Looking for a guide to secure Windows XP

[Steve 21]

I never understood why theres never a complete resource guide one how to secure windows xp. Or even a guide that can teach users on the security measures you can take.

Is it me or Windows will never be secure....at most 80%?

I also would like explanation on viruses, spyware and trojans.

For example, there are dozens of tools that say they scan, but what if you have a virus/spyware/trojan that is only spread to lets say 100 users out there. These 100 users never report a problem , never even know they have a virus or what not,...and thus the tools out there will never be able to counter it.

Do tools detect viruses even if one has never been reported? Do all viruses / spyware/ trojans do a similar function that these tools can pickup?

Whats the #1 way you can tell if you have a virus or not? How do you make sure no1 else can snoop around your computer? I have a lot of work files that I would only want me and my trusted employees viewing...but not too any intruder.

So many questions, some may sound dumb so sorry for that. But I finally decided to sign up to a windows forum and hopefully windows gurus can enlighten me on this topic.

Another thing, how can I tell if someone is not sniffing and reading my internet packets? I mean anyone clever enough can just always spend time sniffing packets and figure out a password , to lets say your PayPal account right?

Any replies will greatly be appreciated.

Thanks a ton,

Steve

[Scarecrow Man]

First of all, no one program can find and eliminate every single virus known to man. This is why we have levels of security.

Level 1 - User Security

Don't be stupid. Honestly. I don't mean it to be rude, but don't paste your account information on a public forum or website (you haven't done this it's just an example)

Level 2 - Firewall

Use a firewall. This is very important. The Windows Firewall is not good enough, and here is proof - http://www.matousec.com/projects/windows-p...sts-results.php

Level 3 - Anti-Virus

Any anti-virus program is only as good as its latest definitions. Update it every day in order to be as secure as possible. Some good (free) choices are AVG, Avast, AntiVir. You can also use Online scanners as well. Panda Active Scan, or TrendMicro Housecall are good.

Level 4 - AntiSpyware/Malware

There are a LOT of "rogue" antispyware programs floating around. The most complete list is here - http://spywarewarrior.com/rogue_anti-spyware.htm

Stay away from these at all costs. Some good ones are Spybot S&D and Ad-Aware. The same rules apply here as Anti-Virus. Keep them up to date to catch and prevent the latest outbreaks. I also use a hosts file (see There's no place like 127.0.0.1 in my signature) and Spyware Blaster, as methods of prevention rather than detection after you have been infected.

These levels are just my opinion, and there may be more, but this will make sure you are secure from 99% of threats. Of course if a hacker really wants to get into your system, the only way to get them out is to unplug the Internet. There is no way to be 100% secure other than going off line.

[Mike567]

run you're browsers as guest, stopping malicious sites screwing with you're pc. runas.exe

hide behind a proxy unless you trust the site.

never use p2p programs.

you can really use most of the programs on xp to actually secure the pc, but as above if a hacker really wants access you will never stop them even with unplugging the internet connection.

[andsome]

run you're browsers as guest, stopping malicious sites screwing with you're pc. runas.exe

hide behind a proxy unless you trust the site.

never use p2p programs.

you can really use most of the programs on xp to actually secure the pc, but as above if a hacker really wants access you will never stop them even with unplugging the internet connection.

I am very interested as to how a hacker can gain entry to a computer that does not have an INTERNET connection??????????????

[ɹəuəllıʍ ʇɐb]

Another thing, how can I tell if someone is not sniffing and reading my internet packets? I mean anyone clever enough can just always spend time sniffing packets and figure out a password , to lets say your PayPal account right?

Enter confidential information (such as a password, account no., etc.) only on a secure connection, i.e. the protocol being https instead of http.

In addition to Scarecrow Man's list, make sure that all your software is up-to-date, especially with security updates. Use Secunia Software Inspector to find any missing software updates.

[nellie2]

Everyone has a different configuration and uses their computer for different things so it would be a bit difficult to have a generic security guide.

But...

1. Always run from a limited account rather than an admin account.

2. Make sure your operating system and all software is fully up to date as far as security updates go.

3. An up to date hosts file like MVPS hosts will keep a lot of nasties from ever getting a sniff at your computer.

4. Make sure your anti virus, firewall and any anti malwrare programs you have are up to date and are giving you 'real time' protection.

5. As far as people sniffing your packets... if it were that easy then we wouldn't be bombarded with spam trying to get us to visit dodgy websites or phished sites.

6. For info on Virus's and Trojan's then see here

[Mike567]

I am very interested as to how a hacker can gain entry to a computer that does not have an INTERNET connection??????????????

social engineering, plus you have to connect at some point :lol: