View Full Version : I have a firewall-- will it help against TROJANS?
I was astonished by some posts in the Malware Removal forum--.I have a reputed firewall and definitely it lets me know whenever a software attempts to make a connection. So will it not defeat the acts of the trojan (ofcourse they have to be removed)
I also have an issue of a keylogger for which I have asked assistance at the malware forum.How does a vxd file log the keys and communicate?
spybotsandra
2008-04-15, 18:07
Hello,
It is not possible for any tool to detect every threat because the spyware sector is growing and developing too fast.
So it might happen that one tool detects something that the other misses.
Therefore it is recommendable to run more than one security software.
You should have a good firewall, a good anti-virus solution and a good anti-sypware-tool.
Many people are asking for recommendations regarding firewall and antivirus software they should use.
Our recommendation regarding firewalls is Outpost from Agnitum.
http://www.agnitum.com/products/outpost/
Even the free version - Outpost Free - will fit most users' needs.
http://www.agnitum.com/products/outpost/download.php
For a free anti-virus software for personal use, take a look at H+BEDV AntiVir:
http://www.free-av.com/
Our complete overview:
http://www.spybot.info/en/articles/recommendations.html
Best regards
Sandra
Team Spybot
md usa spybot fan
2008-04-15, 18:51
nagan:
I have a firewall-- will it help against TROJANS?
I was astonished by some posts in the Malware Removal forum--.I have a reputed firewall and definitely it lets me know whenever a software attempts to make a connection. So will it not defeat the acts of the trojan (ofcourse they have to be removed) …
That totally depends on the firewall that you are using. Some firewalls are better than others at stopping Trojans from communicating. Many Trojans use connections already established by other software as well as other methods to go undetected by firewalls. The methods Trojans can use (Substitution, Launching (Parent Substitution), DLL Injection, etc.) are outlined in the following article:
Introduction to Firewall Leak-testing - matousec.com
http://www.matousec.com/info/articles/introduction-firewall-leak-testing.php
Tests used to check a firewall's ability to stop a Trojan from using these methods to circumvent the firewall are called Leak Tests. Here are Leak Tests results for many popular personal firewalls:
Leak-tests results - matousec.com
http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php#firewalls-ratings
I would also reccomend Comodo Firefall Pro for a firewall which is tottaly free!