Scott Hanselman

"Anti"-Things you must install on your fresh Windows box

September 23, '03 Comments [5] Posted in Web Services | Tools
Sponsored By

There's nothing quite like the smell of a fresh Windows box.  After that first reboot, seeing that clean, smooth desktop brings a tear to my one good eye.  Everything is possible with a fresh Windows box.  Everything runs faster with a fresh Windows box.

Then I plug into the network and I'm immediately attacked by Popup Ads, Gator (evil), DoS attacks, Messenger Service Popups, HTTP requests for /system32/cmd.exe and clever neighbors trying to print to my printer. 

How should we protect our fresh Windows boxes, these new fawns, just before we hurl them into the abyss?

Well, here's the first things I put on ANY Windows box.  This is the "don't leave home without 'em" list.  This is the "You're not seriously going out without your _______" list. 

"Anti"-Things you must install on your fresh Windows box in the 21st century

  1. Firewall
    At a minimum, enable the Windows XP built in firewall.  This will protect you from MSBlast (which I removed off half a dozen relative's computers).  Other folks use Tiny Personal Firewall, and others, but if you're serious (and you love your family) just buy ZoneAlarm Pro.
  2. Anti-Virus
    In the old days, (last year) you could be clever and avoid viruses.  Don't open anything, don't talk to anyone.  But now, with attachments being sent to my Mom with names like babypics.jpg.exe, I just can't trust her to be THAT clever.  Heck, I don't know if I am that clever.  I use either Panda, ETrust, or Norton...but my preference is Norton.
  3. Anti-Spyware
    The #1 least understood problem on PCs today, IMHO, is spyware/malware/scumware.  A friend of mine visited recently from Malaysia and brought his laptop.  He's a technical guy, and a developer, but he was complaining of weird popups and odd behavior in his browser during development.  We ran Ad-Aware and counted up 357 different components of spyware.  He had at least 20 different evil (but not viruses!) bits on his box, including CometCursor, Gator, SafeCast, Hotbar, and a particuarly evil bit of spyware that actually chained and appeared in the TCP/IP Properties and literally sniffed traffic at the protocol level.  I install Ad-Aware and run it on Startup.
  4. Anti-Spam
    Everyone has their favorite, but I recommend SpamNet, it's like Napster for getting rid of Spam.  When you block a spam message with SpamNet you are "voting" for that message as Spam.  The more people vote, the more accurate SpamNet gets.  It's at least 99% with VERY few false positives, since actual humans are involved.  On the server-side for a Spam solution, I'm going to check out SPAMSoap.  I'll just change the MX record on my mail server, and mail will route through SPAMSoap first, then to me.  It appears to be a nice, cheap way for me to protect all my hanselman.com users.

If you're not running these particular tools, make sure you are at least running something to address these issues.  And seriously, run Ad-Aware if you haven't.  You'll be surprised.

About Scott

Scott Hanselman is a former professor, former Chief Architect in finance, now speaker, consultant, father, diabetic, and Microsoft employee. He is a failed stand-up comic, a cornrower, and a book author.

facebook twitter subscribe
About   Newsletter
Sponsored By
Hosting By
Dedicated Windows Server Hosting by ORCS Web
Wednesday, September 24, 2003 4:34:14 PM UTC
I've been having really good luck with POPFile, which acts as a POP3 proxy and does Bayesian filtering. And it's free, which doesn't suck.
Thursday, September 25, 2003 6:38:07 AM UTC
I'd suggest not solely relying on Ad-Aware. I also have Spybot Search & Destroy on my system and I find that it finds things A-A misses.
Andy
Thursday, September 25, 2003 11:54:51 PM UTC
Another couple to consider are SpywareGuard and SpyWareBlaster from http://www.wilderssecurity.net/ they stop about 800 variants of spyware and nosey cookies from even installing.
Pete C
Sunday, September 28, 2003 7:27:38 PM UTC
For anti-virus I can't recommend AVG enough. It does automatic updating, never gets in the way, and takes care of business.
They have a free edition downloadable from http://www.grisoft.com/us/us_dwnl_free.php.

I've really had it with Norton, after I uninstalled it and it left my system with jscript.dll unregistered. Their script blocking stuff didn't clean up after itself, which more or less broke my machine until I figured it out, and re-registered jscript.
Friday, October 22, 2004 5:27:35 AM UTC
Armor2net Personal Firewall is able to stop Internet pop-up ads, a feature that can be customized for each individual Web site. The program will also search your computer for spyware, and remove the spyware components safely.
Comments are closed.

Disclaimer: The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.