New XP Pro User Questions

[Jan]

I continue learning the world of XP Pro after many years of
98SE. I have a few nagging questions about the software, that I am
currently using on my system---mainly with the built-in XP firewall and
my lack of any anti spyware software on this new system. Thus, here are
my questions for those who have been around XP Pro for some time:

---Can I rely on the built-in XP Pro firewall software to protect my
computer? Do most people use the built in XP software, or do they
disable it in favor of some other program? If disabled in favor of
another program, what is a good program to use; and how do I disable the
XP Pro firewall? I have never made any adjustments to the firewall,
since XP Pro was installed. Should I change any settings? Is there a
way to test the built-in firewall?

---I continue to be somewhat concerned about spyware, span and/or
whatever getting on and operating in the background on this computer
without my knowledge. I have heard about something called Windows
Defender being a good way of protecting my computer. I note, however,
that this software is now in Beta. Is Windows Defender good and stable
enough for an amateur to use on a home system? Are there other
recommended programs I should consider for installation on my new
computer?

I simply want to keep all of the unwanted things off my
computer---thus, I am open to any and all suggestions on how to
accomplish this task.

By the way, I do have an anti-virus program on this computer.

Thanks in advance for any help sent my way.

 

[dev]

/Jan/ said:

I continue learning the world of XP Pro after many years of
98SE. I have a few nagging questions about the software, that I am
currently using on my system---mainly with the built-in XP firewall and
my lack of any anti spyware software on this new system. Thus, here are
my questions for those who have been around XP Pro for some time:

---Can I rely on the built-in XP Pro firewall software to protect my
computer? Do most people use the built in XP software, or do they
disable it in favor of some other program? If disabled in favor of
another program, what is a good program to use; and how do I disable the
XP Pro firewall? I have never made any adjustments to the firewall,
since XP Pro was installed. Should I change any settings? Is there a
way to test the built-in firewall?

---I continue to be somewhat concerned about spyware, span and/or
whatever getting on and operating in the background on this computer
without my knowledge. I have heard about something called Windows
Defender being a good way of protecting my computer. I note, however,
that this software is now in Beta. Is Windows Defender good and stable
enough for an amateur to use on a home system? Are there other
recommended programs I should consider for installation on my new
computer?

I simply want to keep all of the unwanted things off my
computer---thus, I am open to any and all suggestions on how to
accomplish this task.

By the way, I do have an anti-virus program on this computer.

XP's firewall is INCOMING only, so if something nasty should happen to be
installed - and is trying to phone home - the built-in firewall won't detect
it. That said, that is what I use - along with the broadband router, which
affords even more protection. I don't have a problem.

Windows Defender tool is just fine. Install it.
http://www.microsoft.com/athome/security/spyware/software/default.mspx
Also install AdAware (free version), which you can run from time to time.

Do not click on links that report "you have spyware on your computer" or use
other tempting phrases. Simply close out of them with the X in the upper
righthand corner - not on the CLOSE or OK buttons within the window itself.

Do not download unknown .exe, .bat, vbs attachments from mail recipients,
unless you know that they can be trusted. If unsure, use a detection tool,
but be aware that each of these tools uses resources and _may_ affect system
stability and usability. Personally, I do not use them.

Your final protection, and perhaps the most important utility that you will
ever install, is an imaging tool. This images the partition in its entirety
- all files, all folders, all settings. Use it regularly to back up the
system to another hard disk partition or removable media. If problems
arise, simply restore the image, and you're right back where you began. It
can also be useful for testing new settings or programs. Create an image,
then test. If something goes awry, or you do not want the new settings or
programs, restore the image. No trace of the test will remain.

There are several such tools. One is Image for Windows -
http://terabyteunlimited.com
This utility is capable of restoring your Windows operating system even if
it will not boot. It also creates bootable CDs or DVDs, should the hard
disk fail.

 

[Bruce Chambers]

I continue learning the world of XP Pro after many years of
98SE. I have a few nagging questions about the software, that I am
currently using on my system---mainly with the built-in XP firewall and
my lack of any anti spyware software on this new system. Thus, here are
my questions for those who have been around XP Pro for some time:

---Can I rely on the built-in XP Pro firewall software to protect my
computer? Do most people use the built in XP software, or do they
disable it in favor of some other program? If disabled in favor of
another program, what is a good program to use; and how do I disable the
XP Pro firewall? I have never made any adjustments to the firewall,
since XP Pro was installed. Should I change any settings? Is there a
way to test the built-in firewall?

WinXP's built-in firewall is adequate at stopping incoming attacks,
and hiding your ports from probes. What WinXP SP2's firewall does not
do, is provide an important additional layer of protection by informing
you about any Trojans or spyware that you (or someone else using your
computer) might download and install inadvertently. It doesn't monitor
out-going network traffic at all, other than to check for IP-spoofing,
much less block (or at even ask you about) the bad or the questionable
out-going signals. It assumes that any application you have on your
hard drive is there because you want it there, and therefore has your
"permission" to access the Internet. Further, because the Windows
Firewall is a "stateful" firewall, it will also assume that any incoming
traffic that's a direct response to a Trojan's or spyware's out-going
signal is also authorized.

ZoneAlarm or Kerio are much better than WinXP's built-in firewall,
in that they do provide that extra layer of protection, are much more
easily configured, and have free versions readily available for
downloading. Even the commercially available Symantec's Norton Personal
Firewall provides superior protection, although it does take a heavier
toll of system performance then do ZoneAlarm or Kerio.

Symantec Security Check
http://security.symantec.com/ssc/home.asp

GRC's ShieldsUp
https://www.grc.com/x/ne.dll?bh0bkyd2

---I continue to be somewhat concerned about spyware, span and/or
whatever getting on and operating in the background on this computer
without my knowledge. I have heard about something called Windows
Defender being a good way of protecting my computer. I note, however,
that this software is now in Beta. Is Windows Defender good and stable
enough for an amateur to use on a home system? Are there other
recommended programs I should consider for installation on my new
computer?

Windows Defender is still in beta testing; it's not ready for prime
time, yet. Try it, if you like, but don't rely on it, just yet.

To deal with issues caused by any sort of "adware" and/or
"spyware," such as Gator, Comet Cursors, Smiley Central, Xupiter, Bonzai
Buddy, or KaZaA, and their remnants, that you've deliberately (but
without understanding the consequences) installed, two products that are
quite effective (at finding and removing this type of scumware) are
Ad-Aware from www.lavasoft.de and SpyBot Search & Destroy from
www.safer-networking.org/. Both have free versions. It's even possible
to use SpyBot Search & Destroy to "immunize" your system against most
future intrusions. I use both and generally perform manual scans every
week or so to clean out cookies, etc.

Additionally, manual removal instructions for the most common
varieties of scumware are available here:

PC Hell Spyware and Adware Removal Help
http://www.pchell.com/support/spyware.shtml

More information and assistance is available at these sites:

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

The Parasite Fight
http://www.aumha.org/a/parasite.htm

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin