Good enough security?

Question

I have a Dell 2400, purchased 13 months ago.  I recently formatted the hard drive and reinstalled XP SP1 from the Dell-supplied CD-ROM.  Shortly thereafter, I set up the following to enhance my online security.  I connect to the Internet via a cable modem.  Did I miss anything?  I imagine most will find fault with the firewall I'm using:   1)  Installed Windows XP SP2 from a CD-ROM.  I did this immediately after the hard drive was formatted. 2)  Windows Firewall running, with no exceptions listed. 3)  Windows Automatic Updates running, set to install updates at specified time. 4)  Updated my ethernet driver.  Now the cable modem shuts off when the computer is turned off.  Previously it stayed on all the time. 5)  Avast AV (free version) running, set to scan system and email. Also set to automatically update itself. Manually run scan 3 times a week. 6)  Internet Explorer 6 SP2 privacy controls changed from Medium to Medium High. 7)  Installed Spybot 1.3TX, clicked the 'Immunize' button, and regularly check for updates and run scans. 8)  Installed Ad-Aware SE 1.05, and regularly check for updates and run scans.  9)  Installed SpywareBlaster 3.2, have it set to protect everything, and regularly check for updates. 10)  Have added (at last count) 15 'message rules' to my Outlook Express newsgroup account. 11)  Do not list my real email address when posting to newsgroups. 12) Use Google toolbar to block most pop-ups. 13) Whenever I download a file from the Internet, such as a document or video, I always scan it for viruses beforehand. 14) No AOL software installed on my computer!!  LOL.

Denny Denham · Answer

Lawnmowerguy, It appears that you have covered the bases nicely (with bonus points for item 14). Personally, I have no issue with your choice of firewall, although I don't use it myself.

NemesisDB · Answer

If anything, you're over-paranoid, which is good.  My points that follow will be random   check the windows update site manually at times -- as autoupdating can be delayed or occassionally miss things I've noticed.  This also gives you the ability to download optional updates.   Also, on a non-security note, check the dell download site and see if anything needs updating.   If your AV program has realtime protection you really don't need to run 3manual scans a week -- once a month, maybe, if you're real paranoid.  Then again, my laptop is in my room all the time and that would drive me crazy ;p   If you care about security, do not login to an account with administrative access unless you need those rights (say to install software).  Limited user accounts are fine for day to day stuff and will stop most viruses and spyware cold.   I like SP2's popup blocker -- but google is nice too   If you want (especially if you're ever going to get more computers), consider buying a cheap router and placing it in front of your computer.   Yeah ...  i'm done here i think

1Bowtie · Answer

I'm sorry that's total overkill, with all those programs you are asking for a conflict. I personally run winxp pro sp2 and a router, that's plenty of protection.

lawnmowerguy · Answer

Despite the long list of security programs I have installed, the only one that is listed in MSCONFIG's startup tab is my Avast anti-virus software.

luphy · Answer

I don't think that's overkill at all except for the frequent virus checks.

Ad-Aware and SpywareBlaster are good to have. I also use Spybot, but it has not performed too well recently in a few controlled tests published on some websites.

The only thing I find at fault is your use of the default Windows firewall. This firewall only prevents incoming attacks and does not screen/control outgoing processes. I would rather use the freeware ZoneAlarm instead of Windows firewall - some folks use both...but that's truly overkill there....just ZoneAlarm should do fine.

And along similar lines for system security, you should install an imaging program so that failing any possible recovery, you can at least reinstall from an image.

NemesisDB · Answer

eh, if you're that confident you shouldn't have outbound protection turned on.  AV and an outbound traffic monitor provide very similar functions ... personally, I'd rather have realtime AV and a program like ad-aware/spybot than a product like ZoneAlarm (the free version of which is horrible crippled as far as configuration options are concerned)

madkiwi · Answer

I use a DLink DI-614+ router, ZoneAlarm Pro and nothing else.

Too many band aid approaches lead to complacency ("Oh, I have Super Virus Attack Killer Immunizer DOT com software, so no harm will come if I click on this file called nakedboobies.jpg.vbs")

I have not had a virus scanner on my home PC ever. In 5 years of always on static IP DSL browsing I have been infected exactly ZERO times by anything.

Windows General

Was this post helpful?