What should I use for better protection?

My wife has suddenly decided that it's going to be a ton of fun to chat with her neice and nephew and the rest of the family in Colombia.
They did it last night while I was reading.
Her family was at a kiosk in Cali. Using MS messenger and Windows Live.
I had disabled messenger but they had her download another copy and it worked for her. So much for disabling services for protection.
I have no experience with IM so I don't know how to keep Mrs. Click from getting us infected.
So far I use Avira Classic, Threatfie Free, SAS on demand, a router w/NAT and SPI, Seconfig and Windows Firewall ala Stem's instructions.
I'm about ready to buy Defensewall but don't know if I should get anything else.
I'm not tech savvy and my wife's worse.
Thanks for any help.
Hugger

 

I used to use Trillian but have been using Miranda for some time. I have not read of any exploits of either, but someone esle may. Trillian used to have a freeware minimalist version, I don't know anymore. Last time I updated Miranda it was still freeware.

Sul.

 

Just tell them not to download any files and you are totally safe. Avira will take care of the rest.

 

Teach her about IM worms(the common messages which lead to an infected link)
Also setup avira to scan everything which is transferred via Windows Live Messenger.

 

Don't know your OS, but if appropriate, set up a user account for "Mrs Click" that doesn't have admin privileges.
Password protect any account with admin privileges for your own use.
(Discuss this first, obviously.)

Love the nickname. So descriptive.

 

And also, you could to run the browser virtualized, for exemple with Returnil: after the pc reboot, all safe.

 

Agreed, good AV and education goes a long way.

 

Since the issue here is about using IM, is not a better IM client not enough? I understand that security is vital and all, but would not a better IM stop most issues? I don't really use IM that often so was wondering why no one has mentioned it but only security measures. Don't you want to use something other than Messenger ?

Sul.

 

That way both the OP's wife and her family would need to create new addresses and change IM client. Windows Live is preferred since it is the most complete one. And I don't think that using another client would make things any better. Malicious links are spread regardless of which IM client you are using.

 

I use Miranda with Sandboxie and everything works perfectly. The box gets erased as soon as Miranda closes. No worries there; I know I'm perfectly safe.

 

My wife uses windows live messenger with Avira, Defensewall, and Windows Firewall with no problems.

Only recommendation I would make is to check settings in Windows Live Messenger under tools and options.

Check or uncheck the sharing folder your option.

Under the File Transfer setting check scan for viruses using and click on the browse tab to select your A/V.

In the Privacy tab check only people on my allow list can see my status and send me messages, and check
the alert me option when other people add me to their contact list.

Ask her not to add any other people but those she knows to her messenger list and block all others.

Do not click on hyperlinks in instant messages.

Regards,

Wake

 

So this is an issue of links or content sent rather than an insecure IM client specifically?

Miranda works with a hotmail account or yahoo account or most major forms of chat, so they would be usable well enough.

I must just use it for chat the few times that I use it.

Sul.

 

My 2 cents:

1.- Disabling Messenger service HAS NOTHING TO DO WITH Instant Messanging. I always use Windows Live Messenger and have that service disabled.

2.- Your wife will stay safe AS LONG AS SHE ONLY USES MESSENGER TO CHAT. Teach her NOT TO RECIEVE FILES and NOT TO CLICK LINKS PEOPLE SEND. Thats all.

 

Yes I second that, but if you understand extensions, I'm sure all you'll want to share are pictures most likely, so just don't download any .exe files you are not 100% sure of.

Also I'd use Pidgin for chatting over MSN's app....

Pidgin:

http://www.pidgin.im/

P.S You don't need a ton of software for security, hehe...

 

I just use safe IM practices and i use defensewall or online armor to run messenger with limited rights.
Another simple solution would be to run messenger sandboxed using the free sandboxie.

 

DefenseWall should also tag whatever is downloaded through the IM as untrusted so that should help.

Also, be sure to keep the IM up to date .

 

Thanks everybody for your help.
I've got a lot to learn but now know what directions to go in.
Regards.
Hugger

 

Hello Hugger,

It is my opinion that all you need is DefenseWall(DW) with password protection enabled and the addition of some or all of my DW system lockdown settings which can be found at the following link below.

http://gladiator-antivirus.com/forum/index.php?showtopic=77256

Between DW and my system lockdown settings, not only will an unauthorized user be unable to install new programs, but they will also not be able to perform any "manual" changes to local Windows services via services.msc and other points of access.

Hope this helps.


Peace & Gratitude,

CogitoErgoSum

 

CogitoErgoSum,
Thank you. I'll give it a try.
Hugger

 

Sure, the question which is better, Returnil or Sandboxie, it's old as the world is old. I use them together.

 

Hello Hugger,

You are very welcome. If you encounter any problems or have any questions with the system lockdown settings, please feel free to ask me for help. I will do my best to set things straight.


Peace & Gratitude,

CogitoErgoSum

 

While they are not the same product, the premise behind both of them is the same; whatever you started with you'll end with. But keep in mind that neither SBIE or Returnil can qualify as a substitute for a good imaging program (that uses optical media).

 

At this point I have only one question.
I followed the link for the DW settings and saw your warning that it's for advanced users.
I'm so far removed from being an advanced user, it's scary.
So, is it still safe to do?
I use Threatfire, Avira free, Seconfig or Harden-it, SAS and Spyware Blaster.
Thanks.
Hugger

 

Tarq57,
Surely you jest. She might listen to me if I'm on my death bed and she want's to find the keys to the vault. Maybe.
With my wonderful but seriously crazy wife your sig is- Oh God, what's she doing now?
Huggger

 

Hello Hugger,

I see your point. At the very least, you should enable DW's password protection feature. By doing so, this will prevent unauthorized users from installing any programs as "trusted". In other words, programs typically fail to install as "untrusted". Please refer to the following links below.

http://softsphere.com/online-help/defensewall/password.htm (DW Password)
http://softsphere.com/online-help/defensewall/passwordprotection.htm (DW Password Protection)

Hope this helps.


Peace & Gratitude,

CogitoErgoSum