Topics

1

General Software Discussion / Free security freeware versus paid

« on: February 04, 2008, 09:19 AM »

http://wiki.castleco...f_freeware_antivirus
http://wiki.castleco...freeware_antispyware
http://wiki.castleco..._freeware_antitrojan
http://wiki.castleco...eware_antikeyloggers
http://wiki.castleco...freeware_antirootkit
http://wiki.castleco...f_freeware_firewalls
http://wiki.castleco...re_behavior_blockers
http://wiki.castleco...f_freeware_sandboxes
http://wiki.castleco...eware_virtualization
http://wiki.castleco...eware_analysis_tools

Above is perhaps the most comprehensive list of top class freeware security products. How do they compare to the best $$ware in each category. If 10 is the best in the $$ category, here are my ratings for the corresponding best freeware. I.e 10 = the best freeware is as good (if not better) than the best payware.

Antivirus 8.5/10 - Each of the freeware antivirus as certain minor weaknesses compared to their paid bigger brothers
Antispyware 8/10 - Most of the freeware antispyware has no on-access scan except Spyware terminator.
Antitrojan 9/10 - Not quite sure, very few self declared anti-trojans these days... Trojanhunter vs BOclean?
Antikeylogger 7.5/10 - Possibly higher if we include sandboxes and behavior blockers against keylogger
Antirootkit 10/10 - The best generic antirootkits are free!
Firewall 10/10 - Comodo firewall , Webroot firewall , Online armor free etc help to raise the score.
Behavior blocker 9.5/10 - Many excellent choices depending on what you are looking for. Eqsecure,threatfire, SSM free, DSA etc etc are all top notch
Sandbox 9/10 - GesWall, sandboxie etc. Also SafeSpace lately.
Virtualization 10/10
Other misc security 10/10

This is just my estimation, what is yours? In short , i believe it is more than possible to use only freeware and remain as safe as one using $$ware only.



 

2

General Software Discussion / Interesting new security freeware in december 2007

« on: February 03, 2008, 08:44 AM »

Selected interesting new freeware additions in the last month
<ul><li> <a href="http://downloads2.ka...m/devbuilds/AVPTool/">Kaspersky virus removal tool (beta)</a> - Kaspersky on demand only tool. This one cleans and scans. <b><a href="http://luketan.stumb...com/review/15556370/">Comment/Review</a></b><br />
</li></ul>
<ul><li> <a href="http://www.greatis.c...ecurity/download.htm">RegRun Reanimator</a> - Antirootkit tool with boot-time scan.<b><a href="http://luketan.stumb...com/review/15722428/">Comment/Review</a></b>
</li></ul>
<ul><li> <a href="http://www.online-so..._autorun_manager.php">OSAM</a> - Autoruns, RunScanner etc competitor, however this tool claims to be able to find registry keys hidden by rootkits. <b><a href="http://luketan.stumb...com/review/15722996/">Comment/Review</a></b>
</li></ul>
<ul><li> <a href="http://www.moosoft.c...heCleaner/TheCleaner">The Cleaner</a> - In the early 2000s this was one of the more well known (but niche) Anti-trojans, along side BOclean, Trojanhunter etc. Now a free version on demand only is released. <b><a href="http://luketan.stumb...com/review/15811470/">Comment/Review</a></b>
</li></ul>
<ul><li> <a href="http://www.trendsecu...urity_tools/rubotted">Trend Micro RUBotted (beta)</a>
- "Trend Micro RUBotted (Beta) is a small program that runs on your
computer, watching for bot related activities. RUBotted intelligently
monitors your computer's system behavior for activities that are
potentially harmful to both your computer and other people's computers.
RUBotted monitors for remote command and control (C&C) commands
sent from a bot-herder to control your computer. Additionally, RUBotted
watches for an array of potentially malicious bot-related activities,
including mass mailing - a common activity performed by a bot-infected
computer." <b><a href="http://luketan.stumb...com/review/16117489/"> Comment/Review</a></b>
</li></ul>
<ul><li> <a href="http://www.rootkit.c...AntiRootkitTools.rar">rootkitdetect(direct download)(alpha)</a> - New alpha release of a anti-rootkit. Source is unknown, use with <b> extreme caution </b><b><a href="http://luketan.stumb...com/review/16221818/"> Comment/Review</a>
</b></li></ul>
<ul><li> <a href="http://www.f-secure.com/healthcheck">F-Secure HealthCheck</a> - An online service (Activex needed) to check for software with known vulnerabilities.  Very similar to <a href="http://secunia.com/software_inspector">Secunia Software Inspector</a>. <b><a href="http://luketan.stumb...com/review/16384584/"> Comments/Review </a></b>
</li></ul>



edit by jgpaiva:fixed links

3

Announce Your Software/Service/Product / RunScanner -autostart and antihijack control/analysis program

« on: August 22, 2007, 03:37 PM »

http://www.runscanner.net/


RunScanner is a completely free windows system utility which scans your system for all configured running programs. You can use runscanner to detect autostart programs, spyware, adware, homepage hijackers, unverified drivers and other problems. You can import and export your results and let other people help you to solve your problems.


Very comprehensive autostart list

*Scanning of 80+ hijack locations ,Host file editor

Covers everything from autoruns, HJT, silentrunners and more. Malware will find it harder than ever to hide.

Easier to use

*Online malware analysis of results

*Verification of file signatures (Microsoft signed, Other Signed, Whitelisted by online database )

*MD5 hash calculation of files + online file rating

*Online lookup of scanned entries. (Runscanner database + Google)

RunScanner makes it easier to determine which entries are likely to be malicious.

Log analysis made easy

*Saving and importing of text files (all information available)

*A user with problems can save the .run file, an expert can mark the items that need fixing and send the .run file back to the user

If you are really worried, RunScanner also exports a easily readable textfile of all finding that can be sent to an expert for checking.

Malware removal abilities and misc


*Powerful process killer
-Kill multiple processes at once
-Kill and rename
-Kill and delete
-Delete at next reboot
*Regedit jump
*Explorer jump
*Extended filters
*Marking of items.