Re: Another Newbie asking "Which Anti-Virus Sofware is the Best?"

On 26 May 2006 07:55:53 -0700, jimrainfordson@xxxxxxxxx wrote:

Well, I'm not an internet newbie, but soon I'll be switching to a high
speed connection for the first time. (cable). I've been reading
through old posts in this newsgroup and I'm feeling a bit overwhelmed
as if there's no real way to rest assured my PC is protected. I
couldn't find a FAQ for this group, so I'll gladly go do more research
if my questions are too basic. In this case a link or reference is
appreciated along with the flame.

Bascially, what I do on my PC is browse the web and stream online radio
(via WMP) but I have a son who will ocassionally play online games.

Playing online games is risky since you have to "drop your pants and
bend over to be shafted" no matter how you go about it. Even with
a external router/firewall, you have to lower security via port
forwarding which is not a wise thing to do.

Although I've been very strict about pirated sofware, every once in a
while he gives into temptation usually via a friend's CD rather than
directly downloaded from the Internet. I don't think it's an issue
anymore, but there's always that slight doubt with teenagers.
Furthermore, I am not on any kind on LAN. I don't do any kind of
instant messaging. I have occasionally used IE in FTP mode just to
upload images to a personal website. (It's just a basic webpage for
family to see all ISP based). I try to keep plug-ins and 3rd party
apps to a minimum. I'm on XP (regularly updated) and I use M$ software
like Outlook Express, IE6 and WMP.

Make sure you use the latest XP service pack and install all critical
security patches for Windows, IE and OE. The use of automatic
Windows Update service is a good idea. I hope you know to set
IE security settings options, and I hope you've set OE to work
wiith text-only (no html email).

I currently use Zone Alarm.

Do yourself a favor and purchase a external router/firewall since
it will always be there for you.

I
haven't consistently used anti-virus software but I ocassionally
download and run anti-spyware and anti-trojain software. So far I've
never had a problem, but I guess I've just been lucky.

While I would hate to have to deal with all the problems of a virus
infection, by far my primary concern is security from someone
discovering the username and password I use to log into financial
websites like my local bank or to check my investments. (I only have a
few thousand invested but it's my money and I'd like to keep it that
way).

You are asking newbie type questions which means you are not ready
to not use a good antivirus product running in the background. Also,
since you allow others to use your PC you should have a good av
running set to auto-update. Security is only as good as the knowledge
of the individual in the driver's seat. So you have to do what you
can in the way of good security software and hardware in the
circumstances you describe.

To my understanding, due to high encryption, the only practical way for
a hacker to steal my username and password would be for them to install
a text-capturing-application (via some kind of trojain) and have it run
while I log in then phone home later. Is this bascially true?

You seem to be alluding to infestations of malware such as RATs
(Remote Access Trojans). That sort of thing you prevent by not
allowing malicious code to run on your PC, which requires practicing
"safe hex" ... and in your case using a good antivirus product, a
external firewall/router, and keeping up to date with critical
security patches.

To my understanding there are other things I can do to promote
security, including:

Get a dynamic IP Address.

That's a good idea.

Get a router even though I don't have a LAN because the router will
help keep my PC anoynmous, almost like an dynamic IP. Not sure how
this works.

No, that's not the reason at all. Your IP address must be public or
you wouldn't be able to browse the internet. The reason you use
a firewall is that you will have many open internet ports by default
with XP. That means there are many servers available and you are
a sitting duck for hackers and for internet malware that automatically
seeks out open ports ... open doorways to your machine. The advantage
of dynamic IP is that at least your IP changes once in awhile ... when
you reboot the modem or shut down and boot back up. That means
a dedicated hacker that "has your number" will have more difficulty
pinning you down. But that sort of thing is more of just a theoretical
consideration than anything to be concerned with for home users.

Get a good Firewall. (I currently run Zone Alarm). For best security
is it better to get a hardware Firewall or is an updated software
firewall just as good?

As I've already mentioned, a external appliance is better since it is
"always there" and thus affords much more reliability.

Other than turning the power off, is there a good simple (automated?)
method for turning off internet access during times when there is no
reason to be online?

Power down the modem, but there's no real point in doing so as long
as you use a external router/firewall.

My firewall (ZA) has a panic button to block all
incoming and outgoing transfers. Assuming my firewall hasn't been
compromised, does this offer the same protection as not being online at
all?

No, you should never rely on software since it may have
vulnerabilities which can be exploited. Rely instead on a external
router/firewall.

I'd rather keep using IE and OE and WMP because they are well supported
and help me to avoid unecessarly hassles with viewing pages or using
the internet. I feel comfortable using these apps so long as I keep
them updated.

See above concerning keeping them patched and paying attention to
their optional settings for best security.

I have enough componets to build a second PC. I've been considering
keeping a second PC on hand just for using to check my bank account and
to check my investments. (I would still use my regular PC for internet
shopping. I figure if I get hacked and my credit card is compromised at
least that's fraud protected.)

You might also consider the use of a backup hard drive on a removeable
tray so the backup can normally either be shut off or stored on a
shelf.

When I use it I figure I'll directly hook up my secondary PC (rather
than going through a LAN). I'll set it to automatically update my OS
and my firewall, virus checker, etc... and then I'll only go online
long enough to check my account then shut the computer down and
disconnect again. Is is a practical idea or am I just being paranoid?
Will I be able to use anti-virus software on two different PCs in this
manner or will most companies require me to buy to licenses?

A external router/fw will allow you to share your wideband service
between the two machines, and both will have its firewall protection.
You can elect to have file and printer sharing or not. It would be
a good idea to takes the same security precautions on the second
machine as on the first.

Beyond that what does a hacker look for when port scanning or otherwise
invading a PC.

Open internet ports are the easy targets and your only real concern.

ssuming I ever do get compromised is there anything I
can do to make my local computer look less inviting?

Don't keep any personal information on your PCs such as Social
Security numbers and credit card numbers.

Given my concerns and the old posts I've read from this newsgroup, I'm
leaning towards Kaspersky for an anti-virus program. However, scanning
for trojains every hour seems very excessive and draining to processing
power.

I don't know of any version of KAV that requires such a thing. The new
KAV 6 will nag you initially until you let it do a scan of all your
drives/paritions. Then it "shuts up" and it won't bother you again.

Art
http://home.epix.net/~artnpeg

.