Anti Phishing

OTMS

Level 1
Thread author
Verified
Jan 29, 2015
35
Hey guys, i'm new on the forum so i dont sure if this is the place to post it.

I have already opened thread on malware assistant removal after my computer infected badly before by Trojan/keylogger/Rat..

This computer shared and we using this computer to access bank accounts,another business accounts and i'm really scary about them and on panic...

I used before Key-Scrambler..but after the last infection..the virus just bypassed this tool :/
I'm looking foe new suggestions and what else i can do to 100% protect on this accounts?
the history of each browser auto removing every day..so the data not stay on the computer..
i also learned not to save txt files with the accounts...

hope you can suggest on another good tools or whatever can help to keep them safe.
 

Koroke San

Level 29
Verified
Jan 22, 2014
1,804
Better u not surf unknown,bad sites, don't download from unknown sources, torrents, don't mouse click on anything which u don't sure like a unknown file u get from ur friend which can be a keylogger which looks like a legit file & u mouse clicked on it & boom :) Don't downlaod/open any strange mail & always scan USB/media drives before using them. It's good to disable autorun.How many peeps share ur computers? If they have no/less knowledge about how to protect themselves from malware infections or say they love to infect the system somehow mistakenly so u can create standard user accounts for them & since most malware needs administrator rights to infect/execute in system, in standard accounts there is less chance to infect the system compare to administrator account :) It's good to clean format ur PC if u r not sure ur PC is clean or not or if u r sure then install good paid AV like Emsisoft Anti Malware or Emsisoft Internet Security if u r familiar with behaviour blocker or get ESET. If u want to choose free AV the get Qihoo 360 total/internet security, Avast/AVG free like that. You can keep Malwarebytes free as a on demand scanner with you which is very effective & detect malware which sometimes AV miss. U can use MCShield which can dteect usb infections which normal AV misses, it's good to keep if u share usb drives. Always keep ur OS up to date using window update/ keep ur applications/ security softwares, java ( if u installed), flash, browses (including plugin/addons) up to date.
 
Z

zbc1

Free: Qihoo 360 Total Security + COMODO Firewall.

COMODO has a very good virtual desktop (Safe banking).

Paid:
Emsisoft Internet Security + SpyShelter Premium.


Anti phishing:
OpenDNS
Netcraft (addon)
 
  • Like
Reactions: yigido
D

Deleted member 21043

Hi,

On a machine which is not infected, you should have changed your passwords to those accounts. If you do not do this, if the hacker got hold of the credentials, he can login.

On your browser, if it is supported, you can consider installing: WOT (Web of Trust), Adguard - WOT will help you by providing user ratings on websites to help identify websites which are unwanted and ones you do not want to be on, Adguard is a advertisement-blocker which will remove the annoying advertisements, however as well as this, it also protects you against malicous websites in it's database (it does block a fair amount, which can used to help block malicious URLs, say on case your main security products' web blocker fails too). Blocking advertisements can also be good for your privacy: advertisements can track you.

I would advise against downloading anything related to "software cracks", "keygens", "activation loaders" and so on. I am not saying you do, however as a tip, I would advise you not to do this for your own safety of becoming infected.

To help prevent exploits, you can try using Malwarebytes Anti-Exploit product.
As a side note, I also recommend making sure your software is up-to-date with the latest version on a regular basis.

For Internet Security, I recommend either using ESET Smart Security or Emsisoft Internet Security. The firewall (Internet Security) will also help protect you against hacker attacks (backdoors).
Emsisoft has a nice zero-day protection component: the Behaviour Blocker/HIPS. It has a long list of customizable options (or you can just use the default options) to help detect and block malicious activity being executed by programs. Of course ESET also has protection, HIPS (Host Intrusion Prevention System), however, it is recommended what you configure the HIPS in ESET manually before proceeding to use it for better experience and better protection.

Emsisoft is dual-engine based. Does this mean it is better than ESET? Not at all. ESET is superior at detecting threats through signatures; they have very good signatures. Neither will let you down. They are both very promising products, I myself have used both of them at different times and can tell you they both work well and do a good job at preventing malware infections.

Alongside your Antivirus/Internet Security, I recommend running a Anti-Malware product on-demand.
For example: Malwarebytes, Xvirus Personal Guard. If you do not know what I mean by "on-demand", I mean you disable the Real-Time protection and any behavioural components included in the product, and you manually do system scan checkups on a regular basis to see if it picks anything up that the main Antivirus/IS product failed to detect.

If you ever come across a program which you believe is suspicious but do not know, or think is a bit risky, you could try running it in a Sandbox such as: Sandboxie. If you do not wish to install a Sandbox on your system, you can try using online analysis services like Malwr, where you upload the file and after waiting a few minutes, you get a detailed log of what the sample did when it was executed in a vitual environment. Please be aware that samples can be "Anti-sandbox" and "Anti-VM", meaning they will refuse to work and show malicious signs once they are aware and know they are being sandboxed/running a Virtual Machine.
The aim of this, is to trick the user into thinking that the file is safe so they place it on their main machine. BAM. Now they are infected because now it infects the user.

Keep the Windows Operating System up-to-date with the latest Windows updates. This fixes issues. Microsoft patch up a lot of issues in the OS, improving stability, reliability and security whilst using the OS.

A quick secure idea:
If you like Linux, you could install Linux and then use a Virtual Machine for Windows. When you are infected, you can reset the Virtual Machine.

If you are certain of "legit" and "safe" programs you need to run off the VM, you can use WINE on Linux to run a Windows program on Linux.

Personally, I would not do this, simply because I spend most of my time on Windows right now. But, it's a idea if you happen to like Linux.

Cheers. ;)
 

OTMS

Level 1
Thread author
Verified
Jan 29, 2015
35
Thank you alot guys,i read everything and that's helping me alot.
I already downloaded few tools that twinheaded gave me on the other topic.

About antivirus, I have Paid norton 360 antivirus+firewall,should i configure him for maximum protection?
and like i said,i have used Keyscrambler to protect my passwords...There is any good replacement for this tool?
Do "Last Pass" on chrome is safe to use ? i'm really scare it will share my information or will send my bank accounts to thier company.

And yes i changed every password i had on the same day that hacker enter to my pc..
 

Koroke San

Level 29
Verified
Jan 22, 2014
1,804
Yes u should configure it for maximum protection. Keyscrambler is useless if ur system don't have any hacking/keylogging/screen logging like tools. Btw u can use virtual keyboard to logging ur bank, email accounts, Oxygen keyshield is one of them but it's better to use lastpass, as u don't have to type ur login information again during login process & lastpass is safe to use.
 
  • Like
Reactions: Moose

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
Any antivirus can work well if you encountered common viruses like autorun attacks and others, since zero day viruses/unknown will be 50 to 50 chances to bypass it, just remember knowledge and awareness can save you on those things.

Speaking on Autorun attacks, I recommend to add like McShield since it focuses for detecting and preventing any USB malware.

Regarding in sensitive informations, password managers like Lastpass are proven to be safe for storing it securely just be sure to memorize your master password to access them.

:)
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top