What's the latest in anti-malware for the PC?
February 22, 2005 9:48 AM Subscribe
I've been called upon to immunize a friend's PC against all sorts of malware (after re-installing the OS and apps to recover from the current infestation). Since I moved completely to Mac a while ago, I've lost touch with the current state of PC health. I intend to install NAV, AdAware, Spybot S&D, and SpywareBlaster, as well as the latest Win2k patches. I'll push Firefox, too. What else should I do to protect my friend's PC? What's the latest in anti-malware?
I've found that the latest microsoft anti-spyware beta is very effective.
posted by viama at 10:34 AM on February 22, 2005
posted by viama at 10:34 AM on February 22, 2005
Best answer: I thought How to Fix Mom's Computer was helpful. It offers more suggestions than it looks like you need but there are some relevant ones there also.
posted by mlis at 10:39 AM on February 22, 2005
posted by mlis at 10:39 AM on February 22, 2005
Response by poster: I heard somewhere recently (excuse me for not googling) that the MS Anti-Spyware app was actually already being targeted by those foul villains of malicious code, and thus I'm a little wary about installing it. But it sounds as if a couple of you have had good experiences with it. Am I worrying too much?
posted by jdroth at 10:41 AM on February 22, 2005
posted by jdroth at 10:41 AM on February 22, 2005
Wow, MLIS, that site is a nice concise outline of what I end up doing (out of order) when people ask me to work on thier machines. Good find.
As a side question, anyone have suggestions how to convince people of the boon of Firefox/Thunderbird?
posted by steelbuddha at 10:48 AM on February 22, 2005
As a side question, anyone have suggestions how to convince people of the boon of Firefox/Thunderbird?
posted by steelbuddha at 10:48 AM on February 22, 2005
First thing: burn a cd-rom with the Win2K updates and a Kerio personal firewall.
Before you re-install the OS on your friend's computer, unplug the ethernet cable (or otherwise ensure it's off the net.) Install the OS patches and firewall before connecting to the net.
An unpatched PC on the net lasts an average of 16 minutes until compromise.
posted by Zed_Lopez at 11:09 AM on February 22, 2005
Before you re-install the OS on your friend's computer, unplug the ethernet cable (or otherwise ensure it's off the net.) Install the OS patches and firewall before connecting to the net.
An unpatched PC on the net lasts an average of 16 minutes until compromise.
posted by Zed_Lopez at 11:09 AM on February 22, 2005
Just set up firefox as their default browser.
And get "That Blue 'E'" off the desktop or point it to Firefox. Old habits die hard.
posted by Mayor Curley at 11:40 AM on February 22, 2005
And get "That Blue 'E'" off the desktop or point it to Firefox. Old habits die hard.
posted by Mayor Curley at 11:40 AM on February 22, 2005
Response by poster: Zed_Lopez: I love this advice. However, I don't even know how to burn the Win2k updates onto a CD-ROM. I always just download them direclty from Microsoft immediately upon completing an OS installation. Is there a way to download them to disk without installing?
Odinsdream: I wish the Firefox were just as simple as "demonstrating tabbed browsing". I've problaby tried to push Firefox on a dozen people during the past few months. Only two have taken to it. Most don't get the concept of tabbed browsing, and won't unless they use it for a couple hours.
Others use web sites that don't display properly in Firefox (because they're built around IE's fussiness), or that won't even work. I do the maintenance for a small accounting firm. A couple of the employees are trying to use Firefox, but they can't get their internet radio stations to work, so they keep using IE.
And while it's nice to set Firefox up as the default browser, it never really works that well. Many pieces of malware specifically launch IE for popups, so if any sort of infection occurs, all of a sudden there's IE all over the place. Also, MS insists on launching IE for Windows Updates, which pisses me off to no end...
posted by jdroth at 11:40 AM on February 22, 2005
Odinsdream: I wish the Firefox were just as simple as "demonstrating tabbed browsing". I've problaby tried to push Firefox on a dozen people during the past few months. Only two have taken to it. Most don't get the concept of tabbed browsing, and won't unless they use it for a couple hours.
Others use web sites that don't display properly in Firefox (because they're built around IE's fussiness), or that won't even work. I do the maintenance for a small accounting firm. A couple of the employees are trying to use Firefox, but they can't get their internet radio stations to work, so they keep using IE.
And while it's nice to set Firefox up as the default browser, it never really works that well. Many pieces of malware specifically launch IE for popups, so if any sort of infection occurs, all of a sudden there's IE all over the place. Also, MS insists on launching IE for Windows Updates, which pisses me off to no end...
posted by jdroth at 11:40 AM on February 22, 2005
Most of the bases have already been covered, but I'll also recommend HijackThis, which lists, in one place, everything that is set to run on startup. The biggest downside to HijackThis is that it's not particularly judgmental--after getting a list of programs that run on startup, one must use Google or something similar to determine whether they're malicious.
posted by box at 12:07 PM on February 22, 2005
posted by box at 12:07 PM on February 22, 2005
Best answer: Windows 2000 Service Pack 4. And there've been a whole bunch of security updates since.
If the session id makes that link ephemeral, the basic idea is:
Go to the Microsoft Download Center
Search on keyword 'security', product 'Windows 2000'.
Sort your results by date.
I'm embarrassed to have said just 'PC' above regarding 16 minutes to compromise. I meant, of course, a PC running Windows.
posted by Zed_Lopez at 1:08 PM on February 22, 2005
If the session id makes that link ephemeral, the basic idea is:
Go to the Microsoft Download Center
Search on keyword 'security', product 'Windows 2000'.
Sort your results by date.
I'm embarrassed to have said just 'PC' above regarding 16 minutes to compromise. I meant, of course, a PC running Windows.
posted by Zed_Lopez at 1:08 PM on February 22, 2005
typing msconfig in the run window will bring up a system configuration utility that has a startup tab which will allow you to configure which programs run on startup.
posted by jason9009 at 11:21 PM on February 22, 2005
posted by jason9009 at 11:21 PM on February 22, 2005
This thread is closed to new comments.
If they're using broadband, a good router is the best first-line defense. Couple that with firefox (and thunderbird if they'll do it) and they should be safe for a while. I use Mozilla apps, a router and AVG, and I never even find anything when I do adaware, spybot and MS scans.
posted by Mayor Curley at 10:31 AM on February 22, 2005