The Download Blog

advertisement
Click Here
Read all 'antispyware' posts in The Download Blog
October 29, 2009 5:30 PM PDT

IOBit 360 refreshed for Windows 7

by Seth Rosenblatt
  • 9 comments

IOBit 360 is a relative newcomer on the antimalware scene, although the Chinese publisher is known for making solid utility software such as Smart Defrag. It's a fast and welterweight freeware utility for detecting and removing malware, and plugging your system's security holes before they can been exploited. The new improvements in version 1.10 include integration with the Windows 7 security center, a new feature that creates a USB key-portable version, a toolbar, and scan engine tweaks.

IOBit 360

(Credit: Screenshot by Seth Rosenblatt/CNET)

If you're unfamiliar with the program, it's fairly simple to figure out and use. The interface has large left navigation icons with simple labels that won't confuse novices, while the tools menu offers some useful features that more advanced users are sure to appreciate.

The Overview tab is the main window and it contains links for immediate Smart scans, definition file updates, a "security analysis"--which evaluates potential exploits in your system and includes Windows security patches--and a status update window. This tells you whether your real-time protection, automatic scans and updates, and heuristic-based scans are on or off. Automatic scans and updates, and scheduled scans, are restricted to the paid upgrade, which is currently being offered on sale for $19.95. It's usually $29.95.

The Scan tab lets you initiate a Smart scan, a Full scan, or a Custom scan, and the Protection tab lets you toggle your real-time protection status. It seems a bit odd that a user would want the separate controls that the program offers for "known malware" and "unknown threats," but you can toggle them independently.

A running scan that wound up taking about six minutes to finish.

(Credit: Screenshot by Seth Rosenblatt/CNET)

The Tools tab is what makes IOBit 360 comparable to others in its class, giving you seven useful system security tools. There's a Hijack scan for power users, a Security Holes scan, a Passive Defense that disables cookies in Firefox and Internet Explorer, and ActiveX in IE, and an Unlock and Delete tool for getting rid of files your system thinks are in use. This feature is slightly less important in Windows 7, which will tell you when you encounter a locked file where it lives, but the unlocking and deletion features are definitely useful.

There's a Privacy Sweeper that will clean not just cookies and cache but saved forms, download history, and other Internet traces in all the major browsers it detected on my system, including Firefox, Internet Explorer, Google Chrome, Opera, and Safari, but the sweeper will also check utilities such as archival tools, multimedia players, and other applications that regularly ping the Internet. These days, that's nearly everything.

Annoyingly, the PC Tuneup option takes you to the download page for another IOBit program, but users on the go will like that you can create a custom portable version, launchable from a USB key. IOBit 360 eats about 50MB of RAM when idle, with a Smart scan taking about 6 minutes and a full scan finishing in 45 minutes, making this one of the fastest in its class. I didn't notice any system lags while running it, and it didn't detect any malware on my system, although it did point out tracking cookies from multiple browsers. Third-party efficacy tests haven't yet been performed against high-performing competitors such as Ad-Aware or Malwarebytes, but IOBit is proving that the antimalware tool without antivirus isn't dead--yet.


October 12, 2009 8:42 PM PDT

Exclusive limited time offer: Ashampoo products for $10

by Catherine Hwang
  • 2 comments

If you missed out on Ashampoo's special deal last week, here is your second chance! In celebration of their 10th year Anniversary, Ashampoo is offering CNET users an exclusive deal on all of their software (except for CAD software) for just $10 USD.

Ashampoo makes a number of popular software titles including, but not limited to, Ashampoo AntiSpyWare 2, Ashampoo Music Studio 3, Ashampoo Office 2008, Ashampoo Magical Defrag 2, Ashampoo Burning Studio 9, Ashampoo Movie Shrink & Burn 3, Ashampoo HDD Control, Ashampoo WinOptimizer 6, Ashampoo UnInstaller 4, Ashampoo PowerUp 3, Ashampoo Slideshow Studio HD, Ashampoo Photo Commander 7, Ashampoo Snap 3, and Ashampoo Cover Studio 2.

You can get the special promotion by clicking on the $10 promo button on their product pages or simply enter in the special CNET Downloads coupon code download_com from their website.

This is an exclusive limited time offer, so get it before the time runs out!

September 29, 2009 9:01 AM PDT

Security Essentials graduates to v1.0

by Seth Rosenblatt
  • 65 comments

Microsoft has released version 1.0 of Security Essentials, the successor to Live OneCare. Originally known as Morro, Security Essentials retains the core features of OneCare, but abandons the additional heft of a firewall, performance tuning, and backup and restore options in exchange for making the program free. Rather than taking aim at full-featured security suites made by Symantec or Eset, the features available in Security Essentials indicate that Microsoft is aiming to compete with basic-but-free security apps.

For the select 75,000 public beta testers who got their hands on the program when the limited public beta was offered in June, there will be few appreciable differences between the beta and the final version. For the rest of the planet, Security Essentials features key defenses that are boilerplate for any respectable security program.

Features

It uses both definition file and real-time defenses against viruses and spyware, and also offers rootkit protection. The program's reputation-based detection and software signature-based detection seem to rely heavily on Microsoft SpyNet, the unfortunately named cloud-based service that compares file behavior across computers running various Microsoft operating systems.

The official version 1.0 of Microsoft Security Essentials looks identical to the popular limited beta version from June 2009.

(Credit: Screenshot by Seth Rosenblatt/CNET)

SpyNet was introduced in Windows Vista and extended to Windows 7, but Microsoft Security Essentials is the only way to access the network on Windows XP. Unlike other security vendors that allow customers to take advantage of the benefits of their behavioral detection engines while opting out of submitting information, there's no way to do that with SpyNet.

You can choose between two SpyNet memberships. Basic submits to Microsoft the detected software's origins, your response to it, and whether that action was successful, while the Advanced membership submits all that plus the location on your hard drive of the software in question, how it operates, and how it has impacted your computer. Both basic and advanced warn users that personal data might be "accidentally" sent to Microsoft, although they promise to neither identify nor contact you. Opting out of SpyNet, however, is not an option in Security Essentials.

Security Essentials benefits greatly from having a simple, streamlined interface. There are four tabs, each with a concise and understandable label: Home, Update, History, and Settings. The program also uses easy-to-grasp labels, imported from OneCare: green for all good, yellow for warning, and red for an at-risk situation.

From the Home window, you can run a Quick Scan, Full Scan, or Custom Scan, and a link at the bottom of the pane lets you change the scheduled scan. The Custom Scan lets users select specific folders or drives to scan, but it doesn't allow for customizing the type of scan used. For example, you're not going to be able to choose to scan only for rootkits or heuristics, as you can with other security programs. The program installs a context-menu option for on-the-fly scanning in Windows Explorer, too.

The Update pane manages the definition file updates, with a large action button, and History provides access to a spreadsheet-style list of All detection items, your Quarantine, and items you've Allowed to run. Although it's a basic layout, this no-frills approach to security could prove appealing to computer users who are overwhelmed by more detailed security choices.

Users can choose between two options for SpyNet, but no way to not contribute to it.

(Credit: Screenshot by Seth Rosenblatt/CNET)

The Settings window allows users to further customize the program by scheduling scans, toggling default actions to take against threats, adjusting real-time protection settings, creating whitelists of excluded files, file types, and processes, and the aforementioned SpyNet options. There's also an Advanced option which is still fairly basic: here you can set Security Essentials to scan archives, removable drives, create a system restore point, or allow all users to view the History tab.

Security Essentials comes pre-configured to run a scan weekly at two in the morning, when your Microsoft thinks your system is likely to be idle. New malware signatures are downloaded once per day by default, although you can manually instigate a definition file update through the update tab. Attachments and downloaded files will be automatically scanned by Security Essentials.

Help is only available in the form of the standard offline Help manual that comes with all Microsoft programs. There's nothing fancy here.

Performance

I found that it installed in less than one minute, and completed its first Quick Scan in less than 30 seconds. The Full Scan took more than an hour to reach the halfway point, and this was borne out by tests performed by CNET Labs' benchmarks. Microsoft Security Essentials actually sped up the boot time of our test computer by more than two seconds, and it sped up the shut-down time by more than two and a half seconds. However, compared to major security vendors it was significantly slower at scanning--Security Essentials took 2,340 seconds to scan, whereas most scans would clock in between 1,000 and 1,100 seconds.

The program comes with a few options for customization, but not many.

(Credit: Screenshot by Seth Rosenblatt/CNET)

In our iTunes decoding test it scored similarly to its competition, about 7 seconds slower than an unsecured computer. In our MS Office test and media multitasking tests it was faster than some--503 seconds versus 552 seconds for Norton AntiVirus 2010 in the Office test, and 844 seconds versus 876 seconds for Trend Micro Internet Security Pro in the media test.

While running the Full Scan, I noticed that it took up about 86 MB of RAM. However, it felt far lighter, and I was able to perform resource-intensive tasks like uploading photos without any noticeable freezes.

Third-party virus detection efficacy scores were not available at the time of writing, and it's not currently clear whether Security Essentials shares the same detection engine as Live OneCare. However, CNET reporter Ina Fried mentioned that Security Essentials stopped her from accidentally coming down with a case of Koobface.

Conclusion

Microsoft Security Essentials is a lightweight security app that people might turn to for a number of key reasons. It's easy on the system resources, it's easy to figure out how to use, and it comes pre-configured. It only works on legally licensed Microsoft computers, which is understandable but potentially leaves a large segment of the unprotected population still unprotected. You can't opt out of contributing to SpyNet, which isn't understandable at all. Overall, it's recommended for those who want something to set and ignore, but users who want more robust configuration choices or don't want to contribute to the cloud should look elsewhere.

September 2, 2009 9:00 AM PDT

Remove viruses from an infected PC, and keep them from coming back

by Dennis O'Reilly
  • 30 comments

Our family PC gets quite a workout. It's a five-year-old machine that runs Windows XP and is used primarily by my daughter and teenage grandson for instant messaging, e-mail, social networking, and downloading audio and video files. Since I rarely use the system, I didn't notice that its antivirus subscription had expired.

Which explains why I was a bit surprised when my grandson called when I was out of town to tell me that the PC was acting strangely. Ads appeared on the desktop as soon as Windows started and Firefox and other programs would occasionally close without warning or fail to open at all.

I immediately suspected a virus and instructed my grandson to perform a virus scan. Unfortunately, the machine's antivirus app had gone AWOL. I talked him through the process of using System Restore to revert the PC to an earlier time. This improved matters somewhat, but the system continued to act flaky.

When I returned from the trip, I started the troublesome machine and attempted to open the Microsoft Update site to make sure its copy of XP was up-to-date. But the malware had managed to disable several Windows services intermittently, including Services.msc, so Internet Explorer would shut down repeatedly.

At this point, I was seriously considering a hard-disk reformat and XP reinstall. I even had the XP installation CD in the drive and was ready to begin the process. But even though my daughter and grandson assured me that they had backup copies of all their personal files, I decided to try one more time to salvage the existing setup.

I'm very glad I did, because it turns out there were lots of vacation and holiday images and videos on the machine that hadn't been backed up. First, I installed a free copy of Malwarebytes' Anti-Malware antivirus program on the infected PC, updated the app's virus definitions, and ran a complete scan.

Malwarebytes Anti-Malware scan report

The initial Malwarebytes Anti-Malware scan detected 104 separate infected files and folders.

(Credit: Malwarebytes)

That first scan turned up a mere 104 infected files and folders. Here's a list of the nasties the machine had picked up:

• Trojan.Vundo
• Troja.Vundo.H
• Trojan.FakeAlert
• Rogue.Installer
• Trojan.Downloader
• Trojan. Dropper
• Trojan.Agent
• Worm.KoobFace
• Rogue.AdvancedVirusRemover
• Rogue.SystemSecurity
• Adware.BHO
• Rootkit.Agent
• Spyware.Agent
• Trojan.BHO
• Hijack.LSP
• Rogue.Multiple
• Disabled.Security

After viewing the report, I rebooted the PC and ran another malware scan. This time, Malwarebytes' app found only nine infected files.

The second Malwarebytes Anti-Malware scan report

The second Malwarebytes Anti-Malware scan detected only nine infected items.

(Credit: Malwarebytes)

I rebooted once more and ran yet another scan, which indicated that the PC came up clean.

The third Malwarebytes Anti-Malware scan report

The third Malwarebytes Anti-Malware scan indicated that all viruses and other malware had been removed from the infected PC.

(Credit: Malwarebytes)

Once I was assured that the PC was malware-free, I revisited the Microsoft Update site to download and install all the XP security patches the machine required. Then I sprang for the $25 version of Anti-Malware to get the program's real-time virus scanning and automatic updates.

I knew all attempts to alter the user behavior that led to the infections would be futile, so instead, I instructed my daughter and grandson to run Malwarebyte's scanner each time they start the system and just before each shutdown. That was a little over two weeks ago, and so far, the PC remains free of infection. Still, you can bet I'll be paying much closer attention to that machine from now on.

Originally posted at Workers' Edge
Dennis O'Reilly has covered PCs and other technologies in print and online since 1985. Along with more than a decade as editor for Ziff-Davis's Computer Select, Dennis edited PC World's award-winning Here's How section for more than seven years. He is a member of the CNET blog Network, and is not an employee of CNET.
July 29, 2009 2:16 PM PDT

Top antispyware software

by Jason Parker
  • 56 comments
Security - Antispyware (Credit: CNET)

If you are using a Windows machine or even a Mac running Windows in a virtual environment, you need to pay attention to security. At the very least, you should always have at least one program for each of the major security threats: antispyware, antivirus, and a software firewall (if you don't already have a router-based firewall). Some antivirus suites have begun to include antispyware in their software, so if you have antivirus software, check to make sure you're covered. But if you're reading this and you don't have software to cover these three areas, we strongly suggest you visit our Download Security Center and browse through each of the categories.

To get you started, we've rounded up the top free antispyware software options. Most of these programs offer a paid upgrade with added useful features, but we made sure to only pick software that followed through and removed spyware without the need to buy during the initial trial. It's important to note that each of these programs has its own set of algorithms and different times they update their definitions, so we recommend using two antispyware programs to make sure you catch everything.

Spybot Search & Destroy (Credit: CNET)

Spybot Search & Destroy was one of the first antispyware options available and it still is a fairly strong contender for finding threats. Other useful tools, including Secure Shredder, complement the program's basic functionality for completely destroying files. The interface is pretty dated, but with all the added extras of this 100% free program, it's worth a look.








Ad-Aware Anniversary Edition (Credit: CNET)

Ad-Aware Anniversary Edition has been in the antispyware game for a long time as well. They have always been close to the top of our list for antispyware detection, but you'll need to pay for added features like scheduling and shield-based protection. With several interface refinements, faster scanning times than previous versions, and numerous other enhancements, this might be the easiest-to-use Ad-Aware yet.









Spyware Terminator (Credit: CNET)

Spyware Terminator is a free option that offers an easy-to-understand interface and lets you schedule your scans for the time most convenient for you. The real-time protection for this program is stronger than most, but can get distracting as you'll need to personally approve many actions. Fortunately, you can designate a lower level of protection to keep you safe without all the hand-holding. This is one of our favorites at Download.com for its relatively quick scan times, free real-time protection, and the ability to designate how deep of a scan you want to use.





CounterSpy (Credit: CNET)

CounterSpy makes it simple to schedule and customize spyware scans or run scans on demand, while also offering an adjustable level of real-time protection. Added features like a PC Explorer to browse running ActiveX controls and running processes are useful additions. This one offers a 15-day trial with which you'll be able to remove threats found by CounterSpy, but you'll need to pay to use this program regularly.








SuperAntiSpyware Free Edition (Credit: CNET)

SuperAntiSpyware Free Edition, despite its rather uninventive name, is a solid antispyware program. This program offers a number of options for the types of files you want scanned. Like many of the programs listed here, you'll need to pay for the full version of SuperAntiSpyware to unlock the ability to schedule your scans and use real-time protection.










Malwarebytes (Credit: CNET)

Malwarebytes is our Editors' Choice at Download.com so we recommend it as one of your choices in your antispyware arsenal. Scans are quicker than other programs in this category, and Malwarebytes is often able to distinguish between real threats and common false positives. You'll also be able to scan individual files on demand and a handy File Assassin lets you delete locked malware files. You'll need to pay to set up regularly scheduled scans and real-time protection, but with this solid program, registering is worth your money.

July 16, 2009 5:36 PM PDT

Norton Internet Security 2010 beta in pictures

by Seth Rosenblatt
  • 55 comments

Norton Internet Security 2010 won't be available for a few more months, but the beta version is available now. In it, Symantec continues to build on the rejiggering it did last year. Built upon the dramatic performance improvements are deeper integration with other security tools like OnlineFamily. Norton, and the new Norton Insight for judging threats by community behavior as well as file definitions.

March 18, 2009 3:38 PM PDT

Set it and forget it in Avira AntiVir 9

by Seth Rosenblatt
  • 15 comments

Avira AntiVir 9 introduces several new features including one-click threat removal, full antispyware and antiadware protection, a new heuristics detection engine, and enhanced program security.

Combined with its highly rated virus-killing abilities, AntiVir is one of the strongest free security programs around. Check out what you can expect in this First Look video.

March 17, 2009 2:26 PM PDT

Avira builds better free security in AntiVir 9

by Seth Rosenblatt
  • 59 comments

Avira AntiVir started making waves a few years ago, scoring high on well-respected third-party antivirus detection and removal tests. Released today exclusively on Download.com, AntiVir 9 doesn't appear to have changed much--but that's only because the interface sports the slightest of what's new.

Avira AntiVir 9 introduces one-click infection removal with multiple options for customization.

(Credit: Avira)

A refreshed banner logo tops the list of UI changes, but it's the long-awaited features in the free version of AntiVir that should pique most users' interest. Anti-spyware detection and removal is now available for the free version of AntiVir as well as the paid upgrades. There's new scanning tech that can crack open "locked" files and verify that they're not malicious, along with improved internal security to prevent AntiVir's files from being maliciously altered. AntiVir 9 also offers a rebuilt heuristic detection engine, and according to Tony Anscombe, director of consumer products for Avira, Download.com reader comments have been the impetus for the new one-click threat removal option--no more baby-sitting the scans.

The one-click threat removal is a nifty quarantining feature that logs and sets aside all detected threats so you can deal with them individually or as a group at the end of the scan. It's simple, but means that you can run a scan at night and not worry about the scan pausing and waiting for user input before it continues.

Click on the Configuration button on the right-side of the central pane, and check off Expert Mode on the upper left-side of the box that opens. In the options tree below it, go to Scanner, then Scan, then Action for Concerning Files. From there, you can choose an Automatic or Interactive reaction. Under Automatic, you can choose a primary and secondary action, as well as copying the file to the quarantine before taking any other action. Interactive offers you a round-up at the end of a scan, and Combined or Individual notification mode for users who want to deal with infections all at once or one at a time.

Except for the banner, AntiVir 9 looks exactly like AntiVir 8.

(Credit: Avira)

The other new features, from the anti-spyware to the rebuilt heuristic engine, are not as easy to demonstrate since we don't maintain a virus or spyware zoo at CNET for security reasons. However, it's worth mentioning that Avira has expanded the AntiVir free version to include their anti-spyware and anti-adware detections. In previous years, the premium version of AntiVir earned very high marks from both independent testers Andreas Marx (results) and Andreas Clemente.

As program upgrades go, AntiVir is worth some of the hoops that users must jump through to get on board. The upgrade is a time-intensive process, requiring some minor user input and rebooting your computer. Also, users will have to go to the Download.com product page and actively download the new installer. Version 9 won't be pushed to existing users for another month.

Savvy users will notice the removal of the on-demand e-mail scan, and AntiVir is still challenging--and by challenging, I mean a massive headache of pain--to fully uninstall. Despite these hang-ups and the nag screen that follows the multiple definition file updates that occur daily, AntiVir offers such effective protection and a well-rounded set of features that as long as the updates keep coming, it should remain on the top of any free antivirus users' list.

July 10, 2008 3:28 PM PDT

Insider Secrets: Best free security apps

by Seth Rosenblatt
  • 1 comment

You don't have to pay a cent to keep your computer secure against the bad guys. Watch this discussion on best practices and best apps between CNET TV's Tom Merritt and Download.com's Seth Rosenblatt. When you're done, head on over to our Security Starter Kit to check out must-haves for both newbies and power users.

June 4, 2008 2:53 PM PDT

First Look video: Spyware Terminator

by Jessica Dolcourt
  • 13 comments

Spyware removal, real-time protection, and integrated antivirus for free? These compelling ingredients form the siren song of Spyware Terminator. Digging out spyware is the security tool's chief job description, but the application also adds real-time blocking and integrates the free ClamWin Antivirus tool at your behest. Spyware Terminator scans and zaps on three levels, and helps guard against malicious code swimming in through applications, system files, and the Internet.

Search Download Blog posts

About The Download Blog

Download.com editors cover the world of downloadable software and beyond.

Add this feed to your online news reader

The Download Blog topics

Most Discussed