Malware Blocking using DNS

[MidnightCowboy]

I just wanted to expand a bit more on my reasoning behind the use of ClearCloud as a front-line defense against malware even when partnered by a supposedly poor performance AV. I've also created this new thread to put it in because the title of the other one doesn't maybe reach out to enough people.

New DNS Service from Sunbelt


As can be seen from the report linked to below, very few of the so called "top" programs are detecting the current explosion of fake AV's or "rogues".


http://garwarner.blogspot.com/2010/0...v-in-news.html

This was the result from the first introduction of one such program:

http://www.virustotal.com/file-scan/...d80-1271107790

And this after the code was modified:

http://www.virustotal.com/file-scan/...802-1271132200

Not very comforting, especially if you're one of those who have paid for a solution in the mis-belief that it will protect better than a free one.

Sunbelt's Vipre is consistently at the forefront for this type of detection which is no doubt why it is the top proactive performer in the VB 100 RAP tests.

http://www.virusbtn.com/vb100/rap-index.xml

It's "reactive" (scan) detection isn't so high as some of the others but this isn't the point here, neither is this trying to be an ad for Vipre. My point is that according to a statement from one of Sunbelt's dev team, ClearCloud, because of it's nature, can be updated even more quickly than Vipre. This being the case then this site would have been blocked anyway and so remove the need for anyone's AV to detect what it might have downloaded later during a scan. The server addresses hosting this rubbish are of course changing even more frequently than the malware code itself, but still the update process for ClearCloud should keep pace with this adequately enough for the majority of users. I still have my concerns about whether something this effective will remain free, especially since GFI's recent acquisition of Sunbelt, but in the meantime I would urge anyone not using a secure DNS service to at least consider ClearCloud as a major option.

[reneeautumn]

Just wanted to thank you for mentioning how to jump back & forth between Norton & ClearCloud...re turning off one and then clicking onto the other via either clearcloud's utility or Norton's...I was doing it manually. Btw way, currently using Norton, its ok, but will probably go back to clearcloud. Not sure why, but I just like it more...ha,ha...very techy..fyi as u know, both are still in beta...so far, no problems with either.

[MidnightCowboy]

Pleased you found this useful. Now I'm gonna confuse you even more because the Comodo Secure DNS service has just activated malware site protection too! It was a bit aggressive on first release (blocking torrent sites etc) but they've now refined the filtering to fix this. There are a few threads for this over at the Comodo forum which show there is still a bit of work to do but unlike ClearCloud you do have an option to proceed from an alert if you want to.

Originally Posted by MidnightCowboy

I just wanted to expand a bit more on my reasoning behind the use of ClearCloud as a front-line defense against malware even when partnered by a supposedly poor performance AV. I've also created this new thread to put it in because the title of the other one doesn't maybe reach out to enough people.

Sunbelt's Vipre is consistently at the forefront for this type of detection which is no doubt why it is the top proactive performer in the VB 100 RAP tests.

Hey MC, I've been using Clear Cloud for the last few weeks, and I like what I've seen so far. It may be technically still in beta stage, but I'll take Clear Cloud beta over OpenDNS any day. I haven't tried Comodo's DNS. I'm also considering trialing Vipre as well. I'm curious to see just how light and effective it actually is.

Originally Posted by MidnightCowboy

I still have my concerns about whether something this effective will remain free, especially since GFI's recent acquisition of Sunbelt, but in the meantime I would urge anyone not using a secure DNS service to at least consider ClearCloud as a major option.

I also have those same concerns about it remaining free. It wouldn't surprise me if they offered a paid version while limiting the free version once it's out of the beta stage.

In the meantime, I'll be using it, and I also urge everyone to give it a try. It's easy to setup.