COMPUTER INTERNET SECURITY
Class and Website
for personal computers at home
Genealogy Research At The Los Angeles Regional Family History Center
Revised 6 February 2008
Jon Schweitzer - Instructor
1. INTRODUCTION
2. OPERATING SYSTEM
3. BROWSER
4. EMAIL PROGRAM (CLIENT)
5. ACTIVE, SEMI-ACTIVE AND PASSIVE SECURITY PROGRAMS
6. FIREWALL
7. MALWARE: COMPUTING'S DIRTY DOZEN
8. ANTI-VIRUS PROGRAM
9. ANTI-TROJAN PROGRAM
10. SPYWARE AND ADWARE PROGRAMS
11. ROOTKITS (Malware) AND SCANNERS
12. INTRUSION PREVENTION AND DETECTION PROGRAM
13. WIRELESS SYSTEMS
14. SECURITY
15. SECURITY TESTING AND SETTINGS
16. SPAM
17. PROBLEMS AND TROUBLESHOOTING
18. BACKUP YOUR FILES
19. CLEANING OUT FILES AND CORRECTING REGISTRY FILES
20. FREE PROGRAMS AND TOOLS
21. GREAT DOWNLOADS LINKS
22. TECHNICAL HELP AND SUPPORT
23. UNSCRUPULOUS BEHAVIOR BY SOFTWARE SUPPLIERS
24. CREDIT
25. MAC SECURITY
USE THE ACTIVE LINKS BELOW TO VISIT EACH SITE.
Additional information, this handout and 2004 or newer printouts of each Website link below may be found in my companion Red 3-Ring Self-Help Notebook -- "Computer Internet Security".1. INTRODUCTION "Layered protection means running multiple security products so
that if one layer fails, another will protect you. All PC users,
for example, should have an anti-virus scanner, a spyware
scanner and a firewall. Higher risk users may also need an anti-Trojan scanner,
an intrusion detection program and more." - From
Support Alert Free Edition, Issue 118 - 16th February, 2005.
A great summary of computer security is at http://www.techsupportalert.com/how-to-secure-your-pc.php
A great place that has most of the items required for
your computer security is at http://www.cert.org/homeusers/HomeComputerSecurity/ and the lines of defense required in your computer are at http://www.firewallguide.com/
You are at WAR with many enemies when you enter the Internet. You must have many good soldiers guarding your computer door. The items below are only the minimum required for your computer to remain alive.
Read the security dangers and the reasons why you should make big changes at
http://eogn.typepad.com/eastmans_online_genealogy/2004/07/major_windows_s.html
It's a big job but you will be happy with the results.
Summary of security things that you must do so that you don't drown in a sea of problems.
Learn how to do your computer software and security work OR find someone who will
Update your operating system
Change settings in your operating system
Install and segregate a separate operating system and Internet programs (optional)
Replace and disable your Microsoft Internet Explorer browser
Replace Your Microsoft Outlook or Outlook Express email program
Install "MailWasher" between your ISP server and your email program
Install a firewall
Install an active Anti-Virus program
Install an active or passive Anti-Trojan program
Install at least two passive Spyware and Adware programs
Install Intrusion Prevention and Detection program
Install a Rootkit scanner
Run tests on the security of your system
Make Additional security changes as required
AND THEN REGULARLY
Update all your security programs
Scan for all types of "bugs"
Cleaning out files and correcting registry files
Backup your files
Run tests on the security of your system
Print out a work sheet of the Summary Items above for yourself or your computer tech.
Before installing new programs and after scanning them for viruses, go offline and turn off all Anti-Virus and all other programs. Before going online, remember to turn on your security programs.
Only be connected to the Internet or be online when you are working on the Internet. Don't be connected when it's not absolutely necessary.
Even after you install and use the security programs below you might have old infections that you might have to work hard to remove.
2. OPERATING SYSTEM
If you keep using the Microsoft's Internet Explorer browser and/or Outlook email program, it is highly recommended that you install and segregate a separate
operating system, Internet and security programs for ONLY Internet use by
1. partitioning your hard drive OR
2. adding another hard drive OR
3. the very best would be to use a second computer and use a special electronic 2 port switch called a KVM with cables to connect your keyboard, mouse and monitor to TWO computers. Cost is under $30 on eBay.
To connect one printer to the two PC computers you may use a parallel 2 port bi-directional switch for the older printer OR a 2 way/2 port USB switch box for the newer printer. The cost for either is under $20 on eBay.
Installing the great Linux operating system instead of the security plagued Microsoft
Windows operating system would be the very best bold decision to make but will require more work. See a great article about the Linux program at a very long URL
Most of the software for Windows will not work with Linux. An up to date big list of 6488 programs is on the left side of http://www.linuxsoft.cz/en/ Also see http://www.icewalkers.com/Linux/Software/
The Windows operating system has the biggest security problems. Some versions have more security problems than others. The problems are minimized if you download and install the latest security patches or service packs for your version of Windows. Use the "Windows Update" when you click "Start" on your Desktop. I think that you have to use Internet Explorer with the update. You may also go to http://www.microsoft.com/downloads/search.aspx?displaylang=en for the downloads.
For Windows 2000 set the Windows folder options by going to "My Documents", "Tools", "Folder Options", "View" and If you have Windows 2000/XP/NT, turn off (disable) Windows Messaging as described at
http://www.itc.virginia.edu/desktop/docs/messagepopup/ OR you must have a firewall to block outside junk messages. You can't disable it in 98 or ME.
Check: "Show hidden files and folders"
Uncheck: "Hide protected operating system files"
For Windows XP Select
"Display the contents of system folders"
Next go to Search and scroll down using the scroll bar on the right. Go down to More advanced options and click.
Be sure the first three boxes are selected:
Search System folders
Search Hidden Files and folders
Search Sub Folders
If you install the Microsoft XP operating system, do not activate it online until after you have installed your firewall and other security programs.
3. BROWSER Instead, disable the Internet Explorer program per this method from Support Alert Free Edition, Issue 121 - 18th May, 2005 at http://www.techsupportalert.com/issues/issue121.htm There are several disabling techniques but I suggest the method
below as it's simple, easy to reverse and doesn't interfere with
the operation of the Windows Update service.
Step 1. From IE select Tools/Internet Options/Connections/LAN
Settings. What you've done is set up a dummy proxy server 0.0.0.0 that
goes nowhere. With these setting IE cannot make an HTML
connection to the Internet and vice versa. You have simply and
effectively disabled IE.
There's no magic in the 0.0.0.0 address, any dead proxy address
would work just as well. I've used that particular address to
keep things simple.
If you ever need to re-enable Internet Explorer start it up and
select Tools/Internet Options/Connections/LAN Settings from the
toolbar and un-check the box "Use a Proxy Server for your LAN
..."...."
Use any other browser than the Microsoft browser Internet Explorer. It has the biggest security problems because the cyber terrorists or human scum bags have targeted the weaknesses of the browser
because now it is the most popular browser. If you want to stop have problem after problem, running Anti-Virus scans and removing viruses, grief and misery then stop using the security plagued Microsoft Internet Explorer except for updating Windows.
Please read the web site at http://eogn.typepad.com/eastmans_online_genealogy/2004/11/stop_using_inte.html#more
If you come to your senses and stop using Internet Explorer, then look at each of the many Internet browsers at http://www.softpedia.com/get/Internet/Browsers/ and http://www.upsdell.com/BrowserNews/find.htm and choose one that is best for your use. I use the free Mozilla Firefox and it's at http://www.mozilla.com/firefox/ and a reviews about this browser is at
http://www.pcworld.com/article/id,116848-page,1/article.html and http://www.sitepronews.com/archives/2004/nov/17.html Here are more free browsers: Netscape is a browser and e-mail client at http://browser.netscape.com/ns8/download/default.jsp and K-Meleno is at http://kmeleon.sourceforge.net/ and
Opera is at http://www.opera.com/products/ The last two have small printing problems.
DON'T delete the Internet Explorer program from your computer because you will be FORCED to use Internet Explorer to use your Windows Update feature or access Microsoft's website at http://www.windowsupdate.com/ to download anything.
"...Instead of removing IE I favor the simple and safer approach of
disabling it. Sure, it may not provide the same degree of
security as complete removal but that's a small price to pay
compared to the cost of potentially de-stabilizing Windows."
Step 2. Put a tick in the check box next to "Use a Proxy Server
for your LAN ..."
Step 3. Type in "0.0.0.0" in the address box and "80" in the
Port box. Don't type in the quote marks of course, just
what's inside them.
Step 4. Click OK.
Internet Explorer
If you are still determined to use the very troubled Internet Explorer (IE), you should do the following:
Upgrade IE4. EMAIL PROGRAM (CLIENT)
The Internet Explorer problems are minimized if you have the latest browser or the latest upgrades to your present browser. Download these items from http://www.microsoft.com/windows/ie/downloads/default.mspxDelete Temporary Internet And History Files
Deleting the Temporary Internet and History files might eliminate some troublesome junk you have picked up on the Internet. You may choose to have the browser automatically delete these temporary Internet files each time you close the browser. You do this by going to the Tools, then Internet Options, Advanced, Security and clicking "Empty Temporary Internet File folder when browser is closed". Also go to the toolbar and Tools, Internet Options, General, Temporary Internet Files and click Delete Files and then go to History and click Clear History. Suggest you also clean files using the CCleaner (Crap Cleaner) program that is mentioned below in "19. CLEANING OUT FILES".
If you are still determined to keep the very troubled Outlook or Outlook Express, you should do the following:
Disable Preview Pane
There are several steps that e-mail users can take to block Web bugs; as an added bonus, some of these steps will help curb (but not prevent) the spread of viruses because Microsoft Outlook and Outlook Express makes it far too easy. First of all, turn off the Preview Pane function in Outlook. If the Preview Pane is on, a Web bug may be activated as soon as you select the e-mail from the list of messages in your inbox. To turn the Preview Pane off in Outlook, go to the View menu and uncheck "Preview Pane" or go into Layout and uncheck "Show preview pane". See http://www.securityfocus.com/infocus/1579Disable HTML For Email
Be aware that sometimes people embed hidden coding within HTML coding that can execute hidden commands and really cause some harm. Disable it by staying in Outlook or Outlook Express, staying on the Read tab, and checking the box next to "Read all messages in plain text".Last thing, NEVER open e-mail attachments you didn't know 100% sure were coming. Then, if you knew they were coming, verify with the sender that they truly did send it. Some viruses can forge sender names and make you think someone sent you a virus when they didn't.
If they did send it, save it first and run an anti-virus scan on it to be positive there is no virus lurking in there. Also do the same with anything you download from the Internet, ALWAYS.
Keep some common sense. If you go surfing for hacking tools or hacked programs, chances are you are going to be open to Spyware, viruses, and hacking yourself. Also this happens a lot of porn websites. They will usually be infested with Spyware.
The above is from http://www.computing.net/security/wwwboard/forum/10758.html Response Number 3
Outlook Express - Restricted Sites – Browser Settings
See http://www.securityfocus.com/infocus/1579 and make all the settings for "Zone Settings...", "Custom Level ...", and "Active Scripting" .
Read Your Email Offline OR Use MailWasher
The best way to stop Web bugs in their tracks is to read your e-mail while you're not connected to the Internet or use the MailWasher program under 16. SPAM below. MailWasher allows you to review all email on your ISP server and delete all the junk before you download the good email into your email program. After all, if a Web bug can't send
information back to the mothership that spawned it, then it's useless. If you're connecting to the Internet via a dial-up modem, going offline is easy - just disconnect. If you're using broadband,
like DSL or a cable modem, it's more complicated, but you can do it. However, do you really want to have to disconnect every time you read e-mail, and then reconnect when you're finished? If you're
using a modem, the wait can be interminable.
Fortunately, there's a better solution. Several e-mail clients allow you to take the program offline without taking the entire computer offline. This allows you to read e-mail and reconnect
immediately again as needed. You get the same effect as a disconnection, but it's far less hassle.
You must delete all spam and possible Web bug infested e-mail before you connect
again to the Internet because the infected e-mail might send data back to the mothership
or do other mischief.
5. ACTIVE, SEMI-ACTIVE AND PASSIVE SECURITY PROGRAMS
An active program is always working when you have the computer on.
After installing each active security program you should check the Windows Task Manager performance for excessive CPU usage in case there are conflicts with other program. There
should only be narrow base spikes every 2 or 3 seconds.
A semi-active program may be scheduled to run tests periodically and do its work.
A passive program does its work only when you run it.
See http://www.techsupportalert.com/best_46_free_utilities.htm for many of the best and free programs.
6. FIREWALL The firewall program might alert you if you need an update, but you should check every few months for a new update at the program's website or by using the firewall’s program link to updates.
The firewall default settings are not good enough. You will have to test and make changes to the settings of your firewall to obtain the maximum security. See section 15. for more information.
If you have cable/DSL/Broadband/Wideband or not a dialup connection, you will have
an opportunity to install a hardware firewall using a router to one or more
computers. The hardware firewall is superior to the software firewall. The router is connected between the Broadband line and your computer. The router costs about $25 to $100 on eBay at http://www.ebay.com/
The router must have a firewall. Suggest you research routers by entering the words "best routers" at http://www.google.com/ Here is a list of "best routers" at http://compnetworking.about.com/cs/dslcablerouters/tp/dslcablerouters.htm The router only blocks incoming "things" so you must also have a firewall in your computer to block any unwanted outgoing traffic!
Having an active software firewall is the single best security protection for your computer. The installation can be difficult and it can sometimes be annoying with the interruptions that are asking your permission to do something. The firewall requires training and updating. There are a number of excellent software firewalls. The very excellent free Sygate Firewall has been discontinued and is not supported but is still available at http://www.simtel.net/product.download.mirrors.php?id=53687 and http://www.computerbase.de/downloads/software/online-sicherheit/sygate_personal_firewall_pro/. An unoffical user's manual is at http://personal.atl.bellsouth.net/i/k/ikpe/index.html
The free firewall Kerio at http://www.sunbelt-software.com/Kerio.cfm and free ZoneAlarm at http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp (9.0MB) are recommended for most people.
A free firewall for experienced users is NetVeda Safety.Net at http://www.netveda.com/consumer/safetynet.htm (6.3MB).
Firewall Website link
http://www.freebyte.com/antivirus/
7. MALWARE: COMPUTING'S DIRTY DOZEN
A wonderful list and explanations of each malware and what faces you in your battles on the Internet is at http://www.sitepronews.com/archives/2005/oct/21.html
8. ANTI-VIRUS PROGRAM
Only one active Anti-Virus program should be installed and working, at all times monitoring e-mail, e-mail attachments, surfing Websites and external sources such as CDs, floppies and other storage
devices. A nice free active Anti-Virus program is AVG available for download at http://www.grisoft.com/doc/289/lng/us/tpl/tpl01
Schedule a program update every three days from their Website. Schedule an automatic virus check of your computer every day. Scanning speed is average.
If you get a notice of a virus and you will be using the Anti-Virus program to remove it, take note of the file location and then you have the choice of only scanning the file that has the virus, to save a lot of time.
Anti-Virus Website link
http://www.freebyte.com/antivirus/
9. ANTI-TROJAN PROGRAM
Anti-Virus and other programs are not good enough to find and remove Trojans. Leading Anti-Virus systems are good at detecting viruses, but relatively poor at Trojan detection. Trojans are
malicious programs often used by hackers to attack target computers, usually to provide a backdoor into the system but sometimes just to cause destruction. Remote Access Trojans (RATs) are the most
famous class of Trojans and they usually come in two parts - a server that is sent to infect the victim, and a client that the hacker uses to connect to the server after the victim is infected. There
are many methods that hackers can use to infect a target with a Trojan, and careful security measures aren't always enough.
You must have at least a passive Anti-Trojan program such as the free Ewido Security Suite at http://www.ewido.net/en/?section=download
The purchased Ewido Security Suite is now an active program. Scanning speed is average.
Another passive free Anti-Trojan program is "a squared free" (a2) at http://www.emsisoft.com/en/software/download/ Scanning speed is average.
If you get a notice of a Trojan and you will be using the Anti-Trojan program to remove it, take note of the file location and then you have the choice of only scanning the file that has the Trojan, to save a lot of time.
Anti-Trojan Website links
http://www.freebyte.com/antivirus/
http://www.windowsecurity.com/faqs/Trojans/
http://www.broadbandreports.com/faq/9721
http://www.broadbandreports.com/faq/7728
10. SPYWARE AND ADWARE PROGRAMS
What are Spyware and Adware?
Spyware and Adware are software made by publishers that allow them to snoop on your browsing activity, invade your privacy, and flood you with those horrible popups and more. If you are like most
users on the Internet, chances are you are probably infected with these applications. That is why you must have at least one program.
Why does Spyware and Adware affect every Internet user?
All information you enter via the web can be intercepted.
Unauthorized sites can add themselves to your desktop (icons).
Unauthorized sites can add themselves to your Internet favorites.
Your browsing activity can be tracked and monitored.
Your personal information can be sold to other parties without your knowledge or consent.
Your default homepage and settings can be hijacked so you can't change them.
These malicious components not only invade your PC so they cannot be removed, but takes up your hard drive space and slow down your PC!
This junk, that invades your computer from e-mail and websurfing, causes the greatest low-level security annoyances and results in poor overall performances, slow operation of programs, freezes or lockups.
Prevention
A frequently heard question is "how on earth did I get infected with all that Spyware in the first place?"
See http://www.computercops.com/postt7736.html
Prevention and removal programs
SpywareBlaster and SpywareGuard are both free active programs. SpywareBlaster will prevent Spyware from being installed and consumes very little system resources. SpywareGuard
offers real-time protection from Spyware installation attempts. The two programs work together to prevent infection in Internet Explorer OR Mozilla/Firefox.
Download SpywareBlaster at http://www.javacoolsoftware.com/spywareblaster.html
and SpywareGuard at http://www.javacoolsoftware.com/spywareguard.html
IE/Spyad places over 4000 websites and domains in the Internet Explorer Restricted list which will severely impair attempts to infect your system. It is free.
A great tutorial is at http://www.bleepingcomputer.com/tutorials/tutorial53.html
You may download this passive list/program at http://www.spywarewarrior.com/uiuc/resource.htm
Scanning, detection and removal programs
A very good free passive Spyware scanning, detection and removal program is Ad-Aware. It may be downloaded free from
http://www.lavasoftusa.com/support/download/ Manually run the program at the end of every day you use the Internet or once a week if you don't have Internet Explorer and Outlook. Scanning speed is very fast.
Another excellent free passive Spyware scanning, detection and removal program is Spybot - Search and Destroy. It might find a few more things. It may be downloaded at http://net-security.org/software.php?id=556 Manually update the program's database every few weeks and run the program at least every 3 days or once a week if you don't have Internet Explorer and Outlook. Scanning speed is
average.
A big collection of Adware, Spyware and Malware is at http://www.bchra.org/2007/TipsTricks/Spyware-2.htm
Spyware Website link
http://www.freebyte.com/antivirus/
11. ROOTKITS (Malware) AND SCANNERS
The Rootkit is a special kind of malicious software tool that infects your computer and hides Trojans, viruses and malware from your anti-virus scanner and other security products. For information about rootkits, see http://www.pcsupportadvisor.com/rootkits.htm
Fortunately there is a new class of detectors to find these Rootkits. The best free Rootkits scanner/detector is IceSword at http://antirootkit.com/software/IceSword.htm IceSword is for only experienced users.
12. INTRUSION PREVENTION AND DETECTION PROGRAM Many anti-virus vendors only distribute updates to their signature files on a weekly basis. In the interval between updates your PC is vulnerable to new threats. Unfortunately such threats can propagate across the Internet in hours. That's where IDS and IPS can play a vital role in securing your PC.
These (intrusion prevention and detection programs) products detect malware trying to get into your PC by its behavior rather than by looking for a characteristic signature. Kind of like a detective catching a thief using his modus operandi rather than his fingerprint. Any of you who use WinPatrol or SpyBot's TeaTimer are actually using a form of IDS." This was copied from
http://www.techsupportalert.com/intrusion-detection.htm and
"Current security products like anti-virus software and spyware scanners have a serious weakness. They are only effective at protecting you from viruses, worms, Trojans and spyware that are currently listed in their signature databases. They offer limited protection against new malware products whose signatures are unknown.
http://www.techsupportalert.com/intrusion-detection-p2.htm
See more at http://www.techsupportalert.com/best_46_free_utilities.htm
13. WIRELESS SYSTEMS
They are very vulnerable unless additional security is installed such as basic encryption, router with firewall and other protection. The additional security is required to prevent such things as connection theft, eavesdropping, hacking or network invasion. See all the things you have to do for security at these websites: http://www.practicallynetworked.com/support/wireless_secure.htm and http://compnetworking.about.com/od/wirelesssecurity/tp/wifisecurity.htm and
http://www.madge.com/wireless-security.aspx
More sites are: http://www.zdnet.co.uk/misc/print/0,1000000169,39223889-39001093c,00.htm and http://www.extremetech.com/article2/0,1697,1152933,00.asp
Configure your router to a channel that is NOT #6.
14. SECURITY
Basic Rules
Disable HTML in your e-mail software
Disable ActiveX in Internet Explorer
Never open e-mail attachments until after scanning
Never download anything from untrusted sources
Scan CD-ROMs and floppy disks before opening them
Try to avoid giving away your IP, especially when it's a static one
Always scan new programs and downloads
Avoid "underground", pirated software, cracks and porn websites
Check for updates for security programs and windows
Note: In a few cases you might have to enable (turn on) the Active-X to download software.
Security tests of your system online
Run all the scans and tests at Jasons-Toolbox, http://www.jasons-toolbox.com/BrowserSecurity/ and PC Flank, http://www.pcflank.com/about.htm and Symantec,
http://security.symantec.com/ssc/home.asp?langid=ie&venid=sym&plfid=20&pkj=ZMDMPJUIYCZRWEJGSSK only if you have IE or Netscape browsers. Also test using http://www.dslreports.com/scan/
You must make the necessary changes to the settings and configurations of your firewall, browser, email client and operating system to improve security after all the testing.
Security settings links
http://www.markusjansson.net/exp.html for Win 2000 and XP
http://www.georgedillon.com/web/security.shtml
http://www.techspot.com/tweaks/windows_security/index.shtml plus 9 more sections or pages
Free security tools links
http://www.freebyte.com/antivirus/
http://www.broadbandreports.com/faq/8428
http://www.computing.net/security/wwwboard/forum/10758.html
Security Website link
http://www.dozleng.com/updates/index.php?act=links is a VERY LARGE list of security things
15. SECURITY TESTING AND SETTINGS Firewall testing for open ports Test for the ports that are open at Shields Up! at https://www.grc.com/x/ne.dll?bh0bkyd2
Browser testing
Use http://bcheck.scanit.be/bcheck/ and http://www.theregister.co.uk/2003/03/06/scan_your_browsers_security/ and http://www.cyscape.com/showbrow.aspx
Firewall testing
There are many firewall tests are at http://www.firewallleaktester.com/index.html
Each computer application uses a "port" or doorway to use the Internet. All the "bad things" on the Internet try to use ports to invade your computer. You must keep these ports closed for your computer's security. The FIREWALL controls the security of the ports!
FAQ about open ports are at http://grc.com/faq-shieldsup.htm
Close all unnecessary programs before doing the following tests.
A list of tests is at http://www.firewallguide.com/test.htm
Obtain the free port scanner program pcSuper Scanner at http://www.dirfile.com/pcsuper_scanner.htm and install it.
Obtain the free Vision Program at Free Tools, Forensic Tools at http://www.foundstone.com/us/resources/proddesc/vision.htm that shows the computer programs that are in use and the ports that they are using that are open.
Look at least the results of the pcSuper Screenshot and Vision Screenshot tests to find any open ports that are not being used by your computer applications. You must than close all the unused open ports.
The best way to do that is to configure or make a change to your firewall. Find the firewall users manual on the firewall's CD or go to the firewall's website and obtain a printout of the user's manual. Read the manual to learn how to close the open ports. Look for the "Advanced Rules or Configurations".
There are links to lists of the 65,535 port assignments at http://ports.tantalo.net/
Look at your security logs in your firewall for the Remote Hosts IP numbers that are knocking on the doors or ports. The IP are 4 groups of numbers. Search for the owners of the IP numbers and information at http://ws.arin.net/whois/ or at http://www.auditmypc.com/freescan/portsearch.asp
In the information you will find the range of IP that the port knockers are using.
Firewall Rule Making
Some firewalls allow Rules to be made to block incoming and outgoing traffic. If your firewall allows Rule Making use the Advanced Rules in your firewall to block the ranges of IPs.
This page shows examples of screenshots from a firewall and gives a great deal more detailed information about analyzing firewall logs and setting up "Rules" to block unwanted traffic.
Computer Settings Firewall Settings
How to configure TCP/ip filtering in Windows 2000 is at http://support.microsoft.com/?kbid=309798
Study your firewall user's manual.
Search for a firewall forum or security forum on the Internet for your firewall.
Here are some general links for firewall settings.
http://www.marketvolume.com/content/support/troubleshooting/set_firewall.asp
http://www.weightlossresources.co.uk/help/techlo/firewall_lo.htm
http://www.echolink.org/firewall_solutions.htm
16. SPAM
Install the free MailWasher program and it will offer great protection from
Web bugs. This program allows you to review all your email and junk Spam on your ISP's server. You delete all junk before saving the good e-mail on your computer. Using the MailWasher program MIGHT reduce the amount of SPAM you receive and allow you to follow the quality of e-mail in the statistics under "Tools".
Download the MailWasher program at http://www.firetrust.com/firetrustmwpro_download.html
You have a filtering advantage with spam if you copy the starter Blacklist and Filters into the MailWasher from:
http://www.w5hq.com/MailWasher/MailWasherFilters.txt and
http://www.spamanti.net/en/domains.php
Another very big one-year-old Blacklist List and Filters list are in text at http://www.w5hq.com/MailWasher/
You must copy and paste only "txt" and the MailWasher must be closed. You may add the Blacklists and Filters at C:\Documents and Settings\"user name"\Application Data\MailWasher Pro\Blacklist.txt OR filters.txt. Subscribing to the "FirstAlert active database online might reduce your Spam. Find more information about it at http://www.firetrust.com/firetrustfirstalert.html
To effectively reduce the quantity of e-mail or Spam with MailWasher you MUST review all the junk, right click and make all the junk "blacklist" and choose in "Spam Tools" the "My Blacklist" the "Action" "Automatically (without notification)".
Phishing: (fishing) (n.) The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. DO NOT BITE!
17. PROBLEMS AND TROUBLESHOOTING
Case study of a very nasty Trojan and the applied solution
A Trojan was detected by the Anti-Virus Program (Program) and the Program was run and the files were deleted or placed in the "Vault" or "Quarantine". After the Program
had finished, the Trojan had reproduced itself and was present again. Repeating
the Program's work produced the same result.
The placement of the Trojan files in the "Vault" or in "Quarantine" showed that the
Program could not properly delete the files. I had to research very hard to find
the solution to this problem. I placed the name of the Trojan - "Scagent.A" in
Google to look for other people that had the same problem and see if they had
the solution to the problem. I found the solution. It was to reboot and press F8
and enter "Safe Mode" and deleted all three files C:\WINNT\httpfilter.dll, C:\WINNT\digfilt.dll and C:\WINNT\system32\scagent.exe and delete them from the recycle bin. The fourth Trojan file in C:\Documents and Settings\... changed with every deletion
of the files using the Program. After deleting the three files in "Safe Mode", I
ran the Program again to delete the final Trojan file.
If you can't get rid of the virus or spyware by using the all the programs, you have the options:
l. Update your Anti Program and wait for it to find a permanent solution.
This has a very small chance.
2. Record the files that your Program has attempted to delete and enter "Safe
Mode" and delete them.
3. Look for another person's solution using Google.
4. Download the free HijackThis at http://www.tomcoyote.org/hjt/ that explains things or http://www.spychecker.com/program/hijackthis.html Do a scan, and copy/paste the log into a new thread at http://www.techguy.org/ The members will look it over and tell you what to remove.
"Program Error" Warnings On Screen
Warning: Sometimes these warnings are a hoax and deleting the item might render
your system inoperative.
First Corrective action: You might have a virus in your computer and you should run all your "anti"-programs.
"Iexplorer.exe has generated errors and will be closed by Windows. You will need to restart the program"
Corrective action: Try deleting the temporary Internet files and history. In the browser go to the toolbar and Tools, Internet Options, General, Temporary Internet Files and click Delete Files and
then go to History and click Clear History.
See more details at http://ask-leo.com/iexploreexe_has_generated_an_error_now_what.html
"Svchost.exe has generated errors"
Your system is infected with the MsBlast.A virus.
Corrective action: remove virus and install the MS03-026 Microsoft Patch at
http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx
Deleting problems
If you are having a problem deleting a bad thing, reboot and rapidly press F8 many times and you will be entering the Safe Mode area where you will choose Safe Mode and find your item and delete.
Make sure you clean it out of the Recycle Bin immediately.
Another method is right click on the item and choose "Properties" and if the box "Read only" is checked, uncheck it and then try to delete it.
"In some situations you may need to disable System Restore in your Microsoft Windows (98 ME or) XP computer in order to complete a task such as removing a virus or a piece of spyware." See this link for details. http://www.schrockinnovations.com/disablerestorexp.php
Other problems
If you have the very hard to remove "CoolWWWSearch" (CWS) browser hijacker (misdirected using Google etc.) you can remove it using the very excellent free program "CWShredder" that is downloaded
at http://www.majorgeeks.com/download4086.html
A special CoolWWWSearch.SmartKiller detection and removal program is downloaded at http://www.majorgeeks.com/download4113.html
CasinoOnline removal procedure is search for CsRemnd.exe and if found reboot into the Safe Mode by tapping the F8 key just before windows begins to load and find and delete the folder CasinoOnline at C:\Program Files\CasinoOnline. Clean out the Recycle Bin.
When you are having a problem that you can't solve, after you have run all of your programs, place the problem in a few words in Google. Enter Google at http://www.google.com/ There are many excellent forums that have experts addressing problems. The chances are that if you are having a problem, many other persons also have the problem and have gone looking for a solution.
Three help Web sites for other problems are at http://www.tek-tips.com/
http://forums.techguy.org/ and
http://www.suggestafix.com/
On-line Directory
An on-line directory and search engine for computer and Internet technology
definitions is at http://www.webopedia.com/
18. BACKUP YOUR FILES
"The Importance of Backing Up Files"
"Computer users should backup files regularly to guard against the loss of data. A backup is a duplicate of a file, program, or disk that can be used if the original is lost, damaged, or destroyed. To backup means to make a copy of a file or files."
Look at http://www.wellesley.edu/Computing/Backup/ and
http://www.online.tusc.k12.al.us/tutorials/backups/backups.htm and a survey of them at
http://www.backup-software-reviews.com/
19. CLEANING OUT FILES AND CORRECTING REGISTRY FILES
Clean the files in your computer using the free CCleaner program downloaded at http://www.ccleaner.com/ I use it once a week.
Use a registry correcting or cleaning program like Eusing Free Registry Cleaner that is downloaded at http://www.eusing.com/free_registry_cleaner/registry_cleaner.htm
Use the "ALL In One Cleaner" Advanced WindowCare 2 that in downloaded at http://www.iobit.com/advancedwindowscareper.html
Use the last two programs at least once a month or when you remove a program or have a computer or software problem.
20. FREE PROGRAMS AND TOOLS
See many of the best free programs at http://www.techsupportalert.com/best_46_free_utilities.htm
The Extended List - 71 Additional Best-ever Freebies are at http://www.techsupportalert.com/more/extended.htm
Great list of many programs (tools) at http://extremetechsupport.com/forum/
http://www.freebyte.com/antivirus/
21. GREAT DOWNLOADS LINK
http://www.freebyte.com/antivirus/
22. TECHNICAL HELP AND SUPPORT
See one the best website at http://www.techsupportalert.com/ and I suggest
that you subscribe to the free "techsupport" monthly newsletter at the bottom of the page.
See the current newsletter at http://www.techsupportalert.com/issues/al_current.htm
23. UNSCRUPULOUS BEHAVIOR BY SOFTWARE SUPPLIERS
Legitimate software suppliers are also guilty of unscrupulous tactics just like
the real bad guys. The legitimate suppliers might place Spyware in their software.
This is more common with freeware and shareware. They might also make their
software intentionally less than satisfactory so they can sell you a newer updated
version later. The moral is don't trust anyone and have the maximum computer security.
24. CREDIT
Credit is given to many other persons for the information and text that I have given above. Special credit to the material on Websites:
http://www.securityfocus.com/infocus/1579 and
http://www.computing.net/security/wwwboard/forum/10758.html and Dale Hanks.
25. MAC SECURITY
See http://www.firewallguide.com/macintosh.htm and
http://netsecurity.about.com/od/secureyourmaccomputer/
The webmaster assumes no responsibility for any problems that might result from using the above suggestions. They are all standard security procedures and should be considered computer-safe if performed correctly. The computer user must decide and take responsibility for using the above suggestions.