Jump to content

Return to Piriform.com

Preventing Malware and Safe Computing


  • This topic is locked This topic is locked
10 replies to this topic

#1 OFFLINE   Rorschach112

Rorschach112

    Power Member

  • Moderators
  • 1,029 posts

Posted 31 January 2009 - 04:25 PM

Preventing Malware and Safe Computing


The following are some valuable tips for maintaining a secure PC and ensuring that your PC will not get infected in the future.


Backups :


It is extremely important that you make regular backups. Having these can make all the difference if your PC ever has a problem.


Backup Your Registry with ERUNT
  • Please use the following link and scroll down to ERUNT and download it.
    http://aumha.org/freeware/freeware.php
  • For version with the Installer:
    Use the setup program to install ERUNT on your computer
  • For the zipped version:
    Unzip all the files into a folder of your choice.
Click Erunt.exe to backup your registry to the folder of your choice.

Note: to restore your registry, go to the folder and start ERDNT.exe



Now create a fresh system restore point

Download SysRestorePoint to your desktop and unzip it to it's own folder.
  • Double click SysRestorePoint.exe so that we can make a new system restore point.
  • A box will pop up after it has made a new point, usually after a few seconds. Close that window and exit the program.

  • Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories.  This article is full of good information on alternatives for home backup solutions.


If you run Vista Premium, Business or Ultimate you have the ability to set automatic backups of your files.
  • Click Start > All Programs > Accessories > System Tools > Backup Status and Configuration
  • Click Back up files, and then follow the steps in the wizard.
  • Select where you want to back up to ... another partition,hard drive, CD or DVD.
  • Select which files you want to back up :

    Pictures, Music, Videos, E-mail, Documents, etc


  • Select how often to back up:

    Daily, Weekly or Monthly.


  • Select the day/time

    Then click on Save settings and Exit.

To restore the files:

Click Restore files and then follow the steps in the wizard.


Note:
The ability to set up automatic backups is not included in Windows Vista Home Basic ; however, Windows will periodically remind you to back up your files. It is NOT recommended to backup to the same drive that your Operating System is located on.




Now if you ever have a PC problem, you should easily be able to restore your PC to a previous time.



Peer-to-Peer ( p2p ) programs :


Peer-to-peer programs, eg : LimeWire, Bitlord, Kazaa, are the most common way to get infected. Malware writers use these programs to spread infections as it is the easiest way for them. The majority of infections we see in the Malware Removal forum are due to people using p2p programs to download cracks/keygens/warez. These are not only illegal, but will always contain some form of malware.

You have no way of verifying that the things you download are legitimate or that they don't contain malware. Even with an up to date anti-virus and firewall, these things will still infect you. It is highly recommend that you uninstall all peer-to-peer programs. It just isn't worth it.


Note :

Other common ways of getting infected are dis-reputable sites forcing you to download and install a codec. Or viruses using Instant Messaging programs (msn, AIM) to send a file claiming it to be "photos" from a friend, only for it to turn out to be a virus.



Security Programs :


It is essential these days to have a few security programs installed and running on your machine. However, there are a few caveats, you should not install more than one anti-virus or firewall. This actually does more harm than good, and will cause a lot of issues for your PC.


It is important to keep these programs up to date. I would recommend using them once every 10 days.



Internet Browsers :


Picking the right internet browser is very important. You need to find one that suits your needs but that is also safe.
  • Mozilla's Firefox browser is fantastic, as is Opera. Both are far more secure than Internet Explorer, immune to almost all known browser hijackers, and also have the best built-in pop up blockers (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
    Here

    While Opera can be downloaded from Here.

If you choose to use Firefox, I highly recommend these add-ons to keep your PC even more secure.
  • NoScript - for blocking ads and other potential website attacks
  • Norton Safe Web - this tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling




Although, if you prefer staying with Internet Explorer I highly recommend you do this :

Make Internet Explorer more secure
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.


Extras :


Below are a few more steps that we highly recommend

  • OpenDNS is a very valuable feature that we strongly endorse here. It gives your PC the benefit of extra safety and increased browser speed. Enabling this takes hardly any time and is not complicated at all, even novice users will be able to set it up with the guide below.

    Another huge advantage of using OpenDNS is that it blocks phishing websites from loading on your computer. It uses data from Phishtank, a community site that is also used by Yahoo! Mail to determine if some particular website is part of any online phishing scam.

    To set this just have a look at the easy-to-use guide here


  • There are certain programs that are security vulnerabilities, it is recommended that you keep everything updated. Two of the main vulnerabilities are Java and Adobe Reader. You can find the latest version of Java here, you will want the Java SE Runtime Environment (JRE) one. Make sure to uninstall all previous versions of Java as well since they can be exploited.

    You can also find the latest version of Adobe Reader here


    Suggestion :

    Foxit is a great free PDF alternative. It uses fewer system resources and is not vulnerable to the exploits affecting Adobe Reader. Providing full PDF functionality, Foxit is rapidly becoming the PDF reader of choice for many. Get it here


  • Keep Windows updated by regularly checking their website at :
    http://windowsupdate.microsoft.com/
    This will ensure your computer has always the latest security updates available installed on your computer.


  • FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated. Its important to keep programs up to date so that malware doesn't exploit any old security flaws.


  • Recovery Console - Recent trends appear to indicate that future infections will include attacks to the boot sector of the computer. The installation of the Recovery Console in the computer will be our only defense against this threat. For more information and steps to install the Recovery Console see This Article. Should you need assistance in installing the Recovery Console, please do not hesitate to ask.

Advanced Tips :


The following suggestions are considered to be rather complicated for the average user, so I only recommend them if you know what you are doing or have a desire to learn more complicated procedures. A few of these programs listed below are paid products, I have tried to use free alternatives but it hasn't always been possible.

I have also tried to link to tutorials for each of the tools recommended. This tutorial is not to answer questions on how to use them


Image Backups

What is an image backup ? To put it simply, it will back up all your data into a single file, including system and registry data, allowing you to do an easy, fast, and complete PC restore should your computer ever crash.

Here are some suggestions

DriveImage ( my personal recommendation, it is also free )
Acronis
Macrium Reflect



Limited User Account

Using a Limited User Account can help decrease the effect of malware and other potential damaging things for your PC. A Limited User account lets you use most of the capabilities of the computer, but only an Administrator can make changes that affect other users of the computer.

Have a read of the following article for more detailed instructions on how to go about setting it up

Click


Tip : This sort of account would be very beneficial to use among any children in your family, or among those who are not comp savvy that have access to your PC.



DropMyRights

The following program is only for use on on Windows XP machines, this tool is not needed on Windows Vista or Windows Server 2008, because by default users are not administrators.

It can be downloaded from here


This program greatly increases the security of Windows XP by running selected programs in a restricted environment ( i.e. with lower rights ) even when logged on to Windows XP as an Administrator. It simply blocks them from performing certain security-breaking functions.


You can find a guide here on how to use it here



Sandbox Programs

One of the best forms of protection that you can use for your PC is a sandbox program. In laymans terms, what they do is let you install and run programs in a virtual environment, so any changes made will happen in the virtual environment and not in the real PC.

So if your PC was to get infected by a piece of malware while in this virtual setting, or anything else that may damage the machine, all you have to do is close this virtual session, reboot the PC, and it will be back to normal.


Here are some sandbox programs that I recommend

Returnil
Sandboxie



HIPS

These programs may conflict with your other security protection programs. If this is the case ( ie : you notice massive slow down or BSODs ) then uninstall them.


HIPS ( Host Based Intrusion Prevention System ) is considered as one the best steps in protecting your PC. What these programs do are prevent changes made to your PC by unauthorised sources. It allows you to very closely monitor what runs on your PC.

Here are some recommendations

ProcessGuard
Threatfire ( there is a tutorial located in this link as well )
DriveSentry ( this is a firewall so it will conflict with other firewalls )


Now after all these steps, your PC will be extremely secure. However it is important to note that you can still get infected if you are not careful. One of the best security programs you can have is common sense. As malware gets more sophisticated, you need to be more wary. If you do get caught though and the above steps cant help fix it, we will be here to help you out


Regards

The Piriform Team
By the power of truth, I, while living, have conquered the universe.

~Scratch~


#2 OFFLINE   slaphappy

slaphappy

    Newbie

  • Members
  • Pip
  • 5 posts

Posted 10 September 2010 - 09:57 AM

This is a really good list. Thanks!
One request. If you could please explain why you recommend
third party software for creating a restore point.
I've never seen this recommended before.
Is there a problem with windows built in restore function?

#3 OFFLINE   Rorschach112

Rorschach112

    Power Member

  • Moderators
  • 1,029 posts

Posted 10 September 2010 - 05:41 PM

I recommend SysRestorePoint as its so simple, even people with limited computer skills will have no problem creating a restore point. There is no difference though between it and windows restore function.
By the power of truth, I, while living, have conquered the universe.

~Scratch~


#4 OFFLINE   ishan_rulz

ishan_rulz

    Lazy Perfectionist

  • Members
  • PipPipPipPip
  • 1,640 posts
  • Gender:Male
  • Location:Bangalore, India.
  • Interests:Everything. Nothing.

Posted 13 September 2010 - 01:38 PM

What about adding Microsoft Security Essentials to the list of free AVs. (Remove AVG!)
Complexity is subjective.

#5 OFFLINE   Rorschach112

Rorschach112

    Power Member

  • Moderators
  • 1,029 posts

Posted 13 September 2010 - 02:14 PM

Yeah I've meant to put that in for a while. Have been wanting to update this tutorial, will see bout doing that this week
By the power of truth, I, while living, have conquered the universe.

~Scratch~


#6 OFFLINE   slaphappy

slaphappy

    Newbie

  • Members
  • Pip
  • 5 posts

Posted 13 September 2010 - 11:09 PM

Since your considering updating this, i guess i'll take the opportunity to ask a few more questions.

I'm a little confused by the difference between the "real time anti-spyware protection" that you have listed (SpywareGuard, TeaTimer, Windows Defender) and the HIPS programs you recommend. Is it necessary to have the real-time anti-spyware if you have a HIPS installed? You say to make sure you are only running one real-time anti-spyware protection program. Will HIPS and real-time anti-spyware tend to conflict? I use two programs, WinPatrol Plus and Comodo Defense+ (which is included with the Comodo firewall installation). I think Comodo Defense+ is an HIPS but I'm not sure which of those two categories WinPatrol is in (do you know?). I'm also a little surprised that the anti-virus programs aren't doing a good enough job with spyware - maybe you need paid versions to get both abilities in one program.

#7 OFFLINE   Rorschach112

Rorschach112

    Power Member

  • Moderators
  • 1,029 posts

Posted 14 September 2010 - 06:13 PM

HIPS are more complex, they would be considered an advanced form of "real-time protection". They can potentially interfere with teatimer and spywareguard. Winpatrol would not be HIPS.

If your knowledge is above average with a PC, then I would recommend HIPS over the other programs.



Paid versions of anti-virus programs wont be a magical solution to spyware, its the nature of the beast, always evolving.
By the power of truth, I, while living, have conquered the universe.

~Scratch~


#8 OFFLINE   ishan_rulz

ishan_rulz

    Lazy Perfectionist

  • Members
  • PipPipPipPip
  • 1,640 posts
  • Gender:Male
  • Location:Bangalore, India.
  • Interests:Everything. Nothing.

Posted 15 September 2010 - 11:06 AM

- x -
Complexity is subjective.

#9 OFFLINE   Mohandes.2011

Mohandes.2011

    Newbie

  • Members
  • Pip
  • 2 posts
  • Gender:Male
  • Location:Giza,Egypt

Posted 14 October 2010 - 04:59 PM

Thank You, For all Informtion. By : M.A

#10 OFFLINE   Mr.anonymous

Mr.anonymous

    Member

  • Members
  • PipPip
  • 19 posts

Posted 29 August 2011 - 03:31 AM

Indeed many thanks for the information. Specially OpenDNS was a real surprise after hard work of securing further, my internet is faster than ever, also tests showed me there is less information send out. Top guide.

But only 1 thing concerned me: Are you sure about recommending ProcessGuard?(well this is more or less a "generic guide", found on a few good forums, I know its not anyone here to blame, I also know things may get outdated, or maybe it is, I dont know, even if I did im not blaming anyone. thats why im speaking about it). Because the problem in my eyes is: the provider of diamondcs.com.au is offline to start with. This not only leaves no option of upgrading to the pro version, but also worse: Unlike Threatfire it leaves Processguard with no updates at all. Making it highly questionable if it really provides a good HIPS protection.

Also, judging on the users reviews from Cnet, is why i choose Threatfire, because even if it did fail, uninstalling it is no problem. While apparantly for some users, Processguard seems nearly completely or very hardly uninstalable(my personal guess is: that this are mainly users of new and/or 64bit versions, who simply receive troubles, since diamondcs is down quite some time, and also before diamondcs was stagnating, and not providing real updates making Processguard fit for new versions, hence why i think thats the reason for that many bad and bug reports, and again this makes in my oppinion Processguard very questionable in terms of the HIPS defense its supposed to provide).

What are your oppinions on it?

#11 OFFLINE   Nergal

Nergal

    Volunteer CCleaner Demon/Post Meddler

  • Moderators
  • 5,287 posts
  • Gender:Male
  • Location:Get off my Lawn, y'darn kids!
  • Interests:being grumpier
    Laughing
    Crying
    Sleep comes Later though.

Posted 29 August 2011 - 03:56 PM

Topic Marked readonly



This is a Informational Topic, questions should be asked elsewhere
ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION
DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.
Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)
ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.
CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND AT www.piriform.com/docs
Link to Winapp2.ini explanation