Is Your Antivirus Software Spying on You?

Comments

1. brewster says

   December 23, 2020

   So i posted this a little earlier and it looks like it didnt post. A little while ago, i cant remember exactly now i had a mate come over and i was copying something to his usb drive. my bitdefender automatically started scanning the files on the drive and although nothing was flagged up, i did notice that he had lots of game roms on there and i didnt think to ask but i would imagine they were not legal. Having read this article im now really concerned that my paid for bitdefender with my name and address will now be flagged as someone with illegal software and somehow this can be used by the authorities! Is this just paranoia on my part?

   Reply

   • Sven Taylor says

     December 23, 2020

     I definitely would not worry about that. These scans aren’t for pirated/copyrighted material.

     Reply

     • brewster says

       December 23, 2020

       thanks sven.

       Reply

2. Zio says

   October 23, 2020

   Hello everyone! I discovered this great site and now I read a bit everyday.
   I’ve been following many of the suggestions given by the authors and writers here. I have a couple of questions for anyone knowing about this:
   – I use Microsoft Defender: do I still need another AV?
   – to optimize my laptop, I have GlaryUtilities: any references on this?
   – I also use SuperAntiSpyware: is it good?, concerning privacy I mean

   Thank you in advance!

   Reply

   • alrsadeqi says

     October 31, 2020

     no none of them are good!!
     in comparison kasper or bit always win(ransomware, keylogger detection…)
     all the win optimizer are like the Chinese android cleaner, file manager etc… there is no such a think about data protection or any agreement about don’t sell your data
     SuperAntiSpyware no! believe it ore not for several year I never installed any av or spy protector!!! yeah i use o&o shut because its so tidies editing registry or disabling services manually… after all all i never see any problem with my pc because i know where I’m clicking and I’m going…
     just little advise disable all the av kasper,bit,win def etc .. disable any safe browsing like what chrome doing… read more about privacy… install o&o… disable all the telemetry or install 1809 ltsc… instead of using win optimiser which is lie! update your hardware have a ssd…

     Reply

     • Boris says

       November 7, 2020

       Thank you for recommendation! Great software!

       Reply

3. Harley says

   September 30, 2020

   Bitdefender is best product I’ve ever seen in security suites and believe me I tried everything.
   But it’s not privacy friendly like every one in market.
   [https://www.europol.europa.eu/newsroom/news/massive-blow-to-criminal-dark-web-activities-after-globally-coordinated-operation]

   Reply

4. Rosemary's baby says

   August 17, 2020

   SecureAPlus
   [https://www.secureaplus.com/features/compare/]
   The name reminds me of one, as in 2a-squared of the old dual detection engines used by Emsisoft’s AV. Or however it was tied. Though with first glance it looks to be similar to HitManPro AV. Maybe on the side of AI steroids.

   SecureAPlus is the unique amalgamation of essential security features that protect enterprise endpoints against multiple attack vectors – known or unknown, file or file-less, internal or external.

   With multiple layers of defense through its powerful yet simple Application Whitelisting, more than 10 anti-virus engines in the cloud with Universal AV, and AI-powered APEX engine rest assured that it is the only security solution ever needed.

   Though that statement sounds off to the enterprise level it’s not really. As the pricing to the consumers endpoint with a comparing of plans and in the features can be realized from the link. Wonder if it can be test ran here?

   Reply

5. Sam says

   July 20, 2020

   Hello Sven!

   Do you think bitdefender is a good option?

   Reply

6. TA says

   July 11, 2020

   I’ve been using Comodo CIS v.12 for 1-2 years and haven’t experienced what any of the negative comments have mentioned. They do offer a Chrome based browser as an OPTION during the install process; they don’t force you to take anything. Comodo Dragon is actually Chrome with the google services and privacy risks stripped out. It’s rebuilt from the ground up to be far safer than Chrome. Even so, I have been and remain a Firefox user for years.

   Regarding Comodo, their firewall may be unequaled. I usually recommend it for intermediate to advanced users. Keep in mind, the default settings are not recommended. The firewall can be hardened to a much greater degree by customizing the settings.

   Reply

7. Mrs Miggins says

   July 9, 2020

   You might be interested to know that as of 7th July, 2020 Kaspersky Anti Virus, has updated its T&C’s with the worst personal data collection demands I’ve ever seen. Presumably they are picking up the slack where Avast and Jumpshot recently left off…
   Oh well, time to move on.
   Some interesting avenues here…!

   Reply

   • Boris says

     November 7, 2020

     Thanks for the warning! We don’t use Kaspersky in our family since a few years ago. And after this, will never again 🙂

     Reply

8. Drops_of_Jupiter says

   July 6, 2020

   Hi. I have been using Private Firewall on an older Windows 7 64 system. Over the many years, it’s caused me occasional issues where sometimes I miss or ignore the pop-up and an application get’s accidentally blocked from launching. And on one occasion, it seems PF pretended to protect me, but in fact it didn’t. Pop-ups would appear as normal, but regardless of the selection, it made no difference. The only solution was to do a fresh Windows reinstall as even the most powerful uninstall and registry cleaners including manual deletion couldn’t resolve these issue.

   In my troubles, I installed Comodo as recently as a couple of years ago, but if I recall correctly, it installed some adware and PUPs which despite my careful watching during the installation process, they were installed. After realizing what had happened, I uninstalled and reinstalled and realized what a sneaky application and company Comdo is. There were some lingering issues with Comodo, I had to once again perform a fresh install of Windows from a previous image.

   I found Zone Alarm to be resource hungry, so I stayed with PF then I did a fresh Windows install and used the native Windows Firewall. However, most recently, I was infected with malware, maybe because Windows Firewall somehow was turned off either during the attack or prior to.

   I’m back on a quest and now that I found this great site, I need some help. What I’m looking for which the default Windows Firewall is the ability to block any and every application. Windows on prompts me occasionally while Private Firewall prompts me with every single service before launching, accessing my ports, and accessing the internet.

   As such, is there a light firewall that does what I need?

   Reply

   • Monk says

     July 11, 2020

     Try Proxifier, it does not give you a popup when an application tries to access, and it is built as a proxy software, but works well as a firewall in that it can be configured to block even windows services. If you configure it to block all traffic by default (by forwarding it all to an unused port on localhost, such as 127.0.0.1:55555) then you can selectively allow applications one at a time. You can choose either to force them through a proxy (such as The Onion Router) or allow them to connect directly.

     Proxifier has a free trial, so you can decide if it works for you, and is also priced very fairly for how extremely useful it is. There is no bloatware secretly installed by it in the background, and I have had essentially no problems since starting use it. Very lightweight and effective. Using a firewall distribution such as PFsense in a virtual machine (Virtual Box is free and works great) can add an additional layer of security.

     If you go into the properties for your network adapter and turn off everything (ip4/ip6/etc) for your host machine, bridge that adapter to PFsense, then get your internet through the VM, there should not be any traffic leaving your computer except through the firewall VM, and even then it should only be what you allow through proxifier.

     I am not affiliated in any way with, nor paid by, anybody, in relation to these recommendations – but I fully endorse all of the above mentioned software. Hopefully this recommendation helps somebody, it was recommended to me by a friend and has worked great so far.

     Reply

9. annoyed says

   June 14, 2020

   My computer go the blue screen going, so got a different one, so need to decide what to do about antivirus. Uninstalled the McAffee it came with. Have read on RP here, but not through all the comments yet. Emsisoft has been recommended, so looked at their website, now see in their privacy policy that they use CloudFlare and various Google services for subprocessing activities. While Emsisoft supports customer’s privacy, they still use those other companies I’m concerned about. Somewhere on RP there were concerns about CloudFlare. – Disappointed that I was prepared to pay for a privacy friendly product, only to find out that they use companies I’d prefer to avoid. – Would be very grateful for other privacy and security friendly AV/Amalware options besides ClamAV. Thanks!

   Reply

   • SolutionForAnnoyance says

     July 29, 2020

     Annoyed, you should look into running Pi-Hole (free open-source!) and Unbound (free open-source!) beside eachother. That way you’ll have your *OWN* DNS server with ad-blocking, malware-communication-blocking, and any other blocklists you want to add. If you understand the linux command “ls”, you likely know all you need to get these going.

     A free service from companies that have to pay their employees is getting money somehow, and that somehow is selling data about you. IMO, Most free DNS providers monetize the information they get about user browsing and behaviors, and they make a lot of money from it. But run your OWN DNS and you’ll have a better, faster, caching, configurable solution made of best-of-breed software.

     Reply

10. Georgi Doychev says

    April 16, 2020

    What do you think about iolo and System Mechanic?
    It works just like charm. I’ve been using it since 2 years. It gives a special feutures like blocking WIndows to collect data, also it has a Password Manager (ByePass).

    This site is my privacy guideline 🙂
    I will apreciate your opinion.

    Reply

    • sonar says

      April 21, 2020

      Hi Georgi
      I’ve used System Mechanic by iolo in the past as that was the craze of my young time now looking back – for a department store of an offering. It’s not a security product as in the anti-malware products here – just so we’re clear on that point.
      I’m remembering it was good as a systems cleaner, though…a catch all joe approach.
      SM cleaner tries to be of compartments, something like an anti-malware suite had developed over time as offered yesterday and still today.

      I’ve honed my requirements over my time in my use, down to a specific programs functions when I find one to excel in functions at doing it.
      For a system cleaner I’m using two which work fine for me.
      PrivaZer – Free / Donation PC cleaner & Privacy tool that cleans unwanted traces. https://privazer.com/en/index.php
      And
      Wipe & Clean – a complete solution to remove useless files, free up your disk space, and clean various privacy-compromising information on your online and offline activity. This includes internet history and cookies, lists of downloaded files and opened documents, various data caches, temporary files, and many more items, created by the operating system, most contemporary internet browsers and communication programs, and by hundreds of third-party applications. https://www.r-wipe.com/

      Then at least once monthly I run SafeErase by O&O – https://www.oo-software.com/en/safeerase
      Because clicking on “Delete” does not mean your files are permanently deleted. Even formatting the hard disk is not enough to permanently delete data. When surfing the Internet, your browser usually stores Internet files unnoticed on your hard drive. These files can provide information about websites you’ve visited or the passwords you’ve entered. It makes no difference whether it involves cookies, data entered on forms, or browsing history – O&O SafeErase lists all the information saved for each browser you use, and you can then delete them individually or together.
      O&O SafeErase permanently deletes your confidential files using recognized methods so that a recovery is never possible, not even when using the best file recovery software.

      For the Windows registry I use Vit Registry Fix – https://vitsoft.net/en/vrf
      • A powerful automatic search of errors •
      • Find and delete junk files on disks and clear history lists
      • Manual cleaning program settings
      • Creating a full backup and before deleting errors
      • Optimizing files of the registry
      • Managing Windows Startup and uninstall software
      • Working in a portable mode on removable drives and others

      Getting rid of Software and Apps I use Revo Uninstaller Pro.
      Removes
      • Windows apps and popular browser extensions
      • Advanced scanning for leftovers
      • Forced Uninstall – remove stubborn programs
      • Quick/Multiple Uninstall – quick uninstall of one or few programs
      • Real-Time installation monitor – for complete uninstall
      • Manage installation logs – edit, review, share (export, import) logs
      • Logs Database – traced of an installation by our team ready to uninstall your installed programs

      PrivaZer AND Vit Registry Fix – have free versions and you only need to pay once of a modest amount to using their fuller versions with future updates ongoing for that one price.
      – Of all I’ve listed, really do to an extent have mimicking parts of function to the services offered in them all. And your Win box systems will only give up so much old data (crash reports, logs, AppData) that these products are allowed to process and remove – which I take this is for windows own systems as it’s backup and restore properties of the OS. I think you can only get as close to being 7-days behind of current days run in OS stats. I’m not sure if any back to back cleaning runs of any here would get you any closer to a present OS state of run. Every time I’ve run back to back cleans x 4, something is always found and cleaned out. Amounts to the 7-day history windows that the OS seems to want to keep and preserve.
      Thanks

      Reply

      • sonar says

        April 21, 2020

        Georgi, Forgot to say I’m a Win 8.1 x64 Pro user. Run also a third-party block by default firewall, (turning off Wins baked in FW) and then being alerted to in and out bound network activity.

        Reply

      • Mrs Miggins says

        July 9, 2020

        Oh no…! The interwebs is gonna crash and disappear…
        Rule 1 of digitalificationalisation, “Don’t ever post intelligent, coherent, practical, useful, and well considered content in one post- or you’ll overload and break the interwebs.”
        Auwww… I was just getting used to it an’ all…

        Baaadd Sonar!

        Reply

11. sonar says

    March 12, 2020

    To operate, malware is introduced into the target host in the form of codes, scripts, phishing emails, etc. Moreover, it can sit in USB sticks, as well as CDs, and starts up whenever the storage device (in this case) is immersed into the target. Malicious USB cables by juice-jacking in public charging kiosk another possibility.

    In recent years there has been a significant rise in types of malware (ransomware, spyware, adware, cryptojacking, rootkits, email phishing, viruses, etc.). As well as unlawful cyber-crime attacks, each year literally billions of malware attacks take place worldwide. Consequently, anti-malware tools are in high demand.

    Malware attacks and tactics are evolving all the time, and top security software applies various methods of detection and databases of malicious signatures to identify threats in real-time. On enterprise level, with computer networks and valuable data, anti malware may be set to provide such protection, as well as track metrics and analytic tools for insights.
    On personal level, you might become a victim of hacked Facebook / Instagram account in any given moment, potentially causing harm to reputation.

    In paraphrasing, a virus is a specific threat, and malware is a term encompassing a multitude of threats, therefore any virus is malware, but malware isn’t only viruses. In contrast to anti-virus programs, anti-malware focuses on the newest threats on the web and in par for updating much more regularly. Each anti-malware applies it’s different detection strategy (engine), or a combination in, to protect against damaging code. So, we may divide them in 3 types: Signature-based, Behavior-based, Sandbox.

    By business end of protection model, there could be a distinction between all-in-one internet security suites and to a specialized programs. Avast, AVG, and so forth are good examples of security suite, where certain anti-malware tools are part of bigger integrated system. Malwarebytes, Malware Killer, and others are software specifically designed to prevent malware and nothing more. Which type as being more relevant can still be a subject of discussion in users needs.

    Malware, PUA/PUP, malicious scripts are on the rise, evolving constantly. In 2018, evasive malware and exploit kits emerged as one of the ways to pass through security software, for instance ransomware such as Cryptomix, Spora, TeslaCrypt, JigSaw. More and more attackers use malicious cryptomining, running hidden scripts on users’ devices without permission, basically hijacking resources, electricity, etc.

    For anti-malware tools the upcoming years will be a busy time. Digital security suites are investing more money and introducing new techniques to protect computers, smartphones, networks, servers, IoT devices. New methods such as so called “vaccinations” against malware families (misleading malware to think it is already in the system), and others will have to up the game.
    To prevent malware, this special type of security software implies three main methods: signature-based malware detection, behavior-based detection and sandboxing. By design, anti-malware can do the following tasks: block suspicious websites, quarantine the detected malware, display data about the infections and insights into how, and as to how far a malicious script has compromised a network.

    In short review: A virus is also a malware, but malware isn’t necessarily a virus. Thus, an anti-virus software protects against computer viruses specifically, while anti-malware covers a wider range of threats: trojans, worms, unwanted apps, ransomware, cryptomining, adware, exploits, keylogging, etc. Many anti-virus programs have been expanding their functionality to defend against malware too. The best practice is to use both.
    Till you find what to use, do look for one offering a refund to the customer and try them to your conclusion within the refund period.
    Short list would be, Avast – Money back guarantee: 30 days | Country: Czech Republic
    AVG – Money back guarantee: 30 days / subsidiary of Avast | Country: Czech Republic
    Comodo – Money back guarantee: 30 days / after making payment | Country: Romania
    Gridinsoft – Money back guarantee: 30 days / use for free to scan, pay to remove and clean | Country: Ukraine
    Norton – Money back guarantee: 30 days | Country: USA
    Trend Micro – Money back guarantee: 30 days | Country: Japan
    Comparing the things of, installation time, disk space on PC/device, full scan time, total files scanned, threats and/or issues detected.

    Reply

12. Daniel says

    March 11, 2020

    What about the free Windows Defender or Security?

    Reply

    • eikelein says

      March 11, 2020

      ALL my 3,000 customers (over 12 years) are home users, computer illiterate, often reluctant to learn and mostly above 45-50 years old. NONE of them runs ANY anti virus software besides MS Defender. During my years of experience in supporting users MSDefender has become a decent anti virus program; the weight is here on “anti virus”; it was and is IMHO a rotten malware (PuPs!) fighter. For that I recommend Malwarebytes Antimalware, the free non-resident, non-automatic version; YES, it needs to be run manually but even the most reluctant of my customers can by now do it.
      YMMV!

      Reply

      • sonar says

        March 12, 2020

        Point them to this site to not be remote jockeys and get some privacy exercise, reading of the hazards of their digital world they’ve not learnt from you. Otherwise they could claim you stole from them in your accessing the devise.

        Reply

13. sonar says

    March 10, 2020

    Was browsing and in Apple choices ran across this – your opinions ?
    ClamXAV keeps threats at bay and puts you firmly in charge of your Mac’s security. Scan a specific file or your entire hard drive. Set it to scan automatically or run instant checks on suspicious files. It’s entirely up to you.
    https://www.clamxav.com/

    Reply

14. HardSell says

    December 2, 2019

    Hi Sven,

    This is from earlier this year – that seems to flew by fast.
    If you’d take out the Co. names and look at the Loss concept that under lays the privacy point in it – to me this is how we should look at our privacy’s stance today in 2020.
    https://www.vyprvpn.com/blog/us-senators-raise-alarm-over-foreign-vpns

    {The threat of foreign-based security software first came onto the U.S government’s radar in the fall of 2017, when the Russian owned and operated antivirus firm Kaspersky Lab was ordered to be removed from all U.S government computers by Homeland Security.
    Israeli intelligence found evidence of the software being used by the Russian government to probe federal systems in search of American intelligence secrets.}

    {All of which in the new push to vet the credibility of foreign-based VPN services, has placed _ _ _ _ in a negative light. The partnership between the two was initially public but has since been downplayed, with Hotspot Shield pulling language about their partnership away from the privacy/ FAQ page on their website.}

    [ These revelations are not necessarily unique grievances to ____; but are indicative of a lack of transparency with consumers about the specific policies that (A) company is practicing when it comes to data logging and sharing.
    – If the VPN industry would endeavor to be more collectively transparent and to permit itself to be openly audited for the sake of public scrutiny, many of these embarrassing miscues or bad optics could be avoided.
    And VPN companies would not feel complacent about not being open and candid about their logging practices, it would force VPN companies to be in alignment with all of their marketing claims in order to remain in good standing amongst their competition and with consumers.]

    Kind of ties in with my seeing the 5,9,14 eye’s nations and other nations with US MLAT agreements, of all the data in a network grid and using that tap in informing top down members to any nations related in the matter.
    Thoughts?

    Reply

    • Sven Taylor says

      December 3, 2019

      Yeah it’s interesting. I’ve seen a lot of Chinese companies behind free VPNs, which collect data.

      Reply

      • HardSell says

        December 11, 2019

        Yep, with what I understood security firms in the Romania reign
        hire IT hackers to work on their software. That’s after they been caught and supposedly reformed.
        “As knowledge prevails in this area, companies will tend to hire people who have a past in (criminal) hacking,” said Andrei Avadanei, chief executive of Bit Sentinel, an information security company based in Bucharest. “There are companies that appreciate a past in (that) area.”
        https://www.usatoday.com/story/news/world/2017/06/03/romania-hackers-turned-cyber-sleuths/102312234/

        Places like China where modern Chinese companies would have hackers to, just wonder if the ‘governments’ a part in it, or recruits from them for their staffing?

        Reply

15. Niels Mertens says

    November 6, 2019

    Thanks for your site about the reviews! What do you think about F-Secure? Can you trust them?

    Reply

    • Sven Taylor says

      November 6, 2019

      Hello, I have not yet taken a close look at their products, so I can’t say for sure…

      Reply

    • RMc says

      February 21, 2020

      I’d say you can absolutely trust F-Secure. Mikko Hyppönen is a Legend in the Cyber Security industry & always fighting Anything & Everything to do with Personal Privacy.

      F-Secure in fact signed the Bits of Freedom declaration on Government Backdoor Spying etc. & put out a statement on their website saying they would never allow such things.

      The Finns Tend to be Good People I Trust as a CDN 😉

      Reply

16. sasha says

    October 27, 2019

    Hi!
    What AntiVirus will be the best in terms of privacy for 2019? What will be your suggestion?

    Reply

    • HardSell says

      October 28, 2019

      Hi sasha,
      Back in the day, anti-malware software scanned local processes and files, relying on periodically updated threat databases. But given the volatile threat environment, it’s become common to share user information with providers in real time.
      That apparently includes geographic location, URLs, running processes, names and paths of files, and even “suspicious” files themselves (even documents). The Emsisoft blog has also covered this issue.
      @ – Though dated, these two links information is valuable today. If nothing else insights – of knowing some anti-malware firms offer an opt out of uploading “suspicious” files in their programs or how difficult CIA (hackers) thinks they are to deal with.
      Are Anti-Malware products Uploading Your Private Data?
      https://www.ivpn.net/blog/are-anti-malware-products-uploading-your-private-data
      CIA Reviews Of Antivirus Software Among Purported Wikileaks Document Dump
      https://sanfrancisco.cbslocal.com/2017/03/08/wikileaks-cia-documents-antivirus-software-reviews/
      –
      Emsisoft gets mentioned here, not as perfect but, as a conscientious antivirus provider who respects their users private data.
      Emsisoft claims to only using their users private data when absolutely necessary, while other A/V’s are much less scrupulous in the very same roll of their security product.
      Emsisoft makes the point of telling people about their security and privacy practices, pushing the knowledge out about how both benefits you and other helpful articles in their Blog posts. https://blog.emsisoft.com/en

      Reply

17. BangoO says

    October 10, 2019

    Emsisoft not being available on Mac, what antivirus for Mac would you recommend ?
    Thx !

    Reply

    • Sven Taylor says

      October 10, 2019

      The biggest target for malware is currently Windows, based on the latest statistics. I’m not sure how beneficial an antivirus is for Mac OS, but you may want to check out ClamAV.

      Reply

      • Dave says

        February 16, 2020

        Unfortunately it looks like this isn’t so any more. In a report on tom’s guide, Macs face nearly twice as many online threats as Windows PCs.
        Here’s the article which was published on 2/12/2020:

        https://www.tomsguide.com/news/mac-malware-rate-report

        However the article does state that the Windows malware is much more nasty.

        Reply

18. C says

    September 1, 2019

    I downloaded Emsisoft android app and it seems I can only log in with Google account…Google is not that great for privacy, would this login be a problem?

    Reply

    • Bluf says

      September 2, 2019

      Sounds like a Google thing, can you download the app from the Emsisoft website? Also, just looking at the website, you have the options to use Facebook or Google to log in, or use email and password, so maybe establishing a email/PW would solve this?

      Reply

    • D says

      August 4, 2020

      I have recently been writing a quiz app, and came across the social login (If an app offers Google/Facebook login and tries to get published on the Apple App Store, the app *must* also offer Apple sign-in, else it will be rejected!). In this case, I don’t think you need to worry. Google sign-in just verifies to the app that you have a Google email address.

      Apple goes one further (optional) and doesn’t tell the app what that address is – it provides the app with an alias that links to you. So if your email address is “fred@icloud.me”, Apple might supply the app with an email of rvevyt9e5t@@privaterelay.appleid.com. This makes it harder for the app to sell your email address, or to link that email back to you.

      But if you are interested in security, why use Google …

      Reply

19. Thomas Vladimerovich Mendelson says

    August 7, 2019

    Kaspersky shares your computer secrets in weekly sauna meetings with Russian secret service, asserts Bloomberg.

    “The company securing your Internet has close ties to Russian spies,” Bloomberg asserts in a story published last week.

    The news agency sees a predestination to spying in every milestone of the life of Kaspersky Labs founder and CEO Eugene Kaspersky: “He was educated at a KGB-sponsored cryptography institute, then worked for Russian military intelligence, and in 2007, one of the company’s Japanese ad campaigns used the slogan ‘A Specialist in Cryptography from KGB.’”

    Kaspersky swears by his mother: he has never worked for the KGB: “I consider the stories about my possible encounters with security officials in a banya an attempt to deliberately mislead readers,” .. “EVER worked for the KGB.” ))))))))

    Reply

    • Mel says

      September 12, 2019

      I am having problems with security on my devices. ( redirected to unsafe sites/ ssl certificates. The certificate for this site shows 2 which are both Comodo and a 3rd for restoreprivacy.com issued by essentialSSL. I believe that someone has gained access/backdoor due to the router and changed the administrative permissions which i no longer have control of. Could you recommend a security product that deals with all the issues i have. Many Thanks

      Reply

      • Sven Taylor says

        September 12, 2019

        Hi Mel, if you think your router firmware has been compromised, you could reinstall the firmware or perhaps install open source third-party firmware if your router supports that.

        Reply

20. Name says

    July 19, 2019

    Tell me about TotalAV antivirus.

    Reply

21. Ahejax says

    July 18, 2019

    Hi I haven been using “AVG antivirus software 2019 FREE” for about six months i recently uninstall it does than mean they still have or own my personal information? Like my name address password etc. And could they still track people?

    Reply

    • Sven Taylor says

      July 19, 2019

      Hello, that would be a question for AVG and you could also read their privacy policy.

      Reply

      • Ahejax says

        July 19, 2019

        Sorry I got concerned I was reading on there policy but they were vague in certian areas becuse could services like these still hold on to users even after uninstalling? There privacy policy page stated things like retention and storage also you don’t have to answer immediately im in no rush.

        Reply

        • Hard Sell says

          August 25, 2019

          Hi Ahejax,
          Yes, one should study it’s TOS and PP polices and look for legit user reviews – if interested in a A/V service.
          Any service that is been vague to something – ask, and then ask again till you get a definitive answer – or move on to another service. [True for any installed app.]
          .
          Digital Data is data on you and once it’s generated is kept for and how long really? We (society) have never been able to keep such a vast amount of mega data before on everyone connected to the web – till lately.
          -Will it ever be truly understood this data lives on far after us and may be used against the future generations of our families to be born?
          .
          Then as I see it, the data is like low hanging fruit on some people that may hold little value (for now). Then there will be others that are prized for any crumb of info. not already known about them.
          -Where your data ends up and how many facets it’s traveled through is unknown, but if your a high value target – you can bet it’s traded and shared more often.
          .
          It’s scary how all these digital data trails may end up being used. Besides an A/V’s infringing on users’ privacy, they can be a backdoor to your device’s data for an whoever entity that should leverage them.
          Anti-virus/malware vendor programs, what else have we installed that has such a free reign to every nook and cranny of our system(s) with an advance privilege in system level over everything else that installed of already a part of the system..
          Others in this lineup are the online scanners of the most popular anti-virus/malware programs where they offer free scans to check out your PC.
          – Remember, in either case you’ve agreed to their ‘end user license agreement’ so what data did you just give away and for how long, or to who ?
          Great comment – Sir

22. John says

    May 28, 2019

    Seems like there is a free tool made by emsisoft named emsisoft emergency kit, since it’s free, do you recommend it for users who can’t pay for the anti-malware product?

    Reply

    • Sven Taylor says

      May 28, 2019

      It’s just an emergency kit and not their main product.

      Reply

23. kolmteist says

    April 14, 2019

    See what Avast is doing to me, are they not enough to collect my data for a moment when I register and buy the product? even though I have un-checked the Personal Privacy list in the application.
    https://images2.imgbox.com/66/e9/RQEi5LM0_o.png
    https://images2.imgbox.com/10/9c/jt7bVPsa_o.png

    Reply

    • Hard Sell says

      April 16, 2019

      kolmteist – that’s bad news even after having paid, for them not to honor their own app settings that a user elects for ones own privacy on their device.
      –
      CANCELLATION AND REFUND POLICY FOR AVAST, AVG, CCLEANER AND HMA! SOLUTIONS:
      We offer a 30 day money-back guarantee on subscriptions for certain Avast, AVG, CCleaner (including Defraggler, Recuva and Speccy) and HideMyAss! Solutions that end users purchase directly from us through our online retail stores or through Google Play. If your purchase qualifies, and you follow all the instructions in this Cancellation and Refund Policy within 30 days of the date of purchase, we will terminate your subscription and refund 100% of the price you paid for the then current Subscription Term.
      .
      We also allow you to cancel your subscription and request a refund (prorated for the unexpired or unused portion of the Subscription Term) if we provide notice to you that we are amending the End User License Agreement we entered into with you in respect of such subscription and/or Solution (the EULA), and you object to such amendment within 30 days of the date of such notice.
      .
      1. End users purchase directly from us through our online retail stores or through Google Play.
      2. We also allow you to cancel your subscription and request a refund (prorated for the unexpired or unused portion of the Subscription Term) if we provide notice to you that we are amending the End User License Agreement we entered into with you in respect of such subscription and/or Solution (the EULA), and you object to such amendment.
      – 1 and 2 only give the window of 30 days of the specific dates.
      https://www.avast.com/cancellation-refund-policy
      –
      I would seek a refund from Avast ‘citing’ what you have said here.
      If they don’t agree, take it on the chin and look for another A/V soon.
      Fallback to a restore point before installing Avast or do what’s necessary to rid the device completely of it…
      *Run any one A/V you’d consider through their trial offered first.
      – Try reaching out to Emsisoft and see if they would work with you in some special way, discount a % to leave Avast asap, tell you of their next major sale event – etc…
      **Making contacts is important – refund and/or deal, otherwise how would you know for sure?
      Thanks for the info.
      Greetings : )

      Reply

24. Xavier says

    February 20, 2019

    I recently installed Linux and am giving it a go based on one of your other articles. That being said, is AV necessary for Linux? if so can you recommend one? Not sure if I’ll go back to Windows, but with all the talk of AV companies collecting data, would Windows defender be good enough with safe surfing habits and being conscious of whats being run on ones PC? I used to use bitdefender av free with Windows but probably wont going forward

    Reply

    • Sven Taylor says

      February 20, 2019

      Hi Xavier, although Emsisoft does not offer anything for Linux, you can check out ClamAV.

      Reply

      • glix says

        July 24, 2019

        Hi Sven,
        As a left-brained Linux Mint user, I haven’t been a terribly big fan of ClamAV even with ClamTk–I know the whole “Linux doesn’t need AV protection thing,” but is there something else you might recommend, perhaps something a little more user friendly? (I finally ditched Clam for Sophos.)

        Reply

        • Sven Taylor says

          July 24, 2019

          Not sure, AV solutions for Linux aren’t too popular.

25. Matt says

    February 18, 2019

    A lot of AV providers have been rolling out their own VPN’s really.

    Here is a suggestion for the big VPN players How about including AV service along with their packages that are privacy friendly?

    Imagine Express VPN doing this. You would be very happy and much more likely to become or stay a customer.

    Reply

    • Hard Sell says

      February 19, 2019

      Hi Matt,
      That’s a terrible ideal and you must josh yes – for VPN’s or A/V to do so in a combo… Keep them separate by all means : ) for privacy.
      Are you just seeing if people are paying attention here?
      You’ve must of missed the part above in the article about A/V’s not being immune to users privacy problems.
      Besides an A/V’s infringing on users’ privacy, they can be a backdoor to your device data for an whoever entity that leverages them.
      I hope this is never realized and people don’t support it, as it will lead to more of a continual erosion of online user privacy.

      Reply

26. Endriu says

    February 14, 2019

    What about intel chipsets with backdoors , computace and much more phishy patents u even dont know ..

    guys, please…

    Reply

    • Sven Taylor says

      February 15, 2019

      Yes, this topic is a large one.

      Reply

27. BeeBee says

    February 9, 2019

    Concerning Android, most Android antivirus apps definitely collect data. I believe Emsisoft only works for Windows. I used Avast but collects way too many data and I send it away. I now temporarily use Kaspersky for now but I don’t think there’s an Android antivirus out there that doesn’t spy you. Any suggestions?

    Reply

    • Hard Sell says

      February 10, 2019

      Hi BeeBee, Emsisoft does indeed have a Mobile Security product, you’ll need to buy it in combo as the Anti-Malware Home & Mobile.
      I don’t see any other way to purchase it separately. You can test run it for 30 days also before you decide.
      –
      “Emsisoft Privacy Policy” > Transparency Report
      We are publishing this Transparency Report quarterly on whether we have received governmental requests to disclose information about our customers, whether we have modified any parts of our software for the purpose of collecting information about our customers or for the purpose of bypassing detection of malicious software.
      “We believe it is important to let our users know in cases we are required to disclose information with governments.”
      We can confirm that:
      • Emsisoft has never modified its software for the purpose of collecting data due to political pressure.
      • Emsisoft has never modified its software to prevent detection of any malicious software due to political pressure.
      • Emsisoft has never terminated a customer or taken down content due to political pressure.
      https://support.emsisoft.com/topic/29954-transparency-report/?tab=comments#comment-187683
      – – Emsisoft confirms or asserts this as “political pressure” but when they started out with the wordage or terminology as “governmental request” and even saying “governments.” That indeed loses some weight of meaning as I see it – as governmental request or as “governments” should be meant as world wide requests. Where as their saying political pressure, I take it as only of it’s local jurisdiction in which they operate from. Then if Emsisoft really plans on keeping it’s Transparency Report updated quarterly why have this only shown in their PP section…
      –
      I’m a little put off by the AV industry as my research into it leads me only to hope for better standards from AV companies in 2019 going forward…
      – Knowing now – that some AV products are established as simply offering the design of an interface, adding a mini-updater, throwing in a couple of Windows functions to simulate continuous protection, sticking an icon in the system tray, wrapping it all up in an installer to sell.
      Within this AV model type there’s no need in a reason for them to look for new malware – all they need to do is monitor the flow from other public online multi-engine scanners like VirusTotal. There’s no need for them to analyze anything either – they simply set a multi-scanner to “detect” files that other AV vendors have already detected. Detected files by using an MD5 are to make sure there are no false positives. All these ‘would be AV products’ like these are nothing to use or even to having developing their own engine.
      –
      Before you buy into any AV vendors product note these important facts that AV-Comparatives offers. Then note that “certification” from the AV testing firms are most likely to be different overall.
      “there are more products out there than most of the users even known/heard about. We have strictly limited the number of listed vendors, all of whom should fulfill certain requirements. These include keeping the product and the company website up to date, being included in VirusTotal, being integrated in Windows Security Center, participating in independent third-party tests, and avoiding deceptive practices.”
      – “In recent years, the AV software market started to consolidate, so there are considerably fewer vendors than in past – several companies stopped their business, got acquired by other AV vendors or license now a third-party engine in their product instead of developing their own engine.”
      https://www.av-comparatives.org/list-of-consumer-av-vendors-pc/
      https://www.av-comparatives.org/tests/real-world-protection-test-february-june-2018/
      https://www.av-comparatives.org/tests/android-test-2018-200-apps/

      Reply

      • BeeBee says

        February 10, 2019

        The AV industry puts me off too. I agree with everything you wrote. I ‘ll check with Emsisoft again. No idea they had a mobile app. Thank you again. You and Sven are treasures.

        Reply

    • John says

      February 10, 2019

      Yes, Emsisoft use a “badged” version of Bitdefender’s attempt at an antivirus application, but that is seriously handicapped by the [bogus!] ‘security’ for which Android is famous. Malware which is incorporated in an Android application can be addressed by uninstalling the compromised application, but Android provides more support for malware than for the Android user, or “userland” applications, antivirus and other security applications included.

      Google Removes Vital Privacy Feature From Android, Claiming Its Release Was Accidental
      eff.org/ deeplinks/ 2013/12/google-removes-vital-privacy-features-android-shortly-after-adding-them

      Google Axed Android’s App Ops
      blog.malwarebytes.org/ mobile-2/2013/12/google-axed-androids-app-ops
      .

      I think Android finally introduced a version of App Ops with version 7, but it is necessary to install the application, and then hunt for the “permissions” listing. Unfortunately, many consumers would not know of this feature. Not quite sufficient to meet standard security requirements.

      Bitdefender will provide “web protection” for HTTP/HTTPS traffic between Google Chrome and the Internet, but not for HTTP/HTTPS traffic between the Android device and the Internet! Something to do with Android’s sandboxing I suppose, plus application developers tending to be unfit for purpose.

      Android features used maliciously – Malwarebytes Labs | Malwarebytes Labs
      blog.malwarebytes.com/ cybercrime/2014/07/android-features-used-maliciously/
      .

      It seems that Android will support “web protection” for HTTP/HTTPS traffic between the Android device and the Internet, but most security application developers seem not to have worked that one out yet?

      As I have yet to get anything better than a consumer-grade cellphone, I am using NetGuard No-root Firewall Pro which allows installing a user’s choice of blocklist. There is at least one other open source VPN, but NetGuard uses Android’s VPN mode only to filter HTTP/HTTPS traffic. No VPN tunnel to a remote server unless the developer’s proprietary modification is accepted.

      Reply

      • Hard Sell says

        February 12, 2019

        Hello John,
        Not quite sure of the post except to tell all Android users they had got something only to loose it. Man, that was a privacy feature preventing a collection in sensitive data of location or address book back in Android 4.3 Jelly Bean. It was since removed by Google as labeled to an accident (experimental purpose). That feature was removed in a following Android 4.4.2 KitKat update.
        This link – https://www.eff.org/deeplinks/2013/12/google-removes-vital-privacy-features-android-shortly-after-adding-them
        –
        Though, Google removed Android’s App Ops feature, users on the earlier Android version were able to get around it by advanced methods (not stock) –
        https://www.eff.org/deeplinks/2013/11/awesome-privacy-features-android-43
        https://www.xda-developers.com/protecting-your-privacy-app-ops-privacy-guard-and-xprivacy/
        –
        Still in Android 6.0 Marshmallow introduced – App permissions as now granted individually at run-time, not all-or-nothing at install time as in Android Lollipop 5.x and below.
        Which continues in it’s OS versions still today though vary by the OS version as I understand. https://en.wikipedia.org/wiki/Android_version_history#Android_6.0_Marshmallow_(API_23)
        https://support.google.com/googleplay/answer/6270602?hl=en-GB
        https://developer.android.com/training/permissions/usage-notes
        Here’s how it works in 6.x, 7.x, 8.x
        https://www.howtogeek.com/355257/can-you-control-specific-permissions-on-android/
        –
        The biggest trouble with Android as I see it is in the OS version update problem of device manufacturers on older hardware of users,
        *Hopefully, all new devices released with Project Treble on Android Oreo upwards, allow bypassing much of the testing that currently was required by manufacturers, chipmakers, and carriers. https://www.digitaltrends.com/mobile/android-distribution-news/
        – Of course, that’s still no incentive for device manufacturers to update devices to newer Android OS versions after they’re released (especially cheaper ones). Updating an older Android OS version that’s been replaced by a newer device model, especially when they’d rather encourage you to buy their newest model on the latest Android OS anyway.
        –
        Although, Emsisoft NOVEMBER 7, 2016 blog article looks to offer more in that mobile version 3.0
        https://blog.emsisoft.com/en/24341/emsisoft-mobile-security-3-0-malware-protection-and-more-for-your-android/
        than the offered of 3.0.9 released as of January 7, 2019.
        https://www.emsisoft.com/en/software/mobilesecurity/
        https://play.google.com/store/apps/details?id=com.emsisoft.security&hl=en_US
        Nonetheless it (3.0) mentions it partnered with mobile segment leader Bitdefender to bring you the best mobile protection available incorporated as Emsisoft Mobile Security. Goes on to mention the partnership gives you the best of both worlds; the best mobile protection on the market bundled with our award winning Emsisoft Anti-Malware.
        – NOT indicating nor a distinction that both are of the mobile versions platform or yet to only a meaning overall in the Anti-Malware Home & Mobile combo…
        https://www.emsisoft.com/en/company/about/
        https://en.everybodywiki.com/Emsisoft
        Needs translated-
        https://de.wikipedia.org/wiki/Emsisoft_Anti-Malware
        That’s why A/V vendors put me off of my full trust.

        Reply

    • Just a guy says

      February 11, 2019

      Why would you even need an AV for Android? It’s utterly useless…

      Reply

      • Hard Sell says

        February 13, 2019

        You can always pay and use AdGuard for Android if you’d want to tackle these kind of below things on rooted and unrooted devices – it’s not an antivirus/malware app.
        “AdGuard for Android provides you with reliable and manageable protection. AdGuard removes all the annoying ads from web pages and applications, blocks loading of dangerous websites from all browsers, and does not allow anyone to track your activities on the Internet. AdGuard stands out against it’s counterparts, as it can work either in HTTP proxy or VPN mode,” blocking throughout the whole Android system.
        –
        You can completely shut down cellular/WiFi access for any app and just as easily restore it. Bar a particular app or browser from being filtered for whatever reason in one tap.
        Apps Management module has its own statistics, so you can see how much traffic each app consumes. Thus, you control which apps transmit data.
        *If your device is rooted, or if you only care about blocking ads in WiFi networks, you can switch AdGuard to proxy mode and then let any other app use the VPN function.
        –
        AdGuard Cares about your privacy !
        They value the privacy of your personal data above anything else. With AdGuard, you will be safe from online trackers and analytics systems that lurk on the web trying to steal your sensitive information. You won’t find AdGuard in the Play Store simply because of Google’s very peculiar policy towards ad blockers, that any app able to block ads across the device is not allowed there.
        –
        https://www.android.com/play-protect/
        Sure most PEOPLE will access Google Play and rely on Play Protect. Play Protect certainly has its work cut out for it, but that doesn’t mean the chances of downloading an infected app are completely zero.
        So mobile A/V still means something to some people especially if they’ve ever been infected.
        https://source.android.com/security/reports/Google_Android_Security_2017_Report_Final.pdf
        “Android devices that only download apps from Google Play are 9 times less likely to get a PHA than devices that download apps from other sources.”
        That means infections are possible to a mobile device even from ransomware.
        –
        Others that try to play it safe, only to download apps from the Play Store, sometimes elsewhere of third-party sources too, while keep their security settings enabled. There are those who like to take a walk on the wild side and not do any those things, and then the rooter crowds.
        VirusTotal for an inspection of any apk’s before installing of warning flags observed.
        – Especially if not wanting to endow Google with more power over them, their devices and to seeing further into their life.
        –
        The root crowd most likely has one up on the others I’ve mentioned, they’ve probably installed a custom recovery like (TWRP), and taken periodic manual backup’s of their system.
        They just need a recent manual backup to fall back to in cleansing out an infection.
        Others can learn from this guide.
        https://www.digitaltrends.com/mobile/how-to-remove-malware-from-your-android-phone/
        Good luck !

        Reply

28. Falkenhayn says

    February 8, 2019

    Hello Sven,
    thank you for the article. I used no antivirus for a year, but the problem is the online banking. If you don’t use antivirus and the account is compromised then the bank is not in duty. No court will accept the hints on bad antivirus software. So I still using one, ESET which is no longer listed on av-test.org because the company ist not willing to pay for the testing. This shows what normally happens, that only companies listed, if they payed.
    This I combined with NordVPN, what you are also recommend, and a pi-hole, which itself uses a free DNS at digitalcourage. Think at the end you have to trust in companies and people…
    best regards
    Stefan

    Reply

    • Hard Sell says

      February 10, 2019

      Hi Falkenhayn,
      Interesting things you’ve brought up. Are you referring to a phone or in desktop/laptop use with banks ? In the US banks usually offer phone apps to do banking online.
      Would you tell us what country a bank requires the use of installed antivirus with banking accounts ? I’ve never herd of that before – in the security of online banking relying on their users having their own AV installed.
      I mean after all if the bank offers online banking it must have it’s own security of it’s site when you interact with it, most likely takes down your IP, besides entering your password – you must answer security questions – right. As this is the case with me and telling the bank I’m on a shared or public computer – for the reason on a VPN.
      –
      I understand why AV testing labs have to charge AV vendors and I don’t think it’s necessarily true about Eset not willing to pay for the testing. See https://www.av-comparatives.org/vendors/eset/
      AV testing is a business with its own economy from AV vendors as it requires investment in infrastructure, office space and salaries. And just like many businesses, there is a correlation between quality and profit. Sometimes companies consciously lower their quality to increase their profits.
      This is true of the renowned German test lab AV-TEST.ORG and probably why Eset is not participating with av-test lab any longer because without no warning they have modified their certification process.
      You can see one report on this action in a metamorphosis that has taken place with AV-TEST,ORG here-
      https://eugene.kaspersky.com/2013/05/09/av-test-certification-devalued/
      Eset more than likely opted out to avoid a test result from a lab certification process that has since seriously devalued itself by a
      lowered threshold. More so now, that it will rank mostly useless AV vendors taking part in testing where they once knew their level of protection had no chance of getting a certificate before.

      Reply

      • falkenhayn says

        February 15, 2019

        Hello Hard Sell,

        thanks for your answer. As long nothing happens using online banking, no problem. But if your account is empty after an attack, then you have to proof, if you have done everything to secure your device. Here is a link from Switzerland, but Germany the same. https://www.beobachter.ch/geld/banken/betrug-im-onlinebanking-neu-bis-zu-100000-franken-gedeckthttps://www.beobachter.ch/geld/banken/betrug-im-onlinebanking-neu-bis-zu-100000-franken-gedeckt
        If everything was ok, then the bank in this case will pay up to 100.000 CHF, but it is your duty to install an antivirus program. It is not the question which one, but to have one installed and updated. I know, for iOS there is no antivirus, so nobody can expect. But for PCs, MACs and so on.
        I am no friend of this testing labors, I prefer tests from other like c’t (www.heise.de). They do this also from time to time, and it seems more practical.
        Best regards

        Reply

        • Hard Sell says

          February 18, 2019

          Hello Falkenhayn, I’m only trying to help out.
          Thanks for replying with a link.
          https://www.beobachter.ch/geld/banken/betrug-im-onlinebanking-neu-bis-zu-100000-franken-gedeckt
          I’m not totally in an understanding – but, according to the Swiss site (additional links offered) it seems to talk about increasing their citizens adoption rate in online and mobile banking.
          While giving them reassurance, “One of the most important reasons for rejecting e-banking is the lack of security from the users’ point of view. This is where the new performance promise of PostFinance comes in. Today, it promises its customers to fully cover financial losses in e-finance and in the PostFinance app, which arise from phishing or malware attacks, up to an amount of 100,000 francs per case.”
          https://blog.hslu.ch/retailbanking/2018/08/20/postfinance-bietet-ab-heute-eine-garantie-fuer-schaeden-im-e-banking-an-eine-einschaetzung/
          [At the same time, this promise of service also applies to customers which do not use (current) virus protection and / or no firewall. For such customers, the offer seems very generous.]
          –
          From the first link (in my reply) – [Concretely, PostFinance customers new to damage from phishing and malware (malicious computer programs such. As viruses and Trojans) explicitly protected, this is so in the new terms and conditions for e-finance. However, this warranty does not apply to claims that are “due to gross negligence on the part of the customer”. ]
          Due diligence remains:
          [For example, it would be considered grossly negligent if a customer has repeatedly been the victim of cyberattacks because after the first case he has ignored the recommended precautions, such as installing an antivirus program. Or log in to e-banking in public space and get away from the computer without logging off, explains Möri. The customer has a certain duty of care. In repeat cases, therefore, the promise of service would not always be effective despite the new passage in the fine print.]
          –
          There seems to be a warranty/service clause given of “gross negligence” after a first cyberattack, with your adhering to the recommended precautions, as then of such to installing an antivirus program as a duty of
          your care.
          {Maybe something is lost in the translation to english from the link(s).}
          –
          A specific bank may say otherwise or lest try to understand this in their own favor and not to the customers benefit effectively. I’d check with a banks officer and get something in print to rest assured.
          Who knows-
          The whole drift of the World Wide online and mobile banking industry sector may come to require antivirus programs on their customers devices someday. That for their deposited insured covered amount to apply, because attackers are advancing, and/or acting more professional…
          AT THE present it only seems suggested to an option and not mandatory if never being a victim before.
          Thank you

29. Hard Sell says

    February 7, 2019

    Is it more of a money game than a security stance to protect the purchasers of their Anti-virus/malware any more ?
    I’ve read in order to enhance their security product portfolio, well-established companies in the market are focusing on acquiring small-scale vendors.
    –
    Before, you could simply rely on the anti-virus product without much awareness of its functions and processes, now you need to investigate it.
    As everything internet connected is related to the data on your system or your generating using the web.
    Antivirus vendors have to be compliant with the General Data Protection Regulation. Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. In general then, a customer is the controller of Customer Data. As in general, the A/V vendor is the processor of Customer Data and the controller of Other Information related to the Customer account.
    –
    Many antivirus/malware products in the resent past have had serious problems without much public knowledge spread to know. So you’ve paid for their protection but they didn’t live up to it…
    –
    Some flaws were basic, and should have been caught by the company during it’s code development and review.
    In some cases, the flaws only allowed an attacker to bypass the antivirus scanners or undermine the integrity of it’s detection systems.
    But others were far more serious, and would allow an attacker to gain remote-code execution on a machine, some even turned the security software into an attack vector for intruders to seize control of a victim’s system.
    –
    Unpackers and emulators of anti-virus/malware products have been a huge source of vulnerabilities and will continue to be as these Security vendors will often cut corners.
    Security software tasked with protecting our critical systems and data shouldn’t also be the biggest vulnerability and liability present in your system.
    –
    Ormandy has criticized the antivirus industry for years for failing to secure its own software, and for failing to open their code to security professionals to audits for vulnerabilities.
    He would know, Ormandy has previously discovered serious flaws in products belonging to a string of high-profile security shops as below-
    –
    How to Compromise the Enterprise Endpoint June 2016
    As Symantec use of the same core engine across their entire product line, all Symantec and Norton branded antivirus products are affected by these vulnerabilities. That’s 17 Symantec enterprise products in all, and eight Norton consumer and small-business products.
    https://googleprojectzero.blogspot.com/search?q=antivirus
    –
    McAfee: memory corruption processing relocations May 2016
    https://bugs.chromium.org/p/project-zero/issues/detail?id=817&can=1&q=&sort=-id
    –
    Comodo Antivirus March 2016
    https://bugs.chromium.org/p/project-zero/issues/detail?id=769
    –
    TrendMicro: Multiple HTTP problems with CoreServiceShell.exe March 2016
    https://bugs.chromium.org/p/project-zero/issues/detail?id=775
    –
    Kaspersky: Mo Unpackers, Mo Problems Sept. 2016
    https://googleprojectzero.blogspot.com/2015/09/kaspersky-mo-unpackers-mo-problems.html
    –
    Analysis and Exploitation of an ESET Vulnerability June 2015
    https://googleprojectzero.blogspot.com/search?q=antivirus&updated-max=2015-09-22T10:22:00-07:00&max-results=20&start=2&by-date=false
    –
    Sophail: Applied attacks against Sophos Antivirus
    https://lock.cmpxchg8b.com/sophailv2.pdf
    –
    Other past examples:
    https://bugs.chromium.org/p/project-zero/issues/list?can=1&q=&sort=-id
    –
    Other things you may be interested in-
    Exploiting Android devices ecosystem, two major TEE “Trusted Execution Environment” implementations exist – Qualcomm’s QSEE and Trustonic’s Kinibi (formerly <t-base).
    https://googleprojectzero.blogspot.com/2017/07/trust-issues-exploiting-trustzone-tees.html

    Reply

    • Hard Sell says

      February 10, 2019

      Regarding – “in order to enhance their security product portfolio, well-established companies in the market are focusing on acquiring small-scale vendors.”
      ACQUISITIONS:
      Bitdefender Buys Network Security Analytics Startup RedSocks
      https://www.crn.com/news/security/bitdefender-buys-network-security-analytics-startup-redsocks?itc=refresh
      Carbonite To Buy Endpoint Security Stalwart Webroot For $618.5M
      https://www.crn.com/news/security/carbonite-to-buy-endpoint-security-stalwart-webroot-for-618-5m?itc=refresh
      Palo Alto Networks In Talks To Buy Cybersecurity Startup Demisto: Report
      https://www.crn.com/news/security/palo-alto-networks-in-talks-to-buy-cybersecurity-startup-demisto-report?itc=refresh
      Palo Alto Networks To Buy Cloud Security Startup RedLock For $173 Million
      https://www.crn.com/news/security/palo-alto-networks-to-buy-cloud-security-startup-redlock-for-173-million?itc=refresh
      DXC Plans To Acquire Denmark’s EG For Microsoft Dynamics 365 Skills
      https://www.crn.com/news/managed-services/dxc-plans-to-acquire-denmark-s-eg-for-microsoft-dynamics-365-skills?itc=refresh

      Reply

30. Jack says

    February 6, 2019

    I’m not the best knowing for antivirus. What do you recommend for Anti-Virus Sven? I’m using Free Avast Anti-Virus version.

    Reply

    • Sven Taylor says

      February 6, 2019

      Hey Jack, as a general rule of thumb I don’t spend much time examining/recommending AV software. But strictly from a privacy perspective, it looks like Emsisoft is among the best available, and I would generally recommend against any free AV solution due to privacy concerns.

      Reply

31. axel says

    February 6, 2019

    Great article,thanks for your articles,i don’t imagine how dangerous it’s internet these days, hope you continue sharing your knowlegde with us.
    please can you do a review about this vpn, “vpntunnel” ,it is trustworthy ?

    [https://vpntunnel.com/]

    Thanks for your answer.

    Reply

    • Sven Taylor says

      February 6, 2019

      Hi Axel, I’ve not looked into it yet, but will hopefully get time for more reviews later in the year.

      Reply

      • Mike says

        March 24, 2019

        Hi Taylor, I like your site and clear and detail analysis, followed by clear and impartial suggestion. One thing I am not still clear, if I install a top rated VPN, even after, do I need to install anti-virus for my privacy and protection? Does VPN do any anti-virus job? Would appreciate if you could give your expert opinion on this.

        Reply

        • Sven Taylor says

          March 24, 2019

          Hi Mike, a VPN fulfills a different purpose from antivirus – see the main VPN guide for more of an explanation. There are some VPNs that block malicious websites – see for example NordVPN with the CyberSec feature or Perfect Privacy with the TrackStop filter, but these still don’t offer the full system-wide protection of an antivirus suite. So to answer your question, a VPN will not replace the need for antivirus.

32. Richard Allen says

    February 5, 2019

    Off-topic, but information that may interest people:

    https://archive.fo/mz3oQ

    “The president of FamilyTreeDNA, one of the country’s largest at-home genetic testing companies, has apologized to its users for failing to disclose that it was sharing DNA data with federal investigators working to solve violent crimes.”

    It effectively means that they’ve given over their entire database for the US government to comb through until they find what they want.

    Question is: How much has the US government retained? Can we honestly think that they only took what they needed & didn’t keep everything they harvested in case they need it for “future reference” to solve crimes?

    A slippery slope indeed.

    Reply

    • Sven Taylor says

      February 5, 2019

      Thanks for the tip, Richard.

      Reply

33. Just a Guy says

    February 5, 2019

    I saw this article appear last night and I do agree with the most of it.
    The only thing that raised a question was related to Emsisoft and Bitdefender specifically.
    I’ll be honest, I’m a pretty satisfied customer of Bitdefender (paid version), so I started digging to see if Emsisoft is any better. Actually, for the most part, I think most top marketed AVs do a good job, but still, I’ll continue, and I think I don’t have to go beyond privacy policies of these 2 AVs. If you read them both, you can see that they are pretty similar. Emsisoft advertises on their company description page advertises the point called “Entirely For You”, and specifically:
    “We are loyal to our customers. We don’t track your info, we don’t share your data, and we don’t betray you for a quick profit by using nasty toolbar bundles. We simply offer efficient anti-malware, for your computer and you.”
    If you start reading the privacy policy though, you can easily see that it contradicts this point, as it actually does share what they call “Other data” with third party services, and has quite a lot of subprocessors (Bitdefender being one of them)…

    Also, that AV data transmission report is dated in 2014, thus 5 years ago, so it’s quite outdated, as it’s says (for example) that Emsisoft does not collect OS and location, and their privacy policy explicitly says that they do…

    Reply

    • Hard Sell says

      February 7, 2019

      Hey, with that 2014 report Emsisoft was shown as Austria local, today it’s based in New Zealand.
      “Also, that AV data transmission report is dated in 2014, thus 5 years ago” – Makes me wonder why the Anti-Virus Comparative guys hasn’t kept it updated / money changed hands, AV vendors protested, Anti-Virus Comparative changed it’s management team ?
      *Even for someone else doing a similar fact finding survey of anti-virus producers on users metadata transmission – I can’t find one…
      –
      “I’ll be honest, I’m a pretty satisfied customer of Bitdefender (paid version)” – Would that still be the case if you knew BD can get enough of your private info and as “Bitdefender has admitted that it compromised a user.”
      The source goes on to say – I didn’t look carefully at Bitdefender Internet Security, because users can’t opt out of uploading “suspicious” files. Of the products that I did research, only AhnLab and Emsisoft assert that they won’t share user information with third parties. Even so, I didn’t find any evidence that any anti-malware provider had compromised its users. Until now, that is.
      [ With the help of Bitdefender, an internet security company advising Europol’s European Cybercrime Centre (EC3), Europol provided Dutch authorities with an investigation lead into Hansa in 2016. ]
      –
      Emsisoft Anti-Malware:
      It uploaded nothing during scans, with Anti-Malware Network off or on.
      Bottom line, AhnLab and Emsisoft seem to be the best options from a privacy perspective. Both clearly state that they won’t share user information with third parties, without exception.
      SOURCE: July 14th, 2017
      https://www.ivpn.net/blog/are-anti-malware-products-uploading-your-private-data
      –
      Emsisoft Privacy Policy – Legally binding version (darker texts), Practical version (gray texts) or the @PARTS REPRESENTED BELOW.
      How We Share and Disclose Information:
      This section describes how Emsisoft may share and disclose Information. Customers determine their own policies and practices for the sharing and disclosure of Information, and Emsisoft does not control how they or any other third parties choose to share or disclose Information.
      @In limited cases we share information with others, but we are not responsible for their data handling practices.
      –
      Customer’s Instructions:
      Emsisoft will solely share and disclose Customer Data in accordance with Customer’s instructions, including any applicable terms in the Customer Agreement and Customer’s use of Services functionality, and in compliance with applicable law and legal process.
      @We only share data if you allow us to do so.
      –
      To Comply with Laws:
      If we receive a request for information, we may disclose Other Information if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process.
      @We don’t like doing so, but if a court rules that we have to provide specific user data to them, we have to abide.
      –
      With Consent:
      Emsisoft may share Other Information with third parties when we have consent to do so.
      @If you specifically allow us to share your data, we may do so.
      [That’s the important ones under this ‘Share and Disclose Info’ area]
      –
      As far as I can see BITDEFENDER association with Emsisoft is as follows.
      Subprocessors:
      Emsisoft currently uses third party Subprocessors to provide infrastructure services.
      Prior to engaging any third party Subprocessor, Emsisoft performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.
      Entity Name: Bitdefender SRL
      Subprocessing Activities: Service Provider. We send them your name and email address for Emsisoft Mobile Security license activation.
      Entity Country: Romania

      Reply

      • Just a Guy says

        February 17, 2019

        @Hard_Sell I don’t know what happened to our full discussion (was probably too long and deleted by admin =) ), but I’d still want to get at least this message out there:
        Bitdefender did not admit on compromising it’s user, it admitted advising EC3 during Hansa investigation, those are 2 totally separate things.

        Reply

34. George says

    February 5, 2019

    Hey Sven! So if Emsisoft is the top-shelf AV for Windows… what would be a comparable app for Mac users??? Cheers, George

    Reply

    • Sven Taylor says

      February 5, 2019

      Hey George, I can’t say for certain with Mac OS as I don’t spend much time looking at AV software, other than this article to examine the privacy aspects.

      Reply

      • George says

        February 5, 2019

        Appreciate your candid feed back. That said, I’m hopeful, and with any luck, others on this platform can and will recommend something for Mac folk! 🙂

        Reply

35. Vector says

    February 5, 2019

    Very good article! Thank you Sven! Thank you also Hard Sell for the useful and informative comment!
    I am curious should it be a problem/an issue if a community like EFF (being very recognizable) publicly requests either AV producers to consider an option to start being more transparent in terms of data collection by initially proposing a comprehensive guide and a list of requirement data to be provided? If this request is not efficient, then do you think that it would be a great idea to do the following. Assume EFF start a campaign with the support of the major NGOs and along with the public defenders of transparency and privacy rights, and major IT firms having interest in this campaign, by organizing some kind of League of Endorsed Transparent AV Solutions Providers. This league should simply list all AV products, who comply with the proposed data transparency publication. I could assume that if a AV firm wants to attract privacy respecting clients, then it would opt-for similar League.
    It was just a naive idea.

    Reply

    • Sven Taylor says

      February 5, 2019

      Hi Vector, interesting idea, basically a certification that antivirus software meets basic privacy protections.

      Reply

      • Hard Sell says

        February 7, 2019

        Hi Vector,
        That’s a mighty nice thing to say about my research, thank you.
        I don’t think your ideal is naive, then with the tweak Sven mentions to go from the campaign, or endorsement model to a certification class rating system for all A/V firms.
        That class or classes ratings system must include transparency of all user/device sensitive data and metadata collected and transmitted and to defining this data encrypted retention, storage duration in a standard across the board policy.
        The part of this rating system should addresses the adequate certification of their SSL/ROOT certificates to properly analyze HTTPS traffic.
        –
        If this should never come to exist you always have your vote by the almighty $$ to go with the best privacy respecting A/V firm to date – and convince family and friends to do the same. Thanks : )

        Reply

36. Hard Sell says

    February 5, 2019

    Hi Sven,
    Quite the eye-opener for your readers to know and understand somethings, and very nicely done on your part – Sir.
    If I may address a few things by your numbers 1-4 to inherent risk as crucially observant perceptions.
    –
    # 1
    It’s absolutely true that paying for software is in no way a guarantee that your data won’t be collected and/or shared or sold on to others.
    Clearly, antivirus manufacturers have to comply with the laws of the countries in which they are established, however, this should be the only reason for providing user data to third parties.
    Okay, so it is possible that intelligence/law-enforcement agencies in some countries prohibit vendors (security or otherwise) from revealing any cooperation with them.
    – Good programs should not only disclose that sensitive data may be collected and transmitted but, also offer an opt-out option for users.
    – Better would be to make those features a requirement of opting-in from the start, as well to defining the products data retention, storage policies (time duration before deletion – if ever) of their customers data obtained.
    –
    # 2
    To guard against phishing and malware-hosting websites – look to an ad blocker like the installed version of AdGuard.
    https://adguard.com/en/welcome.html

    It’s been advised to just disable the HTTPS scanning feature of your antivirus. This functionality in anti-malware’s contradicts the very idea of TLS/HTTPS point-to-point security and gives the users a false sense of security from many security products.
    TCP/IP HTTPS protocol:
    Because traffic is encrypted, it’s not normally accessible for security inspections, antivirus products install their own root certificates on computers to be able to analyze HTTPS traffic.
    Not only do security software’s reduce the connection security, but also introduce vulnerabilities such as failure to validate certificates properly.
    So instead of helping the user stay safe, this opens the gate to vulnerabilities, in a study shown.
    https://zakird.com/papers/https_interception.pdf
    More:
    SSL/TLS/HTTPS: Keeping the public uninformed
    https://www.computerworld.com/article/2909512/security0/ssl-tls-https-keeping-the-public-uninformed.html
    HPKP: HTTP Public Key Pinning
    https://scotthelme.co.uk/hpkp-http-public-key-pinning/
    Pinning hopes on pinning
    http://www.economist.com/blogs/babbage/2011/09/internet-security-0
    –
    # 3
    Inadvertently installing bundle programs – browser toolbars, adware, and plugins or other (PUPs).
    It’s more than an annoyance and disruption of your regular running system.
    It’s a privacy issue as they can then show you ads, monetize or sell your search and/or browser data.
    – How to Perform A Manual PUP Removal
    https://blog.emsisoft.com/en/31451/how-to-perform-manual-pup-removal/
    –
    # 4
    Anti-virus/malware vendor programs, what else has such a free reign to every nook and cranny of your system with an advance system level over everything else.
    Others in this lineup are the online scanners of the most popular anti-virus/malware programs where they offer free scans to check out your PC.
    – Remember, in either case you’ve agreed to their ‘end user license agreement’ so what data did you just give away and for how long ?
    If it was a free online scan – did it plant a bug, ID, tag of some sort to label your system for future tracking ?
    Worth reading:
    PRISM > The program (scroll down to it)
    “Data, both content and metadata, that already have been collected under the PRISM program, may be searched for both US and non-US person identifiers. These kinds of queries became known as ‘back-door searches’ and are conducted by NSA, FBI and CIA. Each of these agencies has slightly different protocols and safeguards to protect searches with a US person identifier.”
    “NSA databank, with its years of collected communications, allows analysts to search that database and listen ‘to the calls or read the emails’ of everything that the NSA has stored, or look at the browsing histories or Google search terms that you’ve entered, and it also alerts them to any further activity that people connected to that email address or that IP address do in the future.”
    –
    WHERE DOES MALWARE COME FROM ?
    Just a thought, if some Anti-virus/malware vendors go to such lengths to package (PUPs), wouldn’t it also make sense that they release ‘malware’ in the wild to sell their products to defeat it ?
    – Government agencies in countries around the world have been known to plant cookies and even malware on unsuspecting users in order to record data. Web site operators and search engines use many techniques to try and follow you across the internet.
    You must be aware of all of these methods and guard against them as well being informed by the Restore Privacy site.
    Vault 7: CIA Hacking Tools Revealed:
    https://wikileaks.org/ciav7p1/
    “Recently, the CIA lost control of the majority of its hacking arsenal including malware, viruses, trojans, weaponized “zero day” exploits, malware remote control systems and associated documentation. This extraordinary collection, which amounts to more than several hundred million lines of code, gives its possessor the entire hacking capacity of the CIA.”
    –
    Bottom-line:
    If an Anti-virus/malware vendors jurisdiction play a roll and it’s continued concept of users privacy plays an important rule for you.
    You can’t do much better than Emsisoft’s security and privacy practices as they’re always trying to get the word out about both how it benefits you.
    https://www.emsisoft.com/en/

    Reply

    • Sven Taylor says

      February 5, 2019

      Thanks for the feedback, as always, Hard Sell.

      Reply