Quick Question: Sufficient Protection?

FuNkEr

Expert Member
Joined
Jan 29, 2009
Messages
1,168
Reaction score
1
Location
Sandton
Howzit guys!

Just one simple quick question. I was wondering, considering the fact that I'm currently running Mcafee Enterprise for small businesses, Spybot and Malwarebytes' Anti-Malware on my PC, would it be sufficient protection or would you recommend something extra to the current protection?

Thanks in advance!

Regards
 
It sounds like that is plenty sufficient. Stay away from dodgy sites and you should be fine. I run Kaspersky and thats it, and I have never had any issues.
 
Is McAfee Enterprise the full suite including the firewall or just the antivirus?

If its the Antivirus consider installing Comodo FireWall Pro (Downloaded as Comodo Internet Security - just don't install Comodo's anti-virus solution).

If you can disable the McAfee Firewall and run their Antivirus, installing Comodo FireWall Pro is also a good addition to your system.

Once you know your system is clean ( scanned with McAfee and MalwareBytes, Comodo also does a scan upon install),
install Comodo and run in Clean PC mode. Authorise all your apps such as FireFox, AV, Spybot, Outlook etc - ie make them either WebBrowsers (and click remember choice for next time) or as Trusted Applications (and remember choice for next time). Comodo has a whitelist of good apps
but for many apps it will ask and those you know (or have scanned with AV)
should be ok and you can authorise so it never bothers you again unless
the file is changed in an upgrade. This only takes a bit of time the first time around ie you manually authorise all the applications which "access the screen directly" or "connect to the internet" - eg Skype or Internet Explorer.

Some settings you may use:

Firewall:
Firewall behaviour settings to Custom.
Stealth Ports Wizard - Block all incoming connections - stealth my ports to Everyone.
Attack Detect Settings - Tick - "Block Fragmented IP Datagrams" and "Do Protocol Analysis"

Defence+:
Defence+ Settings to Safe Mode with "Trust the applications digitally signed by Trusted vendors" (tick). It's possible to add your own preferred vendors, and if they sign their apps with certificates this will OK their apps.
Image Execution settings to Normal and Detect Shellcode injections (tick)
There is also an option to select files you may want to "Protect" - Comodo will protect these files and warn you if another program wants to modify or delete them - you'll have an option of allowing or declining this. It's also possible to choose which files to protect by selecting a given running process and that file will be protected.

Basically Comodo Firewall Pro is a Firewall and Defence Plus is a HIPS (Host Intrusion Detection System). The latter prevents one program messing with another one so for example, even if your anti-virus misses a brand new trojan horse or virus which attempts to modify your Explorer to connect to the internet and upload your keystrokes or it attempts to disable your anti-virus (stop the process) CFP will warn you that "Program x is interfering with the memory of program Y" (y being the AV for ex). You'll be able to click on X to see what file it is exactly, where it is, who signed it (if at all) and will be able to scan it with an AV if necessary - or disable the action. That way even if a trojan horse makes its way to your PC the HIPS picks it up and warns you of dodgy activity - if you know the program - no problems - just OK the activity (and even tell the D+ to remember the command) if you dunno what the program is, eg it's something you downloaded from a dodgy site or got from Bittorrent, then you may be dealing with a virus/trojan horse in which case CFP will
be able to disable the app for you. CPF also boasts advanced technology preventing another program terminating it - or at least it will warn you that a program is attempting that - and give you an option of stopping the activity.

There is a detailed helpfile with the program and the Comodo forums are full of people offering good advice.
 
WoW, thanks man! I have the full suite with firewall ect. My pc's not infected or anything, but I like to keep it clean. So I ran Mcafee, Spybot, Malwarebytes and Windows PC Defender yesterday and it came up clean in all 4 of them.

I will have a look at those products you suggested!
Thanks man, I appreciate it!

Regards
 
Last edited:
It sounds like that is plenty sufficient. Stay away from dodgy sites and you should be fine. I run Kaspersky and thats it, and I have never had any issues.

+1

I use ESET Nod32, but like Grimspoon said, stay away from dodgy sites, and always check removable media...
 
Top
Sign up to the MyBroadband newsletter
X