Solved What protection programs are recommended?

[groze]

What protection programs are recommended?

I read the sticky. I liked Panada but it deleted cookies without prompting.

I am currently using Microsoft Security essentials.
I currently use NTI ez backup for backing up my system. Had some kinks but worked them out--Works pretty good, don't have to reinstall the whole system if a program mess it up.

I use spybot S&D old version with tea timer on. I think they will require you to go to the new version soon. I know how to use teatimer. I also like the File Shredder feature.

I am wanting free protection programs that gives me the choice of whether to excluded the file, repair, delete, or quarantine it.

I also have an option to install Norton free through my isp. Don't know if it the complete protection or just the virus protection.

 

[mickey12gauge]

I use Panda, myself. Free Antivirus Download - Panda Cloud Antivirus

 

[andrew129260]

I liked Panada but it deleted cookies without prompting.

Yes it does. But they are tracking cookies. Not safe cookies that are necessary. Just wanted to clarify that.


I know this is a very long wall of text, But following the below will greatly reduce your chances of becoming infected again.

I advise you to install and use the following Free security programs/solutions so you do not get infected again:

-Panda antivirus -You can only have 1 antivirus installed at a time, I recommend using this one and uninstalling what you are using now.

-Malwarebytes

-Superantispyware

-Unchecky

-Should I remove it

-Web of Trust

-Set up open dns

Run the first 3 listed and scan around once every 2 weeks. Make sure you update them before scanning. Unfortunately no program out there is a silver bullet-there is no one program to protect you entirely. So due to this, it is necessary to have a couple of products to help keep you safe on all fronts.

Panda Cloud Antivirus: Panda cloud AV is a great free program that uses the cloud (the internet) to scan your pc for threats. This antivirus works very well at detecting the newest threats, as well as some unknown ones that have not yet been discovered. For information on how to use it, the manual is located here.


Malwarebytes: This is a great program to use to scan your pc for malware that your antivirus might possibly miss or not look for. A guide on how to use it can be found here.

Superantispyware: This is a great second opinion scanner which will scan for spyware and other types of PUPS. (Potentially unwanted programs.)

Unchecky: is a program that aims to keep unwanted programs from entering your pc when installing a new program. Most programs give you the option of express install or custom install. When you do a regular install of most applications, they add toolbars and other unwanted items to your pc. If you choose the custom option however, you can avoid most of these unwanted programs by unchecking them and then clicking next. This program does this for you automatically. It removes the checkmarks so that when you click next and next your way through the install proccess, you do not get a bunch of junk on your system. Keep in mind though, this is how most people get unwanted spyware etc on there pc. When installing any new program, google it and see if it has good reviews. Then during the install don't just click next and rush through it. Take your time to read what is in front of you, and uncheck anything you do not want.

The best part about unchecky is it's a install and forget. It updates automatically. And works to prevent unnecessary programs from sneaking in during software installs.


Should I remove it: This is not a malware scanner. What it does is it looks at all of the installed programs on your PC and gives you a percentage % of how many people uninstall the software. If the percentage % is high, I would remove it as it is most likely not a good program. It also gives a ton of information about what the program does and how it behaves.

WOT: (web of trust) is a very helpful browser addon that works with all web browsers and helps you to avoid nasty sites that have been known to host malware and the like. It uses a rating system by users as well as there own internal site investigations to place websites into categories and mark whether or not they are safe. It is a good tool to help you avoid clicking on a bad link in the first place.

Open DNS: is a service that helps you block known malware sites before they even reach your PC entirely. It also can be configured to block adult sites, and filter out other web sites based on categories. All for free. Not only does it protect your computers, but other devices as well.

For more information, see here:

https://support.opendns.com/entries/26514730-Web-Content-Filtering-and-Security

If it looks to advanced for you, it actually isn't very hard to set up. See the very first link above (set up open dns) which will take you to the setup page. You do not need to create an account if you wish not to. There is a link in the bottom right hand corner to avoid making an account if you do not want it. They have directions on how to apply it to your computer, or your router so that every device on your network can be protected.


Making windows security better for you and anyone using your PC:

Use the help and support which is found in your start menu for easy answer to questions and common tasks. The browse help (the blue book in the help an support window) will allow you to browse all the help documents Microsoft has available for the versions of windows you are using. Questions like how to uninstall a program, burn a cd can all be found there.


Make sure your software that you use is up to date. This prevents security issues in the first place.

Adobe flash is a common one that should always be updated. You can download the newest version here. When any software prompts to update, and you recognize the name of the software-Do so. Software updates are important, and should be done regularly. Most programs checks for updates automatically.

Uninstall unwanted/un-needed programs.

Make a habit every now and then and go into control panel-uninstall a program. This lists all the software installed on your PC. If you see any software you do not use or need, uninstall it. If the software has your PC manufacturer mentioned in it, you can leave it alone.


I also suggest using a standard user account in windows, and only using an admin account when you need to install software. If you have family members sharing your pc, create standard user accounts for them. See this link below on how to do so:

http://www.sevenforums.com/tutorials/181024-user-account-create.html

When using a standard account and you make a change or install a program that affects the whole system, UAC will prompt you to continue. Make sure the setting or program you are tying to install is listed, then click yes to continue. If you are just browsing the web and the prompt appears with a program you have not heard of, or do not know what it is, it is much safer to click no then yes. No will block the action, and if you were trying to do something, you can always start it again and choose yes.

UAC makes this easy, see here:

What is user account control (UAC)?

I also suggest choosing always notify for UAC:

What are User Account Control settings?

I also recommend that you use bleeping computers suggestions which can be found here:

How to keep your computer safe online

So how Did I get Infected?


Those are my recommendations to you, and I Highly suggest you follow them. Should you have any questions, post back.

Do not feel like you need to do everything above, if your computer knowledge is limited do what you are able and feel comfortable doing. If you read all the instructions though you should be able to do it yourself.

With the solution provided above, your risk of malware infection drops considerably.

 

[groze]

Post deleted by groze

 

[groze]

Open Dns? I am not sure that would work through my internet service providers. My isp may block it. Wouldn't open dns be slower?

 

[groze]

Post deleted by groze

 

[Layback Bear]

Groze this was the question you posted.

What protection programs are recommended?

Andrew gave his adivce/recommendation.

It is good advice. Of course you can choose to use some of them or not. It your computer.

I don't use all Andrews suggestions but I surly don't disagree with his advice.
I just thanked him for the information.

From your post # 4.

I know about "Making windows security better for you and anyone using your PC" but don't agree with some of that.

This makes me wonder why you posted the question.

 

[groze]

Sorry, Layback Bear

I do appreciate his advice, I guess I should of worded my post differently. I guess I really don't know how to explain it in writing. What I was wanting to know is what protection programs people use and decided for myself if I will use them. I have been using a computer since windows 95 came out. I even made a restore program using dos pkzip before Norton's ghost came about. I only had two viruses from windows xp no service packs, caused me to reinstall it.

No offense meant to andrew129260 but didn't Malwarebytes crash some people computer?
Since when can't you disagree? A lot of people hate the UAC, I just didn't want to get into that debate. I guess I shouldn't of posted what I decided to do and just do it. I deleted those postings. Again Layback Bear I am sorry.

Sorry andrew129260 if I offended you, that was not my intent.

 

[Layback Bear]

I also don't use UAC. Shame on me.

The problem with Malwarebytes was fixed in a day by Malwarebytes.

If you decide to use Malwarebytes just make sure that under Advanced Settings that Auto Quarantine Detected Items is NOT checked.

I and most members don't agree on all things. We just disagree in a mannerly fashion.
We are a family here and I'm glad you joined our family.

 

[groze]

Layback Bear thank you

 

[Tookeri]

I guess most people that use an administrator account and disable UAC because of the prompts probably don't know exactly how UAC works. UAC is more than only the prompts. UAC is "least user privilege" based which means programs that don't require admin rights will be launched as a standard user. Without UAC all programs basically run with admin rights, like in the old XP days. And UAC is required for IE's protected modes. And it also enables file and registry virtualization, another protection feature.
Instead of setting UAC to Never notify, it's better to set it to elevate without prompting in the group policy editor (Win 7 Pro, Ultimate, Enterprise). This way not all programs run with admin rights.
User Account Control in Windows 7 Best Practices

As for protection programs I think EMET + Sandboxie is unbeatable. But I usually only recommend EMET to tech savvy people as it can be difficult to configure on some systems. Sandboxie alone is a pretty good protection too. Besides the sandbox protection you can for example also block read access to folders, and configure what programs are allowed to access the internet. This can be useful if you have the Windows Firewall default setting to allow all outbound connections(which probably most have), especially since you don't need to know about general firewall configuration like protocols and ports.

http://www.sevenforums.com/tutorials/133386-enhanced-mitigation-experience-toolkit-emet.html
And read my recent post in that thread with useful information regarding EMET 5.0 troubleshooting

Sandboxie Review - gHacks Tech News

 

[Tookeri]

I forgot to add that if the reason for turning off UAC are the "annoying" UAC prompts, there's always the option to keep UAC enabled and set up scheduled tasks to get around the UAC prompts. This is how CCleaner does it. It has an option to bypass the UAC prompt. You modify your program shortcuts to let scheduled tasks launch the program instead since it's already running with admin rights = No prompt needed. Example:
Run UAC restricted programs without the UAC prompt - TechRepublic

And keep in mind that when UAC prompts it's actually asking for your admin password. But UAC simplifies this with an Allow button instead. When UAC is disabled it doesn't have to ask for your admin password because you're already running as admin. This was a big security issue in XP and that's why UAC was created.

 

[andrew129260]

@groze


No offense taken Open dns does not make your internet slower. Quite the opposite, it makes it faster. Go to there page to learn more.

And def. read what was posted above about UAC. Tookeri gave an excellent recommendation/explanation in post 11. I disagree with one little thing though. Setting UAC to elevate without prompting in the group policy editor makes things less secure. Any program can then use that to elevate itself.

I set uac to always notify, which makes it more protective like vista was. Granted more prompts appear, but it is only one click and does not take a lot of time. Of course, if you fly through the prompts that will make it pointless anyway. Always read the prompt carefully when it appears. Vista was one of the most secure OS ever built. Then everyone complained about the prompts, so Microsoft lessened the security. If people would have understood why it was like that, viruses would be less common infecting PC's. But people chose to lessen their security for the sake of convenience which was not even that big of a deal. One click? Seriously? Anyways hope that explains things well.

My suggestions are just that. Suggestions. I do want to make you aware though, I help people fix their computers for a living. After following my suggestions completely, (or me assisting them in doing so) they do not ever get infected again. I never get calls again about security issues. So granted, it is your choice. But there is a strong reason I have my suggestions the way they are.

 

[groze]

Sorry Layback Bear but I got to respond to Tookeri

Tookeri.
I know nothing about security by disabling uac. Only have 2 viruses over the lifetime using Windows 95. 98se, windows xp, windows 7. I still have an old computer with a dual boot system using windows 98se and windows xp sp3.

For windows 98se
I use clamwin antivirus windows & free outlook firewall and Spybot SD

For windows xp sp3
I use clamwin antivirus windows & windows firewall and Spybot SD

For windows 7
I use Microsoft Security Essentials (MSE), windows firewall, Spybot SD old version with teatimer enabled. Considering trying free avg then it would be Windows Defender instead of MSE

I use Norton's Ghost backup for Windows 98se & xp. Windows 7, I use Nti Backup ez had a few hiccups but got it working. It doesn't like Google Chrome though.

I have used Malwarebytes in the past. I tried it on Windows xp. I don't like you can't change the advance settings without having to buy the pro. My main beef is turning off the auto quarantine you can't do that in the free version and the paid version interferes with Avg. Startup option can be tweaked using a registry or other setting,

In the past until they become resource hogs or did major changes I used
Avast, Avg, Lavasoft adaware, spywareblasters (not sure on the name), Norton paid, McAfee paid.

Back to Windows 7.
I am also a tinker. I love trying everything I download, I know it is risky that is why I have backup. Some flash ads have pup. I also use some batch files that needs uac disabled.

By the way except for ICMP every system passed the shields up test at grc some isp needed ICMP allowed through.

MSE caught my own batch file I made to change the host file.

I also have the avg boot cd on flashdrive.

For the record, I have made mistakes but learned from them

 

[groze]

andrew129260, I explained to Tookeri why I disabled UAC. I am also knowledgeable so I know "what to look out for" yes, I made mistakes but learned from them. As running as administrator account even though I do that, I am mixed on that. For example some Seamonkey browser preference won't work unless it is run as administrator. By the way since it just two people here, I don't use a password to login into windows 7. My important data is not even on the computer.


Just for info
ubuntu doesn't prompt as much as windows 7 does.

 

[groze]

Hmm. No offense guys but look what I found

Defeating UAC with a two-stage malware attack | ZDNet

 

[andrew129260]

Hmm. No offense guys but look what I found

Defeating UAC with a two-stage malware attack | ZDNet

Vista was one of the most secure OS ever built. Then everyone complained about the prompts, so Microsoft lessened the security. If people would have understood why it was like that, viruses would be less common infecting PC's. But people chose to lessen their security for the sake of convenience which was not even that big of a deal. One click? Seriously? Anyways hope that explains things well.

See above

 

[Tookeri]

@groze I'll edit the post to be more clear. What I meant was that most people that can't stand the UAC prompts and therefor simply disable it probably don't know exactly how UAC works. I shouldn't have used "probably don't know much about security".
The only thing that's visible are the prompts, but UAC is more than that. That was kind of my point.
I see you seem to have the protection all under control though.

@andrew129260 Elevate without prompting was a suggestion for people that are thinking of disabling UAC. That's better than disabling. I fully agree with you about the rest! Instead of asking for the admin password, UAC asks only for a simple one-click, and still some people think that's too much?!

 

[groze]

Thank you Tookeri and sorry if I went overboard. I have been reading about running as administrator vs standard user not everyone agrees. Shouldn't you have at least one administrator account (Not the default that can be hidden or unhidden)? This one dell webcam software had to be installed 3 times. One in the default administrator account. My account and the other person that lives here. I doubt that would of worked if it was a standard account. Is there a list of software that doesn't work with a standard account?

 

[Tookeri]

A standard user account can run most programs, but not install new programs, change global settings or run administrative tasks. For that you need an administrator account (not the hidden one). The hidden built-in admin account runs with full admin rights and no protection from UAC. Back in the XP days many programs required admin rights, but it's changed since then.

Now I'll try to describe UAC as simple and short as possible:
With UAC enabled and you log on with an admin account, all admin rights are disabled until UAC prompts you. So there's really no difference from running as a standard user if you set it to Always notify.

If you disable UAC the admin rights are not disabled and you lose all the security benefits of UAC.

If some programs require UAC to be off to work properly I would investigate that or replace them with better compatible programs. At least that's what I would do.