Wednesday, December 5, 2007

Is your off-the-shelf computer secure?

NO. Why? Read on…

Pre-installed software (bloatware) comes in many different categories – anti-virus, photo editing, web surfing, document creation, games, etc. – and is installed in virtually ALL brand-name computers.

So, imagine you’re a hacker and you want the best return for the least amount of effort. What are you gonna hack first? The anti-virus and the default web browser, of course.

This year, over 200 million PCs were shipped. All had Microsoft Internet Explorer and most had either Norton or McAfee antivirus software pre-installed.

The computer manufacturers used to make a big deal about how buyers have the latest security technology, blah, blah…..all designed to separate you from your money and alleviate your concerns about viruses and hackers. (Lately, they’ve tuned down that message).

Now, Mr. Lazy Hacker knows he has two obstacles to overcome to gain access to your computer. Using an ActiveX control built into IE (or a Windows vulnerability), hackers can gain access to the operating system. From there it’s a small step to disabling the antivirus software.

Since 2002, I’ve seen the pre-installed antivirus software disabled. Oh, it’s still there and it updates regularly, prompts for renewal of the license, scans dutifully and reports that all is well. But the computer is running very slow, lots of pop-ups, etc.

Upon examination of the quarantine logs (where the antivirus software puts the infected files it finds), we find that the most recent date/activity is more than a year ago. Obviously the antivirus software hasn’t met a file it didn’t like in over a year.

Likely? Perhaps. Probable? NOT!!!!

Software publishers pay computer manufacturers to install their software thereby subsidizing the cost of the computer. You do get what you pay for – and in this case, you’ve sacrificed your computer security which could cost you more to repair than you saved.

Secure off the shelf? HARDLY!

Visit http://www.battlegroundcomputers.com/resources.html for links to several malware research sites.