My Technology Guide readers knows it very well how important computer security is for them. So, we will not stress any more over the importance of having a security suite installed on your computer. New technologies like behavioral detection and heuristics, have emerged to further strengthen the standard protection layers offered by a security suite. One such security suite that we took for a review here is Emsisoft Anti-Malware.

Emsisoft Anti-Malware is a stand-alone antivirus, anti-malware product and uses two scan engines (the Emsisoft Anti-Malware, and the Ikarus Anti-Virus engine) to increase protection and to increase the malware and virus detection. The three guards present in Emsisoft Anti-Malware protects your computer against new infections: File Guard, Behavior Blocker and Surf Protection.

After downloading the installer which is 96.6 MB in size, we installed it on our test machine. After installation completes, Emsisoft presented us with a configuration wizard. We went through several configuration steps before we could start to use the program fully. The configuration wizard sets up the updater, runs a computer scan and allows us to customize real-time protection options. All this didn’t take long and the settings can be changed when needed later.

Emsisoft Anti-Malware’s interface is very simple and everything is very nicely available under one window, but this does not affect at all on its ease of use. All the menus of the software is in the left hand side of the application window allowing comfortable navigation.

The status of the three layers of protection available: File Guard, Behavior Blocker and Surf protection, displayed under the Security Status screen. Security Status screen also shows information on the time passed since the last scan or the last update, and the current state of all protection modules included in the application. Emsisoft Anti-Malware provides 4 scanning options: Quick Scan, Smart Scan, Deep Scan and Custom Scan. On demand scanning is available from Windows Explorer context menu (only available if you have opted for this during program installation).

Even though the app uses two full scan engines against viruses, trojans, backdoor, spyware, adware, worms, bots, key logger and all other types of malware, but this doesn’t affects the scan duration. We then tested Emsisoft Anti-Malware’s ability to detect and remove malware and in this test we found that the dual-engine protection really effective. Emsisoft Anti-Malware managed to detect 311 malicious items out of the 320 malicious items we tested, this translates into 97% efficiency.

Although the detection rate is very good, but while using Emsisoft Anti-Malware, we found that there is a high chance to detect innocent application activity as being malicious. As an example, Emsisoft Anti-Malware detected TweetDeck application’s behavior is like that of spyware (LAN bypass backdoor).

But, Emsisoft uses a very easy way to exclude TweetDeck from flagging again by creating application rules. It also makes use of the “Anti-Malware Network feature” and provides a recommendation based on the decisions of other users when an alert is raised. Based on the recommendation, you can then simply add the flagged application to be always blocked or allowed, or monitored for specific malware activities.

Emsisoft Anti-Malware’s Behavior Blocker lists a set of malicious activities. You can create rules for various types of alerts which may help you greatly diminish the number of pop ups on the screen. File Guard allows you to choose between best performance (scan programs on execution only) and best protection (scan all files when accessed). Surf Protection helps you block tracking cookies, ads or tracking hosts, malware hosts, exploiting hosts, fraudulent hosts, hijacking hosts, phishing hosts or warez hosts. For each of these, you can instruct the application to block and give you a notification, simply alert you, block silently (no pop up visible) or not to block it.

The configuration panel of the application is very easy to understand, you just need to check the right boxes to configure Emsisoft Anti-Malware to its core. You will also find the tab for schedule scans, and also for configuring access for non-administrative users. A very good feature for the administrators who wants to impose limits on users, who should not be allowed to change the apps configuration.

HijackFree, bonus part in Emsisoft Anti-Malware, enables you to take a good look at the processes. It also shows all the applications that are currently communicating with the Internet along with the ports used; a list of all the startup items. You can also use the online analysis feature if you want to know more about the item, HijackFree will then show you the good using green color and bad using red color. The suspicious items are shown in yellow color.

Overall Rating:

For: Emsisoft Anti-Malware backed up by its two scan engines (the Emsisoft Anti-Malware, and the Ikarus Anti-Virus engine) does a very good job at detecting malware. Its protection layers include heuristics and behavioral engines too. Emsisoft Anti-Malware can be configured flexibly by allowing you to choose between best performance (scan programs on execution only) and best protection (scan all files when accessed) to combine performance with protection, and for protecting the system against online threats. HijackFree is a very good add-on, which is very handy in discovering malicious items on your computer.

Against: False positives and detection of innocent applications as malware. Online analysis of the processes running on the system using HijackFree shows some good and reputed items as unknown and yet to be verified.

Verdict: If you can handle the false positives, Emsisoft Anti-Malware is a very good antivirus and malware detection application for your system. It provides the best protection against other threats like trojans, backdoor, spyware, adware, worms, bots, key logger, tracking cookies, etc. Emsisoft does helps less experienced users to handle false positives by using the Anti-Malware Network feature. HijackFree can help easily trace illicit malware processes and remove them, but you should take care on while using the tool.

You can download and evaluate Emsisoft Anti-Malware from the link below:

[ Download Emsisoft Anti-Malware ]

The normal subscription cost of the product for 1 year is $40 but the developer is offering it with a special 50% discount at this moment. When downloading, you’ll get the full version including all protection features for 30+3 days for free. You can use it for 3 days without registering, but for evaluating it for 30 days you need to register with Emsisoft for free. Afterwards, if you do not pay for the subscription, the unpaid software switches to a limited freeware scanner mode (known as Emsisoft a-squared Free) that allows you to only scan and clean your PC when you want, but does not include the protection features against new infections.

Symantec announced Norton Everywhere, a three-part initiative to take Norton beyond the PC and extend trust to new devices and consumer applications. The initiative spans the areas of mobile safety, web safety across any device and embedded services on smart devices. Symantec also announced Norton DNS, a component of Norton Everywhere.

Norton DNS provides alternative DNS servers that can be used by any Internet-connected device. It has been designed to provide a safer, more reliable, and faster Internet experience by delivering a variety of basic protection services like anti-phishing, anti-malware and anti-spyware via Norton verified web filtering.

Based on the DNS, which stands for Domain Name Service or Domain Name Server. The DNS servers provide the translation from a URL (e.g. www.mytechguide.org) to an IP address (e.g. 69.163.228.227) that the computers and routers can understand to get the Web page to show up on your display. Using this DNS technology, Norton is able to deliver another layer of security to both the mobile and PC environments. Every time a user navigates to a URL while using Norton DNS, the URL will be verified first.

One form of malicious attack involves “poisoning” the information on the DNS server to redirect unsuspecting users to malicious sites. For example, an attacker could access an insecure DNS server and change the IP address associated with “www.paypal.com” to point to a different server. When users that rely on that DNS server try to visit “www.paypal.com” they are redirected to the malicious site. Some countries use the domain name system to block access to web contents and other resources. Using a different DNS provider then can prove beneficial and can also speed up domain lookup times, reduce web censorship and block custom error pages by the Internet providers.

There are other public DNS services–namely OpenDNS and Google Public DNS. Google’s DNS service, like Symantec’s, is designed to provide a faster and more secure Web surfing experience. Like Symantec’s Norton DNS, the Google Public DNS also provides protection against DNS cache poisoning and other common DNS threats.

The Norton DNS service works by filtering the DNS requests that are automatically created when you visit a Web page to determine if they are associated with fraud, spyware, malware or objectionable content such as pornography or violence.

Symantec provides an in-depth instructions for setting up Norton DNS for Windows and Mac OS X on the official Norton DNS website.

What do you think about Norton DNS? Will you use it or stick with your current DNS provided by your ISP or with OpenDNS or Google DNS? Tell us what you think through comments below.

Traditionally, most security suites uses file signatures, a type of digital fingerprint or relies on blacklists to detect viruses on your computer. This means that the virus must be first known in order to create a fingerprint allowing it to be recognized. This database present on your computer is then updated online on a regular basis. Only then can the virus be recognized. But the way ThreatFire works is different.

ThreatFire does not rely on file signatures and blacklist database, but instead is a “behavior-based” program that constantly analyzes behavior on your computer to detect and block any malicious activity. This frees you from having to wait for a database update or regularly update file signature database to get protected, ThreatFire will recognize the malicious program and block it as soon as it arises.

I tested ThreatFire and was very impressed at its little system resources consumption while protecting my computer from any threats. This application runs in the quietly in the background protecting you from malicious programs, viruses, etc.

If you want a security program that doesn’t slow down your computer and quietly protect you, then I will highly recommend ThreatFire for you.

[ Download ThreatFire ]

a-squared Anti-Malware gives a comprehensive PC protection against trojans, viruses, spyware, adware, worms, bots, keyloggers, rootkits and dialers with 2 cleaning scanners (anti-virus + anti-spyware) in 1 and 2 guards (signature scan + behavior analysis) against new infections. Unlike other malware protection products, a-squared Anti-Malware was designed to run parallel with other antivirus and firewall software without troubles. In case you find a conflict with another software, the support team will help to solve the problem quickly.

a-squared Anti-Malware runs on Windows XP, Vista, 7 as well as on 2003/2008 Servers in all 32 bit editions. On x64-systems the scanner and OnExecution guard work very well, but the behavior blocking module (Malware-IDS) does not run currently. In regular guard mode are approx. 100 MB free RAM required. We suggest to use it on computers with at least 512 MB RAM, best would be 1 GB RAM.

Update: Giveaway page now live, visit the offer page now.

Key Features

• 2 world class scanners combined - best in multiple tests!
• Against all dangers: viruses, spyware, trojans, bots, rootkits, etc.
• Advanced cleaning to remove every infection
• File guard that checks programs while startup
• Permanent behavior analysis of all active programs
• Surf protection that blocks harmful and fraudulent websites
• Community and cloud-based help with decisions
• Bonus feature: Application protection against manipulations
• Explorer integration – right click scan
• Easy to use – little alert windows
• Extensive program help and video tutorials
• HiJackFree tool for professional users included
• Commandline Scanner included

Good news is that Emsisoft will giveaway a-squared anti-malware 4.5 for free (worth $40) on November 11, 2009 (11/11 at 11:11 (CET) – for only 24h).

To get this giveaway, visit the offer page here on November 11, 2009 at 11:11 (CET). You can get a-squared Anti-malware 4.5 for free on that day, available for 24 hours starting from 11:11 CET.

So, mark this date in your calender and bookmark the offer page. Make a reminder about this event if you want to get a-squared anti-malware 4.5 for free!

Tom Kelchner at Sunbelt Systems reports about a rogue software (viz. Protection System) that tries to trick Windows users into uninstalling MalwareBytes’ Anti-Malware. Rogue security software is a form of computer malware that deceives or misleads users into paying for the fake or simulated removal of malware. Rogue security software, in recent years, has become a growing and serious security threat in desktop computing. You will find a very long list of rogue softwares here and here. The list of legitimate software can be found here and here.

During installation, the Protection System rogue will generate the following message if it detects MalwareBytes.

“There is unauthorized antivirus software detected on your computer. It is recommended you to remove it, other it could conflict with Protection System. Press OK to remove MalwareBytes’ Anti-Malware_is1″.

If the user clicks on the OK button, it will call the MalwareBytes uninstaller and uninstall the software. After the install, it then asks for the users email address. Then a “Thank you” message appears as shown in the screenshot below as if the user had actually purchased the rogue.

This article is a warning for all unsuspecting Windows users so that they don’t get tricked by this rogue software and uninstall the legitimate MalwareBytes Anti-Malware.

Tom Kelchner also authored a PDF entitled How to Tell If That Pop-Up Window Is Offering You a Rogue Anti-Malware Product which discusses about these kind of rogue software.

Emsisoft, the makers of the highly regarded a-Squared anti-malware scanner are offering a free 12 month license for their “Mamutu” behavior blocker exclusively to Gizmo Freeware readers.

Mamutu is a behavior based malware blocker from Emsisoft, the makers of the highly regarded a-Squared anti-malware scanner, which blocks any malware before it can cause any damage to your computer.

Mamutu” is composed from the words “Malware” and “Mutu”. The second word comes from the Maori language and means “stop”. The name may sound funny but it describes exactly what the program does: Terminate all types of Malware.

Normal security software recognizes Malware using Signatures, a type of digital fingerprint. What is problem with this? No fingerprint means no recognition. This means that the Malware must first be known to the manufacturer of the security software before it is possible to create a fingerprint allowing it to be recognized. The fingerprint database on your PC is then updated online on a daily basis. Only then can the Malware be recognized. But Mamutu does not use a fingerprint to recognize dangerous software but rather on the basis of the behavior of the software. This allows Mamutu to recognize new Malware long before the signature databases have been updated. These types of Malware attacks are known as Zero-Day attacks. In addition to this, behavior-based Malware recognition is the only efficient way of recognizing Malware that has been built for a single specific attack, e.g. for industrial espionage. More Information about this product is here.

The offer is in the form of a $27 discount off selected Emsisoft products including all Mamutu subscriptions and a-squared Anti-Malware from 1 year to 3 years, 3- and 5-packs . When this discount is applied to a Mamutu one year subscription that normally costs $27, the net cost to you is zero. For further information about the free registration and the giveaway, please visit Gizmo.

Note: This offer expires on 11.59 PM USA PST, Monday August 24, 2009