Security setup?

Ok, so I'm very new to computers and I'm using a HP 110 Mini netbook with the 32bit version of Windows XP Home...

I have about 120GB HDD and 1GB RAM. I have IE and FF as my browsers and FF is my primary choice.

I have the Windows Firewall and Automatic Updates turned on...


What other programs should I instal and why?

And how should I configure them so they don't interfere with each other or my normal internet usage?

 

My first suggestion would be is if you do not need to run your system as a admin would be set up a standard limited user account as it can alleviate most problems.


secondly I would install a Antivirus program if you have not done so already.

There is so much we all can recommend but start off adding things slowly.I recommend you first read this excellent thread. https://www.wilderssecurity.com/showthread.php?t=252253

 

Or you could revisit this thread:
https://www.wilderssecurity.com/showthread.php?t=327443

 

When I was running XP on a system with 1 GB of RAM I felt plagued by under-performance when browsing. Switching from IE to Chrome made a very noticeable difference. You didn't mention such issues, so maybe you're good in that department.

 

That's the plan.

Why I am here... suggestions for an active program to run in the background and an on-demand scanner?

Looking for free software.

After that I'll consider if I need anything else like a a sandbox program, etc.

Thanks, tried using the scanners that it suggests, they didn't work.

BitDefender used it and removed it... said nothing was detected.

Kaspersky Lab and Eset didn't finish so I removed them.

F-Secure keeps closing my browser.

McAfee have been told this company sucks, didn't try it.

Trend Micro wants me to sign up for some spam, didn't try it.

Avast! only scans one file at a time.

 

I would endorse the advices of earlier posters

Limited User Account - protects you from most problems and it is build into the operating system, so it does not cost you addition CPU cycles or Disk I/O

AntiVirus - on a Netbook I would try Avast with the file shield (plus auto sandbox) enabled only. Avast is the lightest of the freebies on CPU and disk I/O. Low Disk I/O will also give you extra mileage on the netbook's battery.

Chrome - on XP any of the top-browsers will do (safety features), but Chrome was on my systems allways faster than the other in startup time and page rendering.

When you look for a sandbox, Sandboxie is the one most used at Wilders (but with LUA, I would only use it for dodgy browsing, so on demand).

Hitman Pro on demand scans before backups.

Backup software (data and image) is what is missing. Paragon offers freebies on this area.

 

Ok.

So no scanner too?

I'm about to try Ad-Aware right now.

Right now I'm using FF... what is different?

What do you mean?

What backups?

Is this different than the line above?

 

For netbooks the fewer the security programs installed, the snappier it will be. Since yours has XP i would suggest switching IE 8 for any other newer browser, let it be FF or Chrome or Opera but IE 8 is just SLOW.

You can try an AV less setup i order to keep the laptop snappy. Windows hardening + Sandbox or a light HIPS (Malware Defender, DeefnseWall etc.)

 

I use FF as my primary browser and IE is my backup... should I also get Chrome or Opera?

Can you explain both options?

Also, this was the suggestion I got on another board, thoughts?

 

Two browsers are good enough.

Windows Hardening, such as disabling specific services, applying specific tweaks can be effective against malware attacks. Sandboxing prevents writing to the real disk and changes can be quickly discarded. Light HIPS such as Malware Defender or Comodo D+ monitor specific changes that affect your system and you will be alerted.

It is your choice if you want to use Avast. IMO it is quite powerful in terms of performance, usability, and protection.

 

So you would second Avast and Spybot S&D?

 

I would First Only Avast

 

So not Spybot S&D?

Won't I need a scanner too?

 

Malwarebytes can be used as a scanner. Spybot is not as "powerful" as it was 5 years ago.

 

Since you're "new to computers", I'd keep it simple.

I would however recommend getting a grasp on what system services you need, and trimming the dead wood. You need to conserve all the resources you can. Yes, you can break things this way too if you just go in there guns-a-blazin. But with 1 gig of RAM on that netbook, it's almost essential IMO. Do a search for "Black Viper system service" to get list that will give you a rundown on the services and what they do. Change a couple (even 1 at a time), no wholesale changes.

Also go to Run > msconfig, and look at your startup list. Eliminate anything you don't absolutely need. The only thing I have on mine is Comodo FW/D+.

If you were using XP Pro instead I'd recommend a great tweak to harden your Windows FW from termination. Turns it into a perfectly sufficient inbound FW. That's the only problem with it... that malware can somewhat easily terminate it. Check the box to "Don't allow exceptions" anyway. I'd even delete anything on the exceptions list that you can, and uncheck the rest for good measure. Since you say you're new to computers I wouldn't recommend an outbound FW/HIPS. Plus you don't have the specs for it. Just be careful (I'll get to this later on).

I'd download Sandboxie free and make yourself a good sandbox for Firefox. There are great threads in the sandboxing/virtualization section here at Wilders that can help you. It's not nearly as difficult as it seems at first. If you get comfortable with the program, you may want to consider purchasing it. Best $ for computer security I've ever spent.

Then just add a light & effective real-time AV. I used Avira Free for years on a 512 MB/ram, 2.4 Ghz Celeron CPU. It was very light and detection rates right up there with the best. I haven't used it in about a year now. Avast ran a bit heavier for me, with all those shields. Just get something that scans files on execution. Anything more is unwanted bloat in your case, IMO. Trying to stop it at an earlier entry point is a luxury you can't afford with those specs. Again, Avira would be my recommendation, but I don't know how/if it's changed in the past year. Perhaps someone still in the real-time AV game can give you more up to date advice.

That and harden that Firefox. Don't go hogwild with addons, just a few useful ones (Adblock Plus, NoScript). In regards to the latter, you can allow scripts globally if that's a nuisance to you, and it's still quite useful. "about:config" is your best friend to harden it without bloating the browser down. Again you can find good suggestions for tweaks by doing a search for something like: "about:config tweak security/privacy"

Add a couple on-demand scanners for 2'nd opinions. I recommend: Hitman Pro, Comodo Cleaning Essentials, MalwareBytes Free, SuperAntiSpyware Free.

And the best tool for someone with low specs... safe habits. Don't go around surfing through every dark corner of the net, clicking on/downloading everything you see. I probably could have run with no sandbox, AV, HIPS, anti- executable, outbound FW, or OS/browser tweak for the past 6 years without being compromised. But it's all there just in case I have a momentary lapse of reason.

 

Spybot S&D is pretty much useless as a scanner. The only thing it's good for is it's "Immunization" feature, much like Spyware Blaster. But even then IMO you're better off using the Adblock Plus addon for Firefox and some good lists (Easy List, Easy Privacy). The Fanboy's Tracking/Stats Blocking list in particular, along with the previous 2 will probably knock out anything those 2 programs will, and then some. Malware Domains is another useful list.

Add a good cookie manager/blocker, like CS lite (addon). Combined with ABP they will do the job better/lighter than Spybot & Spyware Blaster. I used to use them both too, but these ABP lists are getting so comprehensive now.

 

what about tea timer?it can be an extra blanket

 

So what exactly do I need?

I'm getting mixed up, there's firewalls, removal tools, AV scanners, and what else?

 

EMET.

Wrote a setup guide here.
https://insanitybit.wordpress.com/2012/05/30/emet-v3-0-whats-new-and-how-to-set-it-up/

Every Windows system should be running EMET.

 

You just need a firewall, a AV and/or sandboxing, scanners/removal tools, and maybe some hardening from EMET and thats pretty all it to keep it simple.

 

So considering my specs and experience, what programs would meet those needs?

 

It looks to me like you've already gotten good advice. Avast or Avira. Firefox or Chrome. Sandboxie. EMET. MBAM and HitmanPro. And a system image program (I use Macrium Reflect, Kees1958 suggested Paragon). With those programs and a little common sense, you can probably get by with the Windows firewall.

 

Back to basics.
1.Limted user Account.
2.Browsers Firefox or crome as primary - Add ons optional.
3.Antivirus.
4.Firewall - windows should suffice.
5.Keep windows updated
6.Keep Adobe reader and Flash updated
7.Java if you have it and do not need it remove it.
8.A recovery method other then hidden partion from a external source USB or CD

 

Nice list djohn, short and to the point. For #6 the PDF reader and Flash in Chrome are enough for me, and I think they load in Chrome's own sandbox. I think it was Kees1958 who said that the combination of Chrome's sandbox with Sandboxie gives additional security.

Not exactly clear about #8. Other than the hidden partition? What is the hidden partition?

 

Netbooks have the recovery parition as mine does to recover back to factory bloat.Yuk BTW good point about Crome I forget about PDF and flash.thanks