Windows Secrets

Subscribers: Sign in

Enter your e-mail address to get a free subscription.
We guarantee your privacy
Skip to content
  • Home
  • Newsletter Archives
    • Current
    • LangaList Plus
    • Patch Watch
    • Wacky Web Week
    • Security Baseline
  • E-Books
  • Lounge
  • About us
    • Refunds
    • Privacy Policy
    • Advertise
  • Contact
  • Your Account
    • Upgrade
    • Preferences
    • Bonus Download
    • Unsubscribe
Home>New findings update WS Security Baseline

Windows Secrets Newsletter • Issue 243 • 2010-05-13 • Circulation: over 400,000


Table of contents 
  • Top Story: New findings update WS Security Baseline
  • Lounge Life: How many firewalls running together is too many?
  • Wacky Web Week: Fun ways to take revenge on would-be thieves
  • LangaList Plus: Hard-drive defragmentation is still worthwhile
  • Best Software: Reassessing and retuning Google’s Chrome
  • Patch Watch: A patch for Microsoft’s e-mail clients

 
Top Story

New findings update WS Security Baseline

Robert vamosi By Robert Vamosi

Our monthly update of the Windows Secrets Security Baseline focuses on malware suites — all-in-one commercial packages that fight viruses, spam, spyware, and malware that’s still unknown — plus suites you assemble yourself.

Regardless of your skill level — beginner, intermediate, or advanced user — you should be able to find security protection that’s right for your needs.

In the past, security suites have been roundly criticized for their deleterious effects on PC performance and because they were often difficult to uninstall. From the e-mails we receive, the dislike for paid AV suites runs deep among long-time PC users.

But over the last decade, I’ve probably reviewed almost any antivirus product you could name, and I’m here to tell you that today’s Internet security suites use fewer resources than their predecessors and most are much easier to remove. That’s an achievement, given the ever-more sophisticated threats these applications face. Though they started out combating simple viruses, they must now include tools to fight spam, spyware, and malware that’s still unknown.

Most of today’s top-rated suites charge $30 to $70 a year to protect up to three PCs. The suites discussed in this article all support Windows XP, Vista, and Win7.

The primary benefit of one-package security suites is a unified interface, so the various components are easier to access and configure. Do-it-yourself suites are more difficult to maintain but let you pick the best-of-breed software for different types of malware threats.

I’ve broken down the choices for suites into three groups: basic, intermediate, and advanced.

Suites that quietly work in the background

For PC users seeking a security suite that delivers good protection with minimal fuss, the three commercial suites listed below are best. These packages are for average PC users who do not feel comfortable delving into a suite’s sometimes-complex controls. Everything you need to know is displayed in a simple window, including whether or not you’ve received the latest product update. If that simplicity does not appeal to you, skip down to the intermediate or advanced lists below.

Our top three — Norton, Kaspersky, and Microsoft — each showed the most innovation in their 2010 offerings, with the first two sandboxing Web applications. All three scan only those files that have changed since the previous scan (as opposed to scanning the entire hard drive every time).
  • Symantec’s Norton Internet Security 2010: Symantec’s suite, probably more so than any other AV software, has taken hard knocks for slowing down PCs. This time around, however, CNET, PCWorld, and PCMag.com all noted that the suite’s impact on PC performance is much improved. That and the software’s ability to block new threats earned it top scores from all three publications.

    Using test data from AV-test.org, PCWorld’s review noted Norton’s superior virus behavior analysis, which helps stop new malware not yet catalogued by the AV vendors.

  • Kaspersky Internet Security 2010: PCMag and PCWorld both thought Kaspersky’s strength was its easy-to-use interface. A new “Safe Run” feature also lets you test new software by installing and running it in an isolated sandbox environment prior to installing it for real. However, both PCWorld and PCMag reported middling overall performance results.

  • Microsoft Security Essentials: Given Microsoft’s tepid efforts at anti-malware software in the past, its free MSE security suite has received surprisingly good reviews. Windows Secrets Patch Watch columnist Susan Bradley recommends MSE for average PC users, and senior editor Fred Langa wrote a lengthy and generally positive review in his May 6 Top Story.

    There is little in the way of recent independent lab testing of MSE. One of the most recent is AV-Comparatives.org’s February 2010 PDF-based report, in which MSE was given high marks for malware detection and scan times. In particular, MSE scored very few false positives compared with Trend Micro, Panda, and McAfee.
What about the other household-name AV products? This year McAfee got tepid reviews and took a huge hit when it inadvertently sent out a bad virus update. CA, Panda, and Trend Micro also received mediocre scores.

Intermediate suites provide more customization

The intermediate products listed below have a large and dedicated following among experienced PC users, mostly because these suites offer more user controls. They don’t have the marketing clout of the brands in the basic group, and their interface and integration are not as polished. It’s best to combine these suites with one or more of the standalone security products listed in the advanced section.
  • Alwil Avast Internet Security 5.0: This suite is worth a look, even though the suite is a brand-new offering. Its signature-based protection is solid, its interface is intuitive, but it offers just the basics — according to a PCMag.com review. PCWorld’s review stated that its behavioral detection could use more refinement. Still, there’s considerable positive buzz around this late entry to an already-crowded security market.

  • Sunbelt Vipre Antivirus Premium: Although this suite has been around for a few years, when Sunbelt combined its antivirus with its anti-spyware engines, it started from scratch — producing a leaner and meaner anti-malware engine that has earned the VirusBulletin VB100 designation for good antivirus performance. Vipre includes a firewall and anti-rootkit protection but lacks sophisticated browser protection.
Although other middle-tier products — BitDefender, Zonealarm, PCTools, Webroot, and F-Secure, for example — have their fans, each product has its own strengths and weaknesses you’ll need to take into consideration.

Advanced security — build it yourself

Ask a dozen security experts what they’d put into their suite of anti-malware tools, and you’ll get a dozen different answers. But the following products are considered top-tier by advanced PC users. Many are also free.

Anti-malware detection and removal
  • G Data Antivirus 2010: In a February antivirus test report by AV-Comparatives, G Data earned the best score for virus detection, and it had a low rate of false positives. At $25, it’s also modestly priced.

  • Immunet Protect: This free, cloud-based antivirus product was created by some former Symantec engineers. Cloud-based antivirus apps take up little room on your hard drive, and their defenses against new malware outbreaks can be pushed out faster than with the conventional signature-based method. Unfortunately, this new technology has not been tested as thoroughly as more-traditional methods. You can download Immunet Protection directly from the vendor.

  • Malwarebytes Anti-Malware:One of the gold standards of standalone antivirus apps, it is favored by Windows Secrets contributing editor Ryan Russell. It has not been evaluated alongside Norton, Kaspersky, or any other leading AV apps — though most advanced users consider it an important tool in their AV arsenal. It’s a free download at the Malwarebytes site.
Firewalls
  • Comodo Firewall: A free combination firewall and antivirus app, Comodo’s product is recommended by several sources, including Windows Secrets senior editor Ian “Gizmo” Richards. In recent tests by matousec.com, the firewall’s performance was rated perfect.

    Comodo is also offering its new, free Comodo Internet Security suite that includes an antivirus component. A PCWorld review recommended a pass on the suite’s AV tools, stating poor malware detection and a high rate of false positives.

  • Online-Armor Personal Firewall: Gizmo rated Online-Armor’s product equal to Comodo, and it’s earned accolades from many other reviewers as well. The software, available as a download at online-armor.com, comes in both free and paid versions — the latter $40-product adds a Web shield feature, anti-phishing filter, and online banking protection.

  • Windows 7 firewall: If you have Windows 7 installed, you should not need a third-party firewall, according to WS contributing editor Susan Bradley. She believes that Win7′s built-in protection is best.
Other
  • Browser protection: Linkscanner is a free browser-security product from AVG that scans Web pages and content for malicious links. Unlike most other browser-security products, Linkscanner blocks only malicious elements on a Web page — not the whole page.
For aspects of the Security Baseline other than security suites, see my March 18 column.

Have more info on this subject? Post your tip in the WS Columns forum.

WS contributing editor Robert Vamosi was senior editor of CNET.com from 1999 to 2008, writing pieces such as Security Watch, the winner of the 2005 MAGGIE Award for best regularly featured Web column for consumers.

 
Lounge Life

How many firewalls running together is too many?

By Tracey Capen

The firewall is one of the most fundamental components of PC security — and it’s the least understood by the average computer user.

The conventional wisdom is to never run more than one antivirus program at a time and never run multiple anti-spyware apps together — so why do we routinely rely on both hardware and software firewalls?

  • Win7 didn’t warn me its firewall was running

    Lounge member Roderunner, a bit annoyed that Windows 7 runs its firewall by default, wants to know how many firewalls other Lounge members run on their PCs. That simple question started a long discussion about hardware and software firewalls and whether Win7′s is the best choice. More»
The following links are this week’s most-interesting Lounge threads, including several new questions that you may be able to provide responses to:


☼ starred posts — particularly useful

If you’re not already a Lounge member, use the quick registration form to sign up for free. The ability to post comments and take advantage of other Lounge features is available only to registered members.

If you’re already registered, you can jump right in to today’s discussions in the Lounge.

The Lounge Life column is a digest of the best of the WS Lounge discussion board. Tracey Capen is technical editor of WindowsSecrets.com.
Office Applications
Word Processing 
Saving as a PDF “shrinks” Word document
☼
Spreadsheets 
Creating degree values from numbers
☼
Databases 
Access 2010 auto insert from field above issue
☼
Microsoft Outlook 
Outlook crash! How to recover outlook.pst?
Non-Outlook E-mail 
What e-mail client are you using?
☼
Windows
General Windows 
Bios password doesn’t work
 
Windows 7
Partitioning a hard drive for 64-bit Windows 7
Problems with Windows 7 after KB978542 update
☼

Windows Vista 
Upgrading Vista Home Premium to Win7 Pro
☼
Windows XP 
Power options not working
Internet/Connectivity
Internet Explorer 
Favorites/Bookmarks file location
☼
Third-Party Browsers 
Short freezes in Firefox
☼
Application Servers 
SharePoint current time default value
 
Networking
Setting a fixed IP loses internet connection
☼
Other Technologies
Non-Microsoft OSes 
Ubuntu Linux 10.4 LTS out now!
☼
Security & Backups 
What is your opinion of Comodo products?
☼
Other Applications 
Adobe Acrobat 9 problem
 
Light Relief
Scuttlebutt
Do monkeys have 20 fingers?
 

 
Wacky Web Week

Fun ways to take revenge on would-be thieves

Microsoft office alarm By Stephanie Small

Getting ripped off really stinks. While someone else is out having fun with what’s rightfully yours, you’re left with lost time, money, and good humor.

But here’s a way to get a bit of payback — if not on the hardcore thief, at least on those opportunists who think they’re getting something for nothing. It might just make you think twice about playing finders, keepers. Play the video

See more funny videos and funny pictures at CollegeHumor.

 
LangaList Plus

Hard-drive defragmentation is still worthwhile

Fred langa By Fred Langa

Today’s hard drives are 10 times faster than the drives of old — is defragging really still worth the bother?

One reader wonders whether the time has come to challenge the conventional wisdom about defragging.


What good does defragging do nowadays?

Reader David H. Copp asks a valid and timely question:
  • “You have a good piece about defragging in your April 22 column. But I think you are echoing a myth.

    “Back in the days of my first hard drive, a 20Mb Seagate ST-225, defragging was important. But so far as I know, there are no measurements that show that defragging a modern drive has more than one or two percent impact on performance. Please correct me if I am wrong!”

You’re right that defragging isn’t as important as it once was. But there’s more to defragging than simply improving hard drive performance.

Before we dive in, let’s run through a 60-second defragging refresher.

Windows normally stores the files on a hard drive in a series of blocks. When a drive is new or well-ordered, each file’s blocks can be written to the drive more or less sequentially. But over time, holes open in that orderly sequence as files are changed or deleted; they are then filled with bits of data from other files. Eventually, a file’s blocks may end up scattered all over the disk.

This article is part of our paid content. Subscribe.

Already a paid subscriber? Click here to login.


 
Best Software

Reassessing and retuning Google’s Chrome

Ian richards By Ian “Gizmo” Richards

Critics have rightly questioned whether Google’s Chrome browser transmits too much data about user browsing habits to the company’s databases.

Although most of the reports of Chrome’s privacy issues are more alarmist than factual, problems do exist — but they can be effectively controlled by changing a few Chrome settings.


Google makes its browser fresh, fast, and safe

First, full disclosure: I’m a great fan of the Firefox browser, and it’s been my standard browser since Version 1. That said, I now use Chrome about as often as Firefox in my day-to-day computing. In fact, Chrome is my first choice when I go surfing for information on the Web.

The reasons are simple — Chrome’s speed and advanced secure browsing.

Chrome is dramatically faster to load than Firefox 3.6 or Internet Explorer 8 and noticeably faster when loading Web pages. In my subjective testing, and in everyday browsing, Chrome displayed pages twice as quickly as IE.

In some circumstances, Chrome’s speed advantage seemed even more pronounced. For example, I use a JavaScript-intensive Web page daily to administer my site’s CMS settings. Firefox takes about 10 seconds to load the page, and IE takes about 12 seconds. With Google Chrome, I’m up and running in just two seconds — a time difference that might make any user consider switching allegiances.

This article is part of our paid content. Subscribe.

Already a paid subscriber? Click here to login.


 
Patch Watch

A patch for Microsoft’s e-mail clients

Susan bradley By Susan Bradley

For anyone using a Microsoft e-mail client, checking e-mail while at the coffee bar could be hazardous to your PC.

The familiar remote-code execution threat behind so many of the recent hacker attacks now targets users of Outlook Express, Windows Mail, and Windows Live Mail.


MS10-030 (978542)
Mail clients need protection from hot spots

Outlook Express, Windows Mail, and Windows Live Mail all share a common bond — they’re Windows XP’s built-in e-mail client, or they’re Microsoft’s recommended free download for Windows 7. Unfortunately, all three also share a weakness: hackers could use malicious code on a bogus e-mail server to take control of your PC.

You are at greatest risk when checking your e-mail via public hotspots — typically, when you’re not using secure settings while connected to your Internet service provider’s e-mail server. Fortunately, most ISPs will let you link to their servers only if Secure Socket Layer (SSL) is on. This ensures that your password is not transmitted in clear text.

Microsoft security bulletin MS10-030 describes this patch as critical for (among others) XP users running Outlook Express. The patch is rated important for anyone with Windows Live Mail and most current versions of Windows. Check the bulletin for your specific combination of Windows and MS e-mail client.

Microsoft might offer you the patch even if you don’t have Live Mail or Windows Mail installed. I was surprised to find it on the updates list for a Windows Server 2008 R2, which does not have an e-mail client. This appears to be a case of future-proofing. The server OS still has a key file that would make the system vulnerable if the mail client were added later.

This article is part of our paid content. Subscribe.

Already a paid subscriber? Click here to login.


YOUR SUBSCRIPTION

The Windows Secrets Newsletter is published weekly on the 1st through 4th Thursdays of each month, plus occasional news updates. We skip an issue on the 5th Thursday of any month, the week of Thanksgiving, and the last two weeks of August and December. Windows Secrets is a continuation of four merged publications: Brian's Buzz on Windows and Woody's Windows Watch in 2004, the LangaList in 2006, and the Support Alert Newsletter in 2008.

Publisher: WindowsSecrets.com, 1218 Third Ave., Suite 1515, Seattle, WA 98101 USA. Vendors, please send no unsolicited packages to this address (readers' letters are fine).

Editor in chief: Tracey Capen. Senior editors: Fred Langa, Woody Leonhard. Copyeditor: Roberta Scholz. Program director: Tony Johnston. Contributing editors: Yardena Arar, Susan Bradley, Scott Dunn, Michael Lasky, Scott Mace, Ryan Russell, Lincoln Spector, Robert Vamosi, Becky Waring. Product manager: Andy Boyd. Advertising director: Eric Gilley.

Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, Support Alert, LangaList, LangaList Plus, WinFind, Security Baseline, Patch Watch, Perimeter Scan, Wacky Web Week, the Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of WindowsSecrets.com. All other marks are the trademarks or service marks of their respective owners.

HOW TO SUBSCRIBE: Anyone may subscribe to this newsletter by visiting our free signup page.

WE GUARANTEE YOUR PRIVACY:

1. We will never sell, rent, or give away your address to any outside party, ever.
2. We will never send you any unrequested e-mail, besides newsletter updates.
3. All unsubscribe requests are honored immediately, period.  Privacy policy

HOW TO UNSUBSCRIBE: To unsubscribe from the Windows Secrets Newsletter,
  • Visit our Unsubscribe page.
Copyright © 2012 by WindowsSecrets.com. All rights reserved.

Table of contents

Top-scoring articles in the past 12 months
  • Leaving long cookie trails throughout the Web 5.00
  • Windows-like security for Android devices 5.00
  • Win7′s no-reformat, nondestructive reinstall 4.53
  • The sorry tale of the (un)Secure Sockets Layer 4.42
  • RPV: Win7′s least-known data-protection system 4.33
  • Recovery: the last step in total data security 4.30
  • Time for a .NET update we can’t ignore 4.30
  • Getting the most from Windows Search — Part 1 4.25
  • Revising printing habits saves money and trees 4.25
  • Upgrades end in erratic, partial hangs 4.25
  • Pros and cons of a ‘keyfile’ password 4.21
  • Beating back Duku and a plethora of other threats 4.20
  • Office 2007 gets its final service pack 4.19
  • Putting Registry-/system-cleanup apps to the test 4.19
  • One year and 99 security bulletins later 4.18
  • 1.8TB external drive goes down hard 4.17
  • Don’t pay for software you don’t need — Part 3 4.16
  • Internet Explorer gets another round of patches 4.15
  • Is your free AV tool a ‘resource pig?’ 4.15
  • Vacation’s over; it’s a big round of patches 4.15
  • Remote access leads to remote attacks 4.15
  • Keeping you up to date: say no to .NET — again 4.14
  • Take control of Google’s privacy policy settings 4.14
  • Office File Validation patch leads to problems 4.14
  • The advanced system-recover toolkit 4.13
  • New “419″ scam involves PayPal and Western Union 4.12
  • Readers’ best personal-privacy tips 4.11
  • Getting the most from Windows Search — Part 2 4.11
  • Re-examining Dropbox and its alternatives 4.10
  • Easily edit Windows’ right-click context menus 4.09
Connect with us Follow us on Twitter Connect with us on Facebook View our RSS Feeds
  • Home|
  • Newsletter|
  • About Windows Secrets|
  • Advertise with us|
  • Unsubscribe|
  • Sitemap|
  • Affiliates|
Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, WinFind, Windows Gizmos, Security Baseline, Patch Watch, Perimeter Scan, Wacky Web Week, the Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of iNET Interactive. All other marks are the trademarks or service marks of their respective owners.
iNET Interactive Copyright © 2011 iNET Interactive.
All rights reserved.
Terms of Use  |  Privacy Policy
Internet Services
  • Web Hosting Talk
  • HostingCon
  • Hosting Catalog
  • Host Voice
Web Development
  • Hot Scripts
  • DB Forums
Digital Marketing
  • ABestWeb
  • Search Marketing Standard
  • PayPerClickUniverse
  • SEMCompare
Consumer Tech
  • Windows Secrets
  • Overclockers
  • Mac Forums

Learn more about
advertising opportunities across the iNET Interactive Network.

LiquidWeb