Security Wizard Recommendations

Printer-friendly versionPrinter-friendly version
Overview

Based on your answers you have been rated as a experienced technical user of Windows Vista who engages in high risk computer activities.

As a high risk user your PC needs very solid protection so we have recommended products that will provide that protection that are also appropriate to your skill level.

However we strongly suggest that you also consider reducing your overall risk level by following the safe computing practices outlined at the end of this page.

The Wizard recommends:
  • That before you do anything check now to make sure that your PC is not currently infected with a virus or other malware infection. Click here to find out how.

  • That you make sure that your computer is up-to-date with all the latest Windows, Office and other software updates and patches. Click here to find out how.

  • You set up Windows Update to automatically download and install any future patches from Microsoft. Click here to find out how.
Security Product Suggestions

Anti-virus Scanner

For your anti-virus protection we recommend Avira AntiVir, a free, feature reduced version of the powerful commercial anti-virus scanner AntiVir Premium.  And it's more than an anti-virus scanner; it offers anti-spyware capabilities as well. Also missing from the free version are web and email scanning capabilities but otherwise it offers the same outstanding protection against virus, worms and other threats.

The lack of email scanning is not a critical loss as AntiVir will still detect email borne viruses should they become active.

These reservations aside, Avira AntiVir offers class leading malware protection for free.

For alternatives to AntiVir, see here.  For installation tips click here.


Anti-spyware Scanner

We recommend the free version of Malware Byte's Anti-Malware.  It offers fast scanning, superb detection rates and first  class infection cleaning.  The free version lacks the real-time protection, automatic updates and automatic scheduling of the paid version but the scanner is identical.   

To use Malware Byte's Anti-Malware you need to start a scan manually ( called an "on-demand" scan) but that's simple to do.  Before you do a scan we suggest you manually initiate an update of the malware signature  file to ensure best detection.  We suggest you scan your PC at least once a week.

For alternatives to Malware Byte's Anti-Malware see here. For a video covering installation and usage click here.


Browser Protection

To protect your PC from attack while accidentally visiting a hostile website we recommend you surf using the free Sandboxie program.

Sandboxie works by creating a special area of your PC ( a "sandbox") that is totally isolated from the rest of your PC.  If you browse inside the sandbox any infection you get from a hostile website is confined to the sandbox and cannot infect the rest of your PC.

Even better, the infection can be completely removed with a click of button by deleting the contents of the sandbox.

But the sandbox has other uses. You can test any program you download by installing it in the sandbox. If the program is infected you will receive a warning from your anti-virus security software. You can then delete the contents of the sandbox and all traces of the program you installed will dissappear from your PC.  However if there is no warning, you are free to install the program on your real PC outside the sandbox confident in the knowledge that the program is safe.

For alternatives to Sandboxie see here. For usage tips click here.


Firewall

There are two great choices available to you for your firewall:

The first is the free Comodo Firewall. This provides outstanding protection against inbound and outbound attacks. However this wonderful protection is only fully realized when Comodo is installed with the "Proactive Defense+" mode enabled.  In the default installation, it is disabled.

Your second choice is the free version of the class leading commercial product Online Armor. The free version is missing a number of features found in its commercial big brother including the web shield, keylogger detection and DNS spoofing detection but it still provides potent protection.

Despite recent improvements, both products still generate a considerable number of security warnings that require user response and to be honest, only very experienced users are capable of responding appropriately. That's why these products are not suitable for average users. Indeed such users may be better off with a simpler, less demanding firewall.

For alternatives to the these firewalls see here. For a video installation and usage tutorial for Comodo click here.   A guide for installing Online Armor can be found here.


 
The Most Important Security Advice of all

The task of protecting your PC from infection is similar to crossing a busy road unharmed.

There are two, very different ways of crossing that road:

The first way is to be very careful about where you cross and to be watchful and aware of the dangers. In other words, make sure you don't get hit.

The other approach is to protect yourself with something like an army tank and cross anywhere, anytime. If you get hit, you rely on the tank to protect you.

Now no sensible person would adopt the latter approach to crossing a road, yet when it comes to computer security that's exactly what many folks do.

If you want real computer security, you need to adopt safe computing practices rather than rely totally on security products to protect you. No security product or combination of products can or ever will, provide perfect PC security just like no car can provide you with perfect road safety.  With both cars and PCs you need to be careful  in your own behavior.

Like the rules of road safety we teach our kids, the rules for safe computing are simple and well known:

1. Be very careful where you surf. To help you stay away from bad sites install a website rating browser plug-in like WOT and make sure you only visit websites rated "Green" by the plug-in.

2. Never click on email attachments from unknown sources however tempting and attractive such attachments may seem.

3. Only download files from trusted sources. These include:

  • Files hosted on reputable download sites such as download.com, snapfilescom, softpedia.com, majorgeeks.com and other similar sites.
  • Files mentioned in the editorial sections of major computer websites and publications such as PC World, CNet, Lifehacker and of course, Gizmo's Freeware.
  • Open source software hosted on sourceforge.net, Mozilla.org and similar large open source sites.
  • Files available for download from Microsoft, Google, HP, Dell and other reputable vendors.

4. Never install programs obtained from P2P networks including BitTorrent, eMule, LimeWire and others as many of these files are infected with malicious programs. Some of these malicious programs are so powerful they are capable of overwhelming all your security defenses.

5. Never install programs that friends give you on removable media unless you have verified that they are clean by submitting them to free web based file scanning services such as Jotti or Virus Total.

6. Never accept free toolbars, media players or other unsolicited software offered to you by a website.

7.  If you are not using Internet Explorer 8 then we recommend you upgrade to this version or better still, switch to an  alternate browser such as Mozilla Firefox, Opera or Google Chrome.  All these have a track record for better security than Internet Explorer and are arguably superior browsers as well.

8. Seriously consider using a Windows limited user account (LUA) rather than a normal account with full administrator privileges. LUA will block the majority of malware including, among others, all kernel mode rootkits. More details here.

9. You should seriously consider creating a fresh installation of Windows and then back up your PC using a drive imaging program. Then if in the future your PC ever becomes infected you can use the drive image to restore it to a pristine, infection free condition. If you are using the Business or Ultimate versions of Vista/Windows 7 you already have drive imaging capabilities built into Windows. See here for details. If you're using other versions of Vista/Windows 7 you can find a number of free drive imaging programs here.

By following these simple rules the chances of your PC becoming infected will be dramatically reduced. Combine these practices with the security software suggested above and you are well on the way to safe, secure, infection-free computing.


 

 This page is copyright © 2009, Gizmo's Freeware and may not be reproduced in any form without written permission.

been with ubuntu for years now the early day were bad but now easer than windows to use works a treat testing out 10.04 alpha runs well o yes and you dont get any virus and all that stuff i was sick of windows getting virus what ever it could get it got killed a few h/d in the process by windows i dont need ya any more.........dave uk

Yeah Guys dont use windows ya will always be chasing ya butt i use now ubuntu no more probs at all no virus and all that .........have fun getting all the virus of ya machine before it destroys ya hd...

hi I need help in removing RKIT/Kryptic.763904. what will I do?
Pls help.

this is very good,this is what i wanted.it is useful.

i agree with you,please help me.

goog for system

avira is a pain in the left click.
avast is the best / most suitable.
random skins are cool in avast.
avast detects in every part of the internet, unlike avira that doesnt monitor email clients.

For post #1, I am currently running DefenseWall on Vista Home Premium 32 bit without issue.

Defensewall only works on xp.U can't go wrong with a sandboxing program,brilliant idea.Zonealarms forcefield works the same way.Eset or avira security suite is best all round for speed + performance,i've tried all paid ones over last year or so.Shame about Kapersky being so slow loading programs,or that would be one of top ones.

After going to any and every malware infested site looking for and running samples in a full blown admin account all I can say is that my Sandboxie/Returnil combo has kept me secure through around 4 gig of malware samples on all of my XP, Vista and Win 7 installs.Ghost images are also used as backups on a partition and external drive but have never had to be used due to a malware breach.

Also for those that may find Sandboxie a bit of a hassle to use or too lazy to learn it's outstanding capabilities then I would suggest Defensewall.

On the whole I would say this is a good idea to help those that have slipped out of the security products loop to regain an idea of what is now relevant.

It worked well for me. Most of the products it recommended I use so that's just fine.

Good work guys!

I would suggest adding more prominent wording for the adoption and use of computer imaging and data replication solutions; especially now that data backup comes standard with all versions of Vista and Win7. Computer imaging is also provided by Microsoft (free btw...) in premium versions of the same OSs (Business, Enterprise, Professional, and Ultimate).

For data replication you can emphasize the native Windows options but you could also recommend things like Karen's Replicator or other similar programs that have been upgraded for Vista/Win7 compatibility. Security is not just about detection/blocking/removal...

very good, it recommended me programmes i already use. will be a great help to inexperienced users.................

This will be very useful to users.
Great job freeware Wizards!

Post new comment

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <b> <address> <blockquote> <br> <caption> <center> <code> <dd> <del> <div> <dl> <dt> <em> <font> <h2> <h3> <h4> <h5> <h6> <hr> <i> <img> <li> <ol> <p> <pre> <span> <strong> <sub> <sup> <table> <tbody> <td> <tfoot> <th> <thead> <tr> <u> <ul> <tr>
  • Lines and paragraphs break automatically.
  • [node:123] - insert full text (themed by theme('node'))
    [node:123 body] - insert node's body
    [node:123 teaser] - insert node's teaser
    [node:123 link] - insert link to node
    [node:123 collapsed] - insert collapsed node's body
  • You may use [view:viewname] tags to display listings of nodes.

More information about formatting options