Best free antivirus software and antivirus software reviews

Disabling System Restore to remove viruses.

noreply@blogger.com (Unknown) — Thu, 11 Sep 2008 06:50:00 +0000

Windows ME and Windows XP both come with a feature known as System Restore that enables users to revert to specific restore points without impacting data files. When new drivers or software are installed, the operating system automatically creates a restore point. If the installation causes problems, the system restore point can be used to rollback the changes. If no driver or software installations occur, System Restore will automatically create a restore point daily.
Unfortunately, System Restore backs up the bad with the good, thus a problem occurs when malware is present on the system and gets included in this restore point. When users later scan their system with antivirus software, they may receive a message that a virus was found in either the _RESTORE (Windows ME) folder or the System Volume Information folder (Windows XP) but the antivirus software is unable to remove it.
Removing malware from System Restore points To remove the malware, you must first disable System Restore, then scan the system with up-to-date antivirus software - allowing it to clean, delete, or quarantine any viruses found. After the system has been disinfected, you may then re-enable System Restore. The steps for disabling System Restore vary, depending on whether the default Start Menu or the Classic Start Menu is being used.
Default Start Menu If using the default Start Menu, click Start Control Panel Performance and Maintenance System. Select the System Restore tab and check "Turn off System Restore".
Classic Start Menu If using the Classic Start Menu, click Start Settings Control Panel and double-click the System icon. Select the System Restore tab and check "Turn off System Restore".
After scanning the system and removing the offending malware, re-enable System Restore by repeating the steps, this time removing the check from "Turn off System Restore".
Microsoft provides more information on System Restore in their System Restore FAQs

Is it a virus?

noreply@blogger.com (Unknown) — Thu, 11 Sep 2008 06:50:00 +0000

We've all been there - you get an alert from your virus scanner warning that a particular file is infected. Sometimes the alert reappears even after you've told the antivirus scanner to remove the infection. Or maybe you just have reason to believe the virus alert may be a false positive. Here are six things you'll want to consider to determine how to handle a suspicious or questionable virus alert.
1. Location, Location, Location.
As with real estate, the location of what's being detected can have critical bearing. If you're getting repeated alerts of the same infection, it may be due to non-active malware that's trapped in the system restore folders or a remanant in some other location that is triggering the alert.
How to Remove Viruses from System Restore
Delete Temporary Internet Files and Cookies
Clear the Internet History Folder
2. Origination: From Whence it Comes.
Just as with location, the origin of the file can mean everything. High risk origins include: attachments in email, files downloaded from BitTorrent or other filesharing network, and unexpected downloads resulting from a link in email or instant messaging. Exceptions would be files that pass the Purpose test described below.
3. Purpose: Did you Want It, Need It, Expect It?
The Purpose test boils down to a matter of intent. Is this a file you expected and need? Any file that is downloaded unexpectedly should be considered high risk and likely malicious. If it wasn't downloaded unexpectedly, but you don't need the file, you can mitigate your risk by simply deleting it. Being selective about what you allow to run on your system is an easy way to cut your risk of virus infection (and avoid bogging down system performance with unnecessary apps). However, if the file was deliberately downloaded and you do need it yet it's still being flagged by your antivirus, then it's passed the Purpose test and it's time for a second opinion.
4. SOS: Second Opinion Scan.
If the file passes the Location, Origination and Purpose steps but the antivirus scanner still says it is infected, its time to upload it to an online scanner for a second opinion. You can submit the file to Virustotal to have it scanned by over 30 different malware scanners. If the report indicates that several of these scanners think the file is infected, take their word for it. If only one or very few of the scanners report an infection in the file, then two things are possible: it really is a false positive or it is malware that is so new it's not yet being picked up by the majority of antivirus scanners.
5. Searching by MD5.
A file can be named anything, but an MD5 checksum seldom lies. An MD5 is an algorithm that generates a presumably unique cryptographic hash for files. If you used Virustotal for your second opinion scan, at the bottom of that report you'll see a section titled "Additional Information". Just beneath that is the MD5 for the file that was submitted. You can also obtain the MD5 for any file by using a utility such as the free Chaos MD5 from Elgorithms. Whatever means by which you choose to obtain the MD5, copy and paste the MD5 for the file into your favorite search engine and see what results appear.
6. Get Expert Analysis.If you've followed all the steps above and still don't have sufficient information to help you determine whether the virus alert is genuine or a false positive, you can submit the file (depending on file size) to an online.

New virus tries to dupe victims into googling its name

noreply@blogger.com (Unknown) — Wed, 05 Mar 2008 12:53:00 +0000

A new virus that appears to harken back to the days when malware was written for notoriety and annoyance is actually a craftily executed social engineering scheme that seeks financial fortune for its masterminds.It has been difficult to trace the source of the virus, which calls itself MonaRonaDona, because victims are unaware their machines are infected until they reboot their PCs, Roel Schouwenberg, a senior anti-virus researcher with Kaspersky Lab, told SCMagazineUS.com on Tuesday. Researchers first noted an outbreak last week.Once they restart, pop-ups begin appearing which claim: “Hi, My name is MonaRonaDona. I am a Virus and I am here to Wreck Your PC. If you observe strange behavior with your PC, like program windows disappearing etc, it's me who is doing all this. I was created as a protest against the Human Rights Violation being observed throughout the world & the very purpose of my existence is to remind & stress the world to respect humanity.”The malware prevents a number of popular applications from opening, including Windows Task Manager, Microsoft Office, Microsoft Word, Adobe, Google Talk and Macromedia, John McDonald, a senior security response manager at Symantec, said on the Security Response blog.At first glance, it appears the malware amounts to nothing more than a mass-mailing worm reminiscent of those from the late 1990s and early 2000s, whose only goal was to pester users. “This is unlike the majority of today's malware, which is very stealthy,” Schouwenberg said he initially thought. “It had all the makings of a typical hooligan virus.”But on further review, Schouwenberg found that entering “MonaRonaDona” into search engines such as Google and Yahoo yields links to web forums and YouTube videos that discuss the malware and claim that an anti-malware solution known as Unigray can remediate the virus.The web discussions clearly were fabricated by the malware's purveyors, who had banked on victims searching to find out more about the virus, Schouwenberg said. The bogus forums and videos are meant to entice victims to purchase Unigray, which is actually a rogue $40 anti-virus solution that does not work, except to remove MonaRonaDona, Schouwenberg said.“It's really a mind-blowing social engineering scheme if you ask me,” he said. “It's manipulating the user into searching for MonaRonaDona. They are using Web 2.0 websites, such as Digg and YouTube, to promote their own scheme”McDonald said the Unigray company falsely claims its product detects 679,871 threats, and it was only registered as a domain on Feb. 20. The site could not be accessed on Tuesday.Now that the anti-virus community has caught on to the scam and media are reporting on it, search results for Unigray do not rank as high, researchers said.Businesses, meanwhile, should keep their anti-virus up to date and encourage users to not click on advertisements, Schouwenberg said. Experts believe machines may have been seeded with the virus when users clicked on a rouge ad promoting a “Registry Clean Fix” program – although researchers have been unable to confirm this.

Vista SP1 Blocks Some Anti-Virus Programs

noreply@blogger.com (Unknown) — Tue, 26 Feb 2008 11:16:00 +0000

More Vista flubs from Microsoft are surfacing, this time we are learning that Microsoft's Service Pack One (SP1) has a nasty side-effect of blocking third-party applications from working. More serious is the fact that some of these programs are security apps such as antivirus programs: Zone Alarm Security Suite 7.1, Trend Micro Internet Security 2008, and BitDefender 10.
Microsoft has put together a list of the 12 "programs that are known to experience a loss of functionality when they run on a Windows Vista Service Pack 1-based computer will either."
Problems with Vista SP1 problems started Wednesday when Microsoft pulled an update that would prepare Vista PCs for the SP1 update. Software and hardware compatibility with Vista has also been a nagging issue with users.
Most troubling is that a majority of the incompatible programs are virus detection programs. Windows Vista SP1 will block BitDefender 10, Jaingmin KV Antivirus, Trend Micro Internet Security, and Zone Alarm Security Suite. The Microsoft support page does state that a compatible version of all of these programs are now available, however older versions will be blocked.
Programs that will either not run or lose functionality include Iron Speed Designer, Xheo Licensing, Free Allegiance, NYT Reader, Rising Personal Firewall, and Novell ZCM Agent. Microsoft's support page also provides links to each program's support page so that if you experience any problems there is a source for help.
This is not the open invitation to embrace Vista that many Windows users were hoping and expecting. The fact that Windows Vista SP1 has compatibility issues with security programs that will help keep my PC running smoothly is a very worrying prospect.
Hopefully some good news will come out about SP1 before it becomes readily available mid-March. Otherwise I don’t see a switch from XP to Vista in many people's futures.

From http://blogs.pcworld.com/staffblog/archives/006533.html

Spyware Doctor

noreply@blogger.com (Unknown) — Tue, 26 Feb 2008 11:16:00 +0000

Anti-spyware protection with AntiVirus 5.5.0.204 support

This is the software publisher's description.
Malware & spyware removal utility that detects, removes and protects your PC from thousands of potential spyware, adware, trojans, keyloggers, spybots and tracking threats. This is the version that includes an AntiVirus module.
Did you know that numerous programs tested against Spyware Doctor detected only small fraction of Spyware and completely removed an even smaller amount? Also most of them were unable to effectively block Spyware in real time from being installed on users PC in the first place.
Spyware Doctor with AntiVirus has the most advanced update feature that continually improves its Spyware and Virus fighting capabilities on a daily basis. As Spyware gets more complex to avoid detection, Spyware Doctor responds with new technology to stay one step ahead.
Spyware Doctor's advanced OnGuard technology only alerts users on a true Spyware and Virus detection. This is significant because you should not be interrupted by cryptic questions every time you install software, add a site to your favourites or change your PC settings. Such messages can be confusing and may result in undesirable outcomes such as program errors, lost favorites or even spyware and viruses being allowed to install on the system. We've done the research so you don't have to.
The latest v5.5 has gone under some redevelopment and has a smaller memory footprint and requires less CPU usage than previously, amongst other new enhancements.
PC Tools New Year Offer: get Spyware Doctor with AntiVirus 5.5 with a discount of 20% from the retail price by clicking the 'Buy Now' link on this page and then entering coupon code pctools20 at checkout.

Insignia 10.4-inch photo frame - Trojan virus

noreply@blogger.com (Unknown) — Mon, 28 Jan 2008 07:00:00 +0000

We haven't exactly gotten a torrent of email complaints from angry Best Buy customers, but for anyone wondering why the $230 Insignia 10.4-inch photo frame got pulled from shelves last week, here's your answer: they were manufactured, like devices sometimes are, with a supposedly "old and easily removed" trojan.

Funny, though, that the internal memo we got has Best Buy dragging its feet, intending to send a letter to potentially infected customers only "once a solution has been tested and confirmed." Here's a solution: recall the frames and send everyone some anti-virus software and a free appointment with the Geek Squad, instead of letting sites like ours break the news that Best Buy isn't moving fast to fix its digital security mishaps.

The memo is posted after the break.Earlier this month, it came to our attention that some units of the Insignia 10.4-inch digital photo frame (SKU 8483866) have a known Trojan virus. This virus was pre-installed during the manufacturing process. It affects only Windows applications and will only be initiated if the digital picture frame is connected to a PC via a USB cable. Customers who have not connected the digital picture frame to a PC, or those who have updated anti-virus software should be fully protected.While the virus is old and is easily removed from the picture frame by up-to-date anti-virus software, all units were pulled from shelves the first week of January as a precautionary measure to protect our customers.

Those units will be returned via the standard warehouse send back process and the model is now discontinued. Once a solution has been tested and confirmed, a letter will be sent to customers who purchased the product. Geek Squad employees have instructions to resolve the issue in the meantime. If a customer returns one of these units to your store or has questions or concerns about a virus, please direct them to the Geek Squad. Please note: No other Insignia digital picture frame products are affected by this issue.

Free online coupon codes (discount codes) for online stores (internet shops).

noreply@blogger.com (Unknown) — Wed, 23 Jan 2008 12:04:00 +0000

Online coupon codes (discount codes) links:

Send files to analyze and detect viruses, worms, trojans, and all kinds of malware

noreply@blogger.com (Unknown) — Fri, 11 Jan 2008 11:09:00 +0000

Online service help you to detect viruses, worms, trojans, and all kinds of malware http://www.virustotal.com/

Or You can use/download another Free Spyware scanner

Virus Signature

noreply@blogger.com (Unknown) — Mon, 17 Dec 2007 09:11:00 +0000

Glossary In the antivirus world, a signature is an algorithm or hash (a number derived from a string of text) that uniquely identifies a specific virus. Depending on the type of scanner being used, it may be a static hash which, in its simplest form, is a calculated numerical value of a snippet of code unique to the virus. Or, less commonly, the algorithm may be behavior-based, i.e. if this file tries to do X,Y,Z, flag it as suspicious and prompt the user for a decision. Depending on the antivirus vendor, a signature may be referred to as a signature, a definition file, or a DAT file.

From Mary Landesman

Free antivirus Avast was updated! version 4.7

noreply@blogger.com (Unknown) — Wed, 12 Dec 2007 11:26:00 +0000

Incremental updates: iAVS is a fast, small, incremental and fully automated update via the Internet. Updates are released at least twice a week.
The latest iAVS update was published on: 11.12.2007, version: 071211-0

No reinstallation of the program is needed for virus database updates!

If you are connected to the Internet, updates are downloaded and installed automatically without any need for user action. The presence of a new version on our servers is checked when the Internet connection is established, and every four hours afterwards. Please download the following file only if you really need it (e.g. if your computer does not have any Internet connection).

Download right now

File Size: 10.00 MB
Dial-up 56Kbit/s: ~ 31 min
DSL/Cable 128Kbit/s: ~ 14 min
DSL/Cable 256Kbit/s: ~ 7 min
DSL/Cable 512Kbit/s: ~ 3 min
T1 1Mbit/s: ~ 2 min

Highest certification results in the latest AV-Comparatives tests for Kaspersky Anti-Virus 7.0

noreply@blogger.com (Unknown) — Wed, 12 Dec 2007 11:26:00 +0000

Kaspersky Lab, a leading developer of secure content management solutions, announces that Kaspersky Anti-Virus 7.0 has demonstrated the highest level of reliability and effectiveness of its proactive protection system in a series of tests conducted by AV-Comparatives.org, a respected Austrian antivirus lab. Based on the results, Kaspersky Anti-Virus was awarded the highest certification: Advanced+.
“New malicious programs and viruses appear every day and it is evident that antivirus database updates, even hourly, are not enough to provide users with reliable protection from possible Internet threats. There is always a time “gap” between the appearance of a new threat and the release of an update. So to provide effective antivirus protection it is important to effectively detect new threats,” says the head of the AV-Comparatives lab Andreas Clementy.
AV-Comparatives conducted a series of tests in order to compare the effectiveness of various antivirus solutions' on-demand detection of malicious programs (by the program scanner). This method makes it possible to estimate the effectiveness of the heuristic analyzer, one of the components of the proactive protection system. The testing included 17 antivirus products for home users with antivirus databases that were dated August 5, 2007. The sample of malicious programs used in the tests appeared after this date.
Based on the results, Kaspersky Anti-Virus 7.0 was awarded the highest certification—Advanced+, which confirms the program has the highest level of detection of new malicious programs with minimal false positives using the antivirus program's heuristic analyzer. It should be noted that only 1 other products tested was awarded this certification.
“Kaspersky Lab developed and introduced a new heuristic analyzer in it's version 7.0 home user products in the summer of this year. In June 2007 this new module first participated in AV-Comparatives' testing and immediately received the Advanced+ certificate,” says Deputy Director of the Innovation Technologies Nikolay Grebennikov. “This is a long-awaited and very significant assessment of Kaspersky Lab’s work.”
The heuristic analyzer is only one of the components of the proactive protection module included in Kaspersky Lab products. Contrary to most competitors’ products, Kaspersky Lab products provide additional protection: a behavior blocker, which blocks the activity of malicious programs based on their behavior. The effectiveness of this module was also tested by AV-Comparatives in June 2007, with the test developers commenting: “The results of the tests performed with the randomly chosen malicious programs have confirmed the highest protection level and the effectiveness of the behavior blocker, which is awarded the Proactive Protection Award of the AV-Comparatives test laboratory.”
To find out more about the report “Comparison of different malware protection technologies”, or for more information about the Proactive Protection Award, please visit AV-Comparatives.org
About Kaspersky Lab
Kaspersky Lab delivers the world’s most immediate protection against IT security threats, including viruses, spyware, crimeware, hackers, phishing, and spam. Kaspersky Lab products provide superior detection rates and the industry’s fastest outbreak response time for home users, SMBs, large enterprises and the mobile computing environment. Kaspersky® technology is also used worldwide inside the products and services of the industry’s leading IT security solution providers. Learn more at http://www.kaspersky.com/ . For the latest on antivirus, anti-spyware, anti-spam and other IT security issues and trends, visit http://www.viruslist.com/

Last MicroWorld's Virus Alerts

noreply@blogger.com (Unknown) — Wed, 05 Dec 2007 10:55:00 +0000

Name :
Win32.Rbot.ewm
Type :
Worm
How it spreads :
Win32.Rbot.ewm spreads via the software vulnerabilities and through network shares.
Prevalence :
Medium
Affected operating systems :
Windows
Aliases :
N/A
Win32.Rbot.ewm is spreads to other network computers by exploiting software vulnerabilities and then it connects to some IRC servers and executes commands from a remote intruder.

Name :
Win32.OnLineGames.dr
Type :
Password Stealing Trojan
How it spreads :
Web downloads
Prevalence :
Medium
Affected operating systems :
Windows
Aliases :
This is a Password Stealing Trojan written in Delphi, primarily targeting Taiwanese MMORPGs. It can also post this stolen information to certain malicious websites.

Name :
Win32.Pakes.bmp
Type :
Trojan
How it spreads :
Win32.Pakes.bmp spreads via the network.
Prevalence :
Low
Affected operating systems :
Windows
Aliases :
N/A
Win32.Pakes.bmp is variant of the Win32.Pakes family of trojans. It exihibits a rootkit functionality and sends spam from a remote server and gathers email addresses from the infected system.

Name :
Win32.Agent.ckj
Type :
Trojan
How it spreads :
Win32.Agent.ckj spreads via the network.
Prevalence :
Low
Affected operating systems :
Windows
Aliases :
N/A
Win32.Agent.ckj spreads via the network. Once the system is affected by Win32.Agent.ckj, it allows a remote intruder to gain access and control over the computer.

Name :
Win32.AdobeReader.b
Type :
Trojan
How it spreads :
Win32.AdobeReader.b spreads via the Internet as a PDF attachment.
Prevalence :
Low
Affected operating systems :
Windows XP
Aliases :
N/A
Win32.AdobeReader.b exploits the Adobe Acrobat Mailto Unspecified PDF File Security Vulnerability to execute malicious code on the computer. Once it executed, the trojan disables the Window Firewall.

MWAV - MicroWorld's Free AntiVirus Toolkit Utility - Download

Shell Open Command Tricks from Mary Landesman

noreply@blogger.com (Unknown) — Tue, 04 Dec 2007 10:52:00 +0000

Malware can load from a variety of different places on your PC. In addition to the more common modifications to Windows auto start entry points, malware may leverage the shell open command. This allows it to register itself as the handler for certain file types and thus the virus, worm or Trojan loads when any of these file types are called. (The 2001 Sircam worm was one of the earliest examples of widespread malware using this technique).
Following are the keys typically targeted:
· HKEY_CLASSES_ROOT\exefile\shell\open\command
· HKEY_CLASSES_ROOT\comfile\shell\open\command
· HKEY_CLASSES_ROOT\batfile\shell\open\command
· HKEY_CLASSES_ROOT\piffile\shell\open\command
· HKEY_CLASSES_ROOT\htafile\shell\open\command
· HKEY_CLASSES_ROOT\htfile\shell\open\command
The default value for each of these should be "%1" %*.
If malware has registered itself as the handler, the value would appear similar to the following:
%1 where represents the filename of the malicious program.
When manually attempting removal of a virus, worm, Trojan or other malware that has registered itself as the handler in this manner, you must correct the registry value before you attempt to delete the copy of the malware. Otherwise, when you reboot your system you will not have a valid handler for these file types and the system will not load Windows.
To correct the handler value, replace the contents with:
"%1" %*
Symantec also provides a free tool to reset shell\open\command registry keys.

Storm Trojan - Private Detective Scare

noreply@blogger.com (Unknown) — Tue, 04 Dec 2007 10:51:00 +0000

A malicious Trojan is being sent in email claiming the recipient is being spied on and that the password-protected .rar attachment to the message is proof of a previously recorded conversation. The .rar contains an executable file that masquerades as an MP3 music file. In reality, the file is a disguised variant of the Zhelatin family of malware (commonly referred to as the "Storm worm").
The email message body sent by this variant of Zhelatin appears as follows:
I am working in a private detective agency. I can't say my name. I'm warning you that i'm going to overhear your telephone line. Do you want to know who paid for shadowing you? Wait for my next message.
P.S. Of course, you don't believe me. But i think that the record of your yesterday's telephone conversation will change your point. The record is in archive. The password is 123qwe
According to PC Tools ThreatExpert, this latest variant creates a file named "kernelwind32.exe" in the Windows system folder (usually C:\Windows\System32). The registry is modified to load this copy when Windows starts, as follows:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run System = "\kernelwind32.exe"
A file named "kernelw.sys" is also dropped to the Windows system folder. This file is a kernel mode rootkit that hides itself and other files and processes associated with the infection. The Trojan also modifies the registry to prevent access to the Windows Task Manager.
Rootkit enabled malware is extremely common these days. To bolster your virus protection, use one or more of these free rootkit detectors to scan your system. From Mary Landesman

Safely Shopping on the Internet

noreply@blogger.com (Unknown) — Tue, 04 Dec 2007 10:47:00 +0000

The advantages of shopping online during the Holiday seasonare numerous. You have a world of products at your fingertipsand you don't have to deal with parking hassles, mall crowds,and long lines.
Unfortunately, despite all its benefits, there is one potentialmajor drawback about buying items on the Internet. Accordingto the Federal Trade Commission, in 2005, an estimated $300+million was lost to online schemes. Smart cyber-shoppersshould research any web site that they want to transact withbefore buying something.
One of the first steps you should consider taking is to upgradeto McAfee Total Protection(TM) with SiteAdvisor(TM) Plus, if youdon't already have it. In addition to getting more PC security,SiteAdvisor Plus will provide you with web site safetyratings and help you avoid fake e-stores that just want tosteal your credit card number.
Safety ratings are based on automated safety tests of websites and are enhanced by feedback from our volunteer reviewersand insights from our own analysts. McAfee SiteAdvisor hastested over 95% of the sites on the Internet.
Also, you should look for the HACKER SAFE(R) icon on thee-store's home page. HACKER SAFE technology protects over75,000 web sites. Seeing the HACKER SAFE icon providesshoppers with the confidence of the most trusted e-commercesecurity seal in the world.
To be a smart online shopper this holiday season, you needto adhere to a few basic dos and don'ts when purchasingfrom web sites to avoid becoming a victim of cyber-crime.In addition to the above, consider the following:
Dos
Do pay by credit card. You can dispute purchases madeafter reporting you credit-card number has been stolen orused without your knowledge.
Do use a secure web site*.
Do keep copies of the sales transactions for futurereference in case a dispute arises.
Do check your credit-card statements to make sure you were charged the proper amount and that no "extras" were added.
Do check the site's privacy policy before you order.
Do purchase comprehensive computer security software like McAfee Total Protection with SiteAdvisor Plus to protect you whenever and wherever you go online.

* = Secure sites have a key or closed lock displayed in theweb browser. Of course, you should also look for the HACKERSAFE icon. Another way to confirm a site is secure, check ifthe web address (URL) on the page begins with "https" insteadof just "http." Please note, these efforts can be spoofedby cyber criminals.
Don'ts
Don't send cash. Pay by credit card because you're protected.
Don't send any financial information via email. It is not a safe method for communicating this sensitive information (credit-card or Social Security numbers).
Don't forget to read the return policy and other terms.
Don't buy from a site you don't feel absolutely comfortable with. If you sense something is just not right about the company you are ordering from, then don't make a deal.
Don't forget to inspect your new product as soon as it arrives. Notify the seller as soon as possible if there is a problem.

Antivirus Software News by Mary Landesman

noreply@blogger.com (Unknown) — Thu, 08 Nov 2007 07:26:00 +0000

Mac Trojan Targets Porn Surfers
According to Intego, a provider of security software for the Mac OS, a malicious Trojan was discovered on several pornography web sites, advertised on various Mac forums. The Trojan masquerades as an installation of a video codec, but in reality changes DNS settings in order to hijack web requests and redirect users to phishing sites. Ingego warns that the Trojan continually checks to ensure its DNS server remains active, and that several different versions of the Trojan may be installed, possibly country-specific.

McAfee to Acquire Hacker Safe
Antivirus vendor McAfee has announced plans to acquire Hacker Safe, a vulnerability scanning and logo service. I have to admit, I cringe everytime I see the Hacker Safe logo on a web site.
You may have seen the Hacker Safe logo on some of the websites you've visited. The presence of the logo is intended to increase consumer confidence; the premise is that the site has been checked for remotely compromisable vulnerabilities. Unfortunately, groups such as sla.ckers have repeatedly succeeded in finding vulnerabilities on sites emblazoned with the Hacker Safe logo.
But the bigger issue isn't whether the program actually leads to better security, but rather the false sense of security the presence of the logo creates. After all, look at phishing scam email and phishing sites which duplicate the logo and other images from bank and ecommerce sites. An image is no assurance of anything - it can be easily faked.
Consider this post from a Hacker Safe logo counterfeiter, "Instead of buying their service I just made my own button. I save myself the money, and I still get all the (psychological) benefits."
On October 30, 2007, security vendor McAfee announced the intended acquisition of Hacker Safe "for approximately $51 million in cash up front and with an earn-out of up to an additional $24 million if certain performance targets are met."

Supermarkets - victims of the online scam

noreply@blogger.com (Unknown) — Thu, 08 Nov 2007 07:16:00 +0000

By Dan Goodin
Red-faced accountants from one of the biggest supermarket chains in the US are frantically trying to regain control of more than $10m lost after falling victim to online fraudsters.
Evidently, no one at Minnesota-based Supervalu bothered to confirm the authenticity of emails sent in late February. Purporting to come from two of the company's suppliers, the messages instructed Supervalu to wire all future payments to new bank accounts. One email purported to come from representatives of Frito-Lay and the other from American Greetings. Both suppliers have established relationships with the grocery chain.
The emails were phony, but within two days, Supervalu began moving money into the accounts. Over the course of a week, the company transferred $10,128941.94 in nine separate payments. One account was administered by HSBC Bank in Miami and the other by First Security Bank in Arkansas. Once Supervalu discovered the accounts were bogus, it alerted federal authorities, which quickly froze the accounts before the scammers could withdraw the money.
The sad tale was outlined in documents filed in US District Court in Idaho. Attorneys for Supervalu, which owns the Albertsons chain, are arguing that the company should recover the full amount because it was a victim, has committed no wrongdoing, and has cooperated fully with investigators. Gross gullibility is no legal deterrent to getting the money back, we gather.The story was reported earlier by Computerworld. A Supervalu spokeswoman told the site that "due to our internal controls and processes, we were able to quickly discover and report this to the FBI." Any losses are likely to be minimal, she said.

Antivirus, Firewall, and Security Software Reviews

noreply@blogger.com (Unknown) — Thu, 08 Nov 2007 07:15:00 +0000

From Mary Landesman, your guide to Antivirus Software, reviews conducted by various publishers and testing facilities.

Antivirus for GamersMost everyone realizes that antivirus and firewalls are must-have protection. But when protection interferes with online gaming, it can be sorely tempting to disable that protection in favor of uninterrupted play. These antivirus scanners tackle the unique problems of gamers so you can play without sacrificing performance or protection.
Bots, Botnets, and Norton AntiBotSymantec's Norton AntiBot confronts the growing threat of bots and botnets. Norton AntiBot works alongside existing antivirus (from any vendor), using behavior-based analysis to monitor processes, files, and other active components
McAfee SiteAdvisorMcAfee SiteAdvisor is the virtual equivalent of the school crossing guard, helping to ensure safe navigation of the web.
Secunia Software InspectorSecunia Software Inspector is free, fast, and so intuitive to use there's simply no excuse for not keeping patches up to date.
Gifts for Geeks and Gamers
Gifts for geeks, gamers, techies, and even moms and dads.
AVG Rescue CD: Antivirus ReviewAVG Rescue CD: Antivirus software review
Antivirus Software Review: McAfee VirusScan 2006McAfee VirusScan 2006 now offers daily virus signature updates and robust adware/spyware detection and removal.
Antivirus Software Review: AVG Free EditionAVG Free Edition provides free antivirus protection for Windows XP/2000/NT/ME/98
Antivirus Software Review: AVAST 4 Home EditionAVAST 4 Home Edition provides free antivirus protection for Windows XP/2000/NT/ME/98
Antivirus Software Review: Free Antivirus SoftwareFree antivirus software may be the only option for those on a limited budget. The question, of course, is how well free antivirus software protects your PC, how easy is it to use, and if something goes wrong will you be left out in the cold? The answers may surprise you. This review looks at three free antivirus solutions: AntiVir PersonalEdition Classic, AVAST 4 Home Edition, and AVG Free Edition.
Antivirus Software Review: AntiVir PersonalEdition ClassicAntiVir PersonalEdition Classic provides free antivirus protection for Windows XP/2000/NT/ME/98
USB Antivirus Software: Is it right for you?USB-installed antivirus makes a lot of sense, combining a viable storage option with the ability to efficiently scan a system that's had its antivirus disabled, or has antivirus that cannot remove a particular threat. Two products to look at: Verbatim Store 'n' Go U3 Smart Drive and SanDisk's Cruzer Titanium USB drive.
Norton Internet Security 2005 AntiSpyware EditionAt $80, Norton Internet Security 2005 AntiSpyware Edition doesn't offer the ease-of-use or the protection of some competing products.
AVG Anti-Virus plus Firewall Edition AVG Anti-Virus plus Firewall Edition is light on resources, heavy on protection. The firewall provides permission-based access control reminiscent of the popular ZoneAlarm firewall. The high level of control and customization will appeal to the most advanced users, while less savvy users will find the Basic interface simple to understand and use.
Top Spyware ScannersSpyware surreptitiously monitors your computer and Internet use, while adware can bombard your PC with unwanted advertising. Both pose a drain on your bandwidth and can lead to loss of security.
G Data AntiVirusKit (AVK) 2005: antivirus software reviewG DATA AntiVirusKit 2005 (AVK) provides a double layer of protection, bundling both the Kaspersky and BitDefender antivirus engines under a single, easy-to-use console. The use of these engines offers an important advantage to AVK.
Microsoft AntiSpyware screenshotsMicrosoft AntiSpyware screenshots
Review: Microsoft AntiSpyware (beta1)We tested the Microsoft AntiSpyware beta against some of the most common adware and spyware. How well did it measure up?
PC-cillin antivirus screenshotsTrend Micro's PC-cillin Internet Security 2005 builds on an already solid foundation. Here are screenshots of features we like best.
Antivirus software review: PC-cillin Internet Security 2005Trend Micro's PC-cillin Internet Security 2005 continues to keep a leg up on the competition.
Choosing the right antivirus software for your desktop PCChoosing the right antivirus software to protect your system from viruses need not be a daunting tasks. Follow these tips to select the antivirus software that best meets your unique virus protection needs.
ZoneAlarmWith today's increasingly sophisticated viral threats, many packing backdoor access Trojans designed to compromise your computer's security, a product such as ZoneAlarm does more than protect. It's a must-have in your "peace of mind" arsenal.
Adjunct to antivirusIt takes more than just antivirus software to prevent infection. Fortunately, following the few simple steps outlined below can provide a good measure of security in very little time.
Norton AntiVirus 2002 Norton AntiVirus 2002 is effective protection, sports an attractive interface but has extensive system requirements.
Norton AntiVirus 2002Norton AntiVirus 2002 is effective protection, sports an attractive interface but has extensive system requirements.
McAfee ad labels BitDefender as 'virus'In what can only be described as one of the most egregious abuses of the Google AdSense program, antivirus vendor McAfee has hijacked the good name of BitDefender. Insult is then added to injury - the BitDefender antivirus software is called a "virus" in the advertisement
Antivirus Software for Desktop PCsBefore you buy antivirus software for your Windows PC, consult this article to determine what features you should be looking for and which products meet the criteria.
Macintosh antivirus reviewsAntivirus protection for the Macintosh is in limited supply. Thankfully, so are the viruses affecting the Mac platform. This review provides a quick snapshot of available protection.
Top online scannersFree online scanners provide a quick, easy way to get a second opinion scans. But how well do they really work?
Bigger Threats, Better DefensePC World magazine tests 16 security tools - firewalls, antivirus software, and anti-spyware programs - to determine which is best suited to foil worms, viruses, spies, and hackers.
AV-Test.orgAndreas Marx, CEO of AV-Test.org, goes way beyond simple 'wildlist' testing and pits the scanners against a malware collection of nearly 100,000 to see how they'll perform in the real world.
What to look for when buying antivirus softwareWhat criteria should you look at when deciding on antivirus software? Take a walk with us through 31 products tested to see how the cuts are decided.
Essential add-ons for layered securityScanners are wonderful at preventing known viruses but sometimes they need a little help to catch the newly released threat. These essential add-ons shore up your defenses.
F-Prot Antivirus for WindowsDetecting 100% of ITW viruses and 96.34% of Zoo viruses, F-Prot Antivirus for Windows also includes the DOS commandline scanner and an integrity checker.
NOD32Eset Software's NOD32 provides a standalone module for use with MS DOS and Windows 3.x and can be executed from a diskette. Choose Download from the menu.
NOD32 Antivirus System v2.0NOD32 is a solid performer, easy to use and with little impact on system resources. Version 2 builds on the product's past accomplishments, remaining true to a singular theme - virus detection.
Norton AntiVirus 2002If your system can handle it (NAV 2002 is one big program), the features and detection rates are very impressive.Panda Antivirus PlatinumFeature-rich Panda Antivirus Platinum provides solid protection and a host of options.

FREE Dr.Web CureIt! Curing Utility

noreply@blogger.com (Unknown) — Wed, 31 Oct 2007 07:52:00 +0000

Easy to use FREE curing utility to clean your computer infected with viruses and various unwanted codes by the Dr.Web Anti-virus updated twice an hour.

What is Dr.Web CureIt!?

This is a FREE anti-virus and anti-spyware scanner based on the Dr.Web engine which will help you quickly scan and cure, if necessary, a computer operated by MS Windows 95OSR2/98/98SE/Me/NT4/2000/XP/2003/2003R2 without installation of the Dr.Web Anti-virus.
Dr.Web CureIt! automatically detects the language of the OS it is installed to and sets the scanner interface accordingly (if the local language is not supported, English is enabled). The utility supports the following languages: Russian, Arabic, Bulgarian, Byelorussian, Czech, English, Estonian, French, Georgian, German, Greek, Hungarian, Japanese, Latvian, Lithuanian, Polish, Portuguese, Slovakian, Spanish, Turkish, Ukrainian. The utility contains the most up-to-date add-ons to the Dr.Web virus databases updated twice an hour.

Dr.Web CureIt! detects and removes.

* Mass-mailing worms * E-mail viruses * Peer-to-peer viruses * Internet worms * File viruses * Trojans * Stealth viruses* Polymorphic viruses * Bodiless viruses * Macro viruses * MS Office viruses * Script viruses * Spyware * Spybots * Password stealers * Paid Dialers * Adware * Riskware* Hacktools * Backdoors * Keyloggers* Joke programs * Malicious scripts * Other malware*

How do I use Dr.Web CureIt!?

Download Dr.Web CureIt! from our web-site. Run the utility and press the "Start" button in the opened window. Confirm the launch by pressing the "OK" button and wait for the scanning results of the main memory and startup files. If you want to scan hard drives of your computer, select the objects for scanning in the central part of the scanner window and press "Start scanning" in the right bottom corner.
When you call the utility, you can specify parameters for the scanner in the command line, i.e. to specify the objects for scanning or/and modify the scanning modes different from the default ones. When being scanned, infected files are cured, incurable files are moved to the quarantine directory. When the scanning is finished, the log file and the quarantine are not deleted.

How do I update Dr.Web CureIt!?

This utility can quickly clean an infected system, but it is not a permanent tool to cure your computer in case of infection. It is armed with the hottest add-ons to the Dr.Web virus database, but it does not include the Dr.Web Automatic Updating utility. Dr.Web CureIt! stays actual until the next release of the add-on, then it gets a bit outdated. To scan your computer with the most up-to-date Dr.Web virus databases next time you should download new Dr.Web CureIt! package. For this, press the "Update" link on the first utility screen, which leads to our ftp-server where the latest version of CureIt! is located. Download the utility and run it again.

FREE DOWNLOAD Dr.Web CureIt! 7,3 M

Free Virus Removal Tools

noreply@blogger.com (Unknown) — Thu, 25 Oct 2007 15:52:00 +0000

Getting a virus on your system is frustrating to say the least, and can be hazardous to the health of your computer. Indeed, today's malicious software can even steal your identity and wreck your hard-earned credit rating. To help fight back, here's a list of free tools, tips, and tricks to get rid of viruses and keep them from getting back on your system.
Free Virus Removal Tools
Sure the antivirus vendors want to make money, but if you ever get the chance to meet one of their virus researchers, you'll find their real motivation is to protect users. As corny as that may sound, it's true. That's why when stubborn or fast-spreading infectors are discovered, antivirus vendors release special tools to remove the malware - and give the tools away free. It's no substitute for installed antivirus software, but if you're already infected and in a pinch, it's the next best thing to, well, installed antivirus software.
* Create a Free F-Prot Rescue CD - FRISK Software - one of the oldest and most respected antivirus companies (and the secret sauce hidden in a lot of antivirus products being sold under other names)- offers their F-Prot for DOS scanner free for personal use.
# It's ideal for making a rescue CD so you can scan the system from a clean boot.
# McAfee AVERT Stinger - McAfee AVERT Labs offers a handy utility to run in Windows that cleans some of the more common malware.
# Microsoft Malicious Software Removal Tool - Microsoft offers a free tool to remove prevalent software active on the system. The tool is offered via Automatic Updates, Windows Updates, and Microsoft Updates, or it can be manually downloaded using the provided link.
# Symantec Virus Removal Tools - Antivirus vendor Symantec offers a wide range of free cleaning tools for individual malware removal.
# F-Secure Virus Removal Tools - Another good choice for individual malware removal are these free tools from F-Secure.
# For a second opinion scan or a not-so-stubborn infector, try one of the Top Online Scanners.
Free Virus Repair and Prevention Tips
# How to Repair a Boot Sector Virus - Though boot sector viruses are rare in the U.S. and most European countries, they are still prevalent in other parts of the world.
# How to Make an Antivirus Rescue CD - In case you missed it above, steps for creating an F-Prot CD.
# http://antivirus.about.com/library/weekly/aa011902a.htm - Prevention. Prevention. Prevention. These are the essential steps.
# How to Make Sure Your Antivirus is Working - Viruses, worms, and trojans often disable your antivirus software when they infect your system. This prevents the antivirus software from being updated and detecting the presence of the malware. Here's how to check to ensure it's working.
# How to Avoid Macro Viruses - From the SANS Institute, tips on avoiding macro viruses.
# How To Prevent Email Worms - Security configuration changes you need to make to your favorite email client software.
# IM Safety Tips - In some crowds, instant messaging (IM) is more popular than email. But IM carries its own set of risks. These tips will help reduce the risk.

Free Antivirus Software
There's no such thing as a free ride, or is there? If you're an experienced user and don't mind putting in a little elbow grease, you can build your own security suite:
# Free Virus Scanners
# ZoneAlarm Personal Firewall
For those who want a more holistic all-in-one solution:
# Top Antivirus Software
# Top Spyware Scanners

From Mary Landesman

You Need To Disable Autorun

noreply@blogger.com (Unknown) — Thu, 25 Oct 2007 15:48:00 +0000

he autorun feature enables CDs to play automatically when inserted in the drive. This is the same feature that enabled the now infamous Sony rootkit to install. Removable and thumb drives use the same autorun feature to load files when the drives are plugged into the USB port. Malware relies on this autorun feature to spread from thumb drive to PC. Disable the autorun feature to prevent malware from spreading. And who knows, it may just stop the next rootkit-enabled CD.
Difficulty: Easy
Time Required: 2 minutes
Here's How:
1. If you use XP Pro, follow steps 1 through 8 only. XP Home users begin at step 9.
2. Click Start and then click Run
3. Type gpedit.msc and click OK
4. The Group Policy window will open. In the left pane, double-click Administrative Templates
5. In the right pane, double-click System
6. Scroll down the list and double-click Turn Off Autoplay
7. In the Turn Off Autoplay Properties window, select Enabled. From the dropdown next to Turn Off Autoplay on, select All drives and then click OK
8. Exit Group Policy by selecting File, then choosing Exit from the menu.
9. XP Home users will need to make the changes by editing the registry directly. To begin, click Start and then click Run
10. Type regedit and click OK. The Registry Editor window will open.
11. In the left pane, navigate to:
HKEY_CURRENT_USER
Software
Microsoft
Windows
CurrentVersion
Policies
Explorer.
(Note: For help navigating the registry, see the Windows Basics System Registry tutorial).
12. With Explorer highlighted, in the right-pane right click the value NoDriveTypeAutoRun and select Modify from the drop down menu. The base value will be set to Hexadecimal. If not, select Hexadecimal.
13. Type 91 and click OK
14. Exit Registry Editor by selecting File, then choosing Exit from the menu.
15. You will now need to reboot your computer for the changes to take effect.

From Mary Landesman

Kaspersky Lab announces the release of a new version of its free Online Virus Scanner

noreply@blogger.com (Unknown) — Wed, 17 Oct 2007 07:16:00 +0000

From http://www.kaspersky.com/news?id=207575572

Kaspersky Lab, a leading developer of secure content management solutions, announces the release of a new version of the free Online Virus Scanner, which scans user computers for malicious programs.
Kaspersky Free Online Virus Scanner version 5.0.98.0 corrects the high-risk vulnerability KLV07-09 (CVE-2007-3675). Insufficient control of input parameters in the ActiveX component of Kaspersky Online Virus Scanner version 5.0.93.1 and earlier versions could result in a buffer overflow which could potentially enable an attacker to execute malicious code on a user’s computer.
The vulnerability was discovered by Stephen Fewer of Harmony Security working with the VeriSign iDefense VCP. Kaspersky Lab would like to thank the experts from Harmony Security and iDefence for providing information about the vulnerability, making it possible to eliminate the threat before it could be exploited.
Kaspersky Lab strongly recommends that all Kaspersky Online Virus Scanner users install the new version of the application, which is available at free online virus scanner
About Kaspersky Lab
Kaspersky Lab delivers the world’s most immediate protection against IT security threats, including viruses, spyware, crimeware, hackers, phishing, and spam. Kaspersky Lab products provide superior detection rates and the industry’s fastest outbreak response time for home users, SMBs, large enterprises and the mobile computing environment. Kaspersky® technology is also used worldwide inside the products and services of the industry’s leading IT security solution providers. Learn more at www.kaspersky.com . For the latest on antivirus, anti-spyware, anti-spam and other IT security issues and trends, visit www.viruslist.com

Parvo Free Antivirus Protection Adware Removal Spyware Tool

noreply@blogger.com (Unknown) — Fri, 07 Sep 2007 13:25:00 +0000

Parvo virus free antivirus protection ad aware adaware spyware remover free adware and spyware removal tool antivirus download. Stinger anti virus, adware and spyware removal tool spyware blaster adaware software avg virus download for spybot search and destroy. Roto virus norton antivirus 2005 crack spyware free pop up killer spyware removal tool adware and spyware removal tool. The tool will spyware virus removal display a report describing the result set pc adware spyware removal http: spyware-remover -free.blogspot.com spyware software download free.
Consult their websites and especially the Help sections for details on how to use these spyware/adware removal tools to scan your computer. On completion it's advisable to scan your system for adware and spyware using a spyware removal tool such as XoftSpy. This spyware and adware removal tool detects and removes 1000's of security threats such as spyware, adware, keyloggers, browser hijackers, tracking cookies, and trojans.
This spyware and adware removal tool detects and removes of security threats such as spyware, adware, keyloggers, browser hijackers, tracking cookies, and trojans. Stinger anti virus, adware and spyware removal tool spyware blaster adaware software avg virus download for spybot search and destroy. The tool will spyware virus removal display a report describing the result set pc adware spyware removal http: spyware-remover -free.blogspot.com spyware software download free.
If you would rather not peruse endless folders or risk re-infection, a trusted tool such as Spyware Doctor should be used for adware removal. Welcome to spyware removers.com, with reviews of spy removers and adware removal tools. If you wish to continue using these programs which may contain spyware/adware, do not run these spyware removal tools. If the instructions provided by Hotbar do not work, you can try one of the following 3rd party adware/spyware removal tools.
The removal tool will eliminate any adware or spyware that you have in your machine for good. Parvo virus free antivirus protection ad aware adaware spyware remover free adware and spyware removal tool antivirus download. The first thing you must remember is that most adware/spyware tools are basically for removal after the fact. Roto virus norton antivirus 2005 crack spyware free pop up killer spyware removal tool adware and spyware removal tool. If there are other spyware/adware removal tools that you think should be listed here, please email me. http://www.adware-removal-spyware-tool.com/

Standalone Virus and Spyware Scanners

noreply@blogger.com (Unknown) — Wed, 05 Sep 2007 13:21:00 +0000

From Mary Landesman,

It's not just viruses that plague today's Internet users. Spyware surreptitiously monitors your computer and Internet use, while adware can bombard your PC with unwanted advertising. Both pose a drain on your bandwidth and can lead to loss of security. Following are a selection of the best dedicated adware and spyware scanning tools to ferret out these often hidden menaces. If you go the standalone route, make sure you back it up with antivirus software and a firewall.
1. McAfee VirusScan
McAfee AntiSpyware 2006 is no longer sold as a standalone product, but don't despair. McAfee VirusScan (2006) includes the same stellar protection. In our tests, both products nabbed 98% of running processes associated with adware and spyware, effectively neutering the infestation. At $39.99 for both stellar spyware protection and a top-notch virus scanner, McAfee VirusScan (2006) is a steal.
2. Webroot Spy Sweeper
Spy Sweeper removed 100% of the miscreant BHOs and Toolbars in our tests and stopped 84% of the active processes associated with adware and spyware. Spy Sweeper is a standalone spyware scanner and not a full-fledged Internet security suite, thus it is best used in conjunction with antivirus and firewall software.
3. Sunbelt CounterSpy
Sunbelt's CounterSpy removed 90% of the miscreant Browser Helper Objects (BHOs) in our tests. Sporting above average detection for only $19.99, CounterSpy offers inexpensive protection, an easy-to-use interface and US-based tech support.
4. Windows Defender
Windows Defender is offered free antivirus scanning complex and, like CounterSpy, sports above average detection rates. The product is still considered beta and tech support is not provided. Despite these setbacks, it can provide a good second opinion. However, Microsoft AntiSpyware and CounterSpy should not be installed on the same system, as they both share common components.
5. Spybot Search & Destroy
Free for personal use, Spybot doesn't have stellar removal rates. It does, however, provide TeaTimer and SDHelper which are extremely effective at preventing adware and spyware from gaining a foothold on your computer. So while you may not want to rely on it for detection and removal, you may want to install and activate it alongside other protection to help keep your system spyware-free.
6. Hijack This
Another free utility, Hijack This isn't a traditional spyware scanner. It will, however, provide a full report of what's active on your system. Experienced users can peruse the report, identify the miscreants, and use Hijack This to disable the unwanted loading (or do so manually). Less experienced users can save the Hijack This log and send it to a more savvy friend for advice.

Free antivirus review 2007

noreply@blogger.com (Unknown) — Wed, 05 Sep 2007 09:28:00 +0000

From Mary Landesman
As noted from free antivirus review 2007, each of the three free antivirus scanners - AntiVir PersonalEdition Classic, AVAST 4 Home Edition, and AVG Free Edition - have proven ability to detect in-the-wild viruses. This is a core, basic functionality of any reputable antivirus scanner and thus serves only as the basis for inclusion in the review, i.e. no points were awarded for meeting this minimum qualification. (Before considering any antivirus solution, you should check their ItW certification by consulting any of the following: VB100%, ICSALabs, or Checkmark).

Zoo Detection
AVAST 4 Home Edition had the highest rate of zoo virus detection (92%), followed by AntiVir PersonalEdition Classic at 85% and AVG Free Edition at 81%. However, AVAST's higher zoo detection was offset by a correspondingly higher rate of false positives, 9 total compared to AntiVir at only 2. Conversely, AVG scored the lowest in both categories, racking up 11 false positives.

Response Times
How nimble your antivirus vendor is can make the difference between an infection and a non-event. To gauge this, we looked at the response times recorded for 26 major outbreaks during a particularly prolific virus period. Vendors who were among the first five to release antivirus updates for one of these 26 threats received points accordingly. AntiVir was one of the top 5 vendors a total of 5 times, AVAST appeared twice, and AVG only once.

Compressed/Archive Types
Many virus creators thwart signature-based scanners simply by repackaging a known virus using a different compression or archive type. This not only changes the signature, not all scanners can decompress the resulting files in order to scan them properly. According to tests performed in 2005, AntiVir is capable of scanning 30 different compressed and archive types, compared to AVAST at 28 and AVG at only 17.

Adware and Spyware
When it came to adware and spyware, none of the free scanners peformed well. The best of the worst was AVAST (free antivirus review 2007), which removed 33% of the active components of the adware and spyware installed to our test system. AntiVir PersonalEdition Classic removed 5% and AVG removed none. (Paid versions of these same products proved more capable thus a low score for the free products has no bearing on their paid counterparts).

Footprint
Each of the free antivirus scanners was conservative in the amount of disk space used, installing 40Mb or less on our test systems. (The smallest was AVG at only 30Mb). AVG installed four running processes, compared to three for AntiVir and six by AVAST. The footprint on the system can be particularly important for those running older operating systems (i.e. Windows 98/ME) where hard drive space and memory might be at a premium. Fortunately, any one of the three meets those needs.

Support Options
If you run into difficulty using the product or trying to remove a stubborn infector, you'll have to resort to an online knowledgebase or self-help forum. AVAST does offer phone support, but there's a per minute charge attached which could likely turn the free solution into an expensive alternative rather quickly.

The Final Scores
If we left spyware/adware removal out of the mix and focused only on the scanner's ability to detect traditional virus threats, out of a possible 125.6 points, AntiVir PersonalEdition Classic scored 94, AVAST 4 Home Edition scored 89, and AVG Free Edition scored 66 (free antivirus review 2007). However, when we included adware/spyware removal in the judging, the results were dismal, with AVAST scoring highest at 66 points, AntiVir following at 58, and AVG with only 30.

Of course, these particular antivirus scanners don't claim to have adware and spyware removal capabilities, so it would be unfair to judge them harshly if they do not. Still, if you are looking for a standalone antivirus scanner that can also offer spyware or adware protection, you'll have to shell out a few dollars to get it.