Security info for Windows

This post represents my current knowledge of the ‘baddies’ that might infect your Windows systems. Last updated on 9/19/2006.

Some quick thoughts. Viruses and Trojans are now entering systems though Instant Messaging. Got kids? Got an older version of an anti-virus program? Expect some nasty problems…

Rootkit Trojan’s, while currently rare, are an extremely dangerous type of virus/trojan and invisible to current anti-virus and anti-spyware programs. See below for more info.

Spyware is the most common problem I see. Is your system slow and getting lot’s pop-up’s? Then you probably have a spyware infection. It usually takes me 1 to 4 hours to remove spyware from a computer.

Norton AntiVirus and Internet Security have become too complex for me to recommend.

Viruses:
There are a lot of programs that do a good job of detecting and removing viruses. I recommend the following:
NOD32 - $40 - Free trial http://www.nod32.com/home/home.htm
F-Secure - $40 to$60 – Free trial http://www.f-secure.com/
Free AVG free http://free.grisoft.com/doc/2/lng/us/tpl/v5

Trojans:
Trojans are a virus that can give hackers a backdoor into your computer. They can then perform all sorts of mischief: steal your data or passwords, command your computer to attack web sites, etc. Most anti-virus programs will detect and remove the majority of trojan programs but the following are specialized anti-trojan programs.
Good site for trojan info. http://www.bluetack.co.uk/forums/index.php?showtopic=72
Trojan Hunter - $50 - Free trial. http://www.trojanhunter.com/
Ewido - $35 - Free trial. Easy to use http://www.ewido.net/en/?section=download

Rootkit trojans:
These are the super nasties. Undetectable except by a few special programs. For geeks, I recommend RootkitRevealer. Note that this program just helps you find a rootkit trojan, not remove it. F-Secure’s Blacklight is a rootkit finder/remover tool that is in development and is currently free. It found and removed HAXDOOR from a client’s computer. HAXDOOR is one of the super nasties.
RootkitRevealer http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml
Blacklight http://www.europe.f-secure.com/blacklight/

Spyware:
Top rated anti-spyware programs are Spyware Doctor and SpySweeper. You can also run Microsoft’s free Windows Defender.
Spyware Doctor $30 http://www.pctools.com/spyware-doctor/
SpySweeper $30 - free trial http://www.webroot.com/products/spysweeper
Microsoft AntiSpyware – Free http://www.microsoft.com/athome/security/spyware/software/default.mspx

Spamblocking software:
Spambayes for Outlook - Free http://spambayes.sourceforge.net/
Spambully for Outlook Express - $30 http://www.spambully.com/
Cloudmark for severe spam - $40 http://www.cloudmark.com/products/safetybar/

Software Firewalls:
Yep, you need one these also. You can use the built-in Windows firewall if you have Windows XP Service Pack 2 but these are better: (If you use a hardware router, it has a very good firewall built in.)
Read this web site before making a choice.
http://www.techsupportalert.com/best_46_free_utilities.htm#5

Lockdown tools:
These tools notify you whenever they detect a change to Windows programs or settings. Sounds like a great way to secure your system but expect to get a bunch of pop-up windows asking if you want to allow a change. I have not tried any of them but Prevex and WinPatrol have a lot of satisfied users.
Prevex http://www.prevx.com/default.asp
WinPatrol - Free version and a $20 version. http://www.winpatrol.com/
ProcessGuard - $30 http://www.diamondcs.com.au/processguard/

Pop-up blockers:
Optional but nice. The Google Toolbar provides a variety of tools.
Google Toolbar - Free http://toolbar.google.com/
SuperAdBlocker - $30 http://www.superadblocker.com/index.html?PHPSESSID=ed159d14482a434b2be5db20f66a293f

Wireless security for home and small business:
I recommend enabling the WPA encryption. This requires a fairly new wireless router and Windows XP Service Pack 2. Be sure to choose a long (up to 63 characters) PassPhrase of random letters, numbers and characters. Then save this PassPhrase and copy/paste it to each computer that will be using the wireless network. You can get an unique PassPhrase here: https://www.grc.com/passwords

Miscellaneous Windows security info:
It is crucial that you install the Windows and Office Critical Updates.
Requires Internet Explorer. http://windowsupdate.microsoft.com/
Click on Microsoft Update at this web site to get the updates for Windows and Office.

Information on how to improve your MS Internet Explorer security settings. http://www.infinisource.com/techfiles/ie-sp2-surf-safe.html

I have been using the beta test version 7.0 of Internet Explorer. I find it very nice and easy to use.

You can also the Firefox browser instead of/in addition to Internet Explorer. It is not more secure, just has different vulnerabilities:
FireFox Internet browser – free http://www.mozilla.com/firefox/
FireFox customizations http://www.scotsnewsletter.com/best_of/firefox.htm

And if you really want to be secure when browsing the web – use a ‘sandbox’.
Read the info at this site (#4 – Best Free Browser Protection Utility)
http://www.techsupportalert.com/best_46_free_utilities.htm

MS Baseline Security Analyzer (I need to try this someday.) http://www.microsoft.com/technet/security/tools/mbsahome.mspx

Security forums/news: http://www.spywarewarrior.com/