Page 1 of 1 1
Topic Options
#121876 - 2004-06-26 02:11 AM Tools and methods to protect your Windows System
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space

Here are links to Tools and methods to protect your Windows System from being attacked.

Please consult your support Analyst first before attempting to use or run any of the
software or methods linked here on a production work system.
Most Companies frown on users updating or modifying their work computer.

This list was mainly compiled to help users with their home machines.

Make sure you check for updates after installing any of these applications.
Also use the advanced features to disable other attack methods where possible.

Always keep your Microsoft CRITICAL patches up to date via the Windows update site.
Either enable the auto update or check for updates at least once a week.

Always make sure you have a current up to date Antivirus solution running.

Windows Update Site
http://windowsupdate.microsoft.com/

Microsoft Security Website
http://www.microsoft.com/security/default.mspx

Microsoft Baseline Security Analyzer V1.2
(you can run this tool to check for all types of Security issues on your Windows system, just be careful.
This tool is intended for System Analysts with knowledge of the Windows system)
http://www.microsoft.com/technet/security/tools/mbsahome.mspx
Download link for the Security Analyzer v1.2
http://download.microsoft.com/download/d/7/5/d757ff81-4f97-4a6d-a9d8-edea72363aa8/MBSASetup-en.msi

Lavasoft Ad-Aware
http://www.lavasoftusa.com/

Spybot Search & Destroy
http://www.safer-networking.org/

Spyware Block List File
http://www.spywareguide.com/blockfile.php

SpywareBlaster - Spyware Guard - (and similar software)
http://www.javacoolsoftware.com/products.html

Information about Download.Ject from Microsoft
http://www.microsoft.com/security/incident/download_ject.mspx

Symantec Antivirus Security Response Website
(review this site or similar sites for known threats, always keep your definition files up to date)
http://www.sarc.com/

CA Associates Security Advisor
http://www3.ca.com/securityadvisor/default.aspx

Spyware Warrior BBS
(Discuss all things Spyware)
http://www.spywarewarrior.com/

Spyware BLOG
http://www.netrn.net/spywareblog/

Adware, Spyware and other unwanted "malware" - and how to remove them
http://www.cexx.org/adware.htm

Spyware Forum
http://boards.cexx.org/

ZoneAlarm Freeware (Free firewall software)
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=staticcomp_za
Download ZoneAlarm Freeware
http://download.zonelabs.com/bin/free/1012_zl/zlsSetup_50_590_043.exe


WARNING! - Although modifying your HOSTS file to prevent certain sites from even loading on your
computer it is possible that adding too many or the wrong ones can or will also affect browsing
of some valid websites so use caution when adding or modifying your HOSTS file.

Top
#121877 - 2004-06-26 05:14 AM Re: Tools and methods to protect your Windows System
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
Doc,

Interesting set of links..

However, I just read about an anti-grc site - http://grcsucks.com .

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#121878 - 2004-06-26 06:28 AM Re: Tools and methods to protect your Windows System
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
I just had a neighbor bring me his laptop that he had blown up with all kind of infections. He asked me to rebuild it and do what I could do to 'protect it'

Clean XPsp1a CD
another CD with all the hotfixes with a bat to install them silently
Code:
 
start /wait %CDROM%\SVCPACK\DOTNETFX.EXE /Q:A /R:N
start /wait %CDROM%\SVCPACK\DX9NTOPK.EXE /Q:A /R:N
start /wait %CDROM%\SVCPACK\MBSASE~1.EXE /Q:A /R:N
...
start /wait %CDROM%\SVCPACK\Q832894.EXE /Q:A /R:N
start /wait %CDROM%\SVCPACK\ENU_Q8~1.EXE /Q:A /R:N /C:"DAHOTFIX.EXE /Q /N"
start /wait %CDROM%\SVCPACK\KB8324~1.EXE /Q:A /R:N /C:"DAHOTFIX.EXE /Q /N"
start /wait %CDROM%\SVCPACK\OE60SP~1.EXE /Q:A /R:N
start /wait %CDROM%\SVCPACK\QCHAIN.EXE


reboot, then install my freeware apps
Code:
 
start /wait %CDROM%\apps\AVGAntiVirus.EXE
start /wait %CDROM%\apps\Adaware6181.exe /s
start /wait %CDROM%\apps\GoogleToolbarInstaller.exe /q /d
start /wait %CDROM%\apps\spywareblastersetup.exe /SILENT /NOCANCEL /SP- /NORESTART
start /wait %CDROM%\apps\pskill spywareblaster.exe
start /wait %CDROM%\apps\AdbeRdr60_enu_full.exe -p"-s /v\"/qb\""
start /wait %CDROM%\apps\Acro-Reader_6.0.2_Update.exe -p /S /v/qn
start /wait %CDROM%\apps\quicktimealt133.exe /SILENT /SP- /nocancel
start /wait %CDROM%\apps\realalt123.exe /SILENT /SP- /nocancel
start /wait %CDROM%\apps\7z313.exe -y /q /r:n
start /wait msiexec.exe /I %CDROM%\apps\Shockwave.msi /qb-
start /wait msiexec.exe /I %CDROM%\apps\Flash.msi /qb-
start /wait msiexec.exe /I %CDROM%\apps\MBSASetup-en.msi /qb-



All thos apps needed to be started once and run/enable the autoupgrade and in the case of some of them, enable some features

Then install these from the web:
https://netfiles.uiuc.edu/ehowes/www/res/ie-spyad.exe
http://www.mvps.org/winhelp2002/hosts.txt

I also like to add a few additional sites to the restricted... Real.com, webshots.com, AOL.com and Yahoo.com(if I can get away with it)

I turned on the firewall

then set the user up with a 'restricted' user account and explain how to expect and desire the error messages of when apps fail during install

I know this particular user has MSOffice and must use Outlook and MSN Explorer/Internet, otherwise I'd have set him up with OpenOffice and pegasus mail (after uninstalling OE).

I'm half way considering Imaging his HD to a DVD for me do a quick restore in the future... (But I'd still charge him for 3 or 4 hours work) Considering how I have automated most of this, I doubt I spent more than 30 minutes or so with actual clicking. A disk image would make this about 20 minutes total.


A fair portion of this would have to be modified for the corporate environment, but home use and many freeware apps are metter than most shareware and some retail products... especially considering speed and app bloat

_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#121879 - 2004-06-26 09:54 AM Re: Tools and methods to protect your Windows System
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Thanks for the link Kent. I added from a link that was on another Spyware site. I removed it from above.

Rad,

This is for cleaning and helping mainly home users and perhaps some quick links for some Admins so they don't have to do all the searching for themselves.

Not that your method is not cool - it is. But don't think most users would care to have the entire system formatted and replaced. For Corporate use or users that have no real personal data saved/stored then that could be cool as well.

Overall good job though.

Top
#121880 - 2004-06-26 01:22 PM Re: Tools and methods to protect your Windows System
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
most people woldn't need their system replaced... except that by the time they bring it to 'me' it is usually 'broken'

I have fixed this particular machine in the past, and the user is on dial up, so he doesn't do windows update, doesn't update AV, doesn't update adaware. he and his kids apparently spend enough time surfing porn sites that his machine can't even run a spyware scan... and drops dial-up connections after a few minutes. therefore the disk wipe.

in most cases the app installs are enough, there is a free AV product there, adaware, google toolbar as a popup blocker, spyware blaser to manage the active x kill bits, a free zip/rar program, and the mandatory acrobat, shockwave, quicktime,real, and flash installs. Since real is full of tracking/bloat, I use the real alternative codec player... which will play all formats including DVDs. Just trying to 'harden' it as much as possible while not spending any money to buy products.

The new MBSA has a nice little GUI and provides enough detail that the user can figure out that they are missing a patch or something and to follow the instructions in fixing it.

I'm looking to make a similar CD, but containing Win98 and all it's updates, and have it as automated as possible, for those with older systems...
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#121881 - 2004-06-27 12:23 AM Re: Tools and methods to protect your Windows System
jpeachman Offline
Fresh Scripter

Registered: 2002-11-18
Posts: 39
Quote:

I'm looking to make a similar CD, but containing Win98 and all it's updates, and have it as automated as possible, for those with older systems...



One thing you might want to look at is the UNOFFICIAL Windows98 Second Edition Service Pack 1.5

Joe

Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
1 registered (Henriques) and 2516 anonymous users online.
Newest Members
fgarcia, Viginette, ManuvdWielNL, Sir_Barrington, batdk82
17889 Registered Users

Generated in 0.207 seconds in which 0.179 seconds were spent on a total of 11 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org