Internet Security Tutorial

[JOEYZ]

Here is a link to an excellent board that has a lot of good articles posted some guys that have been a lot of help to me with computer stuff. This gives tons of info and free downloads ranging from anti-virus programs, spyware removers, malware removers and Trojan horse removers. Check it out!

http://forums.infoprosjoint.net/showthread.php?t=5110


Internet Security Tutorial

--------------------------------------------------------------------------------

The increased availability of high speed internet access to the general public has been a giant leap for most internet users. However, with this comes some unwanted internet security issues. I am writing this tutorial to help you understand and prevent those security issues from affecting you. I will be including links to various valuable websites. I suggest you read them, as they were the source of my knowledge. In no way do I proclaim to know these things on my own.

Recently, when a friend tells me, “My computer is running like crap!”, I can usually pinpoint it to a few simple problems. Those problems usually include, but are not limited to the following issues:

1) Operating system not updated
2) Virus definitions outdated
3) Spyware, adware, and/or malware
4) Browser Hijacks
5) Firewall
6) Too many unnecessary services running
7) Too many unnecessary programs running at Start Up

Let’s start with #1… Update that Operating System
Although Windows is a great operating system, it has its flaws. When Microsoft detects security flaws in its operating system, they release free security updates. It is essential that every operating system receive these updates. For instance, when the Sobig Worm hit the scene in 2003, Microsoft had issued a “patch” months before the worm became widespread. Many users could have avoided infection if they would have simply updated their operating system. If you haven’t updated in a while, I suggest you do that first. Here is a link to Microsoft Windows Update.

On to #2… Keep that virus software updated
Every computer that has internet access should also have anti-virus software running. There are several well known and highly trusted companies that provide anti-virus software. The key to any anti-virus software is keeping it up to date. For instance, when a new threat is detected, the virus software company will issue updates. If I do not receive the latest update, my computer is vulnerable to the latest threat. The anti-virus software cannot detect a virus it doesn’t know exists. Therefore it is vital to update your anti-virus software frequently. Most have the option to “Automatically check for updates”. I personally don’t like programs accessing the internet without my knowledge, so I tend to turn off these features. That option is solely your discretion. The main thing to remember is to keep your anti-virus software updated. Also, it would be a good habit to scan any and all items you download prior to executing (opening) them. That way, you will be able to prevent the virus from ever infecting your computer.

Links to some online virus scanners:
Kaspersky Labs
Panda Active Scan
PC Pitstop Virus Scan
RAV AntiVirus Online Virus Scan
Symantec Security Check
Trend Micro HouseCall

Virus Bulletin's 100% Award

Now for #3… Take out the garbage
I could spend hours writing about this subject. Spyware, adware, malware, etc. have been the source of many headaches for many internet users. If these terms are new to you, please read these definitions. Luckily, there are several things we can do to protect ourselves. There are possibly hundreds of new programs (see "Rogue/Suspect" section below) such as cookies blockers, pop-up blockers, anti-spy, etc., etc. This can be an overwhelming amount of information to sort through and decide which is the best for you. I am going to offer suggestions to a few that I use to make your decision easier.

Lavasoft Ad-aware (freeware version available)

Quote:
Lavasoft is the industry leader and most respected provider of anti Trackware solutions. We have developed several applications that will provide you with the means to keep your computer or network free of these compromising and intrusive threats to your privacy.


I've been using Ad-aware for years. It's become an essential part of my computing. I've upgraded to the Plus version which comes with Ad-watch. Ad-watch will track and alert you to any registry change attempts. This alone will help prevent certain scumware from altering your registry settings.

SpywareBlaster (freeware)

Quote:
SpywareBlaster doesn't scan and clean for spyware - it prevents it from ever being installed. By setting a "kill bit" for spyware ActiveX controls, SpywareBlaster can prevent the installation of any spyware ActiveX controls from a webpage. It does this while not interfering with "friendly" ActiveX controls - so your browser can work correctly and you can have peace of mind!


Just a note about SpywareBlaster... as of the latest update, the database now contains 3089 items. It's hard to believe there's that much crap floating around the internet, huh? Grab SpywareBlaster and help protect yourself!

SpywareGuard (freeware)

Quote:
SpywareGuard provides a real-time protection solution against spyware that is a great addition to SpywareBlaster's protection method. An anti-virus program scans files before you open them and prevents execution if a virus is detected - SpywareGuard does the same thing, but for spyware! And you can easily have an anti-virus program running alongside SpywareGuard. SpywareGuard now also features Download Protection and Browser Hijacking Protection!



SpyBot Search & Destroy (freeware)

Quote:
Spybot - Search & Destroy can detect and remove spyware of different kinds from your computer. Spyware is a relatively new kind of threat that common anti-virus applications do not yet cover. If you see new toolbars in your Internet Explorer that you didn't intentionally install, if your browser crashes, or if you browser start page has changed without your knowing, you most probably have spyware. But even if you don't see anything, you may be infected, because more and more spyware is emerging that is silently tracking your surfing behaviour to create a marketing profile of you that will be sold to advertisement companies.


A commonly overlooked, yet vital section of SpyBot is the "Immunize" tab. Once Spybot is open, click on the Immunize button on the left. Click the Immunize button at the top, this will block all known bad products. Currently the database contains 1944 "bad" products. If you'e using Spybot and haven't "immunized" your system, do so now.

Proxomitron (freeware)

Quote:
For those who have not yet been introduced, meet the Proxomitron: a free, highly flexible, user-configurable, small but very powerful, local HTTP web-filtering proxy.


Proxomitron has become another essential tool. I no longer will browse the internet without it. What the heck is Proxomitron you ask? It's a web filtering local proxy. Meaning, any and all content must pass through Proxomitron's filtering rules before it ever reaches your browser. Proxomitron will help eliminate annoying pop-ups and banner ads. And no, it doesn't effect browser speed.

JD5000 Proxomitron Filters (highly recommended)

Quote:
On this site, you'll find my Proxomitron config set and various help on using it. My config has long passed my personal config. Most of the filters I include, I use on a daily basis, the rest have been requested by users.


JD makes awesome Proxomitron filters. If you use Proxomitron, check out JD's config files. I use JD Basic and I'm quite pleased with the results.

IE-Spyad (free)

Quote:
IE-SPYAD is a Registry file (IE-ADS.REG) that adds a long list of sites and domains associated with known advertisers, marketers, and crapware pushers to the Restricted sites zone of Internet Explorer. Once this list of sites and domains is "merged" into your Registry, most marketers, advertisers, and crapware pushers on the Net will not be able to use cookies, ActiveX controls, Java applets, or scripting to compromise your privacy or your PC while you surf the Net. Nor will they be able to use your browser to push unwanted pop-ups, cookies, or auto-installing programs on you.


If you use IE-Spyad, there are some settings in Internet Explorer that you should implement. Actually, these probably should be implemented regardless. These settings will affect the "Restricted" sites list in IE. Afterall, if you've added them to the "Restricted" sites list, why not make sure their activity is totally restricted? So, in IE choose "Tools", "Internet Options", then click the "Security" tab. Select the "Restricted sites" icon at the top and then choose "Custom Level". Disable everything! Now, you're thinking... "Hey, we've just disabled everything!" Exactly! These affect only the restricted sites list. If you've added IE-Spyads or have manually added sites to the restricted list, why not restrict them totally? These settings will only affect the restricted sites list and should never affect your normal browsing habits.

a² personal (free version available)

Quote:
a² uses a signature database that has stored a kind of fingerprint of every infectious file. At the moment, a² is able to recognize more than 19,000 different malware programs (trojans, backdoors, hacktools, batch viruses and trojans, internet worms, irc worms, java scripts, webserver scripts, vbs scripts, virus construction kits, denial of service tools (DoS), distributed denial of service tools (DDoS), flooder, keylogger, nuker, sniffer and unix viruses).



Link to an online trojan scanner:
GFI Trojan Scan

Again, the key to successfully using these programs is to keep them updated. Are you starting to see a trend here? Remember, update, update, and update.

Rogue/Suspect Anti-Spyware Products & Web Sites
I've known for quite some time that there were programs that claimed to be anti-spy that were really using the anti-spy phenomena to exploit unknowing users. Many thanks to Infopro for showing me the following link. Let me quote a line or two from this site:

Quote:
Some of the products listed on this page simply do not provide proven, reliable anti-spyware protection. Others may use unfair, deceptive, high pressure sales tactics and false positives to scare up sales from gullible, confused users. A very few of these products are either associated with known distributors of spyware/adware or have been known to install spyware/adware themselves. Users are advised to rely on anti-spyware applications with deserved reputations for trustworthy performance.


So, be careful what you use to track spyware. Thanks for the link Infopro!

#4… I've been hijacked!

Quote:
There is a despicable trend that is becoming more and more common where the browser settings of web surfers are being forcibly hijacked by malicious web sites and software which modifies your default start and search pages.

Sometimes internet shortcuts will be added to your favorites folder without asking you. The purpose of this is force you to visit a web site of the hijacker's choice so that they can artificially inflate their web site's traffic for higher advertising revenues.

In some cases, these changes are reversible simply by going into internet options and switching them back. Not always, however. Sometimes it's necessary to edit the windows registry (gasp!) to undo the changes made. Sometimes there is even a combination of registry setting and files clandestinely placed on your hard drive that redo your settings every time you reboot the computer.

If you had implemented all of the tools listed above, odds of your browser being hijacked are slim to none. However, in the case that you have implemented all of the above tools and your browser is still getting hijacked, here's an excellent article on browser hijacking. At the very least, please read the section on preventing a hijack.

Homepage Hijackers

Now let’s discuss #5… Why do I need a firewall?
A firewall will essentially permit you to allow or block incoming and/or outgoing internet connections. This is a valuable tool for keeping track of exactly what programs are accessing the internet. This feature alone can prevent many unwanted items (Trojans, viruses, etc.) from ever accessing the internet, thus preventing their spread on the internet and alerting you of their existence on your computer.
Let me quote a few lines from Firewallguide.com

Quote:
The only way to make your computer completely secure is to turn it off or disconnect it from the Internet. The real issue is how to make your computer 99% secure when it is connected. Not having protection is like leaving your car running with the doors unlocked and the keys in it which a thief might interpret as "please steal me". Stated another way, when was the last time you handed a stranger your wallet and encouraged them to take your social security card, drivers license, cash and credit cards? Locking a car, using a "club" or installing a security system makes stealing a car more difficult. Internet security and privacy products provide adequate protection by making it difficult for "outlaws" to find and gain entry to your computer.



Again, there are many different software firewall options available. Your job is to decide which one would best fit your needs and budget. There is a vast amount of information available at Firewallguide.com. I suggest you get a cup of coffee and do some reading.
Again, with the increased availability of high speed internet access, many users are now networking their internet connections. This can be easily accomplished with a router. Most routers today come with a NAT firewall.
Quote:
NAT makes the machines on the local network behind the gateway machine more secure essentially because the client computers on the local network use IP addresses that are reserved for use on internal networks only. Those IP addresses will not show up on the internet.

If you decide to network your internet connection with a router, make sure it comes with a NAT firewall.

What’s up with #6? What are services?
Services are processes, that when enabled, start running when your computer starts. By default, many are enabled. Depending how you use your computer, many of the services are not needed. I personally will not make suggestions which services you may or may not need. By eliminating services not needed, you can free up system resources for the programs you do use. Again, there are several websites that discuss handling services. I will list a couple of them for you.
Techspot Services Tweak Guide
BlackViper.com

#7 Start Up Programs… Do I really need this running?
Now, you may be asking, “How do I know what is running at Start Up?” Usually the first clue is the taskbar. Look on your taskbar beside the clock. See all of those little icons there? Most of those are programs that start running as soon as you turn on your computer. I have on several occasions asked friends, “What’s this on your taskbar?” You might be surprised how many times I get the answer, “I don’t know.” Well, odds are, if you don’t know what it is, you probably aren’t using it. I’d then suggest you disable it. Please note, that disabling items from Start Up, does not disable the program itself. The program can still be accessed via a desktop icon or the Start menu. Ok, now you ask, “How do I disable them at Start Up?” The first place to look would be the “Start Up” folder on the Start menu. Simply delete the entry in the Start Up folder. Also, many programs allow you to choose whether or not they will “Start when Windows starts”. Right clicking the icon on the taskbar and choosing “Options” or "Preferences" can access most of these. Now, you may have to dig around a little to find the option. It seems some programs like to “hide” this option. Another option is to use the “msconfig” command. Netsquirrel.com contains a nice tutorial on accessing “msconfig”.
Once there, we are interested in the “Startup” tab. This contains the list of programs that are automatically loaded every time you turn on your computer. Again, it is user preference to determine which programs are needed at start up. Here is a list of common start up entries and their definitions.

Bob Wells recommends Mike Lin's Startup Control Panel to access the Start Up configuration.

I recently stumbled across Windows Startup Inspector.
Quote:
Windows Startup Inspector is a Windows™ platform software that helps Windows™ user to manage Windows™ startup applications. On www.windowsstartup.com, there are more than 3,400 known programs in the database. Windows Startup Inspector can thus provide a consultative information on the programs that are running at your Windows startup process. Whether a program is necessary to the system, or is the program a spyware.

Scans all programs that are in the Windows Startup Folder, Registry and provide you with a background information of the program.
Remove harmful programs like spyware, virus, dialers, make your system healthier.
Remove unnecessary programs like reminders, monitors, improve your systems performance.
Windows Startup Inspector is Freeware.



Windows Startup Online®
Quote:
is the database source for Windows Startup Inspector®. Information of each startup program is retrieved from here. Currently WSO has 3880 programs information stored in the database. You can browse or search them at WSO.



-----------------------------------------------------------------------------------------------

This concludes my brief tutorial on tweaking your computer to make it more secure and stable. I’m confident that if you follow these simple instructions, your internet experience will be more pleasurable. If you ever have any questions and/or comments, please feel free to post them here.

Now, go tweak your computer! Enjoy!
JamDog

Disclaimer:
Although I would never post anything that would cause damage to your computer, I must include this disclaimer. Please know that everything I've wrote about, I've used and/or am using. However, I am in no way responsible for any damage that may occur to your computer. These are simply suggestions. The ultimate decision on which to implement is yours.

[justalittlepup]

Funny, I was gonna look for this and bump it today. Never got around to it thou.

[IwalkAlone2]

I hope members not only realize how informative this post is, but that they also follow all these tips to stay safe. Good work bro.

I personally use Firefox, way more features with lots of extensions and tabbed browsing and less proned to spyware and hijacking.

[tomvue]

thanks .. this posting help me alot.. i didnt think browser hijacking was possible ...

[JOEYZ]

Originally Posted by tomvue

thanks .. this posting help me alot.. i didnt think browser hijacking was possible ...

Its very possible and in some cases when it happens you cant fix it without a lot of knowledge and manually removing things yourself.

[fahren]

Browser jacking can really put a hurt on a lot of things. Plus the time it takes to get everything fixed is precious

[jo_je88]

thannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnx

[drewmangoo]

How do you know when free security help isn't bogus. I'm always scared to download free spyware.

[FoxyDawn555]

Well, I have been using Nortan Antivirus,I update it time to time. But last day i got virus which keeps on shutting down my PC.thanks God, My HD was safe. ,..................

Anyways, Thanks for great info.I m thinking of using Spyware bot too.

[3esa]

thanks