Computer Security

by porkchop on Apr.15, 2009, under Computer Security

computer-virus_01

Computer security is a very important topic, that is why I want to write about it and let you know how I stay Spy-ware/Virus free. Back then on the Internet you could do a simple search in google, saying spy-ware scanner, or anti virus scanner, but these days are over. There are many sites called phishing sites, that look like a legit program, and proper company site, but in fact is a rogue spy-ware program or nasty virus that you will have a very hard time getting rid of it, probably requiring reformatting the computer. Ever since I have been on the Internet security has always been my top priority, I remember back then using Zone Alarm, when they were just new, and a great company, they only offered a free version of zone alarm, it was the best program at time, now recently it got sold and the quality of it is questionable nowadays. I also remember when Black ICE defender, and programs such as Lockdown pro 2000, were security programs that had many flaws in them, and actually did not protect you at all at the time. As you can see there are many security programs out there, many good ones, and many bad ones, so what I’m going to do is tell you my setup, and you can then recommend other programs you think in the comments here.

Router A Hardware “Firewall”
A router is in my opinion the most important component to your Internet security, the router in itself blocks many ports and does a great job of it. The way the router works basically is that your computer is connected to the router and the router is connected to the modem, the outside Internet. So when a potential attacker does a port scan on your IP address, the attacker not knowing it, is scanning the router, and the router with profiles, See’s that it is a malicious port scan, and it will block the scan “stealth” all the ports. One problem with router’s are wireless routers, many people with wireless routers do not configure them properly, leaving them open for anybody to connect to them in the area. There is also ways people configure them using WEP, WEP is insecure and not recommended way of protecting a wireless network, it is very easy to crack, and there are many programs and video’s online that show it. I will describe the ideal way of setting up your wireless router, Wireless routers are all different, but they all generally have the same setup. First thing you will have to log in to your router control panel it is an IP address, it varies by router brand, but your Manuel should have it or a quick Internet search will also tell you. You want to use WPA, WPA2, security encryption NOT WEP, and also you will want to enable a pass phrase, but the pass phrase has to be a long one with different kind of characters, it cannot be something that you remember or is in the dictionary, that is too easy to crack. So I suggest to find the perfect password you go to this website https://www.grc.com/passwords.htm On that website you can generate random ultra high security passwords, just follow the instructions on that site. Another security feature the router has is MAC address filtering, which can be easily spoofed now, but it would have to be done by someone who is determined to get onto your computer, but it is a second layer of defense anyways, So I would enable MAC address filtering, how it works is that it records the address of the computer network card, and doesn’t allow no other computer’s to connect to the network without the matching network card MAC address, but as I said there are programs that can spoof that, but it doesn’t matter I’d use it. That’s pretty much it for the router, there are other features, but these are the best ones in my opinion, if you don’t have wireless router you can ignore all this, but if you don’t have a router I suggest you buy one, they are cheap, and helps secure your computer, they are “hardware firewall” in a sense. Also, you should disable the SSID broadcast of the router, it should just be a simple check mark, what it does is it doesn’t display your router when someone does a scan for routers in the area it hides the router, but again there are ways to get by this, but it will stop the novice hacker. Another thing if you are comfortable doing it, is reducing the signal strength of the antenna output, with trail and error you can reduce the antenna output signal so its just enough signal for your home, so it doesn’t go outside as far. Also positioning the router not near walls, is a good idea, if your paranoid, place it in the center of your home.

Anti Virus Programs
The market for anti virus programs are great, there are many great free programs out there, there is no need now to rely on Norton or Mcafee for your anti virus programs. Just take a look at http://download.cnet.com/windows/ and see for yourself that the most popular software downloaded on the Internet going against other software CNET downloads has many software there, and #1 is AVG Anti Virus free Edition with 3million downloads and reviews. Back then they didn’t have free virus scanners, you had to pay for them, but now it is a normal thing to see great free anti virus software. The program I recommend of course is AVG Anti Virus download it here http://free.avg.com/ There’s others but this one is the best free one I think. And if you really like the program, you can buy there paid version, which has more features, but this AVG free is plenty for most. Be sure to set your virus scanner to update automatically or you update it everyday, and also to run scans preferably everyday as well, you can also schedule that.

Firewall
As I said before router is one of the best firewalls you can have, some more advanced people who use the Internet, just use a router, because they know that they won’t be running programs that they do not trust, but I suggest getting a hardware firewall as well, or even what is enough with a router is enabling your windows firewall, that is built into Windows XP, and Windows Vista, and also making sure to keep Windows updated. The important thing a software firewall can do, is that it can tell you when a program wants to access the Internet, or automatically pick it up as a program that is not safe with there list of safe programs that they sometimes contain. The firewall also closes ports, but the router will do that and a better job, so basically all the software firewall will do is that, just check programs and ask if it is okay to connected to the Internet. For a firewall I suggest using the built in firewall or if you want to buy a firewall, you can purchase Norton, or other firewalls, many out there, but stick to well known brands.

Anti Spy-ware Programs
Spy-ware is one of the most annoying security problem on the Internet. It was developed for advertising, spying on peoples habits of what they surfed to online, etc, without peoples permission, and also installed on there computers without permission. Spy-ware is very malicious as well, it can track your banking info, passwords, install annoying software and applications, and slow your computer down and Internet connection. The thing with spyware is that there isn’t a one program solve it all, you need various programs to run. The programs I run are, and they are all free so you know, Ad-Aware Anniversary Edition, http://www.lavasoft.com/products/ad_aware_free.php Ad-Aware has been around for a long time I remember using them as my first anti-spy-ware program back then. Spybot Search and Destroy http://www.safer-networking.org/en/index.html Another great program, be sure to use the Immunize its a great feature of blocking spyware before it gets onto your computer, it blocks it through the web browser. Malwarebytes http://www.malwarebytes.org Another good scanner program, picks up things that the others miss. SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html this program does not scan or anything, but it similar to spybot, it immunizes the computer by blocking known spy-ware so they do not install in the first place. Another program also to use is Windows Defender, which is already included in Windows. Make sure you update and run these programs every once in awhile and you should be spy-ware free, I am always spy-ware free, I haven’t had spy-ware for a very long time using this setup.

Phishing protection
Site phishing is common, site’s pretending to be your bank site, or hotmail, etc. The site look exactly like the authentic site, but the URL is different and it steals your password info and user name when entered. The best way to stop this is to always look at the URL, but that can be problem sometimes you might overlook it, well Mcafee has released a free program that helps, it is called Mcafee Site Advisor and they have two versions, one for site FireFox, and one for Internet Explorer. What it does is it’s a toolbar that checks its database for fraudulent websites and it alerts you or blocks you from getting to that website in the first place. It also has reviews of people who have been to the site, such as they say the site spams emails to users. The program also has a feature of reporting websites. Here is the link to download Mcafee site advisor http://www.siteadvisor.com/

A way to test your security to see if it is working, your firewall/router is to run these tests online http://www.grc.com/default.htm Run the “Shields-Up!” test and make sure everything checks out good, and also run this one http://www.speedguide.net/scan.php Both should say your PC is protected and no open ports.

In this article I have tried to suggest all free programs for your Internet security except the router that is the only thing you need to buy. Of course this isn’t everything but it is enough information and software to secure your PC a lot better.

Here is a good router

Here is Norton 360 3.0 Great for Grandma’s PC or non tech people, just install and it auto protects you silently in the background, scans are automatic. It has firewall, phishing protection, identity safe, virus scanner, spyware scanner, bot protection, and it’s light on resources not the Norton you are use to. But be sure to get the spyware scanners in the section above, remember only 1 spyware scanner is not enough.