Secret Of AntiVirus

How The AntiVirus Works In A Computer

AntiVirus software has a few methods to detect malicious code (virus, Trojan, stealth, ghost). The first thing to understand is most networks use either TCP/IP RFC 793 or IPX. Both are built with layers (OSI Model,internet protocol) to provide communication across cables, airwaves, etc. These layers break down how the communication will take part between computers. Examples are games versus database access.

The Virus signatures are patterns that are matched by the antivirus software within these communication layers. Most viruses do have patterns, but some don't. That is when the intelligent engine in the antivirus software takes over. The OSI model has rules applied through RFC793 (www.rfc.net), and when these rules are broken the antivirus program can sense or detect and report.

Most antivirus software will offer to delete or contain (quarantine) the malicious code. Remember, the antivirus program runs in the random access memory (RAM or memory) of a computer. All communication from that computer through TCP/IP or IPX is programmed to be monitored by the antivirus software, thus when malicious code is detected it is stopped before it can damage the computer.

How antivirus software and System Restore work together

The System Restore in Windows XP, restore your computer to a previous state, and you do not lose personal data files (such as Word documents, graphic files, and e-mail). System Restore actively monitors computer file changes and some program file changes to record or store earlier versions before the changes occurred. You do not have to take computer snapshots because System Restore automatically creates identifiable restore points that you can use to revert to a previous time. Restore points are created when significant computer events occur (such as the installation of a program or a driver) and periodically (each day).

System Restore monitors, records, and in some cases copies these files before they are modified,to help protect critical computer and program files. For example, when a procedure or a program (such as an upgrade, an inadvertent user change, a driver installation, or a virus) modifies a critical computer file or program file, System Restore records and saves a copy of the file before the change occurs. If a problem occurs, a restore operation can replace files with previously saved versions of those files. Antivirus programs use auto-detection or scanning mechanisms to monitor critical and personal files on the computer for signs of infection. The antivirus program then takes action to clean, remove, or quarantine (isolate) files that known viruses have infected. System Restore also tracks an antivirus program when it modifies (cleans), moves, or deletes a monitored, critical, computer or program file.During a restoration, an active antivirus program scans for infected files. If the antivirus program detects any infected files, the antivirus program tries to modify, move, or delete the infected files. If the antivirus program successfully cleans the infected files, System Restore restores the cleaned files. However, if the antivirus software cannot clean a file, the antivirus software deletes or quarantines the file. As a result, the restoration does not work because these actions to the file cause an inconsistent restoration state. As a result, System Restore reverts to the state immediately before the restoration.Signature files for antivirus programs are updated as viruses become known. As a result, a restoration that did not work several days ago might succeed after the antivirus program is updated. However, if you undo and retry a restoration to a point that succeeded before, the restoration may not work if a new signature or definition detects a virus that the antivirus program cannot clean on a backed-up file.

Internet Router In Space

US military have planned to put internet router in space:The satellite is set for launch in the first quarter of 2009

ROUTER

The US military are planning to test an internet router in space, in a project that may benefit civilian broadband satellite communications.

Companies like Cisco Systemsand Intelsat General, a subsidiary of Intelsat, are selected by the US Department of Defence for its Internet Routing In Space (IRIS) project, which aims to deliver military communications through a satellite-based router.

Presently to send a message from one remote terminal to another via satellite we requires the first terminal to send the data to the satellite, from where it is bounced back to an earth station for routing. The earth station re-transmits it to the satellite on a different frequency, selected depending on its destination, and the satellite bounces it back to its destination. With the router in space, the satellite can pick the channel used to send the message to its destination. By eliminating the message's round trip to the earth station, operators can increase satellite capacity and reduce transmission times between remote terminals by using fewer hops and fewer frequencies for each message.For the IRIS program, satellite operator Intelsat will manage the three-year project, while Cisco will provide IP networking software for the on-board router.Internet routing technology being tested in the IRIS project will enable this communication by "decoding what comes up in the C-band or Ku-band and interconnecting the two," says Wood.

The IRIS payload will support network services for voice, video and data. The system is designed to support IP packet Layer 3 routing or multicast distribution, which can be reconfigured on demand.The Defense Information Systems Agency will have overall responsibility for coordinating the use of IRIS technology among government users and leveraging IRIS capability once the satellite is in space.

AVAST VS NORTON

Which One Is Better:AVAST OR NORTON

Dear Readers,this article is totally based on the users of this software,and not a personal opinion.

Some users say,AVAST is Better,some other says no NORTON is best.

Their views are described below:

"Norton sucks the pc,slowdown it too much that if become difficult to continue with it."

"Why is Avast better than Norton? Seems more complicated to run at first"

"Avast is so much better that you can't hardly compare them...I would rather not have any protection on my computer than run some crap like Norton on it"

"One big issue is the amount of resources used by Norton AV05. Removing it & installing a lighter AV program like Avast or AVG acts much like getting a cpu or memory upgrade"

"Avast automatically updates, automatically scans everything and tells you when you get something bad(basically, you never should have to scan your comp for viruses), plus it is free, take up less resources...there is nothing that Norton is better at...well, other than sucking"

"One thing I noticed with Avast is it detects a lot of false positives more than it's found viruses on my system. So far only one trojan and virus it removed that was something I downloaded and scanned with Avast. Generally there are no descriptions and usually just claim files to be a trojan. I had given up trying to submit or write reports that they are false positives. I just installed Avast and Spyware one day when microsoft antispyware missed a trojan that started loading spyware onto my system. It messed up my symantec antivirus corporate edition because there was an update I needed to install.After installing spysweeper, it took out the trojan and the malware/spyware and avast didn't have to do anything as it was clean from there.However Avast found several files that were false positives which I guess makes up for all those viruses that norton misses."

"Nothing is better than anything (cycle)avast is free and does not use a lot of system resource so avast win "

"Lol, Norton sucks! xP.Did I mention that I would much rather run no antivirus than run norton...I wouldn't use norton if they paid me to(well...mabey a few hundred a day and I might...but otherwise no) "

"Norton, AVG and McAfee are all crap.Avast is best for free av and Nod32 or Kaspersky for the best"

"have any of you tried 'avast' ? it's supposedly free and what Im using right now, but I don't know if its any good..I might check out AVG later."

"Norton is better,it scan everything,the temporary files also,with quick review"

This article is nowhere related to anyone personally,its all from the public feedback on the internet.

powered by the user

Stay Safe On Net with All-In-One User-Friendly Software

All-In-One User-friendly software helps you stay safe on the Net

NEW TREND Micro's PC-Cillin Internet Security 2007 is marketed as a one-stop protection for all your Internet needs which includes antivirus, antispyware, firewall, fraud defence and network monitoring security.You can install PC-Cillin on up to three different PCs. Interface wise, PC-Cillin does nothing to look different from other security suites. In any case, the interface is easy to use even beginners will have no trouble getting to the individual features such as firewall and email scanning.

Once the program is up and running you will be asked to perform a full scan of your hard drive. PC-Cillin conveniently splits the results of the scan into three main categories: Viruses, Spyware and Microsoft System Vulnerabilities.

The program's antivirus function proves adequate protection from online threats. The antivirus can be set to scan all files on access and even automatically schedules a wide variety of scan types. On a relatively clean system, PC-Cillin was able to scan it in under 10 minutes.
PC-Cillin also performs other tasks like monitoring network traffic, multi-layered scanning of compressed files for viruses and automatic protection of other PCs on your network.
We liked the fact that PC-Cillin not only identifies potential security holes in your system but it even prompts you to update the program by linking you to all the files you need.

This can come in useful if you don't constantly update your system or missed out on one particular update. PC-Cillin also covers popular Instant Messaging clients such as MSN Messenger. It also filters spam, though it does this with varying results, as it will occasionally let one or two slip through. You can set three levels of spam detection if you find the current level inadequate. But be warned that a higher level of detection would result in more email messages being flagged as spam.

In addition to all the other features, Trend Micro has provided Transaction Guard, a tool designed to protect users while making online transactions on an unsecured public computer.
It features two forms of protection with one being a spyware monitor, which lets you know whether you are on a secure site.
All in all, PC-Cillin Internet Security 2007 provides a one-stop security package for mobile users.

So friends,in the security world one new software have been launched which is capable of providing all type of security at a same time,just go and check this s/w.

Zipped Trojan Storms Back in Internet World

Zipped Trojan Storms Back

A new spam attack containing the threat Trojan.Peacomm, or Storm Trojan that is being distributed via a password protected Zip file has been identified by the Symantec.

Symantec has detected more than 2 million spam messages distributed worldwide, targeting mostly English speaking countries and affecting both consumers and enterprises prompting Symantec Security Response to raise the ThreatCon level to a Level 2 with Level 4 being the highest alert.This threat was originally discovered in January 2007 but has been repackaged in this particular spam surge. This trojan horse arrives as an attachment to an email purporting to contain a security patch. The email appears to warn the user about a malicious threat and implies that the file attachment is a security patch that will protect the user from this threat.

However, the attachment itself is a malicious threat. The attachment is a password-protected ZIP file. It contains a trojan horse that will install itself on the system as a system driver and then will download other malicious programs from various computers on the Internet. The file contained within the ZIP file will be detected as Trojan.Packed.13. If the user executes this file it will create another file that will be detected as Trojan.Peacomm.

This type of message are shown:
Worm Detected![UNABLE TO SCAN] Worm Detected![WARNING - ENCRYPTED ATTACHMENT NOT VIRUS SCANNED] Virus Alert![WARNING - ENCRYPTED ATTACHMENT NOT VIRUS SCANNED] Worm Detected!Worm Detected!Undeliverable: Virus Det

To reduce the possibility of being affected by threats exploiting this vulnerability, to do the following:
Keep antivirus and IPS detection signatures updated.
Never click on attachments or web links from unsolicited emails.
Regularly apply security patches and updates to all major software installed on the computer.
Use a security solution that contains antivirus and client firewall technologies, such as Symantec Client Security or Norton Internet Security, to protect against today's known and tomorrow's unknown threats.
Organizations should install and maintain a perimeter firewall to protect the entire internal network. Be sure to use permit by exception rules on the firewall.
Organizations should check all external systems for security compliancy before permitting any connectivity to an internal network.

Microsoft Release Four Security Fixes Emergency Patch

Microsoft Corporation has corrected the problems caused by last week's emergency patch, by releasing a four security fixes it deems critical as part of its regularly scheduled software updates.Three of the updates marked with Microsoft's highest threat rating plug holes in the Windows operating system; the vulnerabilities could be used by hackers to install malicious code on personal computers. The fourth fixes a security flaw in Microsoft Content Management Server software, a business application.Microsoft broke its normal once-monthly update schedule with an emergency fix for the way many versions of Windows, including the newly released Vista, handle animated cursor files,last Tuesday. Microsoft and security experts had found that hackers were exploiting the hole and installing malicious software on personal computers. That critical fix was also added to the April scheduled update.According to a Microsoft security blog, last week's patch broke some third-party programs, including audio software from Realtek; ElsterFormular German tax software; TUGZip, a free file-archiving utility and CD-Tag, a program that turns CDs into digital audio files. Microsoft said the latest update will fix the problems for Computers that have been affected by installed programs or that have the error program installed.Computer users with Microsoft's automatic updates feature enabled in Windows do not have to do anything to get these repairs. Others should visit Microsoft's security Web site at www.microsoft.com/security. For machines at work, system administrators sometimes wait until they can test the updates first for any conflicts with internal operations. An important security by Microsoft was also released-one notch below critical-to stop hackers from taking over a computer by gaining high-level system privileges.
Also included in last Tuesday's scheduled update were a new version of the Windows Malicious Software Removal Tool, which identifies malware, and several non-security items including a refinement to the way Windows Mail identifies junk e-mail and grammatical fixes for certain foreign-language versions of Windows Vista.