Re: How good is Comodo Internet Security?



On Tue, 23 Dec 2008 16:31:16 +0200, nik wrote:

Hello ppl,
I recently installed Comodo Internet Security and I would like to know your
opinion on this application and how trustworthy it is.
Will it keep my computer safe from online attcks and viruses given I don't
download vicius apps myseld and not visiting porn sites?

I'd steer away from any Internet Security Suites, they're are a waste of
your hard-earned dollars! And (especially) 3rd party personal firewalls
(PFW) are mostly badly coded, almost always very cumbersome to remove from
the operating systems and more importantly don't add anything to your
desired securitry!

"*Security is a process not a product*" (Bruce Schneier).

10 Immutable Laws of Security.
http://technet.microsoft.com/en-us/library/cc722487.aspx

For WinXP the most dependable defenses are:-
1. Do not work as Administrator; For day-to-day work routinely use a
Least-privileged User Account (LUA).
Applying the Principle of Least Privilege to User Accounts on WindowsXP
http://technet.microsoft.com/en-us/library/bb456992.aspx

2. Secure (Harden) your operating system.
http://www.5starsupport.com/tutorial/hardening-windows.htm

3. Don't expose services to public networks.
Windows XP Service Pack 3 Service Configurations
http://www.blackviper.com/WinXP/servicecfg.htm

4. Keep your operating (OS) system (and all software on it)updated/patched.
How to configure and use Automatic Updates in Windows XP
http://support.microsoft.com/kb/306525
http://www.update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us

4a.Got SP3 yet?
Why Service Packs are Better Than Patches.
http://www.microsoft.com/technet/archive/community/columns/security/essays/srvpatch.mspx?mfr=true

5. Reconsider the usage of IE and OE.
Utilizing another browser application and e-mail provider can add to the
overall security of the OS.
Consider: Opera,FireFox or Seamonkey and PegasusMail,Thunderbird,or WLM.

5a.If you insist using IE - Secure (Harden) Internet Explorer.
Internet Explorer7 Desktop Security Guide.
http://www.microsoft.com/downloads/details.aspx?FamilyID=6AA4C1DA-6021-468E-A8CF-AF4AFE4C84B2&displaylang=en

6. Review your installed 3rd party software applications/utilities; Remove
clutter, *including* all Anti-WhatEver ware and 3rd party software
personal firewall application (PFW) - the one which claims:
"It can stop/control malicious outbound traffic".

7. If on dial-up Internet connection, activate the build-in firewall.
Windows XP: How to turn on your firewall.
http://www.microsoft.com/protect/computer/firewall/xp.mspx

7a.Configure Windows by using:
Seconfig XP 1.1
http://seconfig.sytes.net/

7b.If on high-speed Internet connection use a Router and implement
Countermeasures against DNSChanger.
http://extremesecurity.blogspot.com/2008/06/use-default-password-get-hijacked.html

7c.And (just in case) Wired Equivalent Privacy (WEP) has been superseded by
Wi-Fi Protected Access (WPA).

8. Utilize one (1) each 'real-time' anti-virus and anti-spy application.
Consider: Avira AntiVir® PersonalEdition Classic - Free
and Windows Defender.

9. Employ back-up application(s).
Windows XP Backup Made Easy
http://www.microsoft.com/windowsxp/using/setup/learnmore/bott_03july14.mspx
Consider: Acronis, Casper or Norton Ghost and ERUNT.

9a.Utilize vital operating system monitor utilities/applications.
Consider: Process Explorer, AutoRuns, TCPView, WALLWATCHER, Wireshark,
Port Reporter etc.

10.Routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html

The least preferred defenses are:-
Myriads of popular anti-whatever (*real-time*) applications and staying
ignorant.

Note:
Avoiding Rootkit Infection.
"The rules to avoid rootkit infection are for the most part the same as
avoiding any malware infection however there are some special
considerations:
Because rootkits meddle with the operating system itself they *require*
full Administrator rights to install. Hence infection can be avoided by
running Windows from an account with *lesser* privileges" (LUA in XP and
UAC in Vista).

Good luck :)
.



Relevant Pages

  • Re: Please help with pop-ups!!
    ... Sometimes I'm not on the internet ... A1) No. Microsoft NEVER sends emails with security update attachments. ... pages where you can access Windows Update, download patches, or request ...
    (microsoft.public.security)
  • Re: My words
    ... Internet Connection Firewall for SP1 and Windows Firewall for SP2 ... download all the security updates - Critical updates with Express ... Get into Safe Mode and password protect it. ...
    (microsoft.public.windowsxp.newusers)
  • RE: IIS6 Security and other web servers
    ... IIS6 Security and other web servers ... I know of no Windows architecture that is exposed directly to ... I know of a number of LAMP-type servers that are ... exposed directly to the Internet with no intervening layers. ...
    (Security-Basics)
  • Re: Norton Internet Security has screwed up my system...HELP!!!!!!
    ... I was having problems installing Norton Internet security 2006 ... Internet Explorer and windows media player 10 are completely messed up!!! ... GO TO TOOLS AND THEN FOLDER OPTIONS, THEN GO TO THE VIEW TAB. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)

Quantcast