Computing.Net > Forums > Security and Virus > Your Ultimate Home PC Security?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Your Ultimate Home PC Security?

Reply to Message Icon

Name: twisterfreak
Date: April 18, 2005 at 07:33:15 Pacific
OS: WinXP
CPU/Ram: 2800/512
Comment:

I thought about this question and realised this might be a great opportunity for some of us to learn from the most learned on these forums.
I am interested to know if you were to wipe a hard drive clean so you could install WinXP for example, what steps would you take to ensure your PC was as secure as possible.
Some of you guys would be real experts so some of the procedures, and the software you use might benefit all of us.
There is such an array of AV, anti-virus,firewall software about, it is hard to know whats best, and how to configure it all.
Just a thought.

Many thanks

Darren



Sponsored Link
Ads by Google

Response Number 1
Name: XpUser
Date: April 18, 2005 at 07:53:38 Pacific
Reply:

If I were to wipe a hd clean so I could install WinXP, here is what I will do:

1. Get the SP2 CD from M$.
2. Disconnect the NIC.
3. Reinstall XP following by SP2 CD.
4. Read or watch M$'s Seven Steps to Better PC Security (go HERE to get it free)
5. Teach myself to watch what I click online.
6. Turn on the AV and FW
7. Reconnect the NIC.

i_XpUser


0

Response Number 2
Name: jimminy
Date: April 18, 2005 at 07:55:29 Pacific
Reply:

Good list :)

Can you explain more about step 5? I'm sure a lot of people could be a bit more careful about what they click, but what should they be looking out for?


0

Response Number 3
Name: jimminy
Date: April 18, 2005 at 07:58:47 Pacific
Reply:

You know, it occurs to me, in light of this post - you could replace step 5 with "Install firefox and use it to browse online instead of IE". Then a person wouldn't have to worry about what they click online because, for the most part, their browser isn't vulnerable to most harmful things they might click on. :)


0

Response Number 4
Name: XpUser
Date: April 18, 2005 at 07:58:48 Pacific
Reply:

it's all ActiveX, the stuff that certain site tells you to install it for your own good. Don't click Yes or No (or OK or Cancel). Use Alt-F4 to close it.

i_XpUser


0

Response Number 5
Name: XpUser
Date: April 18, 2005 at 08:00:40 Pacific
Reply:

I see where you're coming from. Why don't we just let that post rest. No need to carry it on further.

i_XpUser


0

Related Posts

See More



Response Number 6
Name: jimminy
Date: April 18, 2005 at 08:02:42 Pacific
Reply:

^^^ exactly the reason why I brought it up here. I'm beginning to think the reason all you guys don't want to hear about firefox is so you can have the opportunity to keep dispensing advice about how to clean up after IE ;)


0

Response Number 7
Name: twisterfreak
Date: April 18, 2005 at 08:05:33 Pacific
Reply:

Thanks XPUser that was the kind of excellent response i was hoping to see. If you could perhaps reveal the security software you use, i think we would all be very grateful.
Anyone else's beginning to end would be awesome.

Thanks again

Darren


0

Response Number 8
Name: jimminy
Date: April 18, 2005 at 08:10:11 Pacific
Reply:

The only security software most people is firewall and antivirus software, which XpUser covered in step 6. XP has a built in firewall, but no antivirus software. AVG and nod32 are both good and free antiviruses.

You should also

8) Install, update periodically, and run an antispyware program. adaware is a good one.

9) Turn on Windows automatic updates



0

Response Number 9
Name: XpUser
Date: April 18, 2005 at 08:12:33 Pacific
Reply:

All the PCS here are behind Linksys router. In addition to the router DMZ, each workstations have Norton Internet Security with its FW and AV up and running in the background. Others may say NIS is a memory-hog but for me I haven't seen any of the so-called performance degradations. I also update and run Ad-Aware and Spybot Search & Destroy weekly.

i_XpUser


0

Response Number 10
Name: Sabertooth
Date: April 18, 2005 at 08:18:36 Pacific
Reply:

I can't believe you guys missed one of the most important item (router).

It's like a whatchamacallit, I'd rather you have one and not need it, than need one and not have it.....*wink* *wink*


Do not type anything in this space.


0

Response Number 11
Name: XpUser
Date: April 18, 2005 at 08:21:25 Pacific
Reply:

Good morning Saber :-)

Absolutely a router is your best arsenal argumented by having software FW and other ammunitions :-)

i_XpUser


0

Response Number 12
Name: Sabertooth
Date: April 18, 2005 at 08:23:06 Pacific
Reply:

Aagrr,

Caution! slooooooooooooow typer response.


Do not type anything in this space.


0

Response Number 13
Name: twisterfreak
Date: April 18, 2005 at 09:09:15 Pacific
Reply:

Do you guys rely solely on a hardware firewall, or both hardware and software?
Is SpywareBlaster relevent to your security?
There are some many anti-malware products about, do you still put trust in Adaware and Spybot?

Thanks

Darren


0

Response Number 14
Name: Derek
Date: April 18, 2005 at 13:00:20 Pacific
Reply:

I'd definitely add SpywareBlaster to the list. It uses no resources and simply keeps the machine stitched up in order to prevent malware activating.

If you have SpyBot and use Immunize (with SpywareBlaster installed) it actually tells you to use SWB instead because it's better - or words to that effect.

Derek.W


0

Response Number 15
Name: EC
Date: April 18, 2005 at 14:52:46 Pacific
Reply:

Router with SPI and NAT is helpful, like Zyxel.


0

Response Number 16
Name: Hmmm
Date: April 19, 2005 at 22:52:15 Pacific
Reply:

I also see using another OS for your internet usage hasn't been listed...


0

Response Number 17
Name: twisterfreak
Date: April 20, 2005 at 00:45:55 Pacific
Reply:

Hi Hmmm, can you explain what you mean, this sounds interesting.

thanks

Darren


0

Response Number 18
Name: Nigel Spike
Date: April 20, 2005 at 09:03:48 Pacific
Reply:

I would d/l the installation files for Ad-Aware, SpywareBlaster and Spybot S&D and save them to CD or preferrably a USB memory stick. So I could install them with the newest updates before reconnecting again to Internet.


0

Response Number 19
Name: Martin Crandall
Date: April 20, 2005 at 16:30:40 Pacific
Reply:

1. Before starting, download:
a. most current AV virus def file (Symantic has an .exe file you can get through "Intelligent Updater")
b. SpyBot Search & Destroy
c. Lavasoft AdAware

...put them all on a second HD, USB thumb drive or burn a CD.

2. Obtain M$ Security Update disks (both for the OS and Office).

3. Disconnect the cat5 cable to your NIC.

4. Format and reinstall OS and drivers.

5. Install AV.

6. Install the AV def file.

7. Install M$ Security Patches from disks.

8. Connect the cat5 cable from the ROUTER to the NIC (I prefer hardware rather than software firewalls).

9. Once online the very first site should be your AV supplier to get ALL available program updates.

10. Disconnect cat5 cable.

Finally you can install your favorite programs, if M$ Office is in your inventory use the Office Security Patch CD.

11. After they are in, install AdAware and SpyBot.

Reconnect cat5 cable.

12. Update and run both AdAware and SpyBot.

13. Now is the time to get the rest of your Security Patches from "Windoze Update". While you are there check the "Office Update" site, download them all!

14. Don't cruise the Net until all the above is done. If you visited your favorite "Debbie Does Dallas" website before this, GOD only knows what you've picked up!


_________________________
The internet is no longer a toy, it's a COMBAT ZONE!



0

Response Number 20
Name: twisterfreak
Date: April 21, 2005 at 02:31:37 Pacific
Reply:

Thanks Martin, that was brilliant. I'm sure a lot of people could benefit from reading that.
Is there any point to a software and hardware firewall?

thanks

Darren


0

Response Number 21
Name: Martin Crandall
Date: April 21, 2005 at 06:55:00 Pacific
Reply:

"Is there any point to a software and hardware firewall?"

In order for someone to "invade" your computer from the outside world, they need to have your IP address. One of the things a router does is act as small DHCP server. The router has it's own IP address, which the rest of the world can see. The router then assigns IP addresses to the computers connected to it, that are kept invisible.

Software firewalls only act as monitors, tracking sources of incoming and outgoing packets, and allowing the user to block what he doesn't want. They do NOT act as DHCP servers!

Software firewalls are also a common problem with online gamers and home networks.

Think about it, where do you need a firewall?

Internet
A
|
|
Computer B ---------------- B Computer

At position A or B?

(Internet A and the two vertical lines should be centered above the horizontal line.)

Someone recently described a router as using a nuclear weapon to kill an ant. When it comes to defense, I like nuclear weapons.

I'll try to find the report on the experiment done at Cornell University. (4 identical computers, 1 behind a router, 1 with XP, ALL updates and XP firewall, 1 with ALL updates but no firewall, 1 with basic XP installation and no firewall.) All the computers were left ON but never touched by anyone.

After 10 days it was discovered that the 3 computers and the router had been probed over 400 times each day. ONLY the computer behind the router was left unviolated. The other 3 were compromised (invaded) to some degree.

Most of us on this board take security to a "religious" level.
_________________________
The internet is no longer a toy, it's a COMBAT ZONE!



0

Response Number 22
Name: twisterfreak
Date: April 22, 2005 at 06:02:02 Pacific
Reply:

Thanks Martin that really helps. Very interesting as well by the way. Just one thing. My computer is behind a router and if i did an ipconfig/all it would show my ip addy as 192.168.8.5 which is obviously not the real one so to speak. Because i can go to google and type whatsmyip and be given the real one. But sometimes if i'm on a webpage it will tell me my real ip address.
So when you say a router hides my ip how come others can see it sometimes.
Sorry if i sound like a divvy, but someone like you could help enormously to help me understand.

cheers

Darren


0

Response Number 23
Name: Martin Crandall
Date: April 22, 2005 at 15:12:28 Pacific
Reply:

The router directs and recognizes packets.

It's easy to get your own IP, the router recognizes the request as coming from yourself.

Go to your neighbors PC and try finding your IP address.

Take your lunch with you.

_________________________
The internet is no longer a toy, it's a COMBAT ZONE!


0

Response Number 24
Name: Sabertooth
Date: April 22, 2005 at 22:11:11 Pacific
Reply:

Take the phonebook with you cos you might need to order pizza around dinner time...........;~)

Do not type anything in this space.


0

Response Number 25
Name: forensicsguy
Date: May 13, 2005 at 13:11:04 Pacific
Reply:

Twisterfreak:

Think of each device and what it can see. DHCP is the protocol used to assign network devices an IP address. Imagine you turn on the following items in order and what happens:

1) You turn on your cable modem. The cable modem, using DHCP, obtains an IP from your cable company's router or DHCP server. To the cable company, that is your IP.

2) You turn on your router. Your router is a DHCP server as well (if so set-up)

3) You turn on your computer. Your computer asks your router (a DHCP server) for an IP. Your router assigns an IP. Ususally it will be in the format 192.168.x.x which is a range of IPs reserved for internal networks. (There is no server out on the "real" internet with that address.)

4) Your computer thinks you are 192.168.x.x --- the cable company thinks you are 10.2.3.4 or whatever... It's a middleman, and since it acts like a firewall, it will not pass anything from your "real" internet IP address to your internal 192.1.68.x.x address unless you allow it.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Your Ultimate Home PC Security?

Overall Pc Security Advice www.computing.net/answers/security/overall-pc-security-advice/9214.html

12 Tips for PC security from... www.computing.net/answers/security/12-tips-for-pc-security-from/4262.html

Home Computer Security www.computing.net/answers/security/home-computer-security/6043.html