G DATA Internet Security is a paid security suite for Windows PCs from G DATA CyberDefense. It combines malware scanning with a firewall, protection for online banking, spam filtering for email programs and parental controls. Most protection runs in the background, and the Security Center window is where the user checks status, starts scans and changes settings.
Scans, quarantine and the boot medium
The always-on virus guard checks files as they are read and written. It also stops programs that try to run or spread malicious code. Signature updates arrive hourly, and downloaded files are also compared against G DATA’s cloud data. On top of that, an idle scan checks the whole system automatically when the computer is not in use.
Manual scans can cover all local drives, a selection of folders and files, removable media such as USB sticks and memory cards, or only running processes and autostart entries. A separate rootkit check looks for hidden malware without scanning every file. Scans can also be scheduled.
Detected files go to an encrypted quarantine. From there G DATA Internet Security can disinfect a file and return the clean original to its folder, delete it, or mark a false alarm as allowed. For a PC that is already compromised, a wizard builds a bootable CD, DVD or USB stick with current signatures. The system can then be scanned outside Windows.
Detection beyond signatures
Three components look for malware that signatures do not yet cover:
- DeepRay uses machine learning to spot camouflaged malware.
- BEAST watches how programs behave on the system and can identify unknown malware by its actions.
- Anti-Ransomware monitors file system events and reacts to patterns such as mass encryption, file deletion or removal of shadow copies. It ends the suspicious processes and quarantines the executables behind them.
The user can turn off each component separately in the real-time protection area.
BankGuard and browser hardening
Bank websites encrypt traffic, but the data is decrypted inside the browser, where a banking Trojan can alter a transfer. BankGuard checks the network libraries the browser loads and replaces manipulated memory areas with a clean copy. This works without signatures, so it also covers Trojans that are not yet known. It also blocks redirects to fake login pages.
Keylogger protection watches for programs recording keystrokes, such as password entry. Exploit protection guards against attacks on security holes in software like Office applications, PDF readers and browsers. This includes holes in programs that are kept up to date.
Web protection and spam filtering
Web protection blocks harmful pages and downloads before they load and shows a G DATA notice page in the browser instead. Add-ons are available for Chrome, Firefox and Edge.
For mail, the scanner checks both incoming and outgoing messages. The anti-spam module rates each email using several criteria, and OutbreakShield compares messages with an online database to catch mass mailings as they start. The user can review logs of mail classed as spam and as not spam. From either log, they can move a sender to the whitelist or blacklist. The user can switch off spam protection on a PC without an email program.
How the firewall decides
The firewall checks traffic in both directions and blocks unauthorized transfers with an alarm. In Autopilot mode, the default, it handles decisions without asking questions. With Autopilot off, it asks in unclear cases, and each answer becomes a rule. The Application Radar lists blocked programs so the user can allow one with a click.
Each detected network gets a rule set: direct Internet connection, trusted, untrusted or blocked, or a custom set. Rules define the program, direction, allow or deny, protocol or port, time window and IP address range. A rule wizard covers common tasks such as allowing an application, sharing files and printers, or permitting VPN traffic.
Parental controls per Windows account
G DATA Internet Security applies restrictions to a selected Windows user. Parents can block predefined content categories or build their own filters that match a word in a page’s URL, title, metatags or visible text. A whitelist-only setup limits a young child to approved sites.
Time limits apply separately to Internet use and total computer use per month, week and day. A weekly grid blocks fixed periods regardless of the remaining quota. A warning appears before an automatic shutdown so the user can save their work. The program can log violations per user.
Shredder and edition differences
The G DATA Shredder overwrites files several times with random data so they cannot be recovered. The user can drag files and folders onto its desktop icon or shred them from the right-click menu.
G DATA Antivirus concentrates on malware protection. Internet Security adds the firewall, anti-spam and parental controls. Total Security adds a password manager, automatic local backups, file encryption, a system tuner and access control for USB drives and other external devices.
