No offense to all that read this but if you ignore a software firewall (Windows firewall doesn't count), including a free one such as Zone Alarm then you deserve every infection you get. There are no more excuses out there for anyone not to have their PC fully patched, using a firewall and an anti-virus, I can forgive those that are inexperienced and need assistance but if you refuse to do the above then I have no sympathy for you. Zone Alarm too tough for you? Too bad, I'd fed up with reading about 75-95% of all e-mails being scams sent and hosted on bot accounts with rotating DNS, getting over 200 spams a day on my personal inbox, watching my favorite security sites/groups get shut/slowed down due to DOS attacks.
Spyware is bad, but I'll take 100 infections over one rootkit, especially the newer ones that do such a great job of disguising themselves that only unhookers are able to detect them. Storm worm is another nasty virus and was recently encrypted and broken into smaller units so regional hackers can control certain areas.
here is a great article about the Storm worm and
here is an article on the breakdown of it. Still recommend you use anti-Spyware but I prefer Spybot Search and Destroy, oldie but goodie and it's free
And never download security software from P2P sites! Here's why:
Day 1) I'm a hacker, I embed a certain virus code into NortonAntiVirus.exe and send it out via P2P. My virus will call home with your information, but it will not resend itself out, and once your information is sent it will shut itself down until you boot up. I'll rename my file windows.exe or something that sounds legit in case you load Zone Alarm and it alerts you...if you allow it to go through, I win.
Day 2) My software is installed on many PCs, Norton doesn't realize what's going on and it takes a week before security teams catch on
Day 10) A day later, they update their anti-virus definitions to now block my virus code, nevermind the fact that you were infected for 8 days unknowingly, unless it can catch my virus running or you do a full scan I'm still exploiting you.
Day 11) I update my virus code, introduce it back into NortonAntiVirus.exe and resend it out to P2P...how long would I be successful now?
And I just assumed it takes a week, sometimes people are infected for weeks, months before anti-virus companies catch on.