By Saikat Basu, MakeUseOf – May 11, 2010 at 03:31PM
A name like ThreatFire unambiguously points towards a security tool. For the sake of world peace, thankfully it’s a computer security tool. In more precise terms, ThreatFire is a behavior based anti-malware protection system.
Still confused? Worry not, as in this post we look at what the free ThreatFire virus protection software is and what makes it a must have in your defense arsenal against the hordes of web based threats out there.
In a previous post on the Best Programs to Keep Your Computer Secure, ThreatFire deservedly got its space in the lineup of some really great free virus protection applications. But it has been two years since that post. Since then, security concerns have multiplied, bandwidth has quadrupled, and so have the complexity of the attacks against your lone computer.
So it’s time again to remind ourselves of the need to protect ourselves against multiple threats with multiple layers of computer protection. ThreatFire fits right in the scheme of multi-tier computer security.
What ThreatFire Is
Usually, anti-virus applications work on recognizing known threats. Known threat have signatures or ‘footprints’, which is the key information we download with the updates. A lot of anti-virus software cannot protect you against zero-day attacks. Zero-day attacks are brand new virus files against which security tools have no known protection. Against this, ThreatFire works by homing in on behaviors or patterns which suggest malicious intent.
So, ThreatFire has an ActiveDefense technology which offers real time PC protection by using sophisticated real-time behavioral analysis. ThreatFire protects against spyware, adware, key loggers, viruses, worms, Trojans, root kits, buffer overflows, and other malware.
There are programs like AVG Identity Protection which work similarly, but it is a paid download. Avast 5 has improved its behavior analysis engine and it has a real time behavior shield in its free anti-virus program.
What ThreatFire Is Not
ThreatFire is not a standalone anti-virus tool or a firewall. It is meant to be one part of your computer’s security set up that includes an anti-virus, firewall, and a spyware. ThreatFire is more geared towards active real time protection. It is not meant for cleaning up a computer which is already infected with malicious software.
Take for instance, a virus which is lying dormant waiting for a trigger. As it is inactive, ThreatFire’s technology based on recognizing behavior will miss the lurking threat. Though it can catch any malicious program that’s active, and quarantine it.
ThreatFire Works Behind The Scenes
ThreatFire (ver.4.7.0) from PC Tools is a small 8.59MB download. It is a no hassle set up and right away you will notice the features that are really likeable.
The first concern on installing another security app on top of the ones you already have makes you reach for the Task Manager and look at the memory being eaten up. With ThreatFire, the memory footprint is small. In fact, it’s smaller than running another browser or messaging app.
You, the user, do not need to configure anything. ThreatFire sits quietly in the System Tray and does its watchdog act. Advanced users can set their own rules via the Advanced Rule Settings. The rules can be easily set up using the wizard.
Additional configuration options include a sensitivity slider for threat alerts. The default setting is good enough for less in-the-face actions from ThreatFire.
As it is a real time security shield, you do not need to actively scan your computer. But if you are really paranoid, you can start up the Rootkit scanner. You can choose for a quick check with the Intelli-scan or go the whole hog with a Full Scan.
The Threat Control Center is the place where you can manage the permissions for the processes. You can allow certain processes to run, deny selective ones, and manage the ones that are quarantined. The program maintains a protection log for all activities.
Get Active Protection From The Community
If Community Protection is switched on, you can send feedback via the program on any threats encountered. This information is automatic and helps to increase the real time efficiency of the program. The ThreatFire Secure Community is made up of active ThreatFire users who have volunteered to participate in the community program. The Protection Statistics screen above shows the numbers that go into the community screen.
The site is pretty informative on various aspects of the program. There is also a Submit a File or Report a False Positive page where you can upload a suspicious file for a check. The running blog also makes for a good read if you are into the stuff on computer security and prevention.
The free virus protection software is completely free for home use. It is compatible with Windows 7 (32-bit and 64-bit), Windows Vista (32-bit and 64-bit), Windows XP SP1, SP2 or SP3 (Home, Pro & Media Center Editions), Windows 2003, or Windows 2008.
ThreatFire is a well rounded security application that should sit well next to your anti-virus and firewall. Let us know if it should.
Follow MakeUseOf on Twitter. Includes cool extras.
Similar MakeUseOf Articles