Computer Essentials - Protect Yourself

recently did a community blog on ‘Cookie Security’. Leagent from PCWorld forums found it useful and said he was just learning what to do when it comes to computers and computer security. So I decided to write this article trying to cover the basics of computer security. Computer security is absolutely vital to your computers health and usability. The programs mentioned in this article are all free to use.

Why free? Why not Norton or McAfee? I’ve used those programs before and have had nothing but headaches with them. In fact due to there difficulty in being removed and some malware being written specifically to disable or get around the more popular paid ones. Not to mention a lack of customer support. I wouldn’t even use those programs if they were offered to me for free. Of course if you choose to pay for malware protection many of these free programs also have pro versions that can integrate more features such as your firewall also offering anti-virus protection, or simply real time protection.

The first step is to know what these things do, why they are needed, and finally what to do if something does go wrong. This is written primarily for Windows XP although can be translated to other forms, just make sure the programs your downloading are compatible with your operating system.

Every time I reinstall my operating system, or work on someone else’s computer free security measures are the first thing that I do. I will not put in a password into an unprotected computer. Sadly most computers out there are very open to attacks, just a few simple programs along with a routine of maintenance can make a world of difference.

So here’s a short story on why even something as simple as a firewall is needed. Before the hassle of Windows Genuine Advantage I would wipe my operating system and from scratch whenever I ran into a nasty malware issue. Sometimes I would do it just to give it a fresh start. Anyway, reinstalling the operating system also required reinstalling all the basic protection. Sometimes it would be a lot of work, and being tired and lazy one day I left it connected to the internet for one night, just one night. The next morning it wouldn’t even get to the windows screen. I assume it was a random ip attack. That’s not even going anywhere on the internet just being connected.

Free Security Programs

While I try to provide only the most reputable links you may go to the internet and find some on your own or from sites directly. Be careful where you download from make sure it’s a trusted site and scan with your anti-virus (once installed) before you open anything. If you have a bad feeling about it try to go to a trusted site or to find the manufacturer's site for a direct download. As always double check urls for accuracy. Many of these links are from PCWorld's download repository. Of course there are more options then the free programs listed these are just to help get you started.

Firewall -
A firewall should be one of the first things you install onto a computer (besides perhaps a different web browser.) Firewalls basically protect your computer from incoming attacks as well as programs that may try to broadcast information from your computer. There are several free options out there the most popular of which would be Zone Alarm Free. Your new computer may come with a top name firewall but usually only for a limited time before leaving you unprotected. Windows does come with a firewall but its rather ineffective and should be replaced right away.

Zone Alarm Free Xp/2000 and a link to Vista compatible on the page

Windows Update -
Once you get your firewall and perhaps your anti-virus installed you should run windows updates so Microsoft can patch any holes that may be in your system.

Anti-Virus -
Another vital part to your computers security is an Anti-Virus. It's a good idea to frequently check to see if your anti-virus is updated, along with scanning regularly if there isn’t a set schedule. AVG can be scheduled to download and to scan at certain times of the day. Consider scheduling a scan for a time when you are not at your computer so that the resources taken to scan your system won’t slow you down.

AVG Anti-Virus 2000/XP/me/Vista/9.x
Avast Home Edition: - XP/Vista
* Note for Avast is that it is free but you will have to register it otherwise it may give you warnings. AVG comes with a reg key when you install.

Also note that there are online scanners to double check to see if you have anything wrong with your system such as:
Panda Active Scan
Kapersky Online Scan
*(Note that both of these online anti-virus scanners require you to be using Internet Explorer. They may open in Firefox if you use the internet explorer tab add-on.)

Anti-Spyware -
While virus’s use to be the biggest and most common threat out there, with the evolution of spyware virus’s have taken somewhat of a back seat. The same people who use to write virus’s for fun turned there skills for cash in writing spyware that can steal a users information (key logger), or working for a company who needs demographics or wants to place ads directly on a consumers computer. While it’s a good idea to only have 1 fire wall (due to potential conflicts), and one Anti-Virus, it is recommended that you have more then one spyware scanner. I have many times had one program pick up a rouge piece of malware that another few didn’t catch. I’ve heard that some spyware scanners can conflict with others saying that parts of them are spyware themselves and then removing it making your other spyware scanner unusable. However I have not ever actually ran into this problem myself.

Useful spyware scanners-
Spybot Search and Destroy 98/me/nt/2000/xp/2003/Vista/etc
AVG SpywareFree
Lavasoft Adaware NT/2000/XP
SUPER AntiSpyware 98, 98SE, ME, 2000, XP, 2003

*A note about spyware scanners is that some of them come with a free trial of real time protection. Basically meaning they will actively block spyware for you. However on the free editions many of the real time protection expire after a set number of days. Make sure to remove the spyware scanner from your startup so you do not have it hogging any system resources when your not using it. (See 'Remove unneeded startup processes' below)


Spyware Blockers-
While many of the free anti-spyware’s will come with the ability to block incoming spyware on a real time basis, some are only activated if you pay for an upgrade. Javacoolsoftware.com provides free real time spy blockers along with further protection for safer surfing Once I started using these the only real problem I’ve had with spyware is low threat tracking cookies from time to time. Don’t forget to check on spy blaster to make sure your protection is enabled for all browsers.

SpywareGuard
SpywareBlaster


Other general maintenance tips:

Switch to a safer browser like Mozilla’s Firefox or Opera. If you haven’t already you can check out my entry on cookie security on customizing cookie security on your web browser.

Update your programs along with Windows itself, sometimes there will be a hole found in a program that will require an update so check frequently. Sometimes programs will automatically update for you, sometimes you have to go see if there is a new version especially if you don't let it access the internet.

For all-in-one convenience look into Trillian or Pidgin. They are programs that integrate many of the popular instant messengers without the mess of many large programs running (along with there annoying pop up welcome screens and ads.)

Become familiar with your task manager (control + alt +delete) and what is running, along with what should be running. If you don’t know what something is try Googeling it and you can usually find an answer. Generally most windows process’s are ok unless they outside of the C:/windows/system32 folders. Malware can be hidden under any name!

Update - Scan - Update - Scan ! (Don't forget to backup your files once and a while as well.)

Get to know issues online. From Active X, to potential issues in Flash and even messages sent via im from your friends can lead to trouble. Remember to take a close look at urls.


Clean your computer!-
Once and a while clean your computer, run the windows disc clean up utility (xp) (Programs > Accessories > System Tools > Disc Clean up). This will compress old files, remove temp internet files, downloaded programs, empty your recycling bin along with giving you the option of removing program files you don’t need.
Speaking of removing program files don’t forget to do that once and a while too. Go to your control panel and add/remove programs (you can also add or remove windows components here too). Be careful to know what you are uninstalling and that you don’t need it anymore. You don’t want to get rid of something you might actually need like sound controls! If you don’t know what something is try googeling it.
Defrag your computer - (Programs > Accessories > System Tools > Disk Defragmentor) (or run > dfrg.msc) Fragmentation is caused when you create delete or modify a file pieces of it can end up spread across different locations on your computer. Defragmenting lines them all up for faster use and increased stability.
CCleaner (XP) - Computer cleaner, commonly known as crap cleaner, does many things that windows disc clean up utility does and more. In one easy program it allows you to delete everything from downloaded program files, cookies, temp internet files, to recent documents, empty the recycling bin and more. What it cleans is customizable by you, it also has the ability to clean up applications along with checking issues in the registry. I wouldn’t mess with the registry unless you know what your doing. Another very valuable thing about CCleaner is that the tools give you the option of add/remove program files without going through windows. Sometimes entries can more easily be deleted there along with a faster set up to remove the unwanted programs.

Remove unneeded startup processes -
If you click on tools (on CCleaner) and then startup you can see a list of programs that are set to run when your computer starts up. Now a days that’s going to probably be a fair amount of programs, but many programs also add things to your startup that are only going to slow your computer down. Real Player and Quicktime like to startup when you start it up even if you remove certain aspects from your startup menu. As with things in task manager know what your removing. Google if you don’t know. However you can optimize your startup speeds along with freeing up system resources.

Another way to see what’s going on when your computer starts up is with Microsoft’s system configuration utility ( Start > Run > msconfig ). Be careful this shows you more system process’s that can screw up your computer if you remove something important. If you click on the startup tab you can see things that are set to startup and what has the potential to startup. If you click on services (not recommended to mess with those unless you know what your doing) you can see system process’s that startup.


What to do if your computer is acting up -
Infected, won’t remove? Computer running unusually or slow? First if you are able update every scanner you have until you can update no more. Scan or startup in safe mode and then scan. Safe mode lets only what is needed for your computer to run load so you will be able to remove programs that may be causing you problems. Sometimes I like to scan in safe mode because it is easier to remove issues if there’s anything wrong. Some files have to be manually deleted are a pain and should be removed in safe mode. To find some files you may have to show hidden files or folders here’s how to do that.

How to show hidden files or folders -
Open a folder such as my documents or my computer. Click on Tools > Folder Options. Under the folder options screen click on the View tab. Look for ‘Hidden files and folders’ make sure the radio button for ‘Show hidden files or folders’ is checked your computer may ask you if your sure of the changes. Be sure to note that many of these files are hidden for a reason so be certain of what you are removing. Also you can uncheck the ‘Hide protected operating system files’ box so you are able to see every file on your computer. When you uncheck it a warning will pop up to remind you of the possible severity of complications.


How to start in safe mode -
( follow the instructions on your bios screen if available) press f8 right after your bios menu but before the graphic of Windows loading appears. Sometimes windows doesn’t seem to want to go into safe mode. I shut the power off while its loading windows it will detect an error and then go to the advanced startup choices. I don’t recommend doing that however! If you can’t get it some people suggest to just keep pressing f8 until you do (starting over again).

Choose either Safe Mode, or Safe Mode with Networking if the issue isn’t too severe but remember to turn on your firewall because it won’t automatically boot up if you select Safe Mode with Networking.

Once loaded your computer will inform you that it is merely a diagnostic and that some features may not be available after clicking the appropriate option you can get on to fixing your computer.

Hijack This -
For more extensive security issues you can get Hijack This analyzer and post your hijack this log for someone to analyze. It basically is a diagnostic utility that displays processes. Be careful when removing things from hijack this and note that there are buttons to give you more info on selected items but is always recommended to have experts analyze your log. There are log analyzers available that can help you narrow down what you may need to remove but a person is better.

A word about rootkits. I don't know a lot about them except for the fact they can get under where a lot of scanners don't look. Sony was infamous for putting rootkits onto some of there cds. See AVG Anti-Rootkit detector. Microsoft also has a malicious software removal tool.

If all else fails, or if you have a question don't hesitate to ask for help. PC World forums has a great community of computer users that are ready to share knowledge and experience.

Would you like to be a Community Voices blogger? If so, please send a letter of interest and a sample blog entry (what you would post here if you were already a blogger for us) to forums@pcworld.com. We'd love to hear your perspective.