Fresh XP install: Which Security apps to install first?

Hey Guys

After much deliberation and a free weekend Ive 'clean format'ted and reinstalled XP.

Now there's a great opportunity to lay the foundations for a stronger PC as a result but what do the Security gurus think I should install first? Im thinking System Integrity apps before the usual AV/AT/FW.

Im hoping this might start a Sticky for future reference, in doing things the right way - if only one knew how .. What did you do in my situation?

Can you help?

Cheers!
Marcus_Mac

 

I usually install FW first, AV second, and other security programs last.

 

I install security apps last (although I leave XPs firewall running until then and am behind a router). I install all my apps, games, and utilities, run windows update, tweak my system, defrag the drives and then create an image.

After all this I install my security apps. They tend to hook into the system more than other applications and since I like trying out different security software I can use my fresh image to rollback before the security apps were installed.

BTW - Everything I install has been scanned with at least two AVs and one AT.

 

One thing you may want to consider is how the different programs and security apps need to load on reboot- which ones will fight to load first. I remember I had NOD32 and Link Scanner Pro fighting over which starts up first which caused some conflict problems and reboot delays. And the remedy (IIRC) was to uninstall both and reinstall them in proper order. So once you determine which programs to download see which need loaded first so there are no conflicts during reboot. It may not hurt to send a quick email to the customer service of the different programs you are considering to check on loading order on reboot. I remember the folks at XPLabs were very helpful.

 

Very good advice. I do almost same.

 

I just re-formatted a few weeks ago.

First I installed a FW,then AV,SpywareBlaster,alternative browsers,Ace Utilities,followed by on-demand scanners.

 

Hello,

Not strictly security - imaging software?

Install computer.
Install all the mobo drivers.

Create a raw image.

Install firewall - if you don't like Windows firewall.

Install Firefox.

Optional: Windows updates.
Optional: other programs you might want or need, e.g. IrfanView, OpenOffice.

Create a second backup image, with system fully ready to go.

Finally, add extras that you want.

Mrk

 

The first thing to go on should really be an install monitor (e.g. Total Uninstall) since most programs' own uninstallers don't remove everything and security software can be one of the biggest culprits (e.g. leaving behind drivers, file extension entries for scanners, DLLs in Windows folders, etc).

System firewalls (e.g. Process Guard, SSM) are certainly a good candidate for an early install, but you typically need to switch them to permissive settings to install other security applications.

 

Total Uninstall is the way to start

 

I use a customized "WinXPproSP2 Install CD" (nLite) to install my computer, which contains most security patches, removed components, tweakings, settings, etc.
I also download the recent version of each software. I also zero my harddisks.

Then I install my computer off-line as far as possible, except for one thing : activation of WinXPproSP2, which requires a short internet connection (stupid M$ !!!). I also configure all my softwares off-line.

I avoid any software that requires internet for installation, like Windows Defender, A-squared, ...
Unfortunately more and more softwares require an internet connection for installation, so the number of stupid companies increases regularly.

Before I go on-line I make malware-free images and archived snapshots, which will be used for restoration only.

Once I go on-line, I consider my computer as possible infected.

How do you think about being safe, once you go on-line ?
For instance do you consider yourself safe, when you upgrade a software on-line, like Windows Update, Firefox, Thunderbird, ... without really surfing on the internet ?

 

With the proper measures in place, yes

 

Wow almost too many replies to thank each of you in turn, its given me great food for thought - thank you!

 

One more for the list....
SP2 updates cd available from MS.
I burn the install files for security programs to cd.

 

Just did a fresh install of windows 2003 today. Heres what i did.

Installed OS.
Installed latest drivers.
Installed latest windows updates.
Tweaked system configuration.
Installed backup software and made an image.
Installed basic apps, browser, IM, media player etc...
Installed security apps, av, hips etc...
Cleaned up system, registry etc...
Defragged drive.
Made another image.

 

Looks very good to me.

Can I ask you what image software, backup software you use?

I am just curious and have NO intention of making ANY comments about your choices.

Mike

 

I use acronis trueimage for my backups. Also if i consider it an important backup i'll do a secondary backup image using paragon hard disk manager. I've never had any problems with trueimage but i don't take any chances with my valuable data.

 

Thanks The tester, farmerlee - good advice!