Re: Agnitum Outpost blocking everything

On Wed, 31 Aug 2005 00:05:34 GMT, "Beauregard T. Shagnasty"
<a.nony.mous@xxxxxxxxxxxxxxx> wrote:

>>> ..until you catch some malware that your anti-virus program isn't
>>> looking for (a trojan?), or something that gets implanted
>>> between your runs of Ad-Aware and SS&D, both of which are
>>> on-demand scanners, not resident programs.
>>
>> Malware can easily defeat sw firewalls.
>
>Regarding that, do you know if said malwares generally target only the
>prominent firewalls (Norton, McAfee, ZoneAlarm..) or do they look for
>all the others (Kerio, Sygate, etc), too?

I wasn't speaking of any particular malware. I was pointing out the
faulty logic of trusting sw firewalls to alert to Trojans.

>> A sw firewall isn't particulaly demanding of RAM and other system
>> resources nowdays, so if it gives users the warm fuzzies to use
>> one, by all means use one. But it's unnecesary ... just as realtime
>> av is unnecessary.
>
>Probably still better than nothing, as certainly all malware won't be
>disabling them.

If it gives you the warm fuzzies :) It doesn't do anything for me. I
have Sygate installed and rarely use it.

The point is that if your realtime av or your sw fireall go "ding",
you're doing something wrong. So fix _that_ problem rather than
screwing around.

Art

http://home.epix.net/~artnpeg
.

Relevant Pages

  • Re: How good is Comodo Internet Security?
    ... what happenign to my system when a malware tries to compromise it, ... Routers and hardware firewalls wotn save my ass when windows get infected ... connect out from your host to where they can connect. ... NOT to protect against infection except merely as a consequence of your ...
    (comp.security.firewalls)
  • Re: Reformat or wipe?
    ... Malware removal appears to be laborious and often ... I'll note that firewalls are good at what they do, ... if you install a firewall and a virus scanner but ... seatbelts in cars. ...
    (microsoft.public.security)
  • Re: How good is Comodo Internet Security?
    ... if a program could distinguish between good and malicious actions (which ... If what you say stands TRUE, especially if malware could SIMPLY TERMINATE security products that's gets into their way, then the majority of all computer users must be really idiots or plain ignorant to start or continue using personal firewalls including me. ...
    (comp.security.firewalls)
  • Re: Agnitum Outpost blocking everything
    ... >> faulty logic of trusting sw firewalls to alert to Trojans. ... disabled by malware as ZA and the others you mentioned. ... Their version 6 KIS (Kaspersky Internet Security) requires the fastest ... Any app that starts IE is a Trojan. ...
    (alt.comp.anti-virus)
  • Re: The Coalition against Personal Firewalls
    ... is the Trojan: TR/Agent.OC.1 ... That's why you don't like active firewalls? ... The PoCs do exactly what they claim: ... malware from running, which is a good thing to do. ...
    (comp.security.firewalls)