PDA

View Full Version : Pc security


Archived Post
01-12-2010, 01:30 AM
This is a guide I originally put together for the Lotus Fleet forums


With the opening of the tech support section I thought I'd post this here. While CO (and hopefully STO) don't have the same kind of account theft problems as wow, it never hurts to be careful about internet security


Prevention, detecion and minor cases
Keep up to date
Many viruses, trojans and keyloggers work by using exploits in program code, either windows, your browser or other programs running on your PC (such as flashplayer to name a common one) Note for users of browsers other than IE: just because you don't use IE doesn't mean it can't be used as an avenue of attack, it's still present on your system. Keep it updated
making sure they are all up to date increases security significantly
Personally as I'm lazy I use http://secunia.com/vulnerability_scanning/
It scans the programs on your PC and compares the versions against a database of the latest versions. If any of your programs need updating it warns you and provides a link to update

Web Browser:
Personally I go with Firefox, adblocker plus and noscript addons I don't have to see adverts and I control what loads with the webpage (especially flash objects). If it can't load it can't get on my pc. Which ever browser you use make to regularly clear it's cache and cookies. Firefox can be set to do so when you close it down, I assume other browsers can as well

Temp Files
Windows creates many temp files during a session, it's always a good idea to clean these out. As well as keeping space clear some nasties can lurk in the temp folders
Cleanup! http://www.stevengould.org/index.php...tent&task=view is a good way of doing this

Virus Scanner:
Avast http://www.avast.com/
AVG http://free.avg.com/gb-en/homepage
Both are good virus scanners and offer a free basic package. They're also easy to use. I back AVG up with weekly online scans here, just in case
http://housecall.trendmicro.com/uk/
Yes you can use 2 virus scanners, however do not have more than 1 running active protection at a time. Otherwise they fight like 2 admirals over the last coffee during a fleet meeting. If you're unsure how to disable active protection on one then just use 1 anti virus

anti/spyware/ anti-malware
malware bytes: http://www.malwarebytes.org/ ad-aware http://www.lavasoft.com/products/ad_aware_plus.php
spybot search and destroy http://www.safer-networking.org/index2.html
are 3 different scanners. I use them all. Spybot has a good "immunisation" feature and active protection that I let run all the time. Malwarebytes and ad-aware I use for active scans
All of these are only as good as how often you update them and scan with them

Internet Habits:
Possibly the best prevention method (besides ditching internet explorer). Watch what you click, be careful what sites you go to and never click any pop ups that tell you you've got a virus or something on your pc while you're surfing. Downloads should always be done from a reliable source and scanned with your virus scanner and anti-malware scanner.


Getting those stubborn stains out:
Ok so think you've been infected with something. Either the scans recommended didn't find anything (or they can't remove it/it keeps coming back) But you're sure somethings there, lurking off the starboard bow...
Hijackthis this scans and generates a log file that can be used to check processes for things that shouldn't be there
http://free.antivirus.com/hijackthis/
It's not an "easy-fix". It's requires analysis by someone who knows what they're doing to locate suspect entries. Deleting the wrong entry is like sending Kirk on a sensitive diplomatic mission where he's asked not to get friendly with the local ladies (in other words it's asking for trouble)
Run the program selecting to save a logfile and get someone to analyse the logfile. I can do a basic check or you can google for webforums that can do so and have people more knowledgeable
Combofix
http://www.bleepingcomputer.com/comb...o-use-combofix
Similar to hijackthis. It's a very powerful tool and can easily cause problems if misused. It's recommended you only use combofix if asked by someone who knows what they're doing


The really stubborn stains:
Nothing to do now but reformat and reinstall
Make sure you have (preferably downloaded through a clean pc)
Your antivirus/anti mal-ware programs of choice
Latest web browser of choice
Once you have all this hand hand get your OS disc (most likely windows) and disconnect your PC from the internet/network physically Put the disk in the drive and reboot. Once PC starts it should slowly load from the disc until you get to the windows options
You want to reinstall windows (not repair)
You should get a screen up listing "partitions" on your hard drives (think of them as drawers in a filing cabinet)
Delete all partitions
Turn your computer completly off and then turn it back on again
Create a new partition to at maxium size and then format it (do not choose the quick option)
Once it's complete, repeat this process again. delete the partition, turn pc off, then back on recreate the partition and then format)
Now reinstall windows, following the on screen prompts. Do not reconnect it to the internet or network. Once complete install your web browser, virus scanners and the anti-malware programs. Now you can connect to the internet,download latest windows updates and ones for your security programs and web browser (if needed)
Once done you can go about getting settings back to how you like them but be wary of downloading programs from unofficial or less well known sites

General Tips
Just like the adage that an army can move only as fast as it's slowest member, your STO account (when we get one, although this also applies to wow and other accounts gaming or otherwise) is only as secure as the least secure PC you log in


Your home machine may be nice and secure but what about that one from work or college you log into? or the one at your friends house you log in quick to say hi to people
Always be mindful of where you are logging into game from. The same goes for email accounts,auto forwarding of emails is both a blessing a curse. Its useful but there's a trend of email accounts being compromised, auto-forwarding set up but the password not being changed so the owner hopefully doesn't notice. Then they get all your mail.

Usernames: vary them, don't use the same username across to many sites, and never use the same username as your display name if you can avoid it

Password: forget words, they're to easy to guess. pay attention to if caps matter, what symbols you can use and work from there. choose something you can remember but that's hard to guess. The more you recover your password through forgetfulness the more likely someone will get your secret question/answer or similar

Secret question/answer: (did you like the way that flowed so naturally?). One common misconception is that you have to answer the question correctly. You don't. The question itself is a reminder. But if the question is "favorite pet" there's no reason you can't answer with something like "jf@87sfs" as long as you can remember it when the time comes. I tend to favour words with symbols/numbers added because of the infrequency of usage.

Phishing emails: Take the time to learn what domains email will come from with regards gaming and bank accounts. Don't trust the email address displayed on your screen. Check your email provider's help topics for how to activate full details so you can check the headers to see it come from a legitimate source.
If you are unsure ask someone like a forum rep, or depending on the community the community itself. WoW has done well with helpful groups standing above the trolls on areas of the forums helping players out (and the forum reps). My hope is STO forums see a similar result
The same applies for websites. If it's not a normal website address be careful going there, avoid clicking links to go somewhere to get a special offer or log in to verify your indentity instead type the address manually

Scam Sites: Pretty much the same as Phishing emails, always be sure of the site before you go there.
"Special Offers" if it sounds to good to be true it most likely is. Any special offers should be announced on the website's news section and on the forums. If it's not there it's likely fake although you can always contact a forum rep for confirmation. If the offer is there check the details match what you've been sent in the email, and again confirm with a rep if you're suspicious


*credit for my (if rather limited) knowledge of the programs to use, hijackthis log and combofix go to my friends in the Coven of the Blue Panda, a group of World of ******** EU players who give up free time to help fellow players

Archived Post
01-12-2010, 01:32 AM
Blocking ads is a bit of a hit/miss thing to do really. A lot of websites require the money from ad revenue to support themselves, it's a bit like stealing content if you do it IMO.

Archived Post
01-12-2010, 01:40 AM
This should probably be stickied.

Archived Post
01-12-2010, 01:42 AM
nice contribution & thx !

i'm a fan of an addon called Keyscrambler for IE & FF. It silently installs in the OS kernel and prevents keystrokes from being keylogged if your machine is ever compromised. I also use Better Privacy FF addon to auto-delete flash LSO cookies, as those seem to be the latest overlooked threat of invasively tracking a user around the net.

thansk again Ellif, keep it up ! :o

Archived Post
01-12-2010, 01:59 AM
Good topic, and should be stickied indeed.

But I do miss McAfee as security suite. I've been using it since version 0.51 or so <-- no typo - I use McAfee since 1992 :eek:

Okay, you have to pay for it, but IMO McAfee is probably the best out there... ;)

Archived Post
01-12-2010, 02:31 AM
This is a guide I originally put together for the Lotus Fleet forums


With the opening of the tech support section I thought I'd post this here. While CO (and hopefully STO) don't have the same kind of account theft problems as wow, it never hurts to be careful about internet security


Prevention, detecion and minor cases
Keep up to date
Many viruses, trojans and keyloggers work by using exploits in program code, either windows, your browser or other programs running on your PC (such as flashplayer to name a common one) Note for users of browsers other than IE: just because you don't use IE doesn't mean it can't be used as an avenue of attack, it's still present on your system. Keep it updated
making sure they are all up to date increases security significantly
Personally as I'm lazy I use http://secunia.com/vulnerability_scanning/
It scans the programs on your PC and compares the versions against a database of the latest versions. If any of your programs need updating it warns you and provides a link to update

Web Browser:
Personally I go with Firefox, adblocker plus and noscript addons I don't have to see adverts and I control what loads with the webpage (especially flash objects). If it can't load it can't get on my pc. Which ever browser you use make to regularly clear it's cache and cookies. Firefox can be set to do so when you close it down, I assume other browsers can as well

Temp Files
Windows creates many temp files during a session, it's always a good idea to clean these out. As well as keeping space clear some nasties can lurk in the temp folders
Cleanup! http://www.stevengould.org/index.php...tent&task=view is a good way of doing this

Virus Scanner:
Avast http://www.avast.com/
AVG http://free.avg.com/gb-en/homepage
Both are good virus scanners and offer a free basic package. They're also easy to use. I back AVG up with weekly online scans here, just in case
http://housecall.trendmicro.com/uk/
Yes you can use 2 virus scanners, however do not have more than 1 running active protection at a time. Otherwise they fight like 2 admirals over the last coffee during a fleet meeting. If you're unsure how to disable active protection on one then just use 1 anti virus

anti/spyware/ anti-malware
malware bytes: http://www.malwarebytes.org/ ad-aware http://www.lavasoft.com/products/ad_aware_plus.php
spybot search and destroy http://www.safer-networking.org/index2.html
are 3 different scanners. I use them all. Spybot has a good "immunisation" feature and active protection that I let run all the time. Malwarebytes and ad-aware I use for active scans
All of these are only as good as how often you update them and scan with them

Internet Habits:
Possibly the best prevention method (besides ditching internet explorer). Watch what you click, be careful what sites you go to and never click any pop ups that tell you you've got a virus or something on your pc while you're surfing. Downloads should always be done from a reliable source and scanned with your virus scanner and anti-malware scanner.


Getting those stubborn stains out:
Ok so think you've been infected with something. Either the scans recommended didn't find anything (or they can't remove it/it keeps coming back) But you're sure somethings there, lurking off the starboard bow...
Hijackthis this scans and generates a log file that can be used to check processes for things that shouldn't be there
http://free.antivirus.com/hijackthis/
It's not an "easy-fix". It's requires analysis by someone who knows what they're doing to locate suspect entries. Deleting the wrong entry is like sending Kirk on a sensitive diplomatic mission where he's asked not to get friendly with the local ladies (in other words it's asking for trouble)
Run the program selecting to save a logfile and get someone to analyse the logfile. I can do a basic check or you can google for webforums that can do so and have people more knowledgeable
Combofix
http://www.bleepingcomputer.com/comb...o-use-combofix
Similar to hijackthis. It's a very powerful tool and can easily cause problems if misused. It's recommended you only use combofix if asked by someone who knows what they're doing


The really stubborn stains:
Nothing to do now but reformat and reinstall
Make sure you have (preferably downloaded through a clean pc)
Your antivirus/anti mal-ware programs of choice
Latest web browser of choice
Once you have all this hand hand get your OS disc (most likely windows) and disconnect your PC from the internet/network physically Put the disk in the drive and reboot. Once PC starts it should slowly load from the disc until you get to the windows options
You want to reinstall windows (not repair)
You should get a screen up listing "partitions" on your hard drives (think of them as drawers in a filing cabinet)
Delete all partitions
Turn your computer completly off and then turn it back on again
Create a new partition to at maxium size and then format it (do not choose the quick option)
Once it's complete, repeat this process again. delete the partition, turn pc off, then back on recreate the partition and then format)
Now reinstall windows, following the on screen prompts. Do not reconnect it to the internet or network. Once complete install your web browser, virus scanners and the anti-malware programs. Now you can connect to the internet,download latest windows updates and ones for your security programs and web browser (if needed)
Once done you can go about getting settings back to how you like them but be wary of downloading programs from unofficial or less well known sites

General Tips
Just like the adage that an army can move only as fast as it's slowest member, your STO account (when we get one, although this also applies to wow and other accounts gaming or otherwise) is only as secure as the least secure PC you log in


Your home machine may be nice and secure but what about that one from work or college you log into? or the one at your friends house you log in quick to say hi to people
Always be mindful of where you are logging into game from. The same goes for email accounts,auto forwarding of emails is both a blessing a curse. Its useful but there's a trend of email accounts being compromised, auto-forwarding set up but the password not being changed so the owner hopefully doesn't notice. Then they get all your mail.

Usernames: vary them, don't use the same username across to many sites, and never use the same username as your display name if you can avoid it

Password: forget words, they're to easy to guess. pay attention to if caps matter, what symbols you can use and work from there. choose something you can remember but that's hard to guess. The more you recover your password through forgetfulness the more likely someone will get your secret question/answer or similar

Secret question/answer: (did you like the way that flowed so naturally?). One common misconception is that you have to answer the question correctly. You don't. The question itself is a reminder. But if the question is "favorite pet" there's no reason you can't answer with something like "jf@87sfs" as long as you can remember it when the time comes. I tend to favour words with symbols/numbers added because of the infrequency of usage.

Phishing emails: Take the time to learn what domains email will come from with regards gaming and bank accounts. Don't trust the email address displayed on your screen. Check your email provider's help topics for how to activate full details so you can check the headers to see it come from a legitimate source.
If you are unsure ask someone like a forum rep, or depending on the community the community itself. WoW has done well with helpful groups standing above the trolls on areas of the forums helping players out (and the forum reps). My hope is STO forums see a similar result
The same applies for websites. If it's not a normal website address be careful going there, avoid clicking links to go somewhere to get a special offer or log in to verify your indentity instead type the address manually

Scam Sites: Pretty much the same as Phishing emails, always be sure of the site before you go there.
"Special Offers" if it sounds to good to be true it most likely is. Any special offers should be announced on the website's news section and on the forums. If it's not there it's likely fake although you can always contact a forum rep for confirmation. If the offer is there check the details match what you've been sent in the email, and again confirm with a rep if you're suspicious


*credit for my (if rather limited) knowledge of the programs to use, hijackthis log and combofix go to my friends in the Coven of the Blue Panda, a group of World of ******** EU players who give up free time to help fellow players

You could have saved yourself the trouble of this un-necessarily long post and stated the following:
1. Download Malwarebyte's Anti-Malware
2. Install Malwarebyte's Anti-Malware
3. Run, update and scan with Malwarebyte's Anti-Malware
4. Done.

Archived Post
01-12-2010, 02:50 AM
You could have saved yourself the trouble of this un-necessarily long post and stated the following:
1. Download Malwarebyte's Anti-Malware
2. Install Malwarebyte's Anti-Malware
3. Run, update and scan with Malwarebyte's Anti-Malware
4. Done.

It is effective (hence why I use it myself) but relying on just one scan without other precautions isn't good security practice. Take the flash player exploit that was fixed last year or numerous windows exploits that are fixed

Keeping your system up todate and taking other precautions means you're less likely to get anything on your PC that could steal information until you next run the scan

Malware bytes as with any program of it's kind still has it's weak points, which is why other programs (especially ones like hijack this) will find things that mbam will miss

Archived Post
01-12-2010, 02:54 AM
It is effective (hence why I use it myself) but relying on just one scan without other precautions isn't good security practice. Take the flash player exploit that was fixed last year or numerous windows exploits that are fixed

Keeping your system up todate and taking other precautions means you're less likely to get anything on your PC that could steal information until you next run the scan

Malware bytes as with any program of it's kind still has it's weak points, which is why other programs (especially ones like hijack this) will find things that mbam will miss

I was just being over simplistic... you want security, get Malwarebyte's and Hijack This.... your set.
As for the updates and stuff... that should be standard knowledge by now no?

Archived Post
01-12-2010, 03:02 AM
I was just being over simplistic... you want security, get Malwarebyte's and Hijack This.... your set.
As for the updates and stuff... that should be standard knowledge by now no?

Should be but generally isn't speaking from experience of the wow forums. Hijackthis also requires analysis so it's not as efficient as routine security as the others

Archived Post
01-12-2010, 03:05 AM
Should be but generally isn't speaking from experience of the wow forums. Hijackthis also requires analysis so it's not as efficient as routine security as the others

Guess it always, really, comes down to the individual computer user. I have never had issues (then again i started with Dos when i was oh about 10 years old... now i'm 26) but my girlfriend will use my computer for a half hour and i get **** comming in from all directions lol. The thing i find funny is that she doesn't even surf porn or download 'questionable' software and i do. Only way to be really safe is to be educated i guess.

Archived Post
01-18-2010, 03:21 PM
A few days old but still:

http://www.microsoft.com/technet/security/advisory/979352.mspx

Be careful if you're using Internet Explorer still

Archived Post
01-18-2010, 09:52 PM
A very good thread they should definetly make it in to a sticky

Heres a good independant review of 12 of the top leading internet security companys 2010 edditions that some one linked on the WoW forums a few weeks back
http://blogs.pcmag.com/securitywatch/2009/12/av-testorg_releases_real-world.php

MALWARE DETECTION RATES AND WARNING MESSAGES (FALSE ALARMS)
Tested Product Malware Detected False Alarms
Symantec Norton Internet Security 2010 98.0% almost none
Kaspersky Internet Security 2010 97.5% few
PC Tools Internet Security 2010 95.8% almost none
AVG Internet Security 9.0 92.2% few
G Data Internet Security 2010 90.0% many
Panda Internet Security 2010 90.0% almost none
Avira Premium Security Suite 9.0 87.7% many
McAfee Internet Security 2010 87.2% few
CA Internet Security 2010 86.7% few
F-Secure Internet Security 2010 85.8% almost none
BitDefender Internet Security 2010 84.3% few
Trend Micro Internet Security 2010 83.3% few

MALWARE BLOCKING RATES AND BLOCKED GOOD PROGRAMS (FALSE ALARMS)
Tested Product Malware Blocked False Alarms
PC Tools Internet Security 2010 94.8% none
Symantec Norton Internet Security 2010 92.8% none
Kaspersky Internet Security 2010 89.8% few
Panda Internet Security 2010 88.7% none
Avira Premium Security Suite 9.0 87.2% none
McAfee Internet Security 2010 86.7% none
AVG Internet Security 9.0 84.2% few
G Data Internet Security 2010 83.0% few
Trend Micro Internet Security 2010 81.3% few
F-Secure Internet Security 2010 80.2% none
BitDefender Internet Security 2010 77.8% none
CA Internet Security 2010 73.5% none

Archived Post
02-10-2010, 04:24 AM
hes talking about internet security then goes on to list all the software he uses....

I really wouldnt listen to much this guy says, clearly hasnt got a scooby do...

Archived Post
02-10-2010, 04:36 AM
ok so i posted then went back to read more of your rubbish...

laughed when i read how you download yet another piece of crap to scan for more crap to give you a log file of ya crap so someone else can look at it and fix it...lol

then i laughed even more when you got onto how to delete and reinstall windows...loooooooooool

get avirus and delete windows, reinistall.... top tech guy you are...lol

restart computer in safe mode, remove of crap files from registry, remove crap files from computer, restart computer carry on as normal...

seems alot easier to me...

Your talking about internet security and telling us exactly wot software ya use to achieve it, yeah i agree someone should sticky this thread and re title it "wot a muppet"