Preparing your Windows XP computer to survive the InternetùStep by step

Summary

Important: This article assumes that your computer is either new or has just had the Windows XP operating system installed on it.  Do Not follow these steps if you think your computer is already compromised by a browser hijack, virus, worm, adware or spyware infection.  Please follow the steps in the article Recovering your computer from a Virus, Worm, Adware, Spyware or Browser Hijack Infection if you think your computer is already compromised.

Initial PreparationùBefore You Connect to the Internet

#

Description

Importance

1

Before turning your computer onùDisconnect it from your network

Required

2

Immediately after turning your computer onùCreating a System Restore point

Optional

3

Install an Antivirus program, if not already installed

Required

4

Configure the Internet Explorer browser to be more secure

Required

5

Setup a Software Firewall

Required

6

Create another System Restore Point

Optional

7

Installing a Hardware Firewall: Purchase a Cable/DSL router

Required

8

Setting up your Router and connecting to the Internet

Required

Immediately after connecting to the Internet the first time

#

Description

Importance

1

Installing Windows Updates (Windows XP Service Pack 2) and turning on Automatic Updates

Required

2

Updating your Antivirus Definitions

Required

3

Install the Microsoft Windows Defender tool

Required

4

Install the Lavasoft Ad-Aware SE Personal program

Required

5

Create a final System Restore Point

Recommended

6

A Final WordùSafe Internet Browsing Techniques and being Internet Savvy

Required

 

Initial PreparationùBefore You Connect to the Internet

1) Before turning your computer onùDisconnect it from your network

1.      Unplug any network cables from your computer.

2.      If your computer is setup to connect to a wireless network, make sure your wireless router is turned off prior to turning on your computer.

3.      3.   When you are sure that your computer is disconnected from any network, turn it on and proceed to the next step.

2) Immediately after turning your computer onùCreating a System Restore point

Create an initial System Restore point. If you have issues later, you can go back to where you started with this system restore point.

1.      Click on the Start button.á Open the System Tools menu by opening All Programs, then Accessories, and System Tools.á Then click on the System Restore item in System Tools.

2.      On the System Restore dialog, click on the Create a restore point option button then click the Next button.

3.      Type Internet PreparationùFirst in the description text box and click the Create button.

4.      After the System Restore point has been created, click the Close button.

3) Install an Antivirus program, if not already installedá

If you do not have an Antivirus program, we recommend either Norton Antivirus or McAfee Virus Scan.á Make sure that you purchase the latest editions of these programs.á Note: When you install Norton Antivirus for the first time, you will be prompted to turn on the Norton Antivirus Worm Blocker (The Norton Antivirus software firewall). Choose the option to turn this on (it works in place of the Windows XP software firewallùwhich is part of Windows XP Service Pack 2).

1.      Run your Antivirus program and do a complete scan of your computer to be sure it is not infected. If infected files are found, follow the prompting of your antivirus software to remove them.á Keep rescanning your system until it comes up clean, then reboot it and scan again to be sure it is still clean.

4) Configure the Internet Explorer browser to be more secure

1.      Click on the Start button and select the Control Panel item.

2.      Double click on the Internet Options applet in the control panel.

3.      On the Internet Properties dialog click on the Privacy tab.

4.      Make sure the settings slider is set to Medium or higher.

Note: Skip the following five steps (5 through 9) if you do not have Windows XP Service Pack 2 installed.á Be sure to apply the following settings to the Popup Blocker included in Windows XP Service Pack 2 after you install it later.

5.      Make sure the Block pop-ups checkbox is checked.

6.      Click the Pop-up Blocker settings button.

7.      On the Pop-up Block Settings dialog click the arrow on the Filter Level dropdown listbox and set it to Medium or High.á Note: If you use the High setting, to allow a link on a webpage to open a pop-up windowùwhich is completely prevented on the High settingùhold down the Ctrl key while clicking on the link.

8.      Uncheck both checkboxes for Play a sound when a pop-up is blocked and Show Information Bar when a pop-up is blocked.á We recommend turning these features off because they become very annoying very quickly.á You may keep them on if you like.

9.      Close the Pop-up Blocker Settings dialog by clicking its Close button.

 

Now click the Advanced tab on the Internet Properties dialog.

1.      In the Browsing section, uncheck Enable third-party browser extensionsùthis prevents 3rd party extensions, like toolbars or plugginsùa common technique of adware and browser hijacking softwareùfrom attaching themselves to your browser.

2.      Click the Apply button.

3.      Click the OK button to close the Internet Properties dialog.

5) Setup a Software Firewall

If you have Norton antivirus installed, enable its Worm Blocking functionality within the Norton antivirus program and go directly to step 6) Create another System Restore Point. If you use a different antivirus application that does not include its own software firewall then follow these steps to enable the Windows Firewall. Note: If you do not have Windows XP Service Pack 2 installed, the Windows Firewall feature will not be available. Please do the following steps later, after installing Windows XP Service Pack 2.

To enable Windows Firewall do the following:

1.      Click on the Start button and select the Control Panel item.

2.      Double click on the Windows Firewall applet.

3.      Make sure the On option is set.

4.      Click OK.

6) Create another System Restore Point

After following the steps above, itÆs time to create another System Restore point. You can then restore your computer to this point later if there are problems. This system restore point includes your antivirus, internet explorer security settings and software firewall.

1.      Click on the Start button.á Open the System Tools menu by opening All Programs, then Accessories, and System Tools.á Then click on the System Restore item in System Tools.

2.      On the System Restore dialog, click on the Create a restore point option button then click the Next button.

3.      Type Internet PreparationùAntivirus, IE, and software Firewall in the description text box and click the Create button.

4.      After the Restore Point has been created, click the Close button.

7) Installing a Hardware Firewall: Purchase a Cable/DSL router

We recommended the following routers (the following links are to the BestBuy website so you can purchase or check pricing on these products):

Netgear

Netgear Platinum Cable/DSL Web Safe Router with 4-Port Switch

Model: RP614

Linksys

Linksys EtherFast 4-Port Cable/DSL Router

Model: BEFSR41

 

If your computer is set up for a wireless connection to the internet, your existing wireless router creates your hardware firewall. There are also wireless versions of the routers we recommend from both Netgear and Linksys.

 

Note: A router creates a hardware firewall which prevents the IP address of your computer from being visible to the outside worldù the router acquires the IP address provided by your internet service provider (ISP) and then creates a local area network (LAN) that your computer and other computers in your home connect to.á The router generates IP addresses for your computers and routes all internet traffic to them.á Any attempts to hack your IP address are stopped cold at the router and never reach your computers.á Another great benefit of a router is that it allows you to easily connect multiple computers in your home or office to the internet though a single Cable or DSL modemùby just plugging them into an open switch port on the back of the router.á

8) Setting up your Router and connecting to the Internet

Follow the step-by-step instructions that come with your router and plug your computer into the Internet.á This is usually quite simple, as most routers come pre-configured to work right out of the box.

 

Important: Proceed directly to the Immediately after connecting to the Internet the first time section once you get your computer on the internet.

Immediately after connecting to the Internet the first time

1) Installing Windows Updates (Windows XP Service Pack 2) and turning on Automatic Updates

Now that you have internet connectivity, the first thing you need to do is install Windows XP Service Pack 2 (if itÆs not already installed on your computer) and apply the latest critical updates from Microsoft to your operating system.á Also, you need to turn on Automatic Updates so that future critical updates will be applied automatically. These critical updates are vital to keeping your computer safe from virus and worm attacks.á

1.      Run Internet Explorer, either by clicking its icon on the Start menu or double-clicking its icon on the desktop, if you have one there.

2.      Select the Windows Update item on Internet ExplorerÆs Tools dropdown menu. This will take you to the Windows Update website. Note: If this is the first time you are running Windows Update, you may be prompted to install Windows Update Installer updates. Choose to install these if prompted to do so.

3.      At the Windows Update website, click on the Express Install item.

Note: If you do not already have Windows XP Service Pack 2 installed, you will be prompted to install it before doing anything else. After completing the installation of Service Pack 2 you will need to reboot your computer and return to the Windows Update website by starting again at step 1 above. If you already have Service Pack 2 installed, go on to the next step now. Also: If you just installed Windows XP Service Pack 2, be sure to follow the steps in the Configure Internet Explorer to be more secure and Setup a software firewall sections above to configure the Internet Explorer Popup Blocker and the Microsoft Firewall, which are both part of Service Pack 2.

4.      After clicking the Express Install item at the Windows Update website, your computer will be scanned to determine which updates you need. Click on the Install button if any updates are found (most likely, there will be several).á Follow any on-screen instructions to continue the installation of the updates.

5.      Once the updates are finished installing you will probably be prompted to restart your computer.á Do so, if prompted.á Some updates (though rare) will not require you to reboot.

6.      Run Internet explorer again and select the Windows Update item on the Tools dropdown menu to go to the Windows Update website.á If you donÆt have Automatic Updates enabled you will see a Turn On Automatic Updates button on the right side of the screen.á Click on this to turn Automatic Updates on if you see it.á If it doesnÆt appear then you already have automatic updates turned on.

Note: When you first turn Automatic Updates on a dialog appears that lets you specify when updates will be downloaded. Leave the Everyday option unchanged, but change the time to a time you usually have your computer on.

2) Updating your Antivirus Definitions

Important: Check that your Antivirus program is set to download its virus definitions automaticallyùthese virus definitions are updated frequently to include the latest virus information. Your Antivirus program cannot find or remove new viruses unless its virus definitions are updated regularly.á

1.      Open your Antivirus application.á Be sure that the automatic update option is enabled. This can be set in the Options settings of your Antivirus program.

Note: In Norton Antivirus itÆs the LiveUpdate option. Turn this on.

2.      pdate your virus definitions manually now by selecting the LiveUpdate item in Norton Antivirus or the Check for Updates item in McAfee Antivirus.á Whatever antivirus application you are using, there should be a similar way of manually checking for virus definition updates.

3.      Once the new virus definition updates are downloaded and installed, run your antivirus program and scan your computerùalways do this after receiving new virus definition updates.

3) Install the Microsoft Windows Defender tool

Microsoft provides a free AntiSpyware program which is very good.á Follow these steps to install it.

1.      Open Internet Explorer and go to www.microsoft.com.á At the bottom of that  webpage is a Popular Downloads section.á Click on the Microsoft Windows Defender item there.

2.      Follow the steps to install the Microsoft Windows Defender program.

3.      After the installation is complete, run the Microsoft Windows Defender program and have it scan your computer.á Follow any on-screen prompts to remove any adware and spyware that is found.

4) Install the Lavasoft Ad-Aware SE Personal program

A Swedish group named Lavasoft provides an excellent Adware removal tool named Ad-Aware. Follow these steps to install it.

1.      Open Internet Explorer and go to www.lavasoftusa.com/support/download.

2.      Scroll down to the Ad-Aware SE Personal section. Click on the download link there.

3.      Download and install the Ad-Aware SE Personal program, and run it.

4.      Whenever you run Ad-Aware (which you should do at least once a week), you will need to update its adware definitions (like virus definitions for an antivirus program).á Do this by running Ad-Aware and clicking the Check for Updates Now link on the Ad-Aware window. Then click the Connect button on the next dialog that appears and install the new adware definitions file.

5.      Now scan your computer with Ad-Aware by clicking on the Start button on the Ad-Aware window then click the Next button to begin scanning.

 

Important: You should scan your computer with the Microsoft AntiSpyware and Ad-Aware applications at least once a week and anytime you suspect your system has been compromised.á

5) Create a final System Restore Point

After following the steps above, itÆs time to create a final System Restore point. This system restore point takes a snapshot of your computer free of infections, worms, spyware or adware.á It includes all of the programs installed to protect your computer. If, despite all these protections, your computer gets infected in the future but cannot be recovered, you can go back to this system restore point as a last-ditch effort to regain control of your computer.

1.      Click on the Start button.á Open the System Tools menu by opening All Programs, then Accessories, and System Tools.á Then click on the System Restore item in System Tools.

2.      2On the System Restore dialog, click on the Create a restore point option button then click the Next button.

3.      3Type Internet PreparationùClean System all protections installed in the description text box and click the Create button.

4.      4After the Restore Point has been created, click the Close button.

6) A Final WordùSafe Internet Browsing Techniques and being Internet Savvy

While your computer should now be protected from most malicious programs, all of this will be for nothing if you donÆt practice safe internet browsing techniques.

I cannot stress enough how important it is that you adopt a defensive posture while cruising the World Wide Web. You need to navigate the internet with the attitude that every website you visit has malicious intentùevery single one, no exceptions.á

DO NOT click the Yes, I Agree, or Install buttons of any popup dialogs or links that you encounter while cruising the internet, unless those dialogs or links appear as part of an install process that you have deliberately initiated.

Despite all of the security software and precautions we have taken above, an unsupervised child or clueless adult who is browsing the internet for less than an hour will likely result in your computer being infected or the browser being hijacked.á No program can stop you or anyone using your computer from installing malicious add-ons, spyware, or adware if you deliberately click the Yes, Install, or I Agree buttons of popup dialogs or links on a webpage.á

These types of dialogs and websites are deliberately designed to confuse and mislead you. They depend upon your ignorance and innocence. If you suddenly see a popup dialog while cruising the internetùthat is not generated by your antivirus or antispyware programùthat wants you to click a Yes, Install, I Agree, or Scan Now button to ôremove a virusö or scan your system DO NOT do it!

You can install all the software and hardware available to protect your computer.  But in the end, your computer is only as secure as the person sitting at it is internet savvy.

Safe Internet Browsing TechniquesùWhat are they?

Safe Internet browsing techniques means never responding affirmatively to dialogs that pop up unexpectedly asking your permission to install something on your computer. This includes, but is not limited to, what may very well look like legitimate dialogs asking for permission to "scan your system for viruses", "upgrade a program to the latest version", "stop pop-ups", etc. or have any other positive spin associated with them, i.e. "Please install this software now to protect your computer!" or "We have detected that your computer is infected, click the Yes button to remove the infection!". Note: Exceptions include dialogs generated by your antivirus or antispyware programs or Microsoftùthe Microsoft Updates website is a good example of a website where you may see dialogs prompting you to install updates and fixes.  Safe Internet Browsing Techniques also means not installing 3rd party extensions such as toolbars or browser plug-ins unless you consider yourself internet savvy enough to tell the difference between legitimate software and spyware. When in doubt, don't install it.

Back to main page
Revised: 04/24/2006

Hit Counter