Online Banking protection applications questions etc

[jasonX]

Have not really tried online banking from home since I feel I am not properly protected due to my ISP so I am asking these questions. This may also be for the benefit of those who are also not familiar with online banking and what protection they need these days.

What are the current online banking protection that can be used by an individual from home or when mobile, say, using a laptop via wifi?

Has someone already done a review/test/trial of online banking application's like that of Trusteer Rapport? Or the use of the online banking protection feature that is included in a suite like that of KIS, BitDefender and Norton..?

Are there any other security software that is a "standalone" program like Trusteer Rapport that can be used for online banking?

For those who use online banking often how do you do it? What applications do you use and how do you stay protected while mobile or not at home?

Might you share some tips and scenarios identified by your banks as sensitive or needs attention for the benefit of noobs.

How can Sandboxie be used to augment a program for online banking?

Thank you very much.

 

[Deleted member 178]

i do online banking almost every day,

the main threat to an online-banking user is keylogger (hidden malicious apps that records your keystrokes)

i did reviews of 3 products that counter those apps: (click the links)

- Spysheltter : it is a real-time HIPS and also the best anti-logger on the market.

- Zemana Anti-logger : the main rival of Spyshelter

- Keyscrambler : this one act differently than the others, instead of detecting and removing keyloggers, it encrypt your keystrokes so even if you have a keylogger in your system , the keystrokes recorded and transmitted to the hacker will not be usable.


Finally, most AV are a ble to detect classic keyloggers

 

[Littlebits]

You don't really need a special program for online banking.

Basic free AV and Windows default firewall is good enough.

Keyloggers do not automatically download and install. You have to manually do it yourself.

If you watch and only download files from trusted sources, you will never get a keylogger. Keyloggers are usually spread through fake alert sites, cracks and keygens. Only download files from sources like Softpedia, MajorGeeks and FileHippo. Never connect unsafe devices to your system, use a updated secure browser with security add-ons and a secure password manager like LastPass or Roboform, never click on links in search results or emails going to your online banking site. Keep your online banking site bookmarked so you know you will always go to the correct site.

I've been doing online banking since 2002 and never had any problems just using a free AV and basic firewall with no HIPS.

Enjoy!!

 

[jasonX]

Thanks for the reply guys.

@Umbra.

Does SpyShelter equally effective when you disable the HIPS component? I ask because supposing that you have Comodo or Outpost Pro (which both have HIPS), have you used SpyShelter free without the HIPS component?

@Littlebits,

How about screenloggers? How can a free AV and Windows firewall combat screenloggers?

Thanks again

 

[Deleted member 178]

no i didn't used SS free because it support only x86 system and mine is x64.

If you have an HIPS you can turn off SS HIPS.

 

[Littlebits]

Thanks for the reply guys.

@Umbra.

Does SpyShelter equally effective when you disable the HIPS component? I ask because supposing that you have Comodo or Outpost Pro (which both have HIPS), have you used SpyShelter free without the HIPS component?

@Littlebits,

How about screenloggers? How can a free AV and Windows firewall combat screenloggers?

Thanks again

No solution will detect 100% of everything. But Free AV's do a decent job detecting all loggers, except for zero-day malware available on fake alert sites.

You are the first defense for detecting malware, your security software is only there to help you. Follow the basic security rules when it comes to downloading and installing. And you will probably never be exposed to most malware especially loggers, so you won't have to depend on a software to protect you. Never download or install files from unknown sources, most loggers come from illegal keygens, cracks, patches and fake alert sites that try to trick you installing downloading a file.

If you don't follow the basic rules about downloading and installing, it makes no difference which software setup you choose to use, you will still get infected sooner or later.

Good day.

 

[Ramblin]

How can Sandboxie be used to augment a program for online banking?

Hi Jason, Sandboxie is not an anti keylogger but there are certain things that can be done sandboxed that would increase your security. None of this helps if the system is already infected.

When doing banking, do it in a fresh browser session and close it immediately after you fininsh. Its also better to do it in a browser without addons. If you are using Firefox, you can open Firefox in safe mode (no addons).

Also you can block sensitive files and folders by implementing "File Access > Blocked Access". That way programs running in the sandbox are forbidden to read them. Also, use a restricted sandbox where only your browser can start and connect to the internet.

http://www.sandboxie.com/index.php?ResourceAccessSettings#file

Bo

 

[loveboy_lion]

you could use Panda Safe browser
http://www.pandasecurity.com/homeusers/solutions/safebrowser/

 

[Gnosis]

HitMan Pro is a good way to rule out keyloggers 99% of the time. A scan is usually under 2 minutes depending on your connection speeds. The longest I have ever had it take is 4 minutes.

Make sure your router has all of its data encryption functions activated.
I prefer Mozilla, with the KeyScrambler add-on, over other browsers for financial transactions.

 

[Ink]

Your bank may recommend Trusteer Rapport, although it's not the lightest solution.

 

[Spirit]

A clean computer with browser in Private mode is good enough for doing online banking.
Bookmark your bank website link and f protection scan with hitman pro.

 

[Littlebits]

you could use Panda Safe browser
http://www.pandasecurity.com/homeusers/solutions/safebrowser/

I never heard of Panda Safe Browser before, so I had to try it.

It ended up just being an out-dated version of Firefox running in an out-dated version of Virtualbox and out-dated Linux core. It would never load correctly, keep giving errors, so I uninstalled it.

Warning installing it will corrupt your current installed version of Virtualbox.
I had to completely uninstall Virtualbox, reboot and then reinstall it. The repair failed.

It looks like Panda Safe Browser hasn't been updated since 2008.

Thanks.

 

[jasonX]

@Earth,

Your bank may recommend Trusteer Rapport, although it's not the lightest solution.

Yes, I recently tried it and I had a BSOD then when I excluded it in Eset, he system crawled. Such a heavy behavior for a small app.

@ZOU1,

HitMan Pro is a good way to rule out keyloggers 99% of the time. A scan is usually under 2 minutes depending on your connection speeds. The longest I have ever had it take is 4 minutes.

Yes I have HMP(free) in my system. I use it often than MBAM.

@ loveboy_lion,

you could use Panda Safe browser
http://www.pandasecurity.com/homeusers/s...febrowser/

Hmm, did not know that Panda had one will check it out.

@bo.elam,

Thanks will check it out.

@Littlebits,

Yes the behavior of the user during his/her session is first and foremost very important. Actually I asked this for the information of the my wife/family. For the none informed it is a scary espcially when using credit cards so the info/tips given here is valuable. Thanks.

@Umbra Corp,

no i didn't used SS free because it support only x86 system and mine is x64.

If you have an HIPS you can turn off SS HIPS.

The system that I plan to use is an x86. Will make a system image then try it out.


@Stranger,

A clean computer with browser in Private mode is good enough for doing online banking.
Bookmark your bank website link and f protection scan with hitman pro.

Thanks for the tip.