Internet Security Zone Blog

Hey Doc, Do I Really Need HDE?

By Doctor Security

 

People often ask me for free advice: “Hey Doc, do I really need hard drive encryption? It’s not like I got state secrets on my laptop…” I always answer these types of questions with diagnostic questions of my own: “Well, do you keep personal data on your computer like your Social Security Number or medical records? Do you keep bank statements or tax returns on it, too?”

 

If the answer to either one of my questions is yes, then the answer to “do I need hard drive encryption?” becomes obvious. If people answer my question “no,” then I ask a follow-up question: “Are you a small business owner or a professional such as a lawyer, accountant or contractor who carries your clients' information around on your laptop?  Do you want to be sued if that information gets out?”

 

Again, if the answer is affirmative, then encryption software becomes an immediate necessity. Once my “patient” and I have determined that they need a “dose” of encryption – preventive medicine is always a good thing – then we need to figure out what’s the best HDE security software to meet their needs. It must be software that encrypts all the data on a PC, even temporary and deleted files. Another stipulation is that security controls cannot be bypassed by removing the hard drive or by booting off a CD.

 

I always recommend ZoneAlarm’s Hard Drive Encryption for Laptops because I know it’s powered by the same technology used in Check Point Hard Drive Encryption solution. This is industrial level technology that is used by over 14 million users in businesses and government agencies of all sizes, worldwide.

Sometimes the next question I get is “So how does hard drive encryption work? It sounds complex and complicated.” Well, it is and it isn’t. The technology that encrypts your data is very sophisticated, but getting it on your PC and using it is a very basic and simple process:

First, you purchased the software and download it to your laptop. Then you do an initial encryption that makes your entire hard drive inaccessible to anyone but you. You are asked to create a personal encryption login and setup a safety system for quick data recovery, if ever needed.

Second, when your hard drive is encrypted, you restart your computer and enter your encryption username and password. Without this password, your drive will remain encrypted - no one can get access to your information. You will see an encryption login screen every time you startup your computer.

Once you have logged in, all the encryption and decryption happens automatically without you seeing it. It is transparent and will not slow you down (see independent performance tests). You just use your computer as you normally would. HDE will not slow your PC down. Your individual files are encrypted and decrypted “on the fly” as they are accessed.

Generally, the final question to me in discussions like these is: “What happens if I forget my password?” That’s an easy one to answer if you have ZoneAlarm Extreme Security Hard Drive Encryption Edition: you just contact their customer support team by phone and they help you reset your password.

My final questions are: “So now that you know you need HDE, what are you waiting for? Do you want to be an identity theft victim? Do you want to be embarrassed (or sued) when you have to tell your business client that all their sensitive information was stolen because you don’t have hard drive encryption?”

Posted by ZoneAlarm on November 20, 2009 at 09:18 AM | Permalink

Digg This | Save to del.icio.us

Give Your PC a “Flu Shot”

By Doctor Security

 

It’s “flu season” and what do many people do to protect themselves from coming down with a bad bug? Right, they get a flu shot. It’s preventive medicine. I think we all can agree that it’s best to be proactive when it comes to our personal health. Well, guess what? The same philosophy also applies to the health of our personal computers and the personal information contained on them.

 

Unfortunately, it’s always open season for those of us who have PCs (even if you have Windows 7: learn more about Windows 7 security online or in previous blogs.) You can get a computer virus or be targeted for a cyber attack at anytime. So it is very important to be proactive when it comes to safeguarding your PC and your personal data.

 

Now, I don’t want to hear any sick excuses: “But I never get the flu…I never get viruses… I don’t go to those kinds of websites…My laptop will never get stolen…” It only takes one time to really knock you down and out. It may not kill you, but you could save yourself a lot of pain and suffering.

 

Good PC security software needs to be comprehensive – guarding against the gamut of threats. Lets break down the types of protection required into four categories: 1) firewall, 2) anti-virus, 3) browser security and 4) identity and data protection.

 

The first line of defense against cyber threats is a solid firewall. This is the technology that functions as a gatekeeper – turning away any well-known or suspicious “characters” that try to hop the fence into your system.

 

Robust anti-virus is what’s required to catch suspicious and unauthorized activity on your PC, protecting you from new and/or ever-evolving dynamic virus threats.

 

Browser security is extremely important because if you aren’t careful, you can invite bad elements into your private life and onto your personal PC without even knowing it. There are numerous scam and phishing sites that can turn your PC into a zombie to be used by organized cybercrime or trick you into revealing your financial account information and passwords.

 

Protecting your personal data is a great way to prevent identity theft. With laptop theft and data loss commonplace, it’s necessary to have hard drive encryption so that everything that you save on your PC is scrambled. So if your PC falls into the wrong hands, the personal, confidential, and financial information on it, can’t be decipher.  You should also get offline identity protection services  – provided free with many ZoneAlarm products.

 

For the most comprehensive security software that also protects your personal data, check out ZoneAlarm Extreme Security Hard Drive Encryption. It’s just what the Doctor would order. Stay healthy my friends!

Posted by ZoneAlarm on November 17, 2009 at 09:15 AM | Permalink

Digg This | Save to del.icio.us

ZoneAlarm vs. Windows 7



Posted by ZoneAlarm on November 12, 2009 at 04:19 PM | Permalink

Digg This | Save to del.icio.us

Wait! Before Upgrading to Windows 7…

By Doctor Security

Windows 7 has arrived with all the fanfare Microsoft could muster. Reviewers and early-adopters say it features better security and streamlined performance. As with earlier versions of Windows operating systems, Windows 7 makes more demands on the PC than previous versions. If you are looking to upgrade from an earlier Windows version, especially XP, you may find that your computer cannot handle Windows 7.
 
 

If you are into doing things the easy way, there is a quick and simple test to find out if your PC is Windows 7-ready. The Windows 7 compatibility test for PCs at http://www.windowsupgrade.net/ is free and will check out your system to determine your PC’s memory, storage, processing, and other capabilities and compare them to what Windows 7 requires. It can also recommend improvements to your PC, such as adding memory, which can enhance its performance with the new software.

Now, as far as Windows 7’s improved security, it’s only a matter of time before malware writers and cybercriminals begin finding its holes and exploiting these vulnerabilities. Clearly, it is extremely important that you have layered security on your PC. This means protection from a source outside of Microsoft, otherwise it’s like trying to give yourself a nice haircut – the front might look all right, but the backend where you can’t see is surely going to be in bad shape.

 

Check out ZoneAlarm’s comparison chart to see what ZoneAlarm Extreme Security provides compared to standard Windows 7 security features: http://www.zonealarm.com/security/en-us/how-secure-is-windows-7.htm

Of the many things that ZoneAlarm offers that others don’t, often overlooked even by ZoneAlarm users, is the offline identity theft protection services such as:

  • Daily Credit Monitoring and Fraud Alerts – monitors your credit reports daily with email alerts and reports, and notifies you if there have been changes, which is often an indication of identity theft (US only).
  • Victim Recovery Service – provides free telephone counseling to guide ID theft victims through resolution and recovery (US only).

Smooth transitions and solid security can only happen with good preparation. A little effort before you begin, can save you a lot of time and frustration later.

Posted by ZoneAlarm on November 10, 2009 at 08:44 AM | Permalink

Digg This | Save to del.icio.us

How to Travel Safely with Your Laptop this Thanksgiving

By Doctor Security

 

 

Travel and Thanksgiving go together like turkey and stuffing. So if you’re like millions of others and going to be on the road or in the air this holiday season, we suggest you take some precautions to prevent the loss or theft of your laptop.

 

Just so you know why you need to be diligent, here’s the skinny on laptop theft:

1 in 10 are lost or stolen and 97% are never recovered. A recent study found that 12,000 laptops go missing in U.S. airports every week!

 

Now, you can bet that during the Thanksgiving week when there’s a ton more people hopping on flights, there’s going to be a lot more criminal activity among the crowds, especially in these challenging economic times.

 

Here are some tips to consider to help you protect yourself against laptop loss/theft as well as what to do if you become the victim:

 

1)    Don’t use a traditional laptop bag that tells a thief exactly where it is (a quality backpack is a good alternative)

 

2)    If you don’t have to access your laptop in a large public place, don’t

 

3)    Don’t pack your laptop with your baggage because you can’t trust that  your baggage won’t be tampered with or always arrive at the same time and  place you do

 

4)    Stow your computer at your feet, not in an overhead bin where it can easily be taken (often by mistake)

 

Most of these tips are common sense, but during the rush and stress associated with holiday travel, you might not be on top of your game, especially if traveling with children. So try to be diligent and stay calm. The harried travelers might as well paint targets on their backs.

 

You should also be smart about what you need to do and have if your mobile computer is lost, stolen or damaged:

 

1)    Back up, back up, back up your important files!! (Leave a back up copy of your important files at home or the office and carry a disk or a thumb drive with you, if you’re going to need to access files while you’re away)

 

2)    Have strong password (8 characters at least and a combo of letter, numbers and special characters like #%*)

 

3)    Encryption software like ZoneAlarm’s Hard Drive Encryption that “makes everything on your computer’s hard drive unreadable to unauthorized eyes”

 

4)    Have your laptop make, model number and serial number so you can identify your property if it’s recovered or turned into lost and found

 

5)    Stickers or unique identifiers on your laptop so you can quickly ascertain your own and make it harder for a thief to fence a stolen one

 

Happy holidays and safe traveling!

 

 

 

Posted by ZoneAlarm on November 05, 2009 at 08:38 AM in PC Security, Security Industry, Technology, ZoneAlarm | Permalink

Digg This | Save to del.icio.us

Windows 7 Security: What it Has, and What it Lacks

By John Gable, Director of Consumer Product Management

 

Welcome Windows 7.  We have been waiting and it is finally here!

 

From a security perspective, Windows 7 is very similar to Vista, though it does include some additional protection particularly when compared to XP such as User Access Control. Read our last blog for more technical details. But from a more basic point of view, here is what you need to know:

 

* Windows 7 is an operating system, not a security product.

 

Even Microsoft suggests you get additional security so don’t make the mistake of thinking that you are protected if you get the new operating system.  

 

* Windows 7 does not provide full firewall protection.

 

It does include an inbound firewall, but that is all you get by default. It also has an outbound firewall, which you can turn on. However, both lack some protections that all strong firewalls include. The Windows 7 firewall does not pass a long list of leak tests (tests designed to mimic actual firewall attacks and therefore leaves you vulnerable). 

 

* Windows 7 does not include antivirus, and even if you add Microsoft’s free antivirus, you only have partial protection.

 

Separately, Microsoft offers “Security Essentials”.  This, like other standalone antivirus products, free or otherwise, detects and removes known viruses. That is good and an essential part of security that everyone should have. However, even the very best antivirus products are less than 70% effective against brand new viruses. That means that you need additional layers of security if you want to be virus-free. 

 

* Windows 7 leaves holes in your browser.

 

The web browser in Windows 7, Internet Explorer, only blocks known dangerous web sites.  That is also true with other browsers like Firefox.  They do not block new dangerous web sites that have not yet been identified as dangerous, leaving you vulnerable to new phishing scams that trick you into revealing confidential and financial data. 

 

Windows 7 also does not block downloading files that you think are safe but are in fact dangerous.  Nor does it block invisible “drive-by” downloads that happen automatically in the background by taking advantage of known exploits in your browser and plug-ins.

 

* Windows 7 does not offer identity or data protection.

 

With almost 10 million identity theft victims last year, identity theft may be the fastest growing crime in the world. Don’t worry, there are many things you can do to protect your identity and your data. For example: antivirus, anti-spyware and anti-phishing solutions offer some protection against this. Furthermore, hard drive encryption (Windows 7 Ultimate includes this for enterprises but does not have a consumer version) is particularly valuable to “mobile” laptop users who take their laptop with them everywhere they go.

 

Everyone, whether using a laptop, PC, or no computer at all, is vulnerable to offline identity attacks. You should also consider some offline protection like Credit Bureau Monitoring included for no extra charge in many ZoneAlarm products. 

 

Welcome Windows 7.  Be sure to enjoy it – just don’t spoil it by not getting the security you need.

Posted by ZoneAlarm on October 21, 2009 at 04:09 PM | Permalink

Digg This | Save to del.icio.us

Windows 7 Through Security Goggles

By Dameon D. Welch-Abernathy, CISSP, Check Point employee, also known as PhoneBoy of the PhoneBoy.com Blog

 

Windows 7 is the first Windows release since Windows 95 I have been impressed with. I've been using it on my kids' computers since the public beta was released in January. It has been an exceptionally stable and fast operating system, moreso than Windows XP and Vista.

 

As bright and shiny as a new operating system is, one must also carefully consider the security implications of moving to a new operating system. In the early stages of the beta, there were few, if any, choices for antivirus, antimalware, and other security tools. Now, as Windows 7 nears commercial release on October 23rd, Check Point as well as other vendors have security solutions that are ready for the new operating system.

 

Meanwhile, Windows 7 itself brings some important security features and raises one important concern. They do not eliminate the need for security solutions such as ZoneAlarm Extreme Security 2010, but they are important additions none the less. 

 

User Account Control (UAC)

 

The idea behind UAC is to run the account as a normal user but only elevate rights to administrator precisely when needed. When administrative rights are needed, a confirmation dialog appears asking you to confirm the action. If you are not an administrator user, you are prompted to enter the username and password of such a user.

 

This feature premiered in Windows Vista, but was considered annoying as it prompted each time a change that required administrative rights. This prompted people to disable this feature, reducing their overall security. In Windows 7, UAC is enabled, but fewer things require a prompt confirming your action. A four-color shield icon shows next to tasks in the Control Panel and buttons in dialogs where administrative rights are needed to complete the action. 

 

UAC is an important security feature. If an unauthorized or unknown program runs and it attempts to modify the system in some way, the program would not be allowed to modify the system. If the program requests higher privileges, UAC will prompt you, asking for confirmation to run the program. The user can say no, thus thwarting any attempt. However, a malicious program that runs as a normal user can still potentially affect your personal data files, which does not require administrative rights to access.

 

Internet Explorer 8

 

Windows 7 ships with Internet Explorer 8, which incorporates some security features. It includes the Protected Mode from Internet Explorer 7 (which only operated in Windows Vista), ActiveX Opt-in (also from Internet Explorer 7, which blocks the automatic installation of ActiveX controls) and a private browsing mode. 

 

Protected Mode is a sandbox for the browser itself. The rights of the browsing process in Protected Mode are even more limited than a normal user, allowing the browser to write only in the Temporary Internet Files directory. It cannot install start-up programs or make any configuration changes without going through a broker process. 

 

IE8 also includes a private browsing mode similar to what is included in Safari, Firefox 3.5, and Google Chrome. Specifically, it prevents ones browser history, temporary Internet files, form data, cookies, and login information from being retained by the browser. 

 

ZoneAlarm ForceField provides more comprehensive protection for both Internet Explorer and Firefox. The entire browser session is sandboxed and can simply be discarded when the web browser closes, providing protection from unauthorized software installations and complete privacy by erasing your cache, cookies, history, and passwords.

 

Bitlocker

 

A feature present in the Enterprise and Ultimate edition of Windows 7 is Bitlocker. This encrypts all the data on your hard drive so that if the computer is stolen, the data on the hard drive is protected from prying eyes. While this is primarily aimed at corporate customers, home users will typically not have access to this feature unless they purchase an Enterprise or Ultimate edition of Windows.

ZoneAlarm Extreme Security 2010 makes this feature available to everyone, regardless of the version of Windows you bought, and regardless of whether you are using Windows 7 or are sticking with Windows XP or Vista.

64-Bit Windows

 

Microsoft decided to make some changes to how Windows works to increase security. Because these changes break programs and drivers that previously worked, Microsoft decided to implement these features only in the 64-bit versions of Windows to give software vendors the opportunity to update their software to work with the new restrictions.

 

64-bit Windows has been around for a few years, but only recently began showing up in consumer PCs. The main reason: users were starting to bump into the 4 GB RAM limit of 32-bit architectures. 64-bit systems can address substantially more RAM, thus more vendors are shipping systems with 64-bit Windows installed by default. 

 

In 64-bit Windows, all hardware and software drivers must be digitally signed by Microsoft. This makes it more difficult for an unknown or malicious driver to be installed in your system.

 

Data Execution Prevention is also enabled by default. This takes advantage of a feature present on 64-bit processors, which allows programs to mark data segments as "no execute." This makes it more difficult for buffer overflows to cause malicious code to run. 

 

Finally, 64-bit Windows enables Patch Guard by default. In short, it prevents programs from dynamically patching the kernel in memory. This prevents rootkits and the like from installing themselves in the kernel.

 

The TCP/IP Stack

 

The TCP/IP stack in Windows XP evolved directly from the TCP/IP stack present in Windows NT 4.0. It has had more than two decades worth of abuse by the hackers of the world. That doesn't mean it isn't susceptible to security issues, but it's also had the benefit of two decades worth of security patches and other improvements. It is a very mature implementation of TCP/IP.

 

In Windows Vista, Microsoft rewrote the TCP/IP stack from scratch. Windows 7 uses this newer stack as well. This isn't to say the TCP/IP stack in Windows Vista or Windows 7 is less secure than the one in Windows XP, it is simply less mature. It quite simply hasn't had the benefit of two decades worth of hacker review and security patches.

 

Summary

 

Microsoft has made some great strides in making a secure, yet useful operating system. However, the hackers will continue to find ways to bypass whatever security measures the operating system puts in place. Operating systems, by their nature, do not evolve as quickly as threats do.

 

Fortunately, security software such as ZoneAlarm Extreme Security 2010 can react and evolve quickly to protect you from whatever the hackers of the Internet throw your way. 

Posted by ZoneAlarm on September 23, 2009 at 02:08 PM | Permalink

Digg This | Save to del.icio.us

Keeping Laptops Safe

By Robert McHugh, product manager

If you’ve ever had your wallet or purse stolen, your first thought probably isn’t about the lost cash or the value of the wallet itself.  Your biggest concern is about what the thief will do with the information in your wallet – credit cards, ATM cards, etc. – and how you can stop them right away.
 
Similarly, if your laptop is stolen you could be concerned about the cost of the computer and what files haven’t been backed up recently. But what about your personal information on your hard drive?   Do you have any bank records, account information, or passwords saved on your laptop?  What’s in your email that you wouldn’t want the thief to access?  How do you protect this?

There are some simple steps you can take to keep your laptop AND your data secure:

Be inconspicuous.  Not long ago, laptop carrying bags were clearly used for one purpose – to carry a laptop - screaming to potential thieves that there’s a valuable computer inside.  Now, more and more laptop owners are choosing inconspicuous backpacks and multi-purpose carrying cases to tote their computers more discreetly.  As the New York Times recently reported, some users are taking this clandestine carrying theme even further with a bag disguised as a newspaper.

Keep it out of sight.  Just as you wouldn’t leave your wallet or iPod sitting exposed in the backseat of your parked car, take the extra precaution to hide your laptop computer. Take it with you if you can, or lock it in your trunk.

Sticker it.  If you own a popular model, add some labels or stickers to distinguish your computer. This will help avoid confusion at your local Starbuck’s or at airport security; plus it will be easy to see if someone is walking off with your machine.

Backup and Encrypt your data.  This won’t prevent a theft, but it will protect you if that someone gets their hands on your laptop.  If you haven’t gotten around to backing up your machine, stop reading right now and back it up!.  Encrypting your data ensures that no one but you can access your personal confidential information.  Windows password protection won’t stop a thief from getting at your data.  Only full encryption of your hard drive will hide everything, including hidden files and deleted items that may contain valuable information.

Laptop thefts have been growing each year as more and more users are going mobile.  According to a study by Safeware Insurance Agency, a laptop is stolen every 53 seconds, and only 3% of these are ever returned.  Be informed and be prepared so you won’t be part of the statistics.

 

 

 

Posted by ZoneAlarm on September 16, 2009 at 12:32 AM | Permalink

Digg This | Save to del.icio.us

Quick Safety Tips for Staying Connected While On-the-go

By Liam T, Security Advisor, SecureTec Australasia

 

We all know that a Wi-Fi hotspot is great for accessing the Internet in public places such as the airport or a coffee shop. But we should all be aware that Wi-Fi hotspots can also be a security concern since a hacker can exploit the wireless access and steal personal information or files from a computer by using a remote attack.

 

Here are a few simple rules to follow:

 

Use a good Firewall to protect yourself

A good firewall will protect your PC against inbound and outbound attacks while making your computer invisible. For example, ZoneAlarm Firewall protects you by watching all the traffic that exists or enters your computer and blocks any malicious attacks from the outside.

 

 

Disable file sharing in a public area

It is recommended to disable file sharing to protect your personal information while using a public Wi-Fi hotspot.  If you are using a ZoneAlarm, you will get a “New Network Detected” window.  Just click “Internet” (rather than “Trusted”) and that will automatically disable file sharing. Otherwise, …

 

 

If you are running Windows XP follow these steps to turn off file sharing:

  1. Go to the start menu
  2. Access the control panel and go to “Network Connections”
  3. Right click on “Local Area Connection” and click “Properties”
  4. Uncheck File and Printer sharing and click “Ok”

In Windows Vista file sharing is turned off by default when you select your network location type as Public. If you need to change your network location type:

  1. Go to the control panel and access “Network and Sharing Center” on Classic View
  2. Click on the “Customize” link
  3. Set your location to the desired option

Use an encrypted public wireless network

You can check the provider's Web site in the privacy statement to see if they use network encryption and, if they do, what kind of network encryption it is. For the best protection of your personal information it is recommended that you don't send or receive sensitive information from the hotspot. If you do need to enter your personal information on a legit website make sure the website is SSL encrypted. You can tell if a website is SSL encrypted if you can see a padlock on the bottom right corner of the screen and the URL has https instead of http.

 

Disable your wireless network if you are not using it

If you are not doing any Internet related activities such as surfing the web or using your email it is recommended that you turn it off to reduce the amount of time that it is susceptible to attacks. You can turn off your wireless connection in the “Control Panel.”

 

Posted by ZoneAlarm on August 07, 2009 at 09:36 AM in PC Security | Permalink

Digg This | Save to del.icio.us

Protecting Your Privacy: Web 2.0 Security

By Liam T, Security Advisor, SecureTec Australasia

According to research from Secure Enterprise 2.0 Forum, there has been a significant increase in the number of Web 2.0 attacks over the first quarter of 2009. The report indicates that social networks, wikis, and community blogging services and sites are the most popular social media targets for hackers. As Web 2.0 and social media sites such as Facebook, Twitter and LinkedIn become increasingly popular for personal and professional use, hackers will continue to work harder and smarter to exploit their vulnerabilities.

Attackers focus on gaining unrestricted access to the data stored on the computer to use for financial or identity theft. Cyber criminals are also known to implant malicious code by exploiting well known security weaknesses in the software installed on user’s computers.

Though Web site owners have a responsibility to ensure their sites are secure, users should also adhere to secure practices. When online, consider the following:

-          Assess the “value” (to you) of the information stored online:

o        Ask yourself whether the information stored online on “all” your websites could be used for malicious purposes.

o        As a general rule of thumb, it is never a good idea to put up any information online that you would not want the entire world or your worst enemy to see.

-          Isolate different accounts from each other:

o        Avoid cross linking your account details. For example: try and avoid publicly listing your email address or linking your MySpace page to your Facebook page. This practice will minimize the chance for the attacker to compromise several of your accounts by infecting one.

o        Use different passwords. Way too often, hackers are able to use registration information from one account to compromise another. 

-          Secure your online logins:

o        Use secure and unique “passphrases” for your logons and use unique passphrases for each and every website you log onto, all of which should be as long as possible and contain UPPER CASE, lower case, symbols and numbers (although the numbers 0, 1, 3, 5 are less secure as people use them as numb3r r3plac3m3nts a11 t00 0ft3n).

-          Secure your computer against malware and exploits:

o        Use a reputable security solution that includes browser protection such as Check Point’s ZoneAlarm Extreme Security (make sure that “Enable Virtualization” is turned on) or ZoneAlarm ForceField which works well alongside other security solutions.

o        Ensure you have “all” the latest Microsoft Updates and that your Automatic Updates are turned on in Windows.

o        Regularly check that “all” other programs installed on your computer are up to date and secure.

o        Avoid installing un-trusted software and browser plug-ins on your computer. Before installing unknown software, it is best to look for reviews about the software at reputable websites such as CNET or PC World etc.

While we can’t always know how secure a “trusted” Web site is, by following a few simple steps social media site users can prevent their accounts from being compromised or used to infect others.


Posted by ZoneAlarm on July 17, 2009 at 01:04 PM in ID Theft | Permalink

Digg This | Save to del.icio.us

Unpatched Microsoft Video ActiveX Control Vulnerability

By John Gable, Director of Consumer Product Management

 

There is a new Microsoft exploit that attacks silently in the background (aka, a new drive-by download). Microsoft has not yet deployed a patch and the instructions on how to implement this attack are available online for hackers. Thousands of sites have already been infected with the number increasing. 

 

This vulnerability is within Microsoft DirectShow which runs within the browser via ActiveX. You are vulnerable if you are running Windows XP or Windows Server 2003 unless you have browser virtualization (available in ZoneAlarm Extreme Security. Good anti-virus solutions as standalone or within suites detect and remove the viruses that have so far been delivered through this exploit. Note that this exploit just points to a “hole” in your security – other viruses and malware could be delivered to your PC through this same hole which is why we and others recommend that you take steps to block this hole in the first place.  It is not a good idea to rely purely on anti-virus to take care of this.

 

Of course, you can also just edit your registry.  This might be a bit scary and could create problems if you make a mistake. Microsoft has do-it-yourself instructions as well as a “Fix it for me” program you can download to solve the problem.

 

Lots of news on this, including technical publications like TechWorld and InformationWeek as well as main stream outlets such as USA Today.

Posted by ZoneAlarm on July 10, 2009 at 03:59 PM in Malware, Spyware, Worms | Permalink

Digg This | Save to del.icio.us

For Two Days Only: Follow ZoneAlarm or Check Point on Twitter for a Chance to Win a Copy of ZoneAlarm Extreme Security

By Dameon Welch Abernathy

 

As the popularity of social media sites such as Twitter has increased, so has the number of hackers who prey on the unsuspecting public to launch various attacks designed to gain access to confidential information. You can find more details on how to protect yourself against these Web-based attacks by reading one of our recent blogs. When you follow Check Point or ZoneAlarm on Twitter, you’ll automatically have the chance to win a ZoneAlarm Extreme Security suite. ZoneAlarm Extreme Security combines computer security and browser security into one, using patent-pending technology for powerful protection. 

 

Here are a few eligibility rules:

 

  1. Follow ZoneAlarm or Check Point Software Technologies on Twitter by July 9, 2009 at 19:00 GMT. Two lucky winners will be randomly selected.

  1. Employees of Check Point Software Technologies and their immediate families are not eligible to participate in this giveaway.

  1. Only one winner per Twitter account will be awarded.

  1. Winner must provide a shipping address where the prize can be mailed.

  1. All decisions regarding a qualified winner will be made solely by ZoneAlarm and are final.

  1. ZoneAlarm reserves the right to terminate or modify the above terms at any time without notice.

  1. Good Luck!

Posted by ZoneAlarm on July 07, 2009 at 08:45 AM in ZoneAlarm | Permalink

Digg This | Save to del.icio.us

Next »

Search the Blog


  • Zone Blog Google

ZoneAlarm Help and Support

  • Visit Support or User Forums for help with your software.

Zone Blog Feeds

  • Zone Blog RSS feed

    Add Zone Blog feed to My Yahoo!

    Add Zone Blog feed to Google

    Subscribe to Zone Blog feed with Bloglines

Categories

  • Facebook Security
  • ID Theft
  • Malware, Spyware, Worms
  • PC Security
  • Phishing & Spam
  • Security Industry
  • Social Networking Security
  • Technology
  • ZoneAlarm

Recent Posts

  • Hey Doc, Do I Really Need HDE?
  • Give Your PC a “Flu Shot”
  • ZoneAlarm vs. Windows 7
  • Wait! Before Upgrading to Windows 7…
  • How to Travel Safely with Your Laptop this Thanksgiving
  • Windows 7 Security: What it Has, and What it Lacks
  • Windows 7 Through Security Goggles
  • Keeping Laptops Safe
  • Quick Safety Tips for Staying Connected While On-the-go
  • Protecting Your Privacy: Web 2.0 Security

Archives

  • November 2009
  • October 2009
  • September 2009
  • August 2009
  • July 2009
  • June 2009
  • May 2009
  • April 2009
  • March 2009
  • February 2009

Sites We Like

  • Virus Bulletin
  • SANS - Internet Storm Center

    Kaspersky Blog: Analyst's Diary

    digg / security

    Viruslist.com

    Consumer.gov

    World Privacy Forum

    Privacy Rights Clearinghouse (see how to Opt out from Online Data Vendor Databases)

ID Protection Services

  • ZoneAlarm partner Intersections provides helpful IdentityGuard® services for actively monitoring activity related to your identity:

    Identity Protection Center - Learn how to protect yourself from identity theft

Zone Links

  • Internet Security
  • ZoneAlarm Tech Support
  • Feedback
  • ID Protection Center
  • ZoneAlarm ForceField