Microsoft Response Point Updates
Microsoft Response Point Updates
Minimize System Crashes by Updating your Drivers: DriverHive Easy Driver Update
Minimize System Crashes by Updating your Drivers: DriverHive Easy Driver Update
Computers are so embedded in to our daily lives now we barely give them a second thought. We trust them with taking care of every digital need, from storing memories and media to organising our homes. But their very ubiquity means we've become complacent with maintenance and it's only when something goes wrong that we realise how much we need them.
While we regularly take out cars in for servicing, the humble PC rarely gets a look in. It's not until you're sitting at the end of crashed system that most users decide to take action to get it back on track.
You would've thought that PCs, being no more than calculators with delusions of grandeur, would rarely crash. A PC is no more than a set of computational instructions with no room for human error so what could possibly go wrong….right? As it turns out, quite a lot.
There are so many variables involved in having a working system. Every component and peripheral you use to navigate your PC, laptop or netbook needs to work in harmony. But every component and peripheral in your system is designed by different manufacturers because PCs are open systems. Not only does this myriad of hardware need to work together, but it also has to talk the same language as any one of the vast amount of software options available.
Here in lies one of the biggest hurdles PC users face every day, many without realising it. If you don't get every inch of your system working in a harmonious balance, it will crash and burn. Exactly what happens when your system crashes depends on what caused the crash but, even a simple problem can take days to fix. For the lucky few it will simply mean the system will automatically send the crash details to Microsoft's Windows Error Reporting Service. For the rest, it could mean a complete system re-install and lost digital memories - especially if you haven't backed up your data.
This common language that systems use to get every piece of hardware working in conjunction with each other is known as the device driver. These drivers allow every piece of hardware in your PC to talk to your operating system - not just the internal hardware like the graphics card but external hardware as well. Every time you buy and plug in a printer, camera, monitor, mouse or keyboard, they'll need their own driver so Windows or whatever operating system you're using can talk to it. Sometimes Windows automatically picks up the driver if you're online though most manufacturers still bundle the drivers on a CD for you to install.
If these device drivers aren't communicating properly, they may as well be talking gibberish. But the implications are far, far worse for your system. In fact, 80 percent of system crashes are caused by faulty or out of date drivers.
It sounds like a difficult problem to resolve and sorting out driver conflict is not the best way to spend a Saturday night. You might end stuck in customer service phone limbo, racking up the phone bills trying to find out why the new printer you bought isn't working properly when you should be out painting the town red.
Ensuring best practice by making sure every individual driver on your system is up to the job is good policy. Regular system maintenance will always be advisable but if you get it wrong, it's easy to make things worse. Even if you think you've solved the problems, your best laid plans could go awry because manufacturers tend to update their drivers every six month. Additionally, device drivers need to be installed in the correct order - or you could cause even bigger problems. That'll put you back to square one despite your best efforts.
There are some simple things you can do to take the chore out of system maintenance and making sure your drivers are working properly. The Bootstrap team has developed a simple but effective driver update tool that takes the onus of responsibility away from the end user. This should help take to worry out of doing a driver update and will give you security and protection against certain types of system crashes.
DriverHive can automatically scan your PC to identify out of date drivers for FREE and let you choose which ones you'd like to update. The software also automatically creates a system restore point on the PC before an update. If you are having any issues, this ensures you can roll your system back.
If there's one thing DriverHive can't do it's protect your system from EVERY crash error. With most of the word now connected online, systems are susceptible to a whole world of nasty hacks, viruses, and malware exploits that can clog or kill your system. It is a big bad world out there that doesn't have a one-stop-shop universal balm to cure all. However, you can have peace of mind from applications like DriverHive that were designed to address 80 percent of the issues that cause system crashes. Not a bad start at all.
About the Author
Spencer Dalziel is a veteran IT journalist writing for The Register, Independent, T3, V3, CNET, PC Advisor, IDG, The Enquirer and Good Gear Guide. He is expert on all things IT including hardware, software and PC maintenance. Visit www.driverhive.com
Problems after System Restore?
I have a HP computer with running on Windows Vista Home Premium.
Last night, I had a problem with a virus and I called Microsoft for a solution. Ultimately, the technician had me restore my computer to an earlier date. It so happens that the restore point that I choose was the first (and only) restore point available. I should mention that "restore" point date was the day that I first got my laptop, 2nd hand, from my sister.
Here's the problem: since I restored the computer. It's acting erratic. I can't unistall programs, I can't open programs that I have, and I keep getting prompted to install updates that won't "take". In all three instances, when I click on "uninstall" or if I click on an icon. nothing really happens. There's no response from the computer.
Anyone have suggestions?
A virus generally doesn't get removed by a system restore. I'm actually surprised that Microsoft suggested that! It sounds like the virus is still there and doing its work. I suggest you install a decent virus scanner and if that doesn't work, reinstall the laptop from scratch.
Microsoft Response Point Updates
UPDATE April Fools? CONFICKER VIRUS set to strike April 1 2009
Spyware – Understanding and Addressing The Risks - Part Two
Mitigating the Risk
The main technologies available to mitigate against the risks associated with “Spyware” within the enterprise environment are discussed below.
Mitigation techniques are two-tiered or two-part – at the gateway and at the desktop level.
Desktop Protection
At the desktop or client there are notably three technologies available to mitigate against the risks posed by “Spyware”. These are personal firewalls, dedicated anti-spyware programs, and traditional desktop anti-virus (AV) tools.
AV
In some respects forms of “Spyware” strongly resemble viruses. They are uniquely identifiable, can be detected by scanning the client machine and are sometimes packaged as a set of files that can be removed to clean up the infected system. However many forms of “Spyware” do not reside on disk as persistent files – such as hostile ActiveX and Java applets. The motives, delivery mechanisms and often the removal of “Spyware” is different however from the protocols followed for viruses and worms.
“Spyware” is also different in that there is no one definition agreed on what constitutes “Spyware”. Some programs that might be classed as “Spyware” – such as Microsoft’s Windows Update Notifications – are useful, disclose their tracking capabilities, do not disrupt desktop operation impacting user productivity, and are distributed by responsible companies. “Spyware” therefore needs to be classified and identified by the actions it performs and the level of risk – complicating detection and removal, as the users must be given a choice over what is permitted.
AV vendors – notably Trend Micro, McAfee and Symantec – already have software that is very good at scanning files before they execute. The software also has mature enterprise management suites and the vendors have support teams in place to handle enterprise customers’ needs. However the AV vendors have been slow at adding anti-spyware capabilities to their products. The AV vendors however will catch up - Trend Micro acquired private start-up InterMute in May of this year, the first acquisition the company has ever made. In 2004 CA acquired PestPatrol and added PestPatrol to the eTrust suite.
Independent reviews and tests show repeatedly that AV tools are not as good at catching “Spyware” as dedicated anti-spyware programs. Whilst AV tools may detect 99% of viruses this number falls considerably to perhaps 70% - when considering “Spyware” programs.
Using the next releases of desktop AV tools to protect desktops against “Spyware” is extremely attractive to enterprises. There is no need to deploy yet another software agent on every machine within the desktop population, there is no need to monitor yet another ‘console’. AV already incorporates the management features that enterprises require – such as ‘headless operation’ and centralised reporting. Enterprises achieve greater consistency with standardisation on a smaller number of vendors, leading ultimately to cost efficiencies.
Dedicated Anti-Spyware Programs
There is an ever-increasing list of dedicated anti-spyware programs available from vendors including Webroot (who have just secured $108million in venture capital funding), LavaSoft and PC Tools. Ad-Aware from LavaSoft is the most popular product with some 128 million downloads to date. Other notable products include SpyBot Search and Destroy, CounterSpy and Spyware Eliminator. Microsoft has also entered the market with Windows Antispyware – available as a beta for download from their web site – following their acquisition of Giant Company Software.
Whilst dedicated anti-spyware programs are more effective today at detecting and removing Spyware than AV products this will change over the forthcoming quarters. Most of the dedicated anti-spyware offerings are available as free downloads aimed at consumers / individual users and not at large enterprises. Site licensing is rarely available for example. Some of the emerging vendors, including FBA Software and Tenebril, have enterprise offerings on their roadmaps. However these companies are small, lack corporate / financial stability in some cases, and typically do not have the support teams and infrastructure in place to handle large enterprise customers.
Orthus are of the view that many standalone dedicated anti-spyware programs will cease to exist in the relatively near future and the dedicated anti-spyware market will not be significant in years to come as established vendors offer integrated AV/anti-spyware/personal firewall products.
Personal Firewalls
Just as AV tools now include some “Spyware” protection so many of the personal firewalls available offer a level of protection as well. These include McAfee, Check Point (following the acquisition of Zone Labs in early 2004 and the subsequent release of the Integrity product) and Internet Security Systems (ISS) with the release of Proventia Desktop in March 2005. Sygate is following a similar path to Check Point and ISS.
Personal firewalls are recommended for particularly mobile clients that are regularly taken outside of the corporate perimeter and used to access corporate systems from DSL connections in the home and public WLAN hotspots, where typically direct Internet access is also allowed. They are also recommended for fixed desktop and mobile clients in smaller locations where there is little or no gateway level protection in place and where again direct Internet access is available from those locations.
Gateway Protection
Desktop protection is only half of the story when it comes to “Spyware” protection. Gateway level protection is also available.
Blue Coat offer a range of proxy appliances that, in conjunction with popular URL filtering solutions, offer a strong defence against “Spyware”. “Spyware” often secretly installs via "drive-by" installers, which install “Spyware” in the background without any user interaction. Blue Coat combats this with anti-spyware policy controls that inspect, filter and block web content associated with “Spyware” installation software. This preventive approach is critical when “Spyware” originates from an unknown web site – not yet categorised within URL filtering solutions - and when there is no known signature available to detect the malicious program.
Gateway protection incorporating a strong URL filtering solution is particularly good in preventing programs on infected systems from sending information back to “Spyware” sites, mitigating against the productivity impact of Adware but also the more serious privacy and data leakage concerns associated with more malicious code. URL filtering solutions also offer some protection from infection in the first place by preventing users from visiting known infected sites.
Gateway solutions typically incorporate logging and reporting features that can be used to identify infected systems thus facilitating a targeted “Spyware” clean-up periodically. This capability is also useful to target mobile clients (notebook PCs) that are not protected with Personal Firewalls that become infected whilst outside the corporate perimeter.
Recommendations
In light of the above Orthus suggest that enterprises take the following approach to mitigating the risks posed by “Spyware” today :
- deploy gateway “Spyware” protection to prevent back-channel communication by infected systems augemented with a leading URL filtering solution.
- use granular reporting capabilities from gateway solutions to identify infected systems and choose a dedicated anti-spyware tool to clean-up infected systems on a case-by-case / ad hoc basis.
- do not deploy dedicated anti-spyware programs across the desktop population – instead wait for AV vendors to add strong anti-spyware capabilities in future releases.
- force remote office branch office based systems to access the Internet via the corporate gateway (where gateway anti-spyware protection exists).
- for remote and mobile clients, in addition to AV, install a recognised personal firewall to increase protection.
educate staff making them aware of the risks of “Spyware”, how systems are typically infected and how to close pop
About the Author
Sean Bennett is Commercial Director at Orthus limited (http://www.orthus.com). Orthus is a leading provider of information risk professional services, helping orgnisations globally to measure, minimise and manage the information risks they face. Orthus provide end to end services for clients to comprehensivly address risk in their environments including Insider Threats, addressing issues including data leakage, sabotage and fraud; External Threats (http://www.orthus.com/dr_overview.htm) including wireless security, penetration testing, virtualisation security, vulnerability management and Secure Software Development Life-Cycle; Supply Chain Threats including securing cloud services and data processed by third parties; and Legal and Regulatory challenges including Payment Card Industry (PCI) Data Security Standard (DSS).
Microsoft Response Point Updates