Saturday, September 08, 2012

Are You Utilising Your Internet Security Suite To Its Full Potential?

A lot of people have Internet security suites installed on their computers, but many people have no idea how much protection their Internet security suite really can offer. For long it has been the perception that an Internet security suite is basically an anti-virus combined with a spam filter and a firewall. That's true, these are the basic components of an Internet security suite, but as time went by, security software vendors had to develop additional, value added tools, in an attempt to stay ahead of the cyber criminals. Most people only rely on the automatic features that are enabled by default, mostly those running in the background, but some Internet security suites have a wide variety of useful tools, just lying around without ever being used. In this article I will highlight those tools in a couple of popular Internet security suites to make you aware that your Internet security suite can do so much more.

I will start off with my favourite Internet security suite, namely avast! Internet Security.

avast! has a great feature called the Sandbox component. This allows you to run suspicious programs in a virtual environment, sandboxing the program completely and preventing it from making any changes to your computer. This is useful for testing out software from unknown vendors, because a program, that is for instance not digitally signed, is not necessarily a malicious program, but you have the comfort of testing it in a protected environment before allowing it access to your system. The Sandbox component automatically kicks in when avast! identifies a suspicious program, but you can use this feature on any executable file by right-clicking the file and choosing “Run in sandbox” from the context menu.

The SafeZone desktop environment is another underrated feature of avast! Internet Security. It works basically the same as the Sandbox, but in a broader context, it not only protects the browser, but creates a complete virtual desktop environment where you can conduct online transactions safely and privately.

The last feature I would like to mention for avast! Internet Security is the Site Blocking feature. So, what makes this feature worth mentioning? Basically the ability to block sites based on specific keywords. This can be utilised as a small parental control tool, by blocking not only specific inappropriate sites, but sites containing certain keywords in their URL's. This is in no way a replacement for a comprehensive parental control tool, but if you don't have parental control tools on your computer, this tool may come in very handy.

Outpost Security Suite Pro may not have the virtual environments of avast!, but it has a great tool that protects sensitive information from being transferred from your computer, over an insecure connection. It is called the ID Block feature. This is a handy little tool, but you need to use it very carefully. The idea behind this tool is to remove parts of your sensitive information before transmitting it over an insecure connection. This means the ID Block feature will not interfere when you are entering credit card information on a secure page, that uses SSL encryption to transfer your information over the Web. So how does it actually work? You need to add your sensitive information to the ID Block feature so that it can know what to look for. You will not enter your complete credit card number or social security number for instance, only a significant portion of it, so that the ID Block feature can replace that part with asterisks (*), when the information is transferred over an insecure connection like e-mail, unencrypted web pages or an instant messaging program, that doesn't use SSL to encrypt your information. You can also use the ID Block to protect parts of your passwords, so that you never enter them inadvertently on an unencrypted page.

Outpost Security Suite Pro also has a site blocker called the Site and Ads Blocker. Apart from blocking websites as a whole, you can also block unwanted elements on a web page. The site blocker can also be used as a parental control tool, just like the Site Blocking feature of avast!

Perhaps the most underused tool of Outpost Security Suite Pro is the File & Folder Lock. This tool prevents any other program from modifying, deleting, moving or renaming a specific file or folder, so it basically works like a read-only file or folder, the only difference is you can't remove the lock if you don't know the master password of the security suite. This is a very useful feature for files and folders containing important information that is seldom or never changed. This can also be applied to important program and system files to prevent malware from patching them with malicious code.

It has been a while since I reviewed Kaspersky Internet Security, but the latest version seems to have two new features.

The first one is the Safe Money mode, it works basically like avast!'s SafeZone component, but not as a separate virtual environment but it is a special secure mode inside your browser.

The second new feature is the Secure Keyboard, a virtual keyboard you can use on banking and shopping sites when you have to enter credit card, banking or other sensitive information. This prevents key loggers from stealing important information because they monitor the keys being pressed on your physical keyboard and since you are not using it in these cases, you are no longer exposed the dangers posed by these spyware programs.

Kaspersky Labs was one of the first security software vendors to introduce an integrated parental control tool in their Internet security suite. Although it is not the most comprehensive parental control tool, it has enough features to help the parent perform most parental controlling tasks, like exercising control over applications, games and websites used by your children and blocking, limiting or logging your children’s communications, as well as blocking the transfer of private data, such as phone or credit card numbers.

There are many other good Internet security suites that I did not discuss here, but you should be able to identify a certain pattern here. Most Internet security suites have additional features that include some virtual environment where you can conduct online transactions safely, an identity theft protection feature and some form of web filtering feature. The message I'm trying to get across here is to pay attention to the additional features of your Internet security suite, you paid for this stuff, so why not use it? Don't wait until something bad happens, use all the security tools at your disposal, better be safe than sorry.

If you need any help with the features discussed in this article, feel free to leave a comment on the blog, or e-mail me with your questions.

About the Author
Coenraad is webmaster and founder of Cyber Top Cops, leaders in Internet security, analysers of security software and raising awareness about spam and malicious software.

Saturday, September 01, 2012

MailWasher PRO, Spam Filter and Spam Reporting Tool

If you are one of those people who often report spam to anti-spam organisations like SpamCop, KnuJon and Cyber Top Cops, I bet you always wished you had a tool that can combat spam and report it to anti-spam organisations at the same time. Well, you can stop wishing because such a tool has been available for quite some time now and it is called MailWasher PRO. In this article I will give step by step instructions on how to use MailWasher and how to configure it so that you can filter and report spam more efficiently.

MailWasher has quite a unique approach to spam filtering, by getting rid of your spam before you download it with your e-mail client. This saves bandwidth and the time of scanning through the multitude of junk in your inbox to find your good e-mails. Most e-mail clients already have a built-in spam filter (like Mozilla Thunderbird and Microsoft Outlook), but MailWasher does not attempt to replace these built-in spam filters, but rather complement them. You should see MailWasher as your first line of defence against spam and your e-mail client's built-in spam filter as a backup for the spam that got past MailWasher.

Where do I get MailWasher? Visit and download the 30 day trial version of MailWasher PRO. There is also a free version available, but you can only use it with one e-mail account, you won't have a recycle bin for your deleted e-mails and the preview pane is very limited. If these limitations do not bother you, I recommend you download the free version.

Now how does MailWasher work? It is really simple, you open MailWasher before opening your e-mail client, let MailWasher check your e-mails, tell MailWasher which ones are spam and which ones are good and finally, click on the Wash Mail button and let MailWasher do the rest. After “washing” your e-mails, open your e-mail client and download your e-mails from your spam-free e-mail account.

So how exactly do you tell MailWasher which e-mails are good and which ones are bad? Well, each e-mail has a thumbs-up and a thumbs-down icon next to it. If you click the thumbs-up icon, MailWasher will identify the e-mail as good mail and if you click the thumbs-down icon, MailWasher will identify the e-mail as spam. Over time, MailWasher will get better at classifying your e-mails correctly, so you won't have to train MailWasher all the time. If you are not following what I am saying, watch the 60 second MailWasher PRO, quick start video.

One way of improving MailWasher without doing any manual training, is by setting up custom filters under the Spam Tool Settings. To do this follow these steps:

  1. Click on Settings.
  2. Click on Spam Tools.
  3. Click on Filters.
  4. Click on Add Filter.
  5. Give your filter a name, for example avast! Spam Filter, you may leave the Description field empty.
  6. Make sure Filter Type, is set to Spam and that the sentence under Rules reads: Apply filter to e-mails that match Any of the following rules.
  7. Click on Add Rule.
  8. Change Entire message to 'Subject'.
  9. Enter the text *** SPAM *** in the text input box.
  10. Click on the Save button at the bottom of the window.

This filter will work great with the anti-spam component of avast! Internet Security. avast! also uses the tag *** PHISHING *** for phishing e-mails, so you can add a second rule by repeating steps 7 – 9 above, and adding the text *** PHISHING *** instead of *** SPAM ***. This should work with any spam filter that modifies the Subject of identified spam e-mails, you just need to change the text, specified in step 8, to the appropriate tag added by your spam filter. For example Kaspersky Internet Security adds the text [!!Spam] to the subject line when it identifies an e-mail as spam, so if you are using Kaspersky Internet Security, replace *** SPAM *** in step 9, with [!!Spam].

This does not necessarily have to correspond to a specific spam tag added by a spam filter, you can also add filters for words found in the subject line, commonly associated with spam, for example: Enlargement, Supplement, Pharmacy, Congratulations, etc. You can even add a couple of other words, that's not appropriate for me to mention in this article, but I think you know what I mean. This will keep vulgar and inappropriate e-mails out of your mailbox and MailWasher will mark them as spam automatically. The possibilities with these custom filters are endless.

The other great thing about MailWasher is its Spam Reporting Tool. That's right you can report spam to SpamCop, KnuJon and Cyber Top Cops all at once. To set up a spam reporting service, follow these steps:

  1. Click on Settings.
  2. Click on Spam Tools.
  3. Click on Spam Reporting.
  4. The SpamCop service will already be created, so double-click it to open its settings.
  5. Replace the text in the Email to field with your own SpamCop reporting e-mail address. It should be in the format Replace SPAMCOPID with your unique SpamCop ID.
  6. Choose the e-mail account through which MailWasher must send the report.
  7. Choose the colour of the report service. This is the colour of the icon that will appear next to the e-mail under the Reporting column.
  8. Choose a letter of the alphabet to identify the spam reporting service easily. The letter 's' will already be assigned to the SpamCop Service.
  9. Click on the Save button at the bottom of the window.
  10. Click on Add Service.
  11. Type Cyber Top Cops next to Service name.
  12. Type next to the Email to field.
  13. Leave Email content blank.
  14. Repeat steps 6 – 9. Choose the letter 'c' in step 8.
  15. Repeat step 10 – 14. Choose the letter 'k' in step 8. Instead of Cyber Top Cops in step 11, type KnuJon and instead of in step 12, type KNUJON@COLDRAIN.NET or your unique KnuJon reporting e-mail address.

Now you are properly equipped for the battle against spam, without breaking a sweat. All you need to do now is to mark the appropriate spam reporting services before clicking on Wash Mail. To do this go back to your Inbox in MailWasher, right-click on the column bar with the different headings and select Reporting from the list. When you mark an e-mail as spam, also click on the reporting service icons under the Reporting column. If you followed my instructions correctly you will have 3 icons next to each spam e-mail, where each icon correspond to the colour and letter your chose in steps 7 and 8 above.

About the Author
Coenraad is webmaster and founder of Cyber Top Cops, leaders in Internet security, analysers of security software and raising awareness about spam and malicious software.

Saturday, August 18, 2012

Should I Use Parental Control and Monitoring Software?

A while ago I wrote an article about Reconciling Parental Control Software with Internet Security Principles. My view on parental control and monitoring software hasn't change much since then and I still feel that monitoring software can pose a huge security risk if not used correctly. However it seems like more and more anti-virus vendors are integrating parental control tools into their Internet security suites and one tend to wonder why.
I was viewing a couple of questions on Yahoo! Answers and WikiAnswers the other day and I noticed quite a lot of teenagers asking the question on how to bypass blocking software in order to view porn. I even saw a question from a grandfather for advice on how change his password to prevent his grandson from using his computer for porn, while he is asleep at night. I will agree that this is no new trend, but porn usage among teenagers are an ever increasing problem and the only way to battle it, is to control the way your children and grandchildren are using your computer, their own computer or even the family computer.

Now before I discuss this topic any further, I would like to make it very clear that I'm not trying to tell parents how to raise their children, but I'm merely focussing on the role that computers are playing in our lives and the threats they pose to our children and how we should manage it as part of your parental duties. Parental control and monitoring software are useful tools to control and understand your child's online activities, but it is in no way a substitute for your responsibility as a parent to protect your children from being exposed to inappropriate content. Sure, we cannot lock our children up and never allow them to play outside, so they are going to be exposed to things we don't like, but we need know about those exposures and react to them as quickly as possible. Parental monitoring software is just one of those things that can make it easier for us to with these threats.

For starters I am not a big fan of installing parental monitoring software on a computer that's used to conduct online transactions. The monitoring software could record your credit card number for instance and should someone break into your computer and gain access to the recorded logs, then you will have a lot of trouble. The same principle applies to bank account information, passwords and pins. So if you have to use parental monitoring software, always use it on your child's own computer or on a family computer that's never used to conduct online transactions.

Another thing that's important is to tell your children that everything they do on the computer, is monitored. This creates an open relationship and if they have nothing to hide, then they should not have a problem being monitored. Any family computer should be in a room where there is a lot of traffic, yes sometimes you need your privacy on a computer when you send an e-mail or chat with someone in confidentiality, but as a parent you need to know who your teenager is chatting to, to whom are they sending e-mails and what kind of e-mails are they reading. Online predators often introduce themselves as teenagers and a parental monitoring tool can be the difference between your child meeting an online predator in real life or you putting an end to a relationship that could possibly harm your child. However there should be a good balance between allowing your child to socialize with known friends and family online and denying your child certain activities online when you are not around. Some parents could end up being totally paranoid and deny their children all forms of socialising on the web. But in the end, you remain responsible for who your child socialise with and you need to exercise the necessary control until your child is at an age where you can trust their judgement.

I'd like to get back to the point that you need to be open about the fact that you are monitoring your children's online behaviour. It is not a matter of distrust, but you would want to know when your child has been exposed to inappropriate content. Not every child will necessarily have the confidence to speak to you about something that they saw online, especially not when they think it is their fault and that they will be punished for accidentally stumbling across inappropriate content. But this can also be a sign of a larger underlying problem between a parent and a child, because your child should always feel free to talk to you when he/she is uncertain about something. But you may ask the question, can a child really stumble across inappropriate content by accident? Well there is no rule of thumb here, but the general perception would be that you can't stumble across porn if you weren't looking for it. This is not always true though and there are many exceptions to this perception.

Last month I investigated a spam e-mail that places the recipient under the impression that he/she can get free $100 meal coupon at McDonalds. The link in the e-mail has nothing to do with McDonalds, that's only to get your attention and to make you click on the link, but the actual link takes you to a random porn site. What child will pass on the chance of getting a $100 free meal coupon at McDonalds? Most children will click on the link, some out of curiosity and other out of gullibility. Do you really want your children to be exposed to the filth on the Internet without knowing about it? Wouldn't you prefer to speak to your child about what they saw and that the images they saw are wrong? Wouldn't you prefer to be the one to confront your teenage son with the information recorded by the parental monitoring software, instead of his friends telling him that browsing porn sites is acceptable? And this is where the openness comes into play. If your child did not know he/she was being monitored and you confront them with the data from the parental monitoring logs, you will most likely break their trust and end up alienating them rather than teaching them what is right and what is wrong.

I bet the following question comes to mind. If I tell my children that they are being monitored, won't they find another way to view porn, like at a friend's house, a cellphone or at the Internet café? First of all, you should be involved in the choice of your children's friends. Secondly, your child should not visit a friends house where there is no trustworthy adult supervision. Thirdly, a child's phone should only have voice services and no data services (yes I know a lot of people will disagree, but you will have absolutely no control over their online activities if they can browse whatever they want on their phone) and finally, an Internet café is not the place for a child to be on its own. People tend to view the Internet as some virtual world, totally separate from our everyday life. But it is as integrated into our lives as choosing the right food for your child to eat. If you exercise control over the physical things that could hurt your child, why not exercise control over the psychological things that can scar your child for life?

I realise a lot of people have their own opinions on parental control and monitoring software and how to raise a child, but porn is a great danger to our youth these days and it is not just the psychological damages that you should be concerned about, your should also worry about the financial dangers of browsing porn sites. What if your teenager manages to get a hold of your credit card and purchase a subscription to a porn site. You may argue you should not let your credit card lie around for anyone to use. True, but wouldn't you prefer to know when your child is sharing personal information like telephone numbers or your physical address with total strangers? What if your teenage boy uses the family computer to browse hardcore porn sites and infect it with some nasty adware. You don't want your eight year old daughter to be exposed to flashing ads of naked people caused by the junk your teenage son installed on your family computer, now would you? You may argue, I trust my children and they would never do stuff like that. You know your children the best and parental monitoring software is not going to raise your child or make the porn sites go away, but it can be helpful to address an ever increasing problem among our youth before it is too late.

Finally you may ask, what's the use of only monitoring my children's online activities, I also would like to control their access to inappropriate sites. For that you need parental control software. Some programs claim they can monitor and control, but they often tend to do the one better than the other. Certain parental monitoring programs have some form of control over the websites your child can visit, but it is often limited to general blocking features like limiting Internet access during specific times of day. Parental control software, on the other hand, may be good at blocking all kinds of porn sites, but they often suck at monitoring online activities. You, as a parent, need to decide what is the most important to you, simply monitoring your child or exercising control over the sites they visit and when they can use the Internet or specific programs installed on the computer. It all depends on your own unique situation. If you only want to know what your children is doing online, then a monitoring program is best suited for you. If you have a troublesome teenager who can't stay away from porn sites, then you may want to use a more aggressive approach and block access to these sites, by using a parental control program. Personally, I prefer a monitoring program over a control program, mainly because it is harder to bypass a monitoring program, without the parent's knowledge, than a control program. I accept the fact that both can be circumvented by a clever kid, but a monitoring program normally gives the parent a thorough audit trail of the child's online activities and it is easier to spot gaps in the logs of a monitoring program than it is to spot incidents where the control program did not do it's job. Another huge advantage of a monitoring program is that it is easier to tell if your children is responsible when they are online, but with a control program you never really know if your children will stay away from inappropriate sites when you remove the restrictions imposed by the parental control software.

In the end, the big question should not be whether we should use parental control and monitoring software, but ask yourself this question: Do you know what your child is doing online? Remember as a parent you need to be part of every aspect of your child's life and if you don't know what they are doing online, then it is about time that you started taking interest into their online activities.

About the Author
Coenraad is webmaster and founder of Cyber Top Cops, leaders in Internet security, analysers of security software and raising awareness about spam and malicious software

Saturday, August 04, 2012

The Best Internet Security

What is the best Internet security suite in the world? I've reviewed quite a number of Internet security suites and all of them have pros and cons, but what if we were able to take all the good features of each Internet security suite and build the perfect Internet security suite of all time? It is not completely impossible, because most Internet security suites have stand alone versions of their anti-malware and firewall components and some even have a stand alone version of their spam filter. Right, so what do you really need for an Internet security suite?

First of all you need a malware scanner and a resident anti-malware shield to protect your computer from malware attacks. Secondly you need a good firewall to control inbound and outbound traffic over the networks you connect to. Finally you need a good spam filter to protect you from e-mail fraud and other types of unsolicited bulk e-mails. I believe these are the most important components of a good Internet security suite. These days Internet security suites contain all kinds of extra features like parental control tools, anti-phishing tools, identity theft protection, special protection for browsers, sandboxing tools to isolate suspicious applications, ad blockers and more.

I have discovered a combination of 3 specific security applications that will protect you against malware, hackers and spammers. I chose these applications because they provide the highest level of protection without affecting the performance of your computer too much.

I will start with malware protection. avast! has the best malware detection rate of all the malware scanners I've reviewed so far. Apart from its good detection rate, it also has an impressive resident shield (or rather several resident shields). You get the File System Shield, Mail Shield (scans your e-mails for malware), Web Shield (protects you against online threats while browsing the Internet), P2P Shield (protection against treats on P2P networks), IM (Instant Messenger) Shield, Network Shield (not a firewall, but adds an additional layer of protection over your network traffic), Script Shield and the Behaviour Shield (heuristic scanner). Apart from these shields, it also provides additional protection through its Auto Sandbox (allows you to run suspicious programs without harming your system), SafeZone (a special secure desktop environment to conduct online transactions safely), Browser Protection (a special web reputation plugin and the ability to run your browser sandboxed), Remote Assistance (enables you to receive technical assistance from other avast! users, remotely) and Site Blocking features.

I guess it is clear from all the shields it has to offer, avast! Pro Antivirus can protect your computer against most threats on its own, but no security suite is complete without a good spam filter and firewall.

Some people feel that a spam filter is unnecessary, but I believe a spam filter just adds another useful level of protection to your computer security. You need a spam filter to cut out all those unsolicited scam, malware, porn and enhancement product e-mails, just to name a few. Why waste your time filtering through hundreds of useless e-mails and walk the risk of being scammed or infected by malware? You might argue that the malware scanner should protect you against malware, but if the malware can't even reach your computer, there is even less risk of being infected.

Another big problem these days, is porn and indecent content being distributed and actually forced down the throats of spam victims. You don't want your children to be exposed to these e-mails and a spam filter will not necessarily eliminate the risk of exposure completely, but it will certainly lower it to an acceptable level.

SPAMfighter PRO is a unique community-based spam filter. When I say community-based, I mean that the strength of SPAMfighter lies in the amount of spam reported by SPAMfighter users worldwide. One may argue that a system like this can easily be abused. Yes, maybe, but it has been fighting the spam battle for quite some time now and is very good at identifying spam and leaving your good mail alone. When I reviewed SPAMfighter it did not flag a single good mail as spam and only a handful of junk e-mails were not identified as spam.

One of the main reasons why I like SPAMfighter so much is it compatibility with most popular e-mail clients. Many spam filters tend to work with Microsoft Outlook only, so if they are not compatible with your non-Microsoft e-mail client, they can't do the job at all, no matter how good they are at filtering spam.

These days you can't use the Internet without a proper firewall, providing adequate two-way protection for your computer. Most people think a firewall only needs to protect you from hackers trying to break into your computer, but you walk a greater risk of having sensitive information leaked from your computer to a remote location, than someone trying to gain access to it from a remote location. So you also need something to monitor your outbound traffic as well.

There is not a single personal firewall solution that can beat the level of network security and effectiveness provided by Agnitum's Outpost Firewall Pro. You know a firewall is good when companies like AVG Technologies, Lavasoft and Sophos use Agnitum's firewall technology in their own products. This is not your standard firewall, Outpost Firewall Pro comes with several additional features like Anti-Leak, System Guard, Application Guard, File & Folder Lock, Anti-Spyware scanner, Ads and Sites Blocker and ID Block. You can read more about these features in our latest review of Outpost Firewall Pro. Performance is a big issue to me, because I believe your security software should never handicap your productivity on your computer. The latest version of this firewall (version 7.5.3, also known as the Performance Edition), has been enhanced quite a lot in terms of performance.

Firewalls tend to annoy users with endless prompts and warnings, but Outpost Firewall Pro works in special Auto-Learn mode for a while. During this learning period it suppresses all those annoying prompts while learning more about the programs you often use and the network connections you normally make from your computer. It is not completely prompt-less during this period and you will still be warned about serious attacks and unauthorised connections being made to and from your computer.

What I really like about Outpost Firewall Pro is that it is much more “intelligent” than most firewalls and only bothers the user when there are some serious decisions to be made, decisions that a firewall should not be allowed to make on its own.

The only drawback about this firewall is that it may be a bit too advanced for novice users, but only when it comes to customizing the firewall to suit your needs. Because of its “intelligence” it will make the right choices during the setup process and most of the settings should work out of the box, so novice users won't have to worry about changing any settings to make the firewall work. If you are a novice user, I suggest you install avast! Pro Antivirus and SPAMfighter PRO before installing Outpost Firewall Pro, just to make your life a little bit easier.

avast! Pro Antivirus, SPAMfighter PRO and Outpost Firewall Pro are exceptional security programs, each in their own right. Running them side by side, gives you an edge over malware, spam and hackers.

There are basically only two disadvantages of this setup. Firstly, you can't manage these applications from a centralised location, like with an integrated Internet security suite, so you have to manage and configure them individually. One may argue that the Windows 7 security centre gives you a birds eye view over the status of all your security applications and all three applications have an auto update feature, so is it really such a big deal if you have to manage each one separately, because how much management and configuration do you have to do by hand anyway? It is probably not such a big deal, but I know some people will still prefer to have all these components bundled into one integrated security suite.

The second disadvantage of this setup is cost. It the time of writing this article, avast! Pro Antivirus will cost you $39.99, SPAMfighter PRO will cost you $19.97 and Outpost Firewall Pro will cost you $29. That is a total of $88.96. If you compare this price to that of an integrated Internet security suite, you will find that the latter is much more cheaper. avast! Internet Security will cost you $49.99, Outpost Security Suite Pro will cost you $24.97 and Kaspersky Internet Security will cost you $59.99. These suites may have a couple of extra features and they may be much cheaper, but the level of protection provided by this setup surpasses that of any integrated Internet security suite.

avast! Pro Antivirus, SPAMfigther PRO and Outpost Firewall Pro each has a free version as well, making them a great choice for a free Internet security setup you don't have $88.96 to spend on computer security software.

 About the Author
Coenraad is webmaster and founder of Cyber Top Cops, leaders in Internet security, analysers of security software and raising awareness about internet fraud and malicious software