutions (all of the solutions listed fall into that category). In reality, the number of viruses created every day has effectively overwhelmed the capabilities of all antivirus products. You should still use antivirus. However, if you really want to prevent malware, you need to change the solution to a whitelisting application instead of a "blacklist" approach.

If you are having problems with malware, look into one of the whitelisting applications or some application that will lock the configuration of your computer. A good write up on application whitelisting is at http://www.dsd.gov.au/publications/Appl ... isting.pdf. There aren't a lot of packages targeted to home users, but if you want peace of mind, try out lumension or bit9 or McAfee App Control or Coretrace.

+1 for the recommendation of Secunia PSI. If you haven't installed it on your windows computers, you should. It's a fire-and-forget patching system available for free to home users. Just enable automatic patching and your system will be much more protected.