Jan04

Internet Explorer 7 (IE7) is a competent browser with enough features to meet the needs of most users but is difficult to recommend due to on-going security concerns. In the past IE has been a focus for security attacks and there is little to suggest this will change with the release of IE7. Additionally, Microsoft have a poor track record for speedily fixing IE defects and this has left users open to drive-by attacks and other forms of zero-day exploits.

There are several excellent alternatives with the new Mozilla Firefox V2 [1] a solid first choice. It’s safer than IE, so safe in fact that many users have reported no spyware infections since they started using the product. It’s also browses a tad faster than IE, is very stable and is more standards compliant. The program loads slower than IE but once running, it positively zips along. With tabbed browsing and over 2000 free extensions (add-ons) that allow you to customize your experience, it provides most users with a major surfing upgrade. Firefox is now my everyday browser though I still leave IE on my PC for the occasional web site that’s designed around IE’s non-standard features. If you need any further convincing then check out my IE to Firefox migration guide [2].

An equal first choice is Opera [3]. It’s a speed demon; probably the fastest of all the common browsers. But it’s much more than that; it’s full featured, standards compliant and safe. Just as Firefox is extensible through add-ins, Opera can be enhanced using Widgets, though there are not nearly as many of these available as Firefox extensions. Then again, it doesn’t need as many extensions as a lot of the features added by Firefox add-ins are already available built into the standard Opera browser. There’s just so much to like about Opera V9 that you could easily create a case that it’s better than Firefox. Indeed, if I could get an Opera replacement for some of my key Firefox add-ins, I’d probably switch.

Continue reading »

\\ tags: , ,

Jan04

If you are looking for the best possible protection my top recommendation is Avira AntiVir Personal Edition Classic [1]. Although its detection rate is outstanding there are some reservations. First it lacks email scanning; this is only available in the paid version. That means that AntiVir won’t warn you about any infected emails before you open them. However should you open an infected email then AntiVir will still spring into action, so not having an email scanner doesn’t mean you are not protected from email based infections. My second reservation is that AntiVir is quite an intrusive product - you will certainly be well aware of its presence. Finally AntiVir Personal Edition Classic has a time limited license. It is renewable but be aware you will have to periodically go through the hoops.

If you not prepared to accept the drawbacks to AntiVir I would suggest either AVG Antivirus 7 Free Edition [2] or the Avast! scanner [3]. Neither is quite as effective in detection as AntiVir however they are both more complete products and less intrusive in use.

AVG Free has been continuously refined since it was first released in 1991 and the latest version V7.5 makes further improvements to an already solid product. Additionally, it’s relatively small, light on resources, has regular automatic updates and handles email scanning. There is a free and a pro version, the only difference being that the free version has a few non-critical features disabled and has no technical support other than a free user forum.

Continue reading »

\\ tags: , ,

Jan04

A couple of years ago most folks relied on SpyBot Search and Destroy and Ad-Aware for spyware protection. Alas spyware has evolved so quickly that these once outstanding products are no longer up to the task of providing primary protection though they remain useful as secondary, on-demand scanners.

The new generation of malware requires a new generation of defensive products. Such products need to provide stronger active protection and broader spectrum detection. The best anti-spyware programs, WebRoot SpySweeper, Spyware Doctor and CounterSpy, are all commercial products but there are three capable free products that I can recommend.

The first is a special cut-down version of Spyware Doctor that’s available as part of Google Pack [1], a bundle of free software offered by Google. Called “Spyware Doctor Starter Edition the cut down version lacks the full array of real time protection monitors possessed by its commercial big brother but still offers some active protection along with full scan and remove capabilities, scheduled scans, and free signature file updates.

Continue reading »

\\ tags: , , ,

Jan04

There’s a scumware plague at the moment. All it takes is a visit to a pushy web site or a “loaded” shareware install and next minute your Internet Explorer homepage has been changed, your default search setting altered, unwanted ads pop up on your screen and worse.

If you use Windows 2000 or later my top recommendation for safe browsing is a free program called Sandboxie [1] that creates a special contained “sandbox” environment on your PC. While browsing within the virtual sandbox provided by Sandboxie you are totally corralled off from other parts of your PC. So any files you download are isolated to the sandbox. Similarly, any programs that are executed only do so within the sandbox and have no access to your normal files, the Windows operating system or any other part of your PC.

Usage is remarkably simple. To start a sandboxed browsing session you just click the Sandboxie icon from the Quick Launch tray and this will launch your default browser in the sandbox. You can then use it in the normal way to browse to sites or download files.

If you download a file it will install normally but again will be corralled off from your real PC as any new processes running in your computer memory or entries in the Windows startup areas will be sandboxed.

Continue reading »

\\ tags: , , ,

Jan04

No other single product class seems to cause as much angst to average users in their installation and day-to-day use as Firewalls. For such users, Sunbelt-Kerio Personal Firewall [1] is my top recommendation as it seems to cause the fewest problems yet manages reasonable protection as well.

Kerio dropped the product in late 2005 but thankfully Sunbelt Software, the makers of the excellent CounterSpy anti-spyware scanner, picked it up and will continue making it available. Note that the free and paid versions of Sunbelt Kerio are the same. If you don’t buy the product some advanced features are automatically turned off after 30 days. The product will also nag you every time you start it. For some this is a small price to pay for a great free firewall. For others it’s a real turn-off.

If performance rather than ease-of-use is your criterion then the Comodo firewall [2] is the top contender. The firewall itself is very robust and the just released version 3 includes a well designed intrusion detection system and Vista compatibility as well. Comodo also supports internet connection sharing, while the free versions of Kerio and ZoneAlarm do not. On the minus side the IDS is initially rather talkative and this can unnecessarily alarm inexperienced users. There have also been reports that the new version 3 has some new version bugs so it may be better to wait a couple of months until the new version has stabilized before installing. Additionally Comodo has been known to conflict with some other security products. However for the technically initiated who can cope with these annoyances this is an outstanding free product and an easy first choice.

Continue reading »

\\ tags: , ,

Jan04

My top recommendation here is AVG Anti-Spyware [1], a product formerly formerly known as Ewido until it was acquired recently by GriSoft.

Ewido started life as an anti-trojan scanner but has been repositioned as an anti-spyware scanner by the new owners and the new name reflects that re-positioning. Whatever ever it is called it is an excellent anti-trojan and a fine anti-spyware program as well.

In my tests Ewido/AVG Anti-Spyware emerged as was one of the few products that could detect polymorphic and process injecting trojans that were totally missed by many anti-virus products. Unfortunately the free version of AVG Anti-Spyware doesn’t have a memory monitor and this omission significantly reduces the level of active protection provided. However the on-demand scanner is excellent.

I recommend that all average PC users who don’t have an anti-trojan scanner download AVG Anti-Spyware and scan their PCs weekly. I suspect you may be surprised at what you will find. AVG Anti-Spyware is also pretty good at removing some spyware infections so bear that in mind next time you encounter a spyware product you can’t remove with normal anti-spyware products like Ad-Aware. Continue reading »

\\ tags: , ,

Jan04

Rootkits are a special kind of software tool used to hide trojans, viruses and other malware from your anti-virus scanner and other security products. Unfortunately, they are extremely effective which means that some of you reading this will be infected even though you believe your PC to be totally clean. Thankfully there is a new class of security product now available called rootkit detectors that use specialized techniques to detect these dangerous intruders.

Most of these detectors require quite a bit of technical skill to interpret the results but two of the simplest to use are also amongst the most effective. The first is called Panda Anti-Rootkit [1]. It’s my top recommendation for average users because it not only good at detecting rootkits it also quite effective at removing them. As a bonus it’s small and doesn’t require installation though you do have register at the Panda website before you can download it. I suggest everyone download this product and scan their PC. The chances of you being infected are small but for five minutes work it’s not worth taking the risk.

Panda Anti-Rootkit will detect most rootkits missed by AV scanners but it can’t provide perfect detection; no rootkit detector can. That’s why I suggest you use more than one.

Continue reading »

\\ tags: , ,

Jan04

These days all users face a real risk of malicious programs secretly installing themselves on your computer. Anti-virus and anti-spyware products dramatically reduce the chance of infection but are not perfect. In particular they are prone to miss new malware products not yet included in their signature databases. They can also fail to detect malware programs that are cleverly disguised to avoid detection.

To prevent these malevolent programs from slipping by your AV and anti-spyware programs you need additional defenses such as a Host based Intrusion Prevention program (HIPS). These programs pick up intruders by their behavior rather than by their characteristic fingerprint. They are not limited to detecting specific malware products but can target a wide range of interlopers. For the most part HIPS programs all work in a similar manner; they stop any suspicious behavior and then ask the user whether they want to allow it. This, as we shall see, can be a mixed blessing.

Unfortunately most HIPS programs, including the popular free programs WinPatrol and Prevx, generate a lot of warning messages many of which are quite cryptic. These messages tend to alarm many less experienced users who feel there is something wrong and simply don’t know how to respond. That’s why these products are only suitable for the very experienced (and very patient).

Continue reading »

\\ tags: ,

Jan04

There are lots of reasons folks have for wanting to surf anonymously, ranging from simple paranoia to possibly being murdered by a malevolent foreign government. Whatever the reasons, commercial services that offer anonymity are doing real well. However one of the best services JAP [1], is totally free. In fact JAP is perhaps a little too good. That’s why the German Police insisted in 2004 that a backdoor be put into the product to allow interception of child pornographers. This was done but subsequently removed as a result of court action by JAP.

An alternative to JAP is a system called Tor [2]. It not only allows anonymous browsing but anonymous P2P, email, IM, and IRC chat as well. Given the US Navy origin of Tor, the suspicion arises that this system may indeed have a permanent backdoor. However the source code is now publicly available so that suspicion can perhaps be set aside. More worrying was a raid by German police in September 2006 involving the seizing of some Tor servers in that country. Again, pedophiles were the supposed target but who really knows.

Whatever, both JAP and Tor offer a level of secrecy that is better than many commercial systems though not watertight. Do expect your surfing to slow down as you’ll be relayed through a chain of servers particularly with Tor which has been ground to a near standstill by BitTorrent users seeking to hide from the RIAA. Note: the latest V5 release of JAP now allows Tor users to use JAP as a software access point.

Continue reading »

\\ tags: ,

Jan04

The Open CD site [1] offers for free a wonderful collection of just about every application software product you need to run a PC including the latest version of OpenOffice. Many of these freebies substitute admirably for expensive commercial products. There is Abi Word as an alternative for MS Word, OpenOffice for MS Office XP, Thunderbird for Outlook, The Gimp for Adobe Photoshop, 7-zip for WinZip and many more. If you then add to this collection some of the other utilities from my “46 Best-ever Utilities” collection you will have all the software you’ll ever need without spending a cent. Note: All of the Open CD utilities can be downloaded for free as a CD ISO image. If you have a slow connection you can purchase the CD for a as little as $1.99.

The Open CD project was a great idea but updates have been slow coming. OpenDisc is a follow-on project with a similar objective, but it aspires to be more up-to-date and responsive to user needs. The early signs look encouraging, with an impressive download package [2] and a reasonably active blog and forum [2]. This is an extraordinary collection of software containing everything you could want to fully set up your PC. Do note, though, that the ISO download [4] is 555MB.

Continue reading »

\\ tags: ,