Microsoft Goes From Cellar to Stellar in New Antivirus Test

[Al Fairclough]

It always ends up being your own opinion though, some choose Avast, AVG, Panda, Kaspersky, Norton, MSE, or even MCAfee for some reason.

Such is true. I started using Norton Utilities for DOS many moons ago and with a few ventures into other AV programs, I have used Norton ever since. It just works for me without problems and that is all I ask from a program. There will always be a new flavor of the week up on the board, but I'll just settle for chocolate.

 

[jimbo45]

Hi there

Why does ANYBODY give these tests any credence at all -- POST analysis tests are about as useful as a Chocolate Teapot or Used "Bog" paper. Even "Monday Morning Quarterbacking" has more use. !!

A new Virus can appear at ANY time rendering ALL of these tests hopelessly inaccurate and OUT OF DATE.

Everybody uses computers differently -- some people will never get a Virus in the whole of their working computer lives -- even without any AV software on -- others will get loads within about 30 mins of touching a keyboard.

The best security is YOU using your machine intelligently. For individuals using Windows 8 the built in system is as good (or as bad) as any of the other ones.

Windows 7 for individuals with MSE is probably good enough -- if you don't use (or carefully use) torrents, avoid fake web sites and don't open email links from people you don't know about - and don't give too much info over social media sites then you are unlikely to get any infections on a computer.

The name of the game these days is to make money via SCAMS --- old fashioned "attacks" are not so much the issue any more - these hackers have moved on to "more profitable" and unfortunately easier pickings like emptying easily accessible bank accounts from people using the same passwords on all their accounts etc.

(Corporate security is another issue -- I'm only considering INDIVIDUAL or HOME computers here).

Cheers
jimbo

 

[King Arthur]

Everybody uses computers differently -- some people will never get a Virus in the whole of their working computer lives -- even without any AV software on -- others will get loads within about 30 mins of touching a keyboard.

The best security is YOU using your machine intelligently. For individuals using Windows 8 the built in system is as good (or as bad) as any of the other ones.

Windows 7 for individuals with MSE is probably good enough -- if you don't use (or carefully use) torrents, avoid fake web sites and don't open email links from people you don't know about - and don't give too much info over social media sites then you are unlikely to get any infections on a computer.

Very well said, those are words of wisdom right there.

 

[JerometheGiraff]

I decided once my Anti-Virus expires to go Microsoft Security Essentials, it's free as mentioned, as long as you watch what you download and sites you visit, you may encounter the odd minor issue, nothing serious.

 

[whs]

I don't really trust any of those AV programs - although some are better than others. That's why I run most of my web activity from a virtual Linux system - that is a LOT safer. And should I download something that I need on my host system, I run it thru Virus Total before I transfer it to the host system. All that costs me is 1GB of RAM for the virtual system.

 

[Al Fairclough]

Hi there

Why does ANYBODY give these tests any credence at all -- POST analysis tests are about as useful as a Chocolate Teapot or Used "Bog" paper. Even "Monday Morning Quarterbacking" has more use. !!

A new Virus can appear at ANY time rendering ALL of these tests hopelessly inaccurate and OUT OF DATE.

Everybody uses computers differently -- some people will never get a Virus in the whole of their working computer lives -- even without any AV software on -- others will get loads within about 30 mins of touching a keyboard.

The best security is YOU using your machine intelligently. For individuals using Windows 8 the built in system is as good (or as bad) as any of the other ones.

Windows 7 for individuals with MSE is probably good enough -- if you don't use (or carefully use) torrents, avoid fake web sites and don't open email links from people you don't know about - and don't give too much info over social media sites then you are unlikely to get any infections on a computer.

The name of the game these days is to make money via SCAMS --- old fashioned "attacks" are not so much the issue any more - these hackers have moved on to "more profitable" and unfortunately easier pickings like emptying easily accessible bank accounts from people using the same passwords on all their accounts etc.

(Corporate security is another issue -- I'm only considering INDIVIDUAL or HOME computers here).

Cheers
jimbo

Good post, jimbo and very true.

 

[andrew129260]

I don't really trust any of those AV programs - although some are better than others. That's why I run most of my web activity from a virtual Linux system - that is a LOT safer. And should I download something that I need on my host system, I run it thru Virus Total before I transfer it to the host system. All that costs me is 1GB of RAM for the virtual system.

Just out of curiosity, what do you use? Agree on the part of a VM. Much safer that way.

 

[whs]

I don't really trust any of those AV programs - although some are better than others. That's why I run most of my web activity from a virtual Linux system - that is a LOT safer. And should I download something that I need on my host system, I run it thru Virus Total before I transfer it to the host system. All that costs me is 1GB of RAM for the virtual system.

Just out of curiosity, what do you use? Agree on the part of a VM. Much safer that way.

Check the links.

 

[andrew129260]

Sorry, I meant what AV

 

[A Guy]

These days it is a fallacy that if you are careful where you surf, you will be safe(r)

Legitimate Sites Are Most Likely To Serve Up Malware, Cisco Study Says

Legitimate sites present a network security risk when they serve up malware

It is still wise to avoid dodgy sites, but you are likely to have as much risk on "legit" sites.

A Guy

 

[andrew129260]

These days it is a fallacy that if you are careful where you surf, you will be safe(r)

Legitimate Sites Are Most Likely To Serve Up Malware, Cisco Study Says

Legitimate sites present a network security risk when they serve up malware

It is still wise to avoid dodgy sites, but you are likely to have as much risk on "legit" sites.

A Guy

Exactly, not sure why people keep believing that if they stay on "safe" sites they are safe. There is no such thing as a "safe site".

 

[lehnerus2000]

Exactly, not sure why people keep believing that if they stay on "safe" sites they are safe. There is no such thing as a "safe site".

Misinformation pushed by the anti-Piracy and anti-Porn rabble.

I wouldn't be surprised to discover that "organised crime sites" are actually the safest.
After all, if you mess with their "pie", they will find you and they will hurt you.

 

[whs]

Sorry, I meant what AV

From the poor choices that are available I would probably stay with Defender in 8.1 and Norton Internet Security 2014 (NIS) in Windows 7 and Vista.

But my preferred defense is still a virtual Linux from where I go to the web.

 

[jimbo45]

Hi there

all these warnings are TOTALLY OVERBLOWN and are probably last ditch attempts by some so called security managers trying to keep their jobs in view of the decreasing importance of this type of attack on computers.

Why on earth would any LEGIT site serve up Malware -- there is utterly no point in it -- and would totally reduce confidence in that companies products. Any sensible commercial website will be constantly monitored to prevent this happening - and if they don't do this then the fact should be spread around the web --DO NOT USE SITE XXX.

I can't think of a single instance of a legit BUSINESS site serving up Malware -- @ A. GUY -- PLEASE POST DETAILS OF WHAT LEGIT SITES HAVE SERVED UP MALWARE and for how long.

Some sites like Softpaedia or other download sites DO hide the actual target download amongst a confusion of green arrows, special offers and the like so people can often download the WRONG product by mistake - however that's up to the USERS to take care before they actually click the download button it's what they want.

I can't say I've ever known anybody booking a hotel, train, plane or bus, or checking Banks / Utility bills to have been dished up with malware --if they had it would be all over the Internet.

Most of this "Security Gig" is totally overblown (as far as individuals are concerned). I'm sure the only people who actually get malware are those using dubious sites or torrents in the first place. Hackers these days want MONEY and there's no money to be made in simply inserting some Malware on a Pensioners computer !!.

Attacking corporates is another matter but I'm sure there's people who have NEVER had any kind of Virus / Malware even with NO AV installed on their systems at all.

Just don't give out passwords too freely, use different ones, be sparse with your information on social media, don't open emails or links within those from people you don't know and you'll be safe.

If you use Internet Banking - just change your password every week - or even every day if you feel paranoid about it and if you lose your phone get it BLOCKED ASAP.

In any case if you want to seriously check Internet activity - then you are better off doing it OFF the computer - such as reading your Router logs -- how many people do that these days -- I always check mine EVERY DAY to see whether there's in or outbound traffic I can't identify. - Much more secure than any amount of AV software.

A decent firewall plus proper looking at logs together with sensible pratices will keep you 100% safe. In any case decent Banks will also check for abnormal activity on your account - and I don't know about the USA but most decent (???? Is there such a thing) Banks will refund any money fraudently removed from your account -- also never keep too much in ONE account - have several from different Banks.

For W7 MSE is fine and Windows 8 the built in Windows defender are more than adequate for INDIVIDUAL users.

@Lehnerus 2000 - You are right -- Back in London in the late 60's the KRAY BROTHERS (East end criminals of some notoriety) actually kept the East End safe -- nobody dared mess with them "on their own patch" and ordinary people actually felt quite safe. At a funeral HUGE crowds turned out rather to the consternation of the local Police !!. -- I'm not suggesting Law and Order should be handed over to the Mafia but I see where you are coming from !!

http://www.telegraph.co.uk/news/uknews/1370000/East-End-says-farewell-to-last-of-the-Krays.html

Cheers
jimbo

 

[King Arthur]

Why on earth would any LEGIT site serve up Malware -- there is utterly no point in it -- and would totally reduce confidence in that companies products. Any sensible commercial website will be constantly monitored to prevent this happening - and if they don't do this then the fact should be spread around the web --DO NOT USE SITE XXX.

I can't think of a single instance of a legit BUSINESS site serving up Malware -- @ A. GUY -- PLEASE POST DETAILS OF WHAT LEGIT SITES HAVE SERVED UP MALWARE and for how long.

The answer is simple: Advertisements.

Pardon, it might be more prudent to call them malvertisements considering how dangerous ads in general have become to one's safety. It's seriously a very sad state of affairs when an otherwise legit and safe website has ads leading to shady downloads and webpages.

You can even see it in such mundane places like when you try to search something on Google, chances are Google will serve you advertisements related to your search terms at the very top of the search listings which lead to untrustworthy or even downright malicious websites.

There's a reason ad blockers and script blockers are increasingly popular; not only do they reduce the end-user's annoyance, they also serve to increase their security.

 

[jimbo45]

Why on earth would any LEGIT site serve up Malware -- there is utterly no point in it -- and would totally reduce confidence in that companies products. Any sensible commercial website will be constantly monitored to prevent this happening - and if they don't do this then the fact should be spread around the web --DO NOT USE SITE XXX.

I can't think of a single instance of a legit BUSINESS site serving up Malware -- @ A. GUY -- PLEASE POST DETAILS OF WHAT LEGIT SITES HAVE SERVED UP MALWARE and for how long.

The answer is simple: Advertisements.

Pardon, it might be more prudent to call them malvertisements considering how dangerous ads in general have become to one's safety. It's seriously a very sad state of affairs when an otherwise legit and safe website has ads leading to shady downloads and webpages.

You can even see it in such mundane places like when you try to search something on Google, chances are Google will serve you advertisements related to your search terms at the very top of the search listings which lead to untrustworthy or even downright malicious websites.

There's a reason ad blockers and script blockers are increasingly popular; not only do they reduce the end-user's annoyance, they also serve to increase their security.

Hi there

There's a difference between ANNOYING ads / popups etc and actual malware which has the express purpose of either damaging your machine or attempting to steal valuable information including money (or both).

Stopping popups is fine but it isn't "Malware" as such - although in some instances it might feel WORSE than malware !!!

AV software is of NO use against "legit" - or even "dubious" - but legal advertisments. Business ethics is a difficult one but bad business practices aren't really "malware" and can't be defended against by machine methods -- YOU as an individual have to make the choice to avoid these sites -- nothing to do with AV software.

Cheers
jimbo

 

[King Arthur]

The most dangerous types of ads are those that perform drive-by downloads on unsuspecting users. Quite a lot of legit/safe websites that were at some point accused of distributing malware were determined to have been serving such malicious ads before the sites' administrators got wind of what was happening.

Ads are oftentimes run by third-parties to the websites actually serving them, so it hasn't been uncommon for some ad providers to sneak in malvertisements in order to attack unsuspecting users.

This is why it has become commonplace in security to not completely trust even legit/safe websites; it's not necessarily that they themselves are unsafe, it's that the potential for third-party content such as ads on such websites being malicious has become a legitimate risk factor.

 

[jimbo45]

Hi there

I agree with you on that one -- however I still don't see how any AV software can be of much defence against "Legit" downloads even if the sites are constructed in such a way as to render it almost impossible unless you have a doctorate in Computer Science to find what you are actually looking for instead of being tricked into downloading "other unwanted stuff".

Perhaps a good education on skilful Internet Navigation and what to look out for would be a very useful piece of info -- but IMO how many people EVER look at a Manual unless they are hopelessly lost or have already "broken" something.

Unfortunately Human Behaviour (both malignant and benign) can't be controlled, predicted or even helped much by Computer Software -- even the Sophisticated "Fly By Wire" technology incorporated into the latest Air Bus planes allows the Pilot (fortunately) to overwrite the computers to re-gain control of his plane if all else fails.

Cheers
jimbo

 

[andrew129260]

Exactly, not sure why people keep believing that if they stay on "safe" sites they are safe. There is no such thing as a "safe site".

Misinformation pushed by the anti-Piracy and anti-Porn rabble.

I wouldn't be surprised to discover that "organised crime sites" are actually the safest.
After all, if you mess with their "pie", they will find you and they will hurt you.

Hi there

all these warnings are TOTALLY OVERBLOWN and are probably last ditch attempts by some so called security managers trying to keep their jobs in view of the decreasing importance of this type of attack on computers.

Why on earth would any LEGIT site serve up Malware -- there is utterly no point in it -- and would totally reduce confidence in that companies products. Any sensible commercial website will be constantly monitored to prevent this happening - and if they don't do this then the fact should be spread around the web --DO NOT USE SITE XXX.

I can't think of a single instance of a legit BUSINESS site serving up Malware -- @ A. GUY -- PLEASE POST DETAILS OF WHAT LEGIT SITES HAVE SERVED UP MALWARE and for how long.

I can't say I've ever known anybody booking a hotel, train, plane or bus, or checking Banks / Utility bills to have been dished up with malware --if they had it would be all over the Internet.

Most of this "Security Gig" is totally overblown (as far as individuals are concerned). I'm sure the only people who actually get malware are those using dubious sites or torrents in the first place. Hackers these days want MONEY and there's no money to be made in simply inserting some Malware on a Pensioners computer !!.

Attacking corporate is another matter but I'm sure there's people who have NEVER had any kind of Virus / Malware even with NO AV installed on their systems at all.

Guess its all in my head then, not like I haven't seen this first hand. Whew glad I am safe. So I guess the thousands of sites that were compromised with malware, yahoo, cnet, ny times (I could go on and on) over the last several years was all just a made up report? (Yahoo was ads.) Ads are a major issue.

Sure, I am sure that some security researchers out there try to scare customers with reports. But you have to look at the proof. Android has scare reports all the time. Almost all the malware spoken about is from outside app stores or apps side loaded. But in the report they have the little * to note that. When you go to a news site though they simply post the title and some of the report and call it a article. You have to read the actual report yourself.

It happens all the time. Sometimes you do not even hear about it, as the website keeps it quiet. Or they pay people off to be quiet. Malware is not getting less in the world, it is growing. To the point of anti-virus software not being enough anymore. Between Keyloggers, zero access, bitcoin miners, threats where the very part that protects your info on the site (SSL), vulnerabilities like heartbleed (I guess that was made up as well?) there is more than enough threats out there. There have been people infected simply by loading a webpage, and that will not change. I know, as I have seen it fist hand and reproduce it. People go to there same routine "safe" websites every day. They can still be infected and deliver malware.

But apparently that is all Fud so that security researchers can keep there jobs right? Just remember that your pc can never be guaranteed clean. Some threats sit there for years on your pc, waiting to activate.

The average malware no longer makes it obvious or announces it presence that it is on the pc. Instead, it silently watches everything. Until it is to late.

I'm sure the only people who actually get malware are those using dubious sites or torrents in the first place. Hackers these days want MONEY and there's no money to be made in simply inserting some Malware on a Pensioners computer !!.

That's like saying the only people who get robbed are in bad neighborhoods. Sure the threat is great in a bad area, but it can easily happen in a good town as well. And that is not correct either, there is lots of money to be made.

No need to buy a tinfoil hat, but don't ignore the threats out there either.

 

[lehnerus2000]

Exactly, not sure why people keep believing that if they stay on "safe" sites they are safe. There is no such thing as a "safe site".

Misinformation pushed by the anti-Piracy and anti-Porn rabble.

I wouldn't be surprised to discover that "organised crime sites" are actually the safest.
After all, if you mess with their "pie", they will find you and they will hurt you.

Guess its all in my head then, not like I haven't seen this first hand. Whew glad I am safe. So I guess the thousands of sites that were compromised with malware, yahoo, cnet, ny times (I could go on and on) over the last several years was all just a made up report? (Yahoo was ads.) Ads are a major issue.
...

I meant, that is why people believe in the "Safe Sites" myth.