Computer Protection

There's no need to pay good money to protect your computer from viruses, spyware, hackers and other hazards. The internet is one place where the best things still are free. Just follow these instructions carefully and you'll be safe from all forms of malware.

(Malware = malicious software)

Before doing anything else, to go to the Windows Update site. Wait while your system is scanned and then download every update marked "critical". If you haven't done this before it may take some time - possibly a few hours in total on a dial-up connection - to download all the necessary updates, and you may have to restart your computer a few times before you've got them all. Don't be tempted to miss any out though. They're not called "critical" updates for nothing, and it will be worth whatevever time it takes to keep your computer running the way it should.

Important. When all the critical updates have been installed, restart your computer.

Now download, but do not install

Disconnect from the internet.

For maximum security I recommend disconnecting from the internet at several points in this document. This is not always practicable for broadband users, who have little choice but to ignore this instruction. Don't worry. You'll still be protected.

Important. If you already have virus protection installed, disable it.
If you don't do this, Spybot may not install properly.

WARNING. Broadband users should never disable their virus protection. Continue as follows, but if Spybot doesn't work properly, or if it causes system crashes, you'll have to uninstall it and rely instead on the rest of the protection recommended here. You'll still be adequately protected.

Now install Spybot Search & Destroy, but don't run it yet.

Important. Don't change any of Spybot's settings unless you know exactly what you're doing. The default settings are best for most users, and getting it wrong can cause a few headaches at the very least.

Restart your computer to complete the installation. This will also restart any virus protection you have.

If you do have virus protection installed, update it now and run a full scan.

If you don't have any virus protection, download

Install AVG and restart your computer to complete the installation process. The default settings are best for most users, so don't change anything unless you're sure you know what you're doing. Update AVG and perform a full system scan.

Now launch Spybot and click on the Search for Updates button.
Download all available updates.
Disconnect from the internet.
Click on Search & Destroy, then on the Check for problems button.
Wait for the scan to finish and then let Spybot fix everything it marks in red.

Restart your computer.

Download and install

Launch Ad-Aware 2007 and click on Check for updates now.
When the updates have been successfully received, disconnect from the internet.
Click on Start, then Next.
Let Ad-Aware remove every "Critical Object" it finds.

Restart your computer.

Every computer MUST have a firewall to keep hackers out and to prevent spyware from reporting back. If you don't have one, or if you only have the Windows XP firewall, which Microsoft admit leaves a lot to be desired, download and install

Be aware that there is a minor security issue with Zone Alarm since ZoneLabs were taken over by Checkpoint in March 2004. This is not a serious problem in my opinion, especially as there is a simple fix for anybody who feels uneasy about it. Please read the article linked below, and then feel free to contact me if you need help adding the relevant line to your HOSTS file. Don't forget to say which version of Windows you're using.

to read the article.

That's the hard work over. Now it's time to take it easy for a couple of weeks, but it's not a holiday. This is the time when you have to monitor what's happening to be absolutely sure you don't have any malware, and to get advice if you have any doubts.

Whether you use AVG or another virus scanner, it's important to check for updates every day and to run the full scan once a day.

Ad-Aware and Spybot should also be run every day to ensure that your system remains free from spyware, but it's normally only necessary to check for updates once a week, and even then there may not always be an update available.

The rest is down to you. Continue to use the internet as normal, but be on the alert for anything unusual, and especially pop-ups. Many legitimate sites use these, but if you seem to be getting too many, if they tell you your computer is infected with something nasty or if you're getting them when you're off-line, you almost certainly have picked up something nasty.

Whatever you do, never respond to these pop-ups or you'll probably end up with something even worse.

Home page hijackers are another thing to watch out for. In this context your home page is the one you go to automatically when you first connect to the internet.

If your home page keeps changing, most likely taking you to those infantile "adult" sites, and you haven't been able to permanently change it back to something of your choice, your computer has been hijacked.

If you think something's wrong, now's the time to get some advice. Perhaps you know somebody who may be able to help. If not, there are a number of forums on the internet where people can go for help and advice. You'll find links to a few such forums on Joe London's Website.

When you're absolutely sure everything's as it should be, it's time to take a few steps to keep it that way.

Open Spybot and click on Immunise.
On the next screen, wait for the animation to finish and then click again on Immunise.
To remain fully protected, you'll need to repeat this after every update.
You should see a large green tick beside the message "Browser Helper to block bad downloads is installed".
Check that there is a tick beside "Enable permanent blocking of bad addresses in Internet Explorer".
Beneath this you should see "Block all bad pages silently".

Close Spybot.

Download and install

Launch Spyware Blaster and click on "Download Latest Protection Updates" and then on the "Check for Updates" button.

When the update has been received, click on "Enable All Protection".

Close Spyware Blaster.

Spyware Blaster works in a different way to Ad-Aware and Spybot in that it prevents most spyware being installed rather than scanning for it afterwards, so the only thing you'll need to do is check for updates every week or so.

Download and install

You won't need to do anything with IE Spyad. Install it and forget it. It works by blocking access to known malicious sites. There aren't any regular updates either, so it's worth checking occasionally for newer versions.

Reminders.

Your virus scanner needs updating and running every day. Run Ad-Aware and Spybot every day and check for updates once a week. You don't need to do anything with Spyware Blaster except to check for updates every week or so.

Updates won't always be available. Don't worry about it. Just be sure to download them when they are.

You may be wondering why you need to run two spyware scanners, or even whether you need them at all if Spyware Blaster and IE Spyad can prevent spyware getting onto your machine in the first place. The answer to that one is that nothing's perfect, and they work in different ways. As with viruses, there can only be a "fix" once a new threat has been identified. In this respect we'll always be one step behind, but what one programme misses another will probably catch.

Finally, the best protection of all is your own common sense.

Check the Windows Update site every week or so and install the critical updates if nothing else.

Never open any e-mail attachment without first scanning it for viruses, even if it seems to come from a friend. It may be that your friend's computer is infected and that the virus is mailing itself to you. That's how most viruses spread, so always be on your guard, and if you get an attachment you weren't expecting from somebody you've never heard of, delete it immediately. Don't even think about it. It is a virus.

Nobody is going to pay you for allowing your bank account to be used for what amounts to money-laundering, something which would be illegal if it were true. They just want your authorisation to help themselves to every penny you've got. This is generally known as the "Nigerian scam", though not all such messages come from Nigeria.

If something seems too good to be true, delete it. You're not going to get something for nothing, and even if they were genuine, most of these scams would involve you in criminal acts, such as stealing government funds or fraudulently claiming to be the last surviving relative of some dead person in order to steal the contents of his bank account.

You can't win the lottery without buying a ticket, so if an e-mail arrives saying you've won some foreign lottery or competion you've never heard of, delete it. If you didn't enter, you can't possibly have won anything, and neither is it true that Microsoft or any other orgnisation gives money away for forwarding messages or for no reason at all. Don't even think "What if it's true?" It isn't.

Never respond to messages saying "a friend" has sent you an e-card without including both your name and that of the friend. There are legitimate e-cards, but if they don't know who you are and are secretive about the mythical "friend", they're trying to rob you or damage your computer, perhaps both. Delete them. I know it's tempting, but that's how the scam works. Just delete them.

Banks will never send e-mails asking you to confirm your account details. PayPal may ask you to update your credit card details every two years or so, when a new card is issued, but they will always address you by your real name, never as "PayPal customer" or anything similar. Even if the message seems genuine, be careful. Never click on a link in one of these e-mails, but log on to the site in your usual way. If they really do want you to update your details in any way, this is where the message will be. If there's no such message there, you'll know the e-mail DID NOT come from them. Remember this advice. It's the only safe way of eliminating those worrying doubts.

If, whether intentionally or otherwise, you find yourself in the "darker reaches" of the internet, be aware of the dangers. Never click on anything that says you've won a prize (you haven't) or that asks whether you're stupid (yes, some scams do start by insulting you). Never click on anything that says your computer is infected with malware. Never give your credit card details to "prove your age". This is a well known scam that can result in very large bills. Never accept any diallers or other software, and be sure to scan your computer for malware immediately afterwards.

Remember you can always disconnect if you're not sure what to do. Right-clicking on the Zone alarm icon will give the option to Stop all internet activity.

Don't be too trusting when your firewall informs you that something is asking for internet access. If you don't know what it is, refuse. You can always change your mind later if you find the application really does need to access the internet. As well as keeping hackers out, your firewall is a second line of defence against spyware and viruses, so let it protect you against anything you're not absolutely certain you can trust. Always remember that it could be your bank account or credit card details, or perhaps your personal files, that are being passed back to somebody you already know to be dishonest. How do you know that? Why else would they be trying to steal information?