Anti-drive by software suggestion

Discussion in 'other anti-malware software' started by Boost, Jan 22, 2009.

Thread Status:
Not open for further replies.
  1. Boost

    Boost Registered Member

    Joined:
    Feb 2, 2007
    Posts:
    1,293
    Need some suggestions for my brother just got nailed with the rogue software antivirus 2008 :D

    He's pretty much a noob when it comes to this kind of stuff happening also.
     
  2. Miyagi

    Miyagi Registered Member

    Joined:
    Mar 12, 2005
    Posts:
    420
    Location:
    Honolulu, Hawaii
  3. Boost

    Boost Registered Member

    Joined:
    Feb 2, 2007
    Posts:
    1,293
  4. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Any sandbox will be OK. GesWall free wil do the job.
     
  5. AKAJohnDoe

    AKAJohnDoe Registered Member

    Joined:
    Sep 26, 2007
    Posts:
    989
    Location:
    127.0.0.1
    Use Firefox with the NoScript add-on extension
     
  6. Boost

    Boost Registered Member

    Joined:
    Feb 2, 2007
    Posts:
    1,293
    Prolly end up installing GesWall for him along with Returnil free.

    He's using Explorer for the browser,wish he would switch,but you know how that goes...o_O
     
  7. Taliscicero

    Taliscicero Registered Member

    Joined:
    Feb 7, 2008
    Posts:
    1,439
    You are forgetting "look down" NoScript is not for newbies.


    Avast Free, + BoClean, And Maybe WOT - WebOfTrust.

    Thats your best and most easy option.
     
  8. vijayind

    vijayind Registered Member

    Joined:
    Aug 9, 2008
    Posts:
    1,413
    If Sandboxing is not your taste, IMO you should try PCTool's BrowserDefender. Its kinda like SiteAdvisor, as it checks if the site you are about to visit is known to be malicious. Also it has a real-time engine, which checks every site as you browse and effectively detects many browser exploit pages as it loads. Hence preventing drive-by downloads.

    See here for details:
    http://www.browserdefender.com/help/#how
     
  9. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    agreed, browserdefender is great, been using it for months now.
     
  10. IceCube1010

    IceCube1010 Registered Member

    Joined:
    Apr 26, 2008
    Posts:
    963
    Location:
    Earth
    I like it also but, it doesn't work with firefox 3.1 beta which I really like.

    Ice
     
  11. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    hmm, guess its good thing im using the stable release of firefox and not the beta :ouch:
     
  12. demonon

    demonon Guest

    The best thing you can do it keep your system up-to-date. It will prevent most drive-by downloads.
    My advice is to use something like sandboxie/defensewall or geswall. Then consider blocking out bad sites. WOT and sitehound are al right, but blocking sites with your hostfiles also helps. If you really want a easy application go with defensewall. Firefox or Opera are preferable, but IE is al right too. Remember you can use WOT and sitehound with it.
    Just tell him to use a LUA if he can or use UAC with Vista and don't accept anything if you didn't chose too. Best thing to do is not to download anything and try everything.
     
  13. IceCube1010

    IceCube1010 Registered Member

    Joined:
    Apr 26, 2008
    Posts:
    963
    Location:
    Earth
    It's actually very stable and quick I might add. I use WOT along side it and CIS takes care of the rest.

    Ice
     
  14. Fuzzfas

    Fuzzfas Registered Member

    Joined:
    Jun 24, 2007
    Posts:
    2,753
    Simple. Sandboxie. Non registered is free, but will show some nag screen now and then. It will cover browsing.
     
  15. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    White listing, blacklisting etc will not work against it, IMO. Best option is a Sandbox or Virtual system(( Returnil for example) for him.
     
  16. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    there is a new program called AppGuard this one will protect you in real time againts drive by attacks;)
     
  17. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    It,s very new so can,t be suggested for a new user.
     
  18. jrmhng

    jrmhng Registered Member

    Joined:
    Nov 4, 2007
    Posts:
    1,268
    Location:
    Australia
    It really isnt that hard.
     
  19. andyman35

    andyman35 Registered Member

    Joined:
    Nov 2, 2007
    Posts:
    2,336
    Not to an experienced user but to be fair some sites generate 6 or 7 blocked items,so a degree of knowledge is required to know what to unblock if you require specific content to run,on a streaming video site for example.
     
  20. SpikeyB

    SpikeyB Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    478
    Hi Aigle,

    Why do you believe whitelisting will not work?
     
  21. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    White list will fail when a trusted site is compromised. We see it often.
     
  22. demonon

    demonon Guest

    And you tell me what the probability is a common used trusted site is compromised.
     
  23. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Not uncommon my dear.
     
  24. chris2busy

    chris2busy Registered Member

    Joined:
    Jun 14, 2007
    Posts:
    477
    wasn't half a year ago that the f-secure forum got a big fat exploit embedded actually..and more since then
     
  25. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    thats where a hips and sandbox program come to the rescue;)
     
Loading...
Thread Status:
Not open for further replies.