The Download Blog

CORRECTED October 15, 2009, 11:45 a.m.: The default search choice is not changed, as was mistakenly reported earlier. Also, it's not the user's home page that gets changed, but the new tab page. I've clarified the nonmandatory nature of the LinkScanner toolbar, and added information on the identity theft feature in the toolbar.

After giving its paying customers a few weeks to upgrade to version 9, AVG has announced its update for AVG Free 9.

For those unfamiliar with the popular freeware security tool, it provides only the bare necessities for protecting your PC, but that should be enough for savvy Windows users. AVG Free 9 introduces few new features, with improvements focused on performance, including claims of faster scan and boot times. AVG is claiming that scans are 50 percent faster compared with AVG 8.

AVG Free 9--photos

AVG comes with a combined antivirus and antimalware engine, the proprietary LinkScanner for Web browsing safety, and e-mail scanning. Developed independently and bought by AVG in 2007, the LinkScanner tech performs two functions. It protects you from third-party code exploits before they load in your browser and it ranks search results.

Annoyingly, the optional AVG LinkScanner toolbar commandeers your new tab page, decidedly inappropriate behavior that a security vendor should really know better than to do. LinkScanner can be downloaded separately from AVG, too. The scheduler is robust, automating both scans and updates with multiple options.

One new feature in the new version is the the Identity Theft Recovery Unit. Only for users in the United States, ITRU is a business partnership with Identity Guard which provides "consumer identity theft solutions." Accessible only from the browser toolbar, which only works in Firefox or Internet Explorer, the service provides "a dedicated identity theft recovery unit with fraud experts," to assist handling, getting and analysing a credit report, enrolling in credit file monitoring, and offering report-filing support.

The interface in AVG Free 9 remains nearly untouched from the last version, and generally it's easy to use. From the main window, though, you must double-click to get further information on any feature, whether virus scanning, LinkScanner settings, or updating. Streamlining this to one click would be helpful.

That ad in AVG Free 9 can be easily hidden.

(Credit: Screenshot by Seth Rosenblatt/CNET)

When starting a scan, a slider makes it easy to jump between Slow, Automatic, and Fast scans: the faster the scan, the less comprehensive it is, so it's a good idea to take the program's advice and optimize your scans when you install. This will make that first scan faster. A slow scan took nearly 2 hours, while the fast scan completed in under an hour. A progress meter for these regular scans would've been useful, though. Should a virus create serious problems, AVG creates a rescue disk to scan your computer in MS-DOS mode.

Besides the LinkScanner problem, there are some other concerns with AVG. It doesn't tax your system in an obvious way when scanning or when running in the background, although CNET Labs determined that it will significantly slow down your system's boot time and will slightly delay shutting down. AVG detected some image files as threats, when two other security programs decided they weren't--these were fairly obvious false positives. There is an advertisement to upgrade at the bottom of the program window, but it can be easily hidden using the Hide Notification button.

AVG might not be the fastest or the most effective free security option, but it still gets the job done and you're better off with it.

URL shorteners may be handy for your tweets on Twitter. But they're also known security holes since they don't display the actual address of your destination. A free tool from security vendor AVG may provide a solution.

AVG has updated its free LinkScanner tool to detect malicious pages hiding behind shortened URLs. The company said the tool checks the actual destination of each URL link to make sure the page is legitimate.

More than a dozen URL-shortening services abound on the Net, including TinyURL and Bitly. With its 140-character limit, Twitter automatically shortens URLs in each tweet via Bitly. Other services like WordPress also include a built-in URL shortener.

But Web browsers don't display the true address of a shortened URL, so you have no idea whether or not the destination page is safe. Hackers have easily been able to use the obscure nature of shortened URLs to conceal hazardous Web pages behind them.

"The problem with shortened links is that they usually don't bear any resemblance to the original URLs, which means that users don't always know what they're clicking," said Roger Thompson, chief research officer at AVG Technologies. "People click with the intention of going to a specific site, but the link can be easily hacked to send people to a site containing Trojans, spyware, rootkits, and other malware instead."

AVG, formerly known as Grisoft, bought LinkScanner in late 2007 as part of a larger acquisition. The tool has already proven helpful to Web surfers by analyzing Web pages behind each link that is either clicked on or typed into the browser.

Other solutions do exist to reveal the truth behind a short URL. The Web site LongURL can display the long version of a short URL. A Firefox plug-in called LongURL Mobile Expander can also translate from short to long.

But according to AVG, LinkScanner is now the only security tool on the market that can find poisoned Web pages behind a short URL. The company says it does not rely on blacklists and instead checks each link in real time.

The feature-rich versions of popular security program AVG have been updated, with AVG Technologies claiming faster scan times, faster boot times, and other under-the-hood improvements. While version 8 introduced a consolidated product line, making those features work better together takes the attention of AVG Internet Security 9 and AVG Anti-Virus 9.

AVG 9--photos

AVG is making some bold claims for these updates. The company is touting scan times that are "up to 50 percent" faster, based on marking files safe until their file structure changes, and boot times that are "10 to 15 percent" faster. Memory usage is also expected to be "10 to 15 percent" better, as well. The built-in firewall, available only in the Internet Security version, uses a new database for automatically determining if certain programs are safe to access the Internet without user input. This trusted database, called TrustedDB by AVG, should be less intrusive by querying for user input 50 percent less often than in the previous version, says AVG. Also, the installation process has been shortened from 22 screens to 11.

There are few wholly new features available in version 9, but an interesting one is the Identity Theft Recovery Unit. Included in AVG Anti-Virus and AVG Free, but only for users in the United States, ITRU is a business partnership with Identity Guard which provides "consumer identity theft solutions." Accessible only from the browser toolbar, which only works in Firefox or Internet Explorer, the service provides "a dedicated identity theft recovery unit with fraud experts," to assist handling, getting and analysing a credit report, enrolling in credit file monitoring, and offering report-filing support.

In hands-on testing last week, I found AVG to be relatively easy to navigate around, although the interface could be simpler. When you click on one of the items in the main window, you must double-click on one of the features to access more information on it. A single click, or even a mouse-over pop-up, would make the experience faster. Before I even ran my first scan, AVG detected icons associated with Pidgin as threats.

AVG 9 looks very similar to AVG 8. Most of the changes are under the hood.

(Credit: Screenshot by Seth Rosenblatt/CNET)

Double-checking them against Avira and McAfee revealed those detections as false positives, and when I finally ran the Fast Scan it took longer than 20 minutes. That doesn't compare favorably to competitors, some of which can complete a first Fast Scan in around 60 seconds. I was also surprised to find that Mozilla Thunderbird was not automatically approved to go through the firewall, despite the new firewall trusted database. While the installation process offers to install the browser toolbar for you, it doesn't seem possible to opt out during the installation and then install it later from the AVG interface, a strange oversight.

AVG Internet Security 9 is available for $49.99, and AVG Anti-Virus costs $34.99. Both come with a one-year license and a 30-day trial, although AVG Anti-Virus lacks the firewall, identity protection, antispam, and system tools that come in AVG Internet Security. Fans of the free version of AVG 9 will have to wait a bit longer, as AVG always delays the release of Free until after the full suites have been made public.

Cautionary tales about identity theft are everywhere: blared from the TV, inked in news stories, and relayed with horrified detail in conversations among friends. Heck, I've had to deal with a lifted wallet myself. Anyone who's been there can attest that despite quick calls to the credit card companies and banks, dealing with the aftermath is still a hassle. But physical larceny is one thing; digital defrauding can quickly become a much deeper, broader, and unmitigated violation that can stretch to the bottom of your savings accounts and social circles.

The publishers behind the popular AVG security program franchise have introduced a new tool in AVG Anti-Virus 9 and AVG Free Edition to help combat computer thievery. In partnership with security service Identity Guard, the Identity Theft Recovery Unit sits with the browser toolbar, and can help U.S. customers access credit report tools and monitoring support services if you are hit.

The new AVG Anti-Virus 9 and AVG Internet Security 9 offer more features besides, and claim faster speeds. To find out if AVG 9's products live up to the claims, read our hands-on review.

LinkScanner is once again available as an independent plug-in for Windows-based Firefox and Internet Explorer, following more than a year spent as a feature of AVG Technologies' AVG security suite. Still available as part of AVG, users can now once again download LinkScanner independently of AVG's antivirus software, and for free.

AVG's LinkScanner evaluates link safety on the fly, as well as making click-throughs for dangerous sites harder.

(Credit: Screenshot by Seth Rosenblatt/CNET)

The new LinkScanner works much the same as the original one did. Once you've installed the EXE, AVG's "Search Shield" returns search results from both Google and Yahoo with flags next to them. Green flags on Google indicate a result is safe to click through to, while Yahoo safe results display no flags. Links that are unsafe on both search engines will return red flags.

Hovering over a flag will pop open a window that provides further details about the link. Green flags will show you the IP address, the amount of time the scan took, and the date and time of the most recent scan. Red flags highlight the same information, as well as the risk category and the site name. Attempting to click through to a red-flagged page will take you to a warning screen that repeats most of the red-flag information--AVG calls this the "Active Surf-Shield".

A small link at the bottom of the red-blocked screen will let you click through, although it cautions users that it will continue to block potentially harmful content. When I tried to click through to warez.com, for example, LinkScanner would only show me the CSS code for the page.

LinkScanner doesn't have references for all links, as evidenced by the third one in this Google search for ringtones.

(Credit: Screenshot by Seth Rosenblatt/CNET)

In addition to the clear messages behind the green and red flags, LinkScanner also offers two "slow down" warnings. The first is yellow with one exclamation point in it, while the second is orange and has two exclamation points. I found it nearly impossible to locate search results with a yellow or orange flag, but the meaning is clear: we can't tell what this is, but it looks sketchy so be careful.

It's worth noting, too, that both green flag and red flag boxes (and, presumably, the yellow and orange warning boxes) include a link at the bottom to an AVG product comparison page.

Before Grisoft, now AVG Technologies, bought LinkScanner, many users appreciated that both the free version and the paid LinkScanner upgrade provided smooth integration with your daily Web browsing habits. There are some similar services, such as McAfee's SiteAdvisor, that have interfered with performance for some users--an instant turn-off. After trying LinkScanner out for half the day, though, I was pleased to see that the once-again independently available add-on continues to function as well as it did in the past.

AVG on Monday will begin offering a free version of its LinkScanner software, which offers real-time scanning of Web pages while surfing or doing Web searches.

LinkScanner, which is currently part of the AVG Free Edition suite, scans a Web page before a surfer visits the page and warns if the page appears to be unsafe.

AVG LinkScanner also offers safety rankings for all organic search results on Google, Yahoo, and MSN. Safe pages in searches will have green check marks next to them and unsafe ones will have red "X"es and pop up windows offer more explanation.

AVG LinkScanner scans bookmarks as well as links in e-mails and instant messages before they are opened. Individual pages are scanned separately, so that if one page on a site like Facebook are spreading malware that page will prompt a warning and other pages on the site won't.

There is other software that flags malicious sites in searches. McAfee SiteAdvisor works with Yahoo search results and more than 20 other search engines and Symantec offers ratings on Ask while Google serves up its own warnings in its search results.

The news will be announced at the RSA 2009 security conference which starts on Monday.

AVG LinkScanner puts marks by search results that are unsafe and displays a pop up box with more information when the cursor hovers over the mark.

(Credit: AVG)

Antivirus provider AVG Technologies on Tuesday announced that it is acquiring Sana Security, which sells identity fraud prevention software.

Under the deal, whose financial terms were not disclosed, the Redwood City, Calif., headquarters of Sana will serve as Amsterdam-based AVG's first office in Silicon Valley.

Sana's products use behavioral technology to block attackers from stealing sensitive information. The software analyzes normal application behavior and recognizes abnormal behavior caused by malware infections, user configuration errors, and software bugs.

There's a lot that goes on behind the scenes here at CNET Download.com, and that includes the videos we editors create for the products we find most worthy--or the ones you keep coming back to time and again.

In that vein, we've stuffed this glorious playlist with the the top 10 software videos you watched on our site in 2008. Take a look--you may wind up with a new app you never knew you needed!

(Hint: Click the word "Playlist" to view the whole list or skip ahead.)

Here are the winners:

1. AVG Anti-Virus Free 8
2. Orbit Downloader
3. VirtualDJ
4. Avast Home Edition
5. Firefox 3
6. Ad-Aware 2008
7. FLV Player
8. FrostWire
9. Paint.NET
10. Spybot - Search & Destroy

See more video reviews on Windows, Mac, and Mobile software.

Updated at 1:15 p.m. PST Wednesday with comment from Symantec and at 11:45 a.m. PST Thursday with comments from McAfee and Kaspersky.

For some security companies, Microsoft's decision to offer a free anti-malware product, code-named Morro, won't result in a dramatic change in how they do business.

Morro will be available in the second half of 2009 and will protect against viruses, spyware, rootkits, and Trojans, according to Microsoft.

"With OneCare's market share of less than 2 percent, we understand Microsoft's decision to shift attention to their core business," Joris Evers, director of worldwide public relations for McAfee, said in an e-mail.

As for confronting a free malware solution from a software giant, Evers said, "With more malware attacks than ever before, we believe our advanced technology, commitment to consumer education, superior protection, dedicated focus on security, and our 20-plus years in this business will provide consumers the confidence to choose McAfee as their trusted adviser and expert in security."

Justin Priestley, senior vice president of consumer sales at Kaspersky Lab's Americas division, also seemed not that concerned at the prospect of facing a free security solution from Microsoft.

"Having entered the U.S. consumer market at the same time as Microsoft, we initially viewed them as a formidable player. They've continued to hold a very low market share in the consumer market, and we don't expect the exit of OneCare to change the playing field drastically," Priestley said. "With the increasing threat malware and Web attacks pose, security is as important as ever, and we believe people will continue to choose antimalware software based on the quality of protection and will choose the highest-level product available."

Rowan Trollope, senior vice president of Symantec's consumer business, characterized the announcement as a "capitulation by Microsoft, and a reinforcement of the notion that it's simply not in Microsoft's DNA to provide high-quality, frequently updated security protection."

Here's the rest of his statement, provided via e-mail:

Consumers have already rejected OneCare, even though it entered the market at a lower price, because OneCare offered substandard protection and poor performance, as evidenced by scores of third party reviews. The offering only gained modest market share and ultimately was deemed unsuccessful in the marketplace.

Making a significantly scaled-back version of that same substandard security technology free won't change that equation. Simply put, innovation and protection matter. So even if it's free, the Microsoft "OneCare-light" offering will certainly fare worse than its predecessor, essentially putting consumers at increased risk without additional protection.

Additionally, our research clearly indicates that, after effective protection, what consumers care most about in a security product is performance. OneCare is widely recognized as one of the most egregious offenders in hogging system resources.

On Tuesday, Amy Barzdukas, senior director of product management for the Online Services and Windows Division at Microsoft, had dismissed similar criticism from McAfee. "If the current approach isn't working (as far as protecting consumers broadly), we need to go with a new approach," she said.

A representative for AVG Technologies, maker of AVG Antivirus, told CNET News on Wednesday, "We view this as a positive step for the AV (antivirus) landscape. AVG has believed in the right to free antivirus software for the past eight years."

The company said it will be "business as usual" and doesn't plan to make any changes to its own product offerings as a result. "Based on what Microsoft is planning to deliver, we don't feel the need to make any changes to our free product at this time," the company said.

Asked if AVG had any advice for Microsoft, the company said "consumers will use a free product if it's robust and it protects them. The product has to be easy to use, fast, unobtrusive, and be able to address the latest Web threats."

Alex Eckelberry, CEO of Sunbelt Software, maker of Vipre Antivirus + Antispyware, said the move to get out of a profitable business appears to a capitulation on Microsoft's part. "This gives them a chance to do something altruistic while getting out of an unattractive business," he said. He noted that Microsoft will still be selling Microsoft Forefront, a collection of business security products.

Eckelberry said there remain two questions: One, how exactly will Microsoft distribute the product (will it consider bundling it with Windows 7)? And two, will the company make the application available through enterprise group policy management?

In the end, AVG said the market still needs to be educated. "Microsoft will have to do more than simply make the product available," the AVG representative said.

(CNET News' Elinor Mills contributed to this report.)