Computer Security: The Missing Link

My comments below refer to the PORTABLE version of kcsoftwares (kcsoftwares.com) SUMo only. I DO NOT RECOMMEND ANY OTHER VERSION as the others may contain the software Relevant Knowledge and/or Open Candy. Relevant Knowledge has been described by some as Spyware and Open Candy places ads on your computer.

I like the portable version of SUMo for determining which software needs updates and where to get them. SUMo does a good job doing all of that, sees 99% of the software on your system, and determines which, indeed, can be updated. It bases the need for updates by comparing the version number on your computer with the version numbers on all of the other computers it has scanned that have the same software. It is not perfect, particularly in areas where the software version depends on the hardware in your computer, but still gets it right about 98 - 99% of the time. It doesn't take long for a user to know whether or not to take SUMO's suggestion to update.

After suggesting updates, SUMo uses Google to help you find the update. Here, it is less useful, as Google will find correct update pages only about 90% of the time (using whatever terms SUMo sends it), but that is still helpful. And the user has the option, of course, of using other terms for the search.

All in all, the portable version of SUMo does the job for me. It is not perfect, but it is very, very good.

Dear Bob,

Thank you for your very helpful computer/internet/software, etc information.

And...

Thank you for being one of the Good Guys.

Deborah

I would mention one other place to check for updates: Ninite (http://ninite.com/) allows you to create a custom program to update or install software on your PC. What's REALLY nice about it is that it updates or installs without any crapware. I REALLY like how much easier it makes updating my software.

I'm not sure I agree with your somewhat harsh criticism of CNET downloads. Even someone as PC-Challenged as myself can easily see (and UNcheck) the boxes for the crap (or click "DECLINE" at the bottom of the page). After years of CNET downloads I've NEVER ended up with any unwanted "surprises".

I never used their TechTracker (the User Reviews have always been pretty negative) nor tried their new Download App.

But any program you download on CNET (if you remember to sign-in first, of course) gets automatically added to your "Download Watch List".

This has 2 major benefits (to me, at least). First...when a newer version of any program on the list becomes available you're automatically sent an email notification with a link to the new version download. Second...after I had a PC crash and had to re-format I went to this list, scrolled down all my programs, clicked on the "Download" button to the right of each one and was back up-and-running almost effortlessly.

I, too, just got nailed by CNET, and you can't just remove everything at once. They have a list of 16 things you must do if you want all that Crapware removed! That's it for me and CNET, too.

Bob,

You wrote, “Some serious security holes in Java prompted many pundits to recommend removing it altogether.”

That was a very good recommendation indeed.

Please note that when one tries running the Secunia Online Inspector, one is required to install … Java.

Thank you for your useful site.

Bob,

Can you confirm what one poster says about CNET? Is there something wrong with download.com?

Please advise!

Bob, You I trust - others I verify! Thanks much I just downloaded Secunia Personal Software Inspector and I was amazed at how many programs are on my computer. They all checked out up to date. Too bad I'm not smart or I could probably determine which ones I don't need or use. I also have been with you since the Tourbus days. You are doing a great service for we unsmarts.

I agree with you re: Secunia's PSI. It's the best of the lot, and it catches a lot of the "under the hood" stuff that is otherwise overlooked. It doesn't have the widest range of applications in it's library, however.

CNET's new Download App is, as you and many others have pointed out, full of foistware (I like that term! TY :) if the default auto-update feature is used. If the updates are done manually and individually, it works just fine (granted, it takes a little longer). Alternatively, just use it to identify the applications that need updating, then go to the application site's download page. I use it about half-and-half between two methods. CNET does have the most extensive library (doesn't get a lot of the under-the-hood stuff that PSI does) and does the best job of identifying programs in need of updating.

I've been trying out FileHippo's update checker for the past month: I'm not that impressed. It only catches between 30-75% of the possible updates for my applications, then doesn't recognize that they've been updated after the updates are installed.

(Thanks to Geri for the link to PSI 2.0 - I agree that 3.0 takes way too long. And thanks to Coover for SUMo - that's a new one. I'll check it out (question: often, portable versions are simply that - portable, but are otherwise the same as the non-portable versions. Have you tried the non-portable? I'm wondering if the Open Candy, etc., are part of the auto-default install, but can be declined if the "custom" install option is used. Can you clarify any of that?)

Hi Bob,

I recently read an article (I think it was here, but maybe not) about the percentage of malware sites returned by the various search engines. Chrome returned significantly fewer than Bing; that was the big reveal.

Here's a link to an article I received from EmsiSoft. They find that IE10 is safer than Chrome when it comes to running malware.

http://blog.emsisoft.com/2013/05/23/which-browser-offers-the-best-malware-protection/?ref=news130523&utm_source=newsletter&utm_medium=newsletter&utm_content=blog&utm_campaign=news130523

Up to you if you want to share it with your readers.

Ciao for now.

Major Geeks has a free update checker that you might want to take look at.

Sad about CNET. Back in the day when everything was NOT online CNET was such a trusted name. I don't know what happened to them but it would almost seem they have fallen into a funk of greed I suppose. My guess is that somehow someway they get a kickback from this "crapware". I too have pretty much boycotted (sp?) CNET.

I downloaded & installed Secunia PSI, it was unable to connect because it said it doesn't work with Proxy servers. I use Verizon wireless. Don''t even know how to use a Proxy. Would love to be able to teach this tool to others if I could get it to work on my 6 computers. Is there a patch of some kind or what?

I use your columns extensively to teach seniors about their computers & how to operate safely.

The third time I ran the Secunia PSI it ran.
Sorry for the intrusion

Excellent article. Been using PSI for years. Not a fan of version 3 yet as I thought version 2 was more intuitive. Finally, C/NET gets called out ! If enough of us keep on C/NET, there may be hope for them yet. Wish I could get my company to put PSI everywhere !

Thanks, Bob.

Not only C|Net but also TUCOWS is putting foistware in their downloads. They both used to be trustworthy, it is sad to see the pursuit of the almighty dollar corrupt the integrity of once trustworthy sites.
A couple of updates ago Avast! Free Antivirus added a software update checker to the program. I am not too impressed with it yet, but it is there.
I have been running PSI on my systems for several years now, and was very disappointed with the update to version 3. They did at least add the view all programs capability on the second iteration, but it is still too slow. I thought it was just my slow computers, now I see from earlier comments that it is not just me. One other thing about Secunia PSI, they, by their own admission, only check for critical updates. So if you have a program that has been updated but not to fix a security flaw PSI will not tell you about that.
Thanks for the info on FileHippo, I just downloaded it and man is it quick, makes me wonder what PSI is doing that it takes so long.

Bob,
good article as usual but i believe you owe your readers a response to all the negative comments on your recommended Secunia software and the alternative use of Ninite which you also recommended according to a reader.
I have Avast and it recommends software that need update but even though I update Adobe it still shows as needing update?

EDITOR'S NOTE: I just downloaded Secunia PSI on a Win7 PC and while it did take several minutes to scan my software, it did correctly identify what needed updates, and the updates went quickly. I continue to recommend PSI.

Secunia PSI takes forever to run - use FileHippo Update or Glary Utilities instead. JAMES is right about Ninite which, while slow, takes out the dangers of downloading. The only sites that I still consider safe (besides author's sites) are Bleeping Computer, FilePuma, FileHippo, and MajorGeeks. CNET has sold out and you must never download from there!

I had FileHippo on my old computer and this article prompted me to install it today on my new computer... seems that now you have to download their App Manager 1.45 and that gets the file checker program installed... low and behold, when I got to the point of starting the download I noticed they wanted to install the "Ask" toolbar... heeding your many warnings about this piece of crapware I terminated the download immediately... guess I'll just stick with Secunia Personal Software Inspector for now.

Can you get a virus or malware by scanning a QR code?