Hi everybody, Having XP Pro on my laptop Fujitsu Core Duo2 I'm thinking how to prevent it against hackers etc. in the simpliest way while being connected to the net. Of course I could have e.g. two partitions on the HD and install 2 OS's, each on separate partition. But in such a case I should quit the main OS then restart the computer and select another one OS which was configured to have Internet connections, then quit the second OS and restart the computer again and select the main OS again. What is important for me is that I'd like to have the possibility to "be" still in one OS, then "enter" the second OS, make Internet connection, and to switch back to the first OS which shouldn't be closed at all. I've read somevhere that having any second OS (=virtual OS) created with VMWare or so, gives such a security because one can have all the important programs and data under one OS and have a second OS only to connect with Internet (without being forced to close one OS and to start another one, make the Internet connection and to close the second one and to start the first one again) . They have suggested to have the PRIMARY OS (e.g. XP) only for Internet and the second one (via VMWare) for all the rest of applications because the virtual OS is being created as a special file so viruses cannot "stick" to important system files of the virtual OS hidden in it. On the other hand I think that such a solution causes that the virtual OS works much more slowly than the primary one. MY QUESTION IS: does it play any role which OS (primary or virtual one) is dedicated to Internet connections (and/or communicators) with regard to security of the entire disk resources? Could my primary OS be "secure" if I'd prefer to use the virtual OS to make Internet connections and have all the rest of applications on the primary OS? I thank you in advance for your valuable comments!!! Zennon

I think you are using a sledgehammer to crack a nut. Besides, I'm not so sure that using a VM will provide the protection you think it will. A VM doesn't run in isolation to the host OS and while it might give you some protection from some viruses, it wont protect you from all the possible attacks you could encounter. You time would be better spent using a properly configured firewall, a decent anti-virus application and a couple if spy-ware scanners. If you are connecting through a router that gives you a considerable amount of protection to begin with. Finally keep your security patches up to date and be circumspect as to which web sites you visit. Stuart

Thank you Stuart, although it was not the answer to my question,anyway! :-)) I asked for this concrete solution because I'm interested in such a solution for some other reasons I didn't mention... But how do you think: of this two "sledgehammer solutions" ;-)) which version is better? Thanks a lot! Zennon

Can't speak to your other reasons you don't mention, but on those reasons you did: ditto what StuartS said, absolutely. It was the answer to your question.

I concur .... your main objective IMHO, now seem to be about as clear as mud. For one: 90% of your OP request describe motives that you are now recanting & substituting with others we haven't the foggiest idea about. You do know we are not mind readers .... right? Anyhow, if my input does end up as being irrelevant to your main objective, it's probably because we are all taking a shot in the dark. My advice involves Sandboxing which is along the lines of your virtualization thought process, since it allows your computer to run software or applications in a simulated system as in "a sandbox". This leaves your machine protected from compromise because any malicious act knowingly or otherwise done on the system is executed within the simulated system & has virtually no effect on your host PC's system files. Ironically, unlike AVs; a sandbox is unable to differentiate what is malicious & what isn't, but it really doesn't have to, since the host PC is running system as a simulated environment. There are a handful of virtualization tools out there. Google is a good place to start if you are strongly interested. It is a step in the right direction for anyone looking into such an arrangement, because it is arguably a much safer way to do things & it is getting increasingly popular. Here's a handful of options for you to mull over: BufferZone DefenseWall HIPS Sandbox GreenBorder Virtual Sandbox Safe’n’Sec HIPS GeSWall Good luck!

MY QUESTION IS: does it play any role which OS (primary or virtual one) is dedicated to Internet connections (and/or communicators) with regard to security of the entire disk resources? Yes, it does. Could my primary OS be "secure" if I'd prefer to use the virtual OS to make Internet connections and have all the rest of applications on the primary OS? It could be more secure, depending on how you set up the virutal machine.

Thanks a lot to all of you! Zennon