Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I thought about this question and realised this might be a great opportunity for some of us to learn from the most learned on these forums.
I am interested to know if you were to wipe a hard drive clean so you could install WinXP for example, what steps would you take to ensure your PC was as secure as possible.
Some of you guys would be real experts so some of the procedures, and the software you use might benefit all of us.
There is such an array of AV, anti-virus,firewall software about, it is hard to know whats best, and how to configure it all.
Just a thought.Many thanks
Darren

If I were to wipe a hd clean so I could install WinXP, here is what I will do:
1. Get the SP2 CD from M$.
2. Disconnect the NIC.
3. Reinstall XP following by SP2 CD.
4. Read or watch M$'s Seven Steps to Better PC Security (go HERE to get it free)
5. Teach myself to watch what I click online.
6. Turn on the AV and FW
7. Reconnect the NIC.i_XpUser

Good list :)
Can you explain more about step 5? I'm sure a lot of people could be a bit more careful about what they click, but what should they be looking out for?

You know, it occurs to me, in light of this post - you could replace step 5 with "Install firefox and use it to browse online instead of IE". Then a person wouldn't have to worry about what they click online because, for the most part, their browser isn't vulnerable to most harmful things they might click on. :)

it's all ActiveX, the stuff that certain site tells you to install it for your own good. Don't click Yes or No (or OK or Cancel). Use Alt-F4 to close it.
i_XpUser

I see where you're coming from. Why don't we just let that post rest. No need to carry it on further.
i_XpUser

^^^ exactly the reason why I brought it up here. I'm beginning to think the reason all you guys don't want to hear about firefox is so you can have the opportunity to keep dispensing advice about how to clean up after IE ;)

Thanks XPUser that was the kind of excellent response i was hoping to see. If you could perhaps reveal the security software you use, i think we would all be very grateful.
Anyone else's beginning to end would be awesome.Thanks again
Darren

The only security software most people is firewall and antivirus software, which XpUser covered in step 6. XP has a built in firewall, but no antivirus software. AVG and nod32 are both good and free antiviruses.
You should also
8) Install, update periodically, and run an antispyware program. adaware is a good one.
9) Turn on Windows automatic updates

All the PCS here are behind Linksys router. In addition to the router DMZ, each workstations have Norton Internet Security with its FW and AV up and running in the background. Others may say NIS is a memory-hog but for me I haven't seen any of the so-called performance degradations. I also update and run Ad-Aware and Spybot Search & Destroy weekly.
i_XpUser

I can't believe you guys missed one of the most important item (router).
It's like a whatchamacallit, I'd rather you have one and not need it, than need one and not have it.....*wink* *wink*
Do not type anything in this space.

Good morning Saber :-)
Absolutely a router is your best arsenal argumented by having software FW and other ammunitions :-)
i_XpUser

Do you guys rely solely on a hardware firewall, or both hardware and software?
Is SpywareBlaster relevent to your security?
There are some many anti-malware products about, do you still put trust in Adaware and Spybot?Thanks
Darren

I'd definitely add SpywareBlaster to the list. It uses no resources and simply keeps the machine stitched up in order to prevent malware activating.
If you have SpyBot and use Immunize (with SpywareBlaster installed) it actually tells you to use SWB instead because it's better - or words to that effect.
Derek.W

I would d/l the installation files for Ad-Aware, SpywareBlaster and Spybot S&D and save them to CD or preferrably a USB memory stick. So I could install them with the newest updates before reconnecting again to Internet.

1. Before starting, download:
a. most current AV virus def file (Symantic has an .exe file you can get through "Intelligent Updater")
b. SpyBot Search & Destroy
c. Lavasoft AdAware...put them all on a second HD, USB thumb drive or burn a CD.
2. Obtain M$ Security Update disks (both for the OS and Office).
3. Disconnect the cat5 cable to your NIC.
4. Format and reinstall OS and drivers.
5. Install AV.
6. Install the AV def file.
7. Install M$ Security Patches from disks.
8. Connect the cat5 cable from the ROUTER to the NIC (I prefer hardware rather than software firewalls).
9. Once online the very first site should be your AV supplier to get ALL available program updates.
10. Disconnect cat5 cable.
Finally you can install your favorite programs, if M$ Office is in your inventory use the Office Security Patch CD.
11. After they are in, install AdAware and SpyBot.
Reconnect cat5 cable.
12. Update and run both AdAware and SpyBot.
13. Now is the time to get the rest of your Security Patches from "Windoze Update". While you are there check the "Office Update" site, download them all!
14. Don't cruise the Net until all the above is done. If you visited your favorite "Debbie Does Dallas" website before this, GOD only knows what you've picked up!
_________________________
The internet is no longer a toy, it's a COMBAT ZONE!

Thanks Martin, that was brilliant. I'm sure a lot of people could benefit from reading that.
Is there any point to a software and hardware firewall?thanks
Darren

"Is there any point to a software and hardware firewall?"
In order for someone to "invade" your computer from the outside world, they need to have your IP address. One of the things a router does is act as small DHCP server. The router has it's own IP address, which the rest of the world can see. The router then assigns IP addresses to the computers connected to it, that are kept invisible.
Software firewalls only act as monitors, tracking sources of incoming and outgoing packets, and allowing the user to block what he doesn't want. They do NOT act as DHCP servers!
Software firewalls are also a common problem with online gamers and home networks.
Think about it, where do you need a firewall?
Internet
A
|
|
Computer B ---------------- B ComputerAt position A or B?
(Internet A and the two vertical lines should be centered above the horizontal line.)
Someone recently described a router as using a nuclear weapon to kill an ant. When it comes to defense, I like nuclear weapons.
I'll try to find the report on the experiment done at Cornell University. (4 identical computers, 1 behind a router, 1 with XP, ALL updates and XP firewall, 1 with ALL updates but no firewall, 1 with basic XP installation and no firewall.) All the computers were left ON but never touched by anyone.
After 10 days it was discovered that the 3 computers and the router had been probed over 400 times each day. ONLY the computer behind the router was left unviolated. The other 3 were compromised (invaded) to some degree.
Most of us on this board take security to a "religious" level.
_________________________
The internet is no longer a toy, it's a COMBAT ZONE!

Thanks Martin that really helps. Very interesting as well by the way. Just one thing. My computer is behind a router and if i did an ipconfig/all it would show my ip addy as 192.168.8.5 which is obviously not the real one so to speak. Because i can go to google and type whatsmyip and be given the real one. But sometimes if i'm on a webpage it will tell me my real ip address.
So when you say a router hides my ip how come others can see it sometimes.
Sorry if i sound like a divvy, but someone like you could help enormously to help me understand.cheers
Darren

The router directs and recognizes packets.
It's easy to get your own IP, the router recognizes the request as coming from yourself.
Go to your neighbors PC and try finding your IP address.
Take your lunch with you.
_________________________
The internet is no longer a toy, it's a COMBAT ZONE!

Take the phonebook with you cos you might need to order pizza around dinner time...........;~)
Do not type anything in this space.

Twisterfreak:
Think of each device and what it can see. DHCP is the protocol used to assign network devices an IP address. Imagine you turn on the following items in order and what happens:
1) You turn on your cable modem. The cable modem, using DHCP, obtains an IP from your cable company's router or DHCP server. To the cable company, that is your IP.
2) You turn on your router. Your router is a DHCP server as well (if so set-up)
3) You turn on your computer. Your computer asks your router (a DHCP server) for an IP. Your router assigns an IP. Ususally it will be in the format 192.168.x.x which is a range of IPs reserved for internal networks. (There is no server out on the "real" internet with that address.)
4) Your computer thinks you are 192.168.x.x --- the cable company thinks you are 10.2.3.4 or whatever... It's a middleman, and since it acts like a firewall, it will not pass anything from your "real" internet IP address to your internal 192.1.68.x.x address unless you allow it.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |