How to Secure Your Computer | secure computer

NOTE: There are many additional steps that can be taken to secure your computer, network and Internet connection. These steps are meant as a starting point for the average home user and is by no means all inclusive. However, if you follow these guidelines you will have taken an important first step on the road to a secure computing experience.

IMPORTANT: BACKUP YOUR COMPUTER BEFORE PROCEEDING. INCLUDE ANY AND ALL IMPORTANT DATA, VIDEO AND AUDIO FILES. NOTE: Even if you use an alternate browser, e.g. Firefox, you should implement the steps outlined below for Internet Explorer as it will still be present with any copy of Windows. It is all but impossible to completely remove Internet Explorer despite the ability to "apparently" remove it via Control Panel/Add/Remove Programs.

Step 1 – Update Windows with latest service pack

• Identify which version of Windows your running
  • Open Control Panel then Open the System icon
    • On the General tab under the System section note your Windows version; also note the Service Pack number (if no service pack is listed, note that too)
  • Alternatively, right click on the My Computer icon and choose Properties from the popup menu
• Check here for Windows
• Check Update in Windows Vista
• Check here for Windows XP

Step 2 – Enable Automatic Updates

• Turn On Automatic Updates
  • Open Control Panel/Automatic Updates
    • Select Automatic (Recommended)

  To install manually:

  • Open Internet Explorer and from the menu bar select Tools/Windows Update
  • Choose Express Install and follow the on screen directions to install latest updates
  • Note that if you want to check your computer for software (driver) updates for your computer's hardware, choose Custom. Then in the left column under "Select by type" click on Hardware. My experience has been that this works well for most of your hardware with the exception of printers. For printers you're better off searching the manufacture's website.
  • If you use other Microsoft applications you may want to consider installing Microsoft Update as opposed to just using Windows update. Microsoft update will scan your Microsoft applications (e.g. Microsoft Word, Excel, Outlook, etc.) for updates in addition to Windows updates.

Step 3 – Secure Internet Explorer

• Clean up your Internet Explorer 8 browser and adjust it's settings
  • From the menu bar select Tools>Internet Options>Delete
  • On the General tab click Delete
  • Check "Temporary Internet Files"
  • Optionally, you may select other items to delete
    • If you suspect your Browser may already be infected, then I would suggest also deleting the History and Cookies.
  • Click Delete

Step 4 – Remove unnecessary/unwanted programs

Step 5 – Clean up your hard drive

Step 6 – Install an Anti-Virus program

Step 7 – Enable your Firewall

Step 8 – Install Spywareblaster

Step 9 – Install an Anti-Spyware application

Step 10 – Disable unnecessary services

Step 11 – Prevent unnecessary programs from starting automatically

Step 12 (optional for performance)

• From the menu bar select Tools>Internet Options
• On the General tab under the "Temporary Internet files" section
  • click on Delete Cookies and OK to confirm
  • click on Delete Files and OK to confirm
  • click on Settings and under the "Temporary Internet files folder"
    • adjust the slider bar to show the Amount of Disk Space to use to 50 mb
    • confirm to go back to the tabs window
  • On the Advanced tab, scroll down to the Security section
    • Put a check next to item "Empty Temporary Internet files folder when browser is closed"
  • On the Security tab,
    • click on Internet and make sure the Default button is grayed out, if not click on it
    • click on Local Intranet and make sure the Default button is grayed out, if not click on it
      • click on the Sites button then the Advanced button, remove any unknown sites listed under the section Web sites
    • click on Trusted Sites and make sure the Default button is grayed out, if not click on it
      • click on the Sites button and remove any unknown sites listed under the section Web sites
    • click on Restricted Sites and make sure the Default button is grayed out, if not click on it
  • On the Privacy tab
    • make sure the Default button is grayed out, if not click it
    • Click OK to close Internet Options
• Remove any unwanted, unnecessary or unknown programs
  • Open Control Panel then open the Add/Remove Programs icon
  • Remove accordingly
• Clean up the hard drive
  • Start/Programs/Accessories/System Tools/Disk Cleanup
    • Make sure, at a minimum, that Temporary Internet files, Recycle Bin and Temporary files are checked
  • Defragment the hard drive (for performance)
    • Start/Programs/Accessories/System Tools/Disk Defragmenter
      • Click on the Defragment button
• Install an Anti-Virus program
  • If you don't have one installed already, I recommend this one.
  • Make sure that whatever program you use that Updates are set to Automatic
  • Schedule a scan of the Windows and Document and Settings folders at least once a week
  • Schedule a complete scan of the computer at least once a month
  • IMPORTANT – If you use a program which requires an annual subscription fee to receive definition updates – KEEP THE SUBSCRIPTION PAID UP AND CURRENT
• If you have at a minimum, Windows XP Service Pack 2, make sure that Windows firewall is turned on.
• Or you can install a third-party software firewall (a.k.a. personal firewall)
  • You can purchase a firewall or download one of the free firewalls
  • Windows built-in firewall PRIOR TO WINDOWS XP SP2 is NOT recommended (a good firewall protects both incoming and outgoing communications – the Windows firewall prior to Service Pack 2 for XP protects only incoming. This was changed to protect in both directions with Windows XP service pack 2). If you are using a third-party firewall, turn off the Windows firewall as it is NOT recommended to use more than one personal firewalls on the same computer at the same time. See the following: http://www.practicallynetworked.com/sharing/xp/ic_firewall.htm
  • To enable or disable Windows XP Internet Connection Firewall
    • Open Network Connections.
  • Click the Dial-up, LAN or High-Speed Internet connection that you want to protect, and then, under Network Tasks, click Change settings of this connection.
  • On the Advanced tab, under Internet Connection Firewall, select one of the following:
    • To enable Internet Connection Firewall (ICF), select the Protect my computer and network by limiting or preventing access to this computer from the Internet check box.
    • To disable Internet Connection Firewall, clear the Protect my computer and network by limiting or preventing access to this computer from the Internet check box.
  • To enable or disable the Windows Vista firewall: Click the General tab, and make sure that the Block all incoming connections option is selected
  • To manually configure or verify the configuration of Windows Firewall Click the Start button, click Control Panel, and then click Security.
  • Under Windows Firewall, click Allow a program through WindowsFirewall. Because this task requires Administrator rights, you will see a User Account Control dialog box.
  • On the Exceptions tab, scroll down the list and locate the entryfor Media Center Extenders. Select the check box next to this entry,if it is not already enabled, and click Apply.
• Prevent the installation of spyware and other malware
  • Install Spywareblaster from Javacool Software, http://www.javacoolsoftware.com/sbdownload.html, it's free
    • Be sure to check for updates frequently. In the free version you must do this manually.
• Install an Anti-Spyware/Adware application
  • If you don't mind paying, I recommend this one.
  • After installing, be sure to check for updates
  • Set Updates to Automatic (method will vary depending on application and free versions may require manual update)
• Adjust and/or Disable unnecessary services
  • Open Control Panel, open Administrative Tools then open Services
  • Disable the following services:
    • Unless your computer is connected to a local network (LAN) AND you are sharing files or a printer with other computers on the LAN then you can safely Disable the Server service:
      • Double Click the Server service and change the Startup Type dropdown to Disabled
    • Disable the Messenger service
    • Disable the Indexing service (only to improve performance)
• Adjust the startup entries (programs that will start automatically when Windows starts) for Windows
  • Start/Programs/Startup
    • Remove any unnecessary, unwanted, or unknown entries (deleting items from the startup folder does NOT delete the application it only deletes a shortcut to the application and prevents it from starting automatically when Windows starts)
• To adjust startup entries in the Windows registry it is recommended that you use the msconfig utility that is built-in to Windows XP and Vista. Some Anti-Spyware applications (e.g. Spybot Search & Destroy) also allow you to safely disable these entries. That way if disabling them causes problems, you can easily re-enable them.
• If you have a broadband Internet connection (cable modem or DSL modem), optimize your TCP settings
  • Download the TCP Optimizer http://www.majorgeeks.com/download2104.html
    • On the General tab, click on Optimal settings, Apply and confirm reboot

Brian Alaway Consulting
Tampa Computer Repair Service and Support

© 2005 BAC Group Inc., All Rights Reserved

Incoming search terms for the article:

Related posts:

1. Don’t be a Victim! Ten Steps to Avoid Computer Repair

Topics: Computer - Security, Technology | No Comments »

Comments

« Don’t be a Victim! Ten Steps to Avoid Computer Repair | Home | How to Secure Your Network »