Question

Common Security Settings

Asked by: mixxie

Hello, experts.  I'm trying to make my computer more secure without losing functionality.  I'm currently running Windows XP  SP2 with 3 user accounts.  The administrative account has been renamed, and all accounts are password protected.  Only the administrative account has administrative rights.  I have Norton Internet Security installed, and I'm using FireFox as my browser.  Are there any other suggestions for keeping my computer safe?  I'm especially concerned because I go to BitTorrent websites, where the chance of spyware/malware increases.  With my current computer settings, I still have received at least a dozen spyware/malware programs to date.  Any help is much appreciated!

Thanks!

Michelle

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2005-01-13 at 04:17:49ID21272808
Tags

bittorrent

,

settings

Topics

Miscellaneous Security

,

IPSec Security Protocol

,

Consumer Firewalls

Participating Experts
6
Points
500
Comments
10

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. How to delete the hard-to-remove malwares, spywares…
    Hi, a friend of mine had the computer full of sh1t. You know what I mean... (read title) I'm not new in cleaning malware etc., I've used Adaware Pro, then I found PestPatrol, which works better than Adaware... Anyway, PestPatrol is not perfect. With PestPatrol I removed lo...
  2. Spyware/Malware C:\secure32.html
    Hi Guys, We've a laptop which believed to be infected by spyware/malware. Everytime launching the IE 6, it opens up a web page with addres c:\secure32.html. Realising that, the user did performed virus/spyware scan using McAfee and deleted off the virus detected (including s...
  3. Spyware/Malware removal - csrss.exe and smss.exe?
    OS: Windows XP2 Issue: Spyware Removal I recently downloaded and executed something accidentally, and as a result I now have some spyware/malware I can't get rid of. The two processes that I believe are the cause are: lsass.exe and cmss.exe - naturally Windows thinks they...
  4. PC infected with  spyware / malware
    Hi Experts! My computer is again infected with spyware. I use Win XP Pro SP2. A month ago, I reformatted the HDD because I was not able to remove all of these spyware. Now they are back and I don't want to reformat the HDD again. My anti-virus software is Panda and it stopp...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: smiffy13Posted on 2005-01-13 at 04:36:34ID: 13033341

Spybot is worth installing - it has an innoculate option which puports to keep some of the well-known nasties out.
Also the new Microsoft offering: http://www.microsoft.com/athome/security/spyware/software/default.mspx seems to be pretty good.

Keep windows up-to-date (auto update) as the patches can make some malware programs ineffective.

 

by: LucFPosted on 2005-01-13 at 04:37:39ID: 13033353

Hi mixxie,

Quick suggestion, as you're allready using Firefox, most likely the malwares/spywares you received are tracking cookies. Spywareblaster will avoid those from even entering your system:
http://www.javacoolsoftware.com/spywareblaster.html

Also, keep in mind, every program you download can contain ad/spyware unless confirmed the other way. Kazaa is not safe, bittorrent is not safe, any other p2p program is not safe. The networks used by them are filled with ad/spyware and virusses (who sais the person that first released a program didn't use an allready infected computer to do so?)

Then, keep windows up-to-date, always! Security patches come out regularly and not for the fun of it.

An overview of other things that you can consider are listed at:
http://www.cert.org/homeusers/HomeComputerSecurity/

Greetings,

LucF

 

by: kneHPosted on 2005-01-13 at 04:45:33ID: 13033408

Spybot is good.
adaware goes well with it.

Might be a good idea to create an account which has almost NO rights on the computer. Use that one to get your torrents.
Also with windowskey+L you can switch between the admin acct and the new stripped account. So you can run spybot on the adminaccount whilst getting torrents and stuff.

Also where's your AV? You need a proper antivirus program. I suggest kaspersky (for AV as well as firewall really).

 

by: samccarthyPosted on 2005-01-13 at 06:25:16ID: 13034256

I use SpyBot in combination with Ad-Aware.  Make your passwords complicated.  If you need more control and want to lock things down more run the command gpedit.msc to be able to tweak the local security policy.

 

by: kneHPosted on 2005-01-13 at 06:33:02ID: 13034356

Also try this.
Make it so only the admin can config the firewall.

Then delete all access rules.
Reboot.

Only let the critical processes pass through.

Keep it nice and tidy!

 

by: FalconHawkPosted on 2005-01-13 at 14:12:32ID: 13039249

Here is a list of good programs:

Program name / where to download / progtam type
Zonealarm (www.zonelabs.com) (firewall)
Ad-aware (www.lavasoft.com) (anti add/spyware)
AVG antivirus Professional (www.grisoft.com) (antivirus, i prefer it above norton)
Spybot, Search and Destroy (http://www.spybot.info) (anti Spyware)
Wheresjames (www.wheresjames.com) (Startup controll)

Also make sure you check c:\windows\sytem32 regulary (assuming your standart harddrive is c:) look for programs that have been added\cganges recently. programs in the system32 directory DONT need to be in the system registery to run. that means that you cant simply check what programs start on startup

Second, UPDATE your antivirus regular. new virusses come out all the time, so dont think (like many people) you are safe behind old definations.

Furthermore, check regulary what programs run on your PC by pressing CTRL+ALT+DEL if you see a program you never saw before, watch it. if it seems hostile (you get a feeling for that if you watch often) kill it.

Last thing i want to mention is checking if noone is making a connection attempt to your modem(and especially telephone modem). If someone connects to your telephone modem, he can break the password, and work on your name with it. the thing that follows is that he can internet on your costs, and that he can use it as a layer between himself, and illegal stuff. make sure that doesnt happen.

oh, and if u want REAL security, try linux.... nothing is better then linux in the security part

 

by: iuhhPosted on 2005-01-15 at 05:09:13ID: 13052832

Don't over do it with software protections.  It's alright with an antivirus scanner (e.g. norton), a spyware detector (e.g. adaware) and a decent firewall (e.g. norton internet security) -- that is, one each -- any more added will just become an overhead and slow your pc to a craw.  

What's better protection?  Consider these:
A hardware firewall, for instance, use the firewall in your router.
A backup plan, i.e. get a DVD burnner, image your boot disk (with software like Norton Ghost) to a dvd for easy restoration, and backup everything else at least once a month.
Keep your OS, programs and data on separate partition/drives.  Limit your windows partition to less than 6G for easy backup.

Unless you want to spend half of your life on the computer, don't touch linux.  It's tough, demanding, addictive, too much to learn for Bittorrent sake, and just as (in)secure as Windows out of the box.

(Just for the record, BSD is considered more secure than Linux)

 

by: FalconHawkPosted on 2005-01-17 at 01:20:53ID: 13061358

"Unless you want to spend half of your life on the computer, don't touch linux.  It's tough, demanding, addictive, too much to learn for Bittorrent sake, and just as (in)secure as Windows out of the box."

Agreed, but it IS better then windows for security

"Don't over do it with software protections.  It's alright with an antivirus scanner (e.g. norton), a spyware detector (e.g. adaware) and a decent firewall (e.g. norton internet security) -- that is, one each -- any more added will just become an overhead and slow your pc to a craw."

i never said they have to run AT A TIME. i have on acces firewall,virusscanner,registery and spyware protection. however, 1 program, can miss out spyware. That point has already been proven. because they use other scanning tactics, some spyware just wont be seen.

i dont want to sound paranoid however. you are right that 1 of them at a time is enough, and in case you suspect spyware/virus, use the other to for a much more complete check(or a once in 2 month complete scan).

its always hard. security takes ram, CPU and all other things that u sometimes dont wanna miss. but 1 main program of each, and the rest as an aid, will do just fine.

 

by: iuhhPosted on 2005-01-18 at 04:19:14ID: 13071293

Indeed, the use of alternative scanners adds defence in depth.  Although installing more than one of any given types of scanners (virus or spyware) will do more harm to your productivity than bringing you security, I do highly recommend the use of the free online scanner services, such as these:

Virus scanner
Panda: http://www.pandasoftware.com/activescan/
Macfee: http://us.mcafee.com/root/mfs/
Symantec: http://security.symantec.com/sscv6/default.asp

Spyware scanner
http://www.spywareguide.com/txt_onlinescan.html

The online scanner doesn't add any overhead to your system, and you can be sure they are up to date.  The downside is they will not remove the threat if found, and it's up to you to fix it.

 

by: mixxiePosted on 2005-01-18 at 07:43:54ID: 13073176

Thanks, everyone!

Michelle

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...