1. Make sure you have an Antivirus, Firewall and Antispyware scanner installed.
If not present, here are some I recommend:
* AntivirusScanners
* Firewalls
* AntiSpywarescanners
Make sure you DON'T download and install any scanner present on this list. These scanners are blacklisted because of their questionable reputation.
Never install more than one Antivirus and Firewall! Rather than giving you extra protection, it will decrease the reliability of it seriously! The reason for this is that if both products have their automatic (Real-Time) protection switched on, your system may lock up due to both software products attempting to access the same file at the same time. Also because more than one Antivirus and Firewall installed are not compatible with eachother, it can cause system performance problems and a serious system slowdown.
I also suggest to perform an online virusscan once in a while. Because what one virusscanner can't find another one maybe can. You'll find some good Online scanners Here.
2. Make sure your Windows is ALWAYS up to date!
An unpatched Windows is vulnerable and even with the "best" Antivirus and Firewall installed, malware will find its way through.
So visit http://www.update.microsoft.com to download and install the latest updates.
Effective July 11/October 11, 2006, Windows 98, Windows 98 Second Edition, Windows Me, Windows XP SP1 and SP1a will transition to a non-supported status. Read here for more info:
http://www.microsoft.com/windows/support/endofsupport.mspx
http://support.microsoft.com/gp/lifean19
So make sure you update!
Also read the article Unpatched Windows PCs fall to hackers in under 5 minutes.
Also, not only your Windows should be up to date, but also the programs you are using. This since many programs may contain Security leaks. To find out if your programs are up to date, run the Secunia Software Inspector.
3. Stay away from illegal/questionable sites.
This is one of the main causes why a computer gets infected. Visiting cracksites/warezsites - and other questionable/illegal sites is ALWAYS a risk. Even a single click on the site can be responsible for installing a huge amount of malware. Don't think: "I have a good Antivirus and Firewall installed, they will protect me" - because that's not true... and even before you know it, your Antivirus and Firewall may already be disabled because malware already found its way on your system.
Also, if your computer is infected, you are responsible for infecting a lot of other computers as well + sensitive data may be known. That's a big risk you are taking, just because you don't want to purchase software or don't want to use a free alternative. Read this article: http://miekiemoes.blogspot.com/2008/06/neverending-story.html
4. Be careful with mail attachements!
Malware spreads via email as well, especially email attachements.
The most common ones are emails telling you that your computer is infected where you'll find the removal tool in the attachement, emails telling you that your password has changed which you'll find in the attachement, mails with productcodes in the attachement from software you purchased (while you didn't), attachements with so called Security updates etc etc...
Don't trust these mails, don't even open them but remove them immediately instead!
It may also happen you receive a mail from someone you know, but with a questionable attachement present and strange contents in the mail. In this case, this person - or someone else who has your address in his/her addressbook - is infected with malware (worm/spambot) and sends these mails without being aware of it.
Don't click links in emails from someone you don't know, because these links can redirect you to sites where malware gets downloaded and installed.
Mailwasher is a free and great Anti-spam tool which gives you the option to view your mails on the server, sort them and delete the spam mails and other suspicious mails directly from the server without them downloading to your mailbox.
For people who get dozens of spams daily, read this great article where it explains spam and how to deal with it: I hate Spam
5. When surfing...
* Don't click on links inside popups.
* Don't click on links in spam messages claiming to offer anti-spyware software; because most of these so called removers ARE spyware.
* Download free software only from sites you know and trust. Because a lot of free software can bundle other software, including spyware.
* Be careful when watching online videos, especially when they ask you to install a certain codec to watch the video. By default, your mediaplayer should already have the necessary codecs installed to watch online videos. In case you're prompted to install an additional codec while trying to watch a movie online, it may be a false alert and this so called codec may install malware. More info here and here.
* Don't install plugins (ActiveX) if you're not certain what it is or why you need it.
A great program is SpywareBlaster. SpywareBlaster doesn`t scan and clean for malware, but prevents it from being installed in the first place. It blocks the popular spyware ActiveX controls, and also prevents the installation of any of them via a webpage.
How to use SpywareBlaster
The MVP Hosts File is a great addition to block bad sites. This is accomplished by blocking these sites through the hosts file.
Install Internet Explorer 9 or another alternative browser like Firefox or Opera for more secure surfing. (However, keep in mind, as long as you don't stay away from illegal/questionable sites, no browser will be secure enough)
6. Watch what you download!
If you want to install certain software, always go to the developer's site to download the software from. Then you can be sure you're downloading and installing the right software.
Beware of the fact that certain software (especially freeware) may contain/bundled with extra software including spyware/adware. So only install it when you're sure they are OK.
Read here for more tips about safe downloading.
To find out if what you download is ok and get more information about the intentions of software and other bundled components such as spyware/adware which may be present, use EULAlyzer. EULAlyzer scans the End user license agreements (EULAs) most software should show during install and provides a detailed listing of potentially interesting words and phrases, discovers if the software you're about to install displays pop-up ads, transmits personally identifiable information, uses unique identifiers to track you, or much much more.
The use of P2P Programs like Kazaa (which is bundled with adware/spyware btw), Limewire, Torrentsites, Emule, Bearshare... is always a risk, because you can never be sure what you exactly download. It isn't always what it looks like. Important to know is that many P2P Programs are also bundled with unwanted software (spyware/adware). To find out which ones are safe to use and which ones are infected, take a look here.
Also read this article about the risks of using P2P Programs.
7. More info....
... and tips how to protect your Pc, Protect yourself and Protect your Family:
* Microsoft - Security at Home
* Top Ten excuses why people don't want to secure their computer and why they are wrong - by Budfred
* How did I get infected in the first place - by TonyKlein
* Prevent Re-infection
* Simple and easy ways to keep your computer safe and secure on the Internet
Wednesday, February 13, 2008
How to prevent malware
Labels:
Prevention
Comments (20)

Sort by: Date Rating Last Activity
Loading comments...
Post a new comment
Comments by IntenseDebate
How to prevent malware
2008-02-13T14:01:00+01:00
miekiemoes
Prevention|
Subscribe to:
Christopher Chacon · 834 weeks ago
Michal J. · 822 weeks ago
miekiemoes 47p · 822 weeks ago
Brian · 819 weeks ago
wayne · 800 weeks ago
Registry Data Items Infected:
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesBITSImagePath (Hijack.WindowsUpdates) -> Bad: (%fystemRoot%system32svchost.exe -k netsvcs) Good: (%SystemRoot%System32svchost.exe -k netsvcs) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESystemCurrentControlSetServiceswuauservImagePath (Hijack.WindowsUpdates) -> Bad: (%fystemroot%system32svchost.exe -k netsvcs) Good: (%SystemRoot%System32svchost.exe -k netsvcs) -> Quarantined and deleted successfully.
Then I found the forum, read a few, and tried your recommendation: WUS_fix. Problem solved in less than 5 seconds! Excluding the 4 hours I spent researching the issue and the couple of minutes it took to find/install the program, 5 whole seconds!
I want to take a moment to give you my greatest thanks!
miekiemoes 47p · 800 weeks ago
wayne · 800 weeks ago
miekiemoes 47p · 800 weeks ago
Dan Harrington · 800 weeks ago
Just a quick thank you for all the help you have been in cleaning up my computer.
This page was very informative and I will now try to keep up with the scans, etcl
Thanks again
Dan
jdhj8961
miekiemoes 47p · 800 weeks ago
Michael · 792 weeks ago
miekiemoes 47p · 792 weeks ago
Glen · 791 weeks ago
miekiemoes 47p · 791 weeks ago
dew · 791 weeks ago
MAlik · 786 weeks ago
lakan299 · 780 weeks ago
Im sorry if i have to post this here, which one should i disable, Eset Smart Security Firewall or Windows Firewall?
Thanks..
By the way you helped me clean up my unit a couple of weeks ago.. A great great thanks for that! :)
miekiemoes 47p · 780 weeks ago
lakan299 · 779 weeks ago
Nope. Sorry it did not. But i already disabled it manually.
Thanks. :)
Jimbo87 · 771 weeks ago