10 Steps to a Secure Computer

How to Stay Safe Online

Contents

1. Virus Protection
2. Firewalls
3. Email Attachments
4. Enabling File Extensions
5. Scripting in Emails
6. Spyware/Adware
7. Software Patches
8. Data Backups
9. Boot Discs
10. And finally...

1. Use virus protection software

All Internet connected computers should have virus protection software and it should be kept up to date, the one that came loaded in your computer is probably out of date now and useless. Most can be set to update automatically, use this facility.

The choice of programmes is vast but the following are generally recognised as good:

http://www.grisoft.com AVG AntiVirus is a good inexpensive antivirus programme with a free version for personal use.
http://www.symantec.com/ Norton Antivirus
http://www.mcafee.com/ A range of options including an online subscription based version.

2. Use a firewall

Potential intruders are constantly scanning for vulnerabilities in home computers connected to the Internet. A firewall is a piece of software that provides protection against hackers and also from many Trojans sent by email and will alert you if a connection to your computer is attempted by an unauthorised source.

No firewall is completely foolproof but having none is foolish.

Zone Alarm is a good firewall for personal computers and has a free version for personal use and an inexpensive pro version.
http://www.zonealarm.com/

3. Beware email attachments

Email attachments are the most common method of spread of viruses online, so you should view ALL email attachments with a level of suspicion. The following guidelines will help you to deal with them safely.

A. Unexpected Attachments
 Never open an attachment from someone you do not know or an unexpected attachment from someone you do know. Simply delete them.

B. Suspicious Attachments
To be really safe the following procedure should be followed before opening any attachment:

• Check that your virus protection programme is up to date
• Save the file to your hard disc rather than opening it from its current location
• Disconnect your computer from the internet
  Scan the file with your virus protection software
• Finally, if all seems okay, open it

These measures will significantly reduce, though not completely eliminate, the possibility of your computer becoming infected by an email attachment.

C. Turn off the mail preview mode (where the message appears in a split window below the list of items in your inbox) in Outlook or Outlook Express.

In the case of several recent worms it was possible to be infected simply by opening or previewing the mail, opening the attachment was not necessary.

• In Outlook this is done by clicking:
  View>Preview or Auto Preview
• In Outlook Express click:
  View>Layout and untick the View Preview option.

4. Enable viewing of file extensions

By default Windows systems hide the file extensions for known file types. This allows those with malicious intent to make a dangerous file seem innocent by using a known file extension.

You can change this so that file extensions are displayed. This means that you will see the file extension (eg .doc, .txt, .exe) of any file attachment.

Windows 9x and Windows NT 4.0:

• From the Start menu select 'Settings -> Control Panel' to open the control panel
• From the 'View' menu select 'Options...'
• Click on the 'View' tab
• Ensure "Hide files of these types" and "Hide file extensions for known file types" are both unchecked
• Ensure "Show all files" is checked
• Click "OK"

Windows 2000 and Windows XP:

• From the Start Menu select "Settings -> Control Panel" to open the control panel
• From the "Tools" menu, select "Folder options"
  Click on the "View" tab
• Under "Hidden files and folders", ensure "Show hidden files and folders" is checked
• Ensure "Hide file extensions for known file types" is unchecked
• Ensure "Hide protected operating system files" is unchecked. (If you get a pop up request for confirmation - click on "Yes")
• Click "OK"

5. Disable scripting in email programs

Email programmes use the same code as web browsers to display HTML mails (the colourful ones). Accepting HTML mail at all is risky since Java, JavaScript or ActiveX controls can be embedded in them, often innocently but possibly with the intention to do harm. The best solution is to set your email programme not to accept HTML mail. Your mailbox will be duller but safer.

However, in MS Outlook Express you cannot easily turn off incoming HTML mails and this is a vulnerability that has been exploited by virus creators. You can prevent active content, such as ActiveX Controls and scripts, from being run from inside HTML e-mail messages:

• From the 'Tools' menu, select 'Options... '
• Select the Security tab.
• Make sure the 'Restricted sites zone (More secure)' option is selected.

For greater security, consider alternatives to Outlook Express. If you have it, MS Outlook is much better or you can download alternative email programmes from these sites:

Eudora: http://www.eudora.com
Pegasus: http://www.pmail.com

6. Prevent Spyware/Adware

Spyware or Adware are small programmes or pieces of code, downloaded to your computer along with other downloads, usually without your knowledge.

These programs gather information about you, sometimes simply related to your use of a programme but it can be as extensive as tracking all your online activity and targeting advertising at you accordingly.

Spybot and AdAware are programmes that will detect spyware and adware and remove them from your system. Both are available free for personal use.

7. Keep up to date with Software Patches

Software manufacturers will from time to time release patches for their programmes when a security 'hole' has been discovered. Look in the help files of the programmes you use for a means of registering to be alerted when patches become available, or visit the manufacturers' web sites for information on receiving updates.

You can download patches here for all Microsoft software and operating systems. http://www.microsoft.com/downloads/

8. Backup Your Data Regularly

They say there are two kinds of computer users: those who have already experienced the loss of important data, and those who will. Whether you use memory sticks, ZIP discs, a tape backup, rewrittable CD-ROM discs or good old floppy discs, do actually use them and use them often. If the worst happens and you are forced to reformat your computer at least you will still have your data.

If you find all this fiddly and hard to remember you could consider automating your backups and using online storage. Two well thought of companies providing this service are:

http://www.xdrive.com/
http://www.ibackup.com/

9. Make a Boot Disc

A boot disc contains a copy of your Master Boot Record (MBR), without which it is impossible for your computer to start. If a virus or other disaster prevents you from starting your computer simply put your boot disc in the floppy drive and it will start up happily allowing you to get on with solving whatever problem has occurred. All you need is a floppy disc, then follow this procedure:

• From the 'Start' menu select 'Settings > Control Panel'
• Click 'Add/Remove Programmes'
• Click the 'Startup Disk' Tab
• Click the 'Create Disk' button
• When finished click OK

Remember, however, you must create this disc before you have a security breach.

10. And Finally……

Disconnect your computer from the internet when you are not actually using it: the only time you are totally safe from intruders is when you are not connected to the Internet at all!

© InKK Design. 2002-2008. All Rights Reserved.

This article may be freely distributed provided the copyright notice remains intact.