<<  September 2010  >>
MoTuWeThFrSaSu
303112345
6789101112
13141516171819
20212223242526
27282930123
45678910

categories

Archive

Tags

Rogue Antivirus Product Wars

Posted by Elizabeth Goodman in IT Solutions , Security , The Internet on May 4, 2010 | 0 responses

As you may or may not know, Kotori Technologies, LLC uses Sunbelt Vipre for most of our clients' Anti-Virus needs. Here is an interesting article from Sunbelt in reference to the Antivirus Product Wars:

All antivirus companies are being hit with the next wave of malware: Rogue antivirus tools like Antivirus 2010. This code throws messages on the user's screen that they are infected, and "download here to get rid of the malware". Sure enough, that gets the trojan installed.
Our CEO Alex wrote about this: "For what it's worth, as someone who is on the inside of an AV company and is intimately familiar with these threats, the reality is that no AV vendor, ESET, McAfee, Sunbelt, Sophos, Symantec, etc. can give you 100% coverage against it.
These new fake antivirus variants are some of the most vicious, polymorphic trojans this industry has seen. They use extremely complex obfuscation techniques which make detection quite challenging by even the best antivirus engine. Many of these rogues are also service-side polymorphic. That means every time an exe is downloaded, it's recompiled on the server-side into a different piece of code.
And, there are about 75,000 new tier-1 pieces of malware coming out every day. So your AV vendor, realistically, is only going to be one layer of protection, no matter what the sales guy might say. (That being said, AV is a must. Just look at viruses like Conficker, Sality, Virut, etc. These are viruses that the industry does a pretty good job at, and if they get into your network and you don't have endpoint protection, it's quite messy.)

Key things to do are:
     a.  No Admin Privs. Try to run as many users on Limited User accounts as you can (always difficult, I know). It won't stop all infections, but it does make a difference -- probably 80% reduced infection vector. 
     b.  Patch aggressively. The key exploit vectors right now are PDF and Flash, then Windows/IE. When I browse the web, I obsessively check Adobe and Flash to make sure I'm fully patched, and I constantly check Windows update. If you're tight on funds and can't afford a professional patch management solution like Shavlik or Lumension, Secunia has an excellent free / inexpensive solution. Or do it yourself, which depending on your network size, can be challenging. However, it really is an absolute must.
     c.  Educate your users. The vast majority of infections these days are caused by social engineering. A user will get a funny video link on Facebook or some other social networking site, click on it, and it will say that they need to "install a special codec", or "update Flash". Or they will be doing a Google search and a malware site will have attached itself to an innocent keyword. The user will click and start getting crazy warnings that their machine is infected. This is the malware trying to get the user to install.
     d.  Do malicious web filtering. There are tens of thousands of pieces of malware daily, but only a few thousand new malware sites a day. Many endpoint protection tools, including ours, offer malicious web filtering. Or use a web gateway proxy. If you're tight on funds, setup a simple Linux gateway and download URL block lists places like malwaredomainlist.com. It's not perfect but it's not bad either.
     e.  Submit malware files to AV vendors. Most, if not all, AV vendors take customer submissions very seriously, and the internal escalations are always senior to anything else.

See original articel by Sunbelt at: http://www.wservernews.com/archives/wservernews-20100322.html



Are You Being Proactive with Your Computer Hardware?

Posted by Elizabeth Goodman in IT Solutions on Dec 1, 2009 | 0 responses

In today’s unsure economy, budgets are tight, forcing business owners to do more with less
Preventive maintenance such as regularly installing Microsoft Windows updates, routinely running the disk cleanup utility found in Windows and keeping anti-spyware software up to date will keep computers running at their highest efficiency level. But we suggest not running computers until they die, as it can be more cost-effective to invest in new hardware systems than aging ones.
Most modern technologies, such as computers, have life spans of about three to four years. In evaluating whether to invest in a new system, business owners should ask themselves a couple of key questions: Has more than 80 percent of the hard drive capacity been used? Does the computer need to be rebooted periodically throughout the day? If the answers are “yes,” it may be time for new hardware.
If mobility is not a requirement, desktop computers are less expensive. If purchasing laptops is essential, business owners should buy three-year extended warranties, as accidents happen more frequently with mobile technology.
Regarding computer software, business owners may not need to update their applications every time a new version hits the shelves. However, software should be no more than two versions behind the current one.
At minimum, business owners should consider investing in the following software:
• Antivirus software
• Microsoft Office Suite, or a word processing and a spreadsheet program
• E-mail contact and calendar program (i.e. Microsoft Outlook or legal specific applications such as Time Matters)
• Adobe Acrobat for PDF capabilities
• Accounting software (i.e. Quickbooks Pro)
• Time and billing software
Accounting, time and billing software packages–often called “back office” software—are particularly important in this economy because they allow business owners to budget expenses and income for the year ahead. Such tools can help business owners pinpoint which areas of their practice are most profitable and, conversely, the least. Even business owners who practice with a flat fee structure should track the time they spend in order to find their optimal hourly rates and understand where they stand financially.

 




© All Rights Reserved. Kotori Technologies,LLC Powered by BlogEngineNet 1.5.0.7 Designed by Kotori - Sign in