Tired of fixing...Best combination of security utilities?

Discussion in 'other firewalls' started by mVPstar, May 30, 2004.

Thread Status:
Not open for further replies.
  1. mVPstar

    mVPstar Registered Member

    Joined:
    May 2, 2004
    Posts:
    52
    Hi guys,
    Over the past few years, I have gotten extremely tired of fixing problems, virus related, spyware, and even simple general usage problems. I have decided that it's time for a full system clean and reinstall of Windows 2000. After I do the reinstall, I was wondering what I should do to soup up my security to the maximum possible. I will also have to enable some IIS security as well.

    These are the programs that I have already decided to run/install after the reinstall:

    Norton AntiVirus
    Norton Personal Firewall
    Ad-Aware
    SpyBot Search and Destroy
    HiJack This!
    URLScan (for IIS)
    IIS LockDown (IIS)
    --------------------------------
    I have also decided to install SP4. I'm not entirely sure how I am going to do this as I know that many people have had issues with installing this service pack.

    What other utilities would I need?
     
  2. infinity

    infinity Guest

    for me there is only spyblocker missing as I personally wouldn't use norton as to cpu hungry but it ll do fine.
     
  3. QuickStrike

    QuickStrike Guest

    Ya like he said, if you are running IIS go with an AV solution other than Norton as it is a CPU Whore. There are many alternatives. As for SP4 most definately install it, because if you do get errors or problems after updating, you could always just format again. Sp4 will add the greatest amount of security to W2k besides 3rd party apps. For the AV i'd probably look at McAfee Enterprise as it's light weight, and sports an excellent unpacking engine. McAfee's home line though is a waste of time and not worth installing. As for a firewall, i'd assume you aren't running a major site of your box, or i'd suggest a hardware solution, otherwise Kerio 2.x or Outpost are solid choices.
     
  4. mVPstar

    mVPstar Registered Member

    Joined:
    May 2, 2004
    Posts:
    52
    Well, I do have a router w/ firewall running and that's worked fine alone. I actually just finished the Windows 2000 reinstall. The installation came with SP1. Should I try SP4 now or can I just order the CD and install my other software apps before? SP4 isn't exactly urgent and I really don't want to waste loads of time trying to do another reinstall.

    Also, is there any good utility for stopping adware, etc from coming onto the computer in the first place? That's what I really need. Is Spyblocker what this type of software is?
     
  5. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    That is what javacools spywareblaster is for. It is supposed to stop spyware before it is installed
     
  6. meneer

    meneer Registered Member

    Joined:
    Nov 27, 2002
    Posts:
    1,132
    Location:
    The Netherlands
    If you're running an IIS server, by all means run Microsoft Baseline Security Analyzer. Probably the best tool to inform you about vulnerabilities on that system.

    SP4 is recommended. Not only security fixes, but other useful fixes, especially when running a production server (your http server).

    Of course, if you don need a webserver: get rid of it, dump the IIS processes all together (there are too many vulnerabilities in olderd IIS's, running lockdown helps a bit, but it's only a work around).
     
  7. mVPstar

    mVPstar Registered Member

    Joined:
    May 2, 2004
    Posts:
    52
    I need IIS for testing asp/database webpages that I create for some of my clients. For security, I just disallowed access to port 80 on my computer through the router (I forwarded the port to an inexistent IP). I also created a block rule on NPF to 80. I installed URL Scan and IIS Lockdown tool as well just in case.

    How should I go about installing SP4? How do the successful people install it without problem? What causes these problems when installing SP4? I currently have no patches installed except for the SP1 that came with my Win200 installation cd.
     
  8. QuickStrike

    QuickStrike Guest

    Just go download the network install of SP4 it's probably around 150MB download. Much easier and quicker than using the express client, and in reality probably one of the most important steps in securing your box besides an av and firewall.
     
  9. mVPstar

    mVPstar Registered Member

    Joined:
    May 2, 2004
    Posts:
    52
    Will it mess up my system or cause any errors?

    I really do not want to waste anymore time on reinstalling my whole system because of a silly service pack. I've already spent 6-7 Hours getting my computer back to its original state.

    However, if the service pack does cause errors, will I be most likely able to recover by uninstalling the service pack?
     
  10. meneer

    meneer Registered Member

    Joined:
    Nov 27, 2002
    Posts:
    1,132
    Location:
    The Netherlands
  11. Paranoid2000

    Paranoid2000 Registered Member

    Joined:
    May 2, 2004
    Posts:
    2,839
    Location:
    North West, United Kingdom
    After SP4, check Microsoft's Security Bulletins for further patches. A firewall and AV scanner should be minimum security requirements nowadays (although I would also vote against Norton - if you want a rules-based firewall then consider Outpost or Kerio instead).

    The guaranteed way to stop spyware is to use a web filter to block all ActiveX, Java and Javascript. There is no justification for ActiveX (the only place where it is really needed is Windows Update) while the other two are best enabled on a site-by-site basis for URLs you trust. Some firewalls offer this functionality (Outpost does via its Active Content plugin and the non-free version of Kerio has web filtering) but specialised filters like Proxomitron (free, better for a power user) or WebWasher Classic (free for non-commercial use, easier for novice users) can offer more options.

    Changing your browser and email client is also a good step - IE is so broken security-wise that you can expect it to need continual patching so consider either Firefox (free) or Opera (ad-supported but you can register to get rid of them). For email, try ThunderBird (free) to replace Outlook Express. As well as better security they also offer significantly better usability (tabbed windows, mouse gestures, single-letter search engine access, etc).

    There are further measures you can take if you feel especially at risk - a quick search of the forum should provide lots of information.
     
  12. howlinwolf

    howlinwolf Guest

    Here's some (Mostly FREE) programs i like:

    1. SpywareBlaster (free)

    2. SpywareGuard (free)

    3. WinPatrol (free)

    4. A2 (free)

    5. X-Cleaner (free)

    6. Spycop (free trial)

    7. Spysweeper (free trial)

    8. Ad-Aware (free)

    9. Spybot (free)

    10. Belarc Advisor (free)

    11. Wintercooler (free version)

    12. Mozilla Firefox (free)

    13. 3S aka System Security Suite (free)

    14. Proxomitron (free)
     
Loading...
Thread Status:
Not open for further replies.