What do you use to keep your PC secure, other than Anti-Virus software?

I'm interested to know what people do to keep their system secure, other than installing an anti-virus package. I'm asking this as although it is possible to keep a system secure through taking plenty of sensible precautions, it's hard to stop being compromised via vulnerabilities.

I've run anti-virus software for many years now, and it mainly seems to detect e-mail virus attachments which I wouldn't open anyway. However, once it found a trojan on my main system which I found it very difficult to trace. It turns out I was using an insecure version of Adobe Acrobat reader... this started the problem as I ended up visiting a blog which had been hacked and had some iframe code injected in to each page. The iframe contained a PDF file which exploited this vulnerability and somehow contained a trojan payload.

I don't know how serious the trojan actually was, as by the time my AV scanner recognised it a few days later there was no information available about it (as it was so new). Taking no chances, I just formatted and started over - as it gave me a chance to have a spring clean.

This was a long time ago now, and since then I used tools like Secuna Vulnerability Scanner to make sure all my applications are up to date (and I've switched to Foxit Reader instead of Adobe, as any vulnerabilities aren't often exploited in that).

I'd be interested to hear what precautions people here take, aside an anti-virus package and common sense. Do you use other tools or perform manual OS hardening?

Noscript (Firefox addon) makes your browser impervious to XSS, infected banners, Java exploits, etc. If you get a virus, it's squarely on your head as you have to activate every flash/Java applet you come across.

Beyond that, I use mah noodle.

Same tired rheteric for me, I would say common sense. I don't open anything I don't trust the source for, if I doubt a URL's sincerity I type it rather than click (simply checking the underlying linked url is not a guarantee anymore), and its one more reason I use Opera since most browser vulnerabilities don't apply. Obviously not even Opera is a guarantee of safety since I've seen java and flash exploits still work through Opera. I keep all programs updated and current, including Windows Defender.

For computer users that have trouble simply using a computer (friends & family as one example) I will use tools like Spywareblaster. This program maintains a current database of both dangerous and less than savory ad serving websites, and automatically installs the blacklist into IE and Firefox to block any redirects or hijacked links to them. It only takes a few clicks to update the list so anyone can use it and keep their browsers a little better protected.

The real life example Ian gives is exactly why users should scan their systems regularly anyway... its less a question of if, but more of when something will get through. Ironically one family member's work PC was hijacked when i was visiting them over the holidays, but because I'd installed spywareblaster the year before every time the trojan tried to open a specific URL using IE it would be blocked. In the very least Spywareblaster can limit the damage, although their computer was a ripe mess already by that point. They even had current (nonfree) antivirus installed but it wasn't doing anything.

Every month or so I run Trend Micro's free scanner which picks up a lot of malicious instances be they a virus, spyware, or malware. It's a simple scan, can take a while but it's free and works well. If it hangs (which it can do on occasion) that means it could be having trouble with scanning something and is a good lead to dig deeper with other forms of protection. All in all it has found many things that other programs I've used have not and has also removed permanent instances of certain spyware that returned after having been removed by other programs. Give it a try.


Rob / GanjaSMK

I have been using ZoneAlarm Security Suite for two years now as a paid subscription. It used to be a freeware program until Checkpoint Software bought them up. However, Checkpoint improved ZoneAlarm so much so that I never have problems with trojans or viruses. It picks up trackiing cookies regularly and deletes them before I have had a chance to check its daily scanning results. I believe I paid under $50.00 for the first year, and updates are annually $30.00. I have found it to be the best security software that I have used so far, and I am completely satisfied with the service. When I started out with anti-virus/anti-spyware programs I tried Webroot, Norton, Spybot, and AVG when it was free. I still use Spybot occasionally, just in case ZoneAlarm might have missed something. It is free, but I try to send them money every so often, because I realize that they cannot continue without funds. I am running AVG now as a 30 day trial. It is thorough, but it takes up to 15 hours to scan my system. I'm not sure why it takes so long. ZoneAlarm is usually done in less than a half hour. As far as Webroot and Norton are concerned, I think that they are useless. I wouldn't buy anything with the Symantec name on it. And Webroot went behind my back when I was "looking for the price in cart" since they wouldn't tell you the price, and they somehow got my credit card number from Best Buy and charged me for a purchase even though I emptied the cart and backed out. Our credit union called because the way the charges went through, it sent up red flags, so they put a hold on the transaction until they verified with my wife and me. Of course we were outraged and thankful to the credit union for their excellent security screening. But I'm getting off on a rabbit trail. I cannot get a hold of ZoneAlarm to see if they are working on a Windows 7 compatible version of their product. I have logged onto a few websites which are titled Windows 7 and ZoneAlarm and the like, but once in there is no information whatsoever about ZoneAlarm. I have e-mailed ZoneAlarm, but that was probably stupid since a million other people probably did the same. I have gone to their website, but there is no mention of Windows 7 anywhere on the page. My 30 day trial with AVG is up September 9 and I sure would like to have ZoneAlarm back again. It does not work with Windows 7 thus far. If anyone has any information on this topic, I sure would appreciate hearing about it.

Other than the usual, not opening suspect emails, ect, I use the following:

Firewalled Router
Comodo Software Firewall
A-Squared Anti-Malware
Malwarebytes Anti-Malware
SpywareBlaster
Windows Defender
Mailwasher Pro

And Firefox with: Flashblock, NoScript, AdBlock, Web of Trust

Draceena brings up a good point. I personally use a DLink router with a rather good built in hardware firewall. Rather than firewall every single network computer I just use the router in conjunction with the firewall built into Windows. A hardware firewall is a must.

I still use the following as well:

Malwarebytes Anti-Malware
Spybot Search & Destroy
Ad-aware
Spywareblaster

I do not recommend anyone use the system protections built into Spybot or Ad-aware, they tend to conflict with programs and cause problems. I only use the programs for manual scanning.

My Windows 7

Router Hardware Firewall
Windows 7 Firewall + Vista Firewall Control
Vipre Antivirus + Antispyware
Malwarebytes Anti-Malware on demand

The Wifes Windows 7

Router Hardware Firewall
Comodo Firewall
Spybot on demand
SpywareBlaster

Hi Veedaz,

Thanks for the information. It's funny that when I mention hardware firewall to techy people who should know these things that they look at me like I fell off the moon. I am repeatedly told that there is no such thing. I do have a hardware firewall of a sort in my Linksys router, but it hasn't been enough.

ZoneAlarm had been doing a fabulous job until I installed Windows 7 RC. They will not be compatible until the October 22 release date. I am using AVG as a trial which will expire on September 24. Then they want $70.00. for a one year license. They are also doing a fine job, but that is a lot of money to spend for protection. (It ismore like extortion.)

We have had nothing but trouble with malicious websites, spyware, and adware, which flooded us with spam, took control of our computer, locked us out of our browsers and e-mail, and so forth. So, I would be really interested in a fail safe hardware firewall that can really protect my PC's. I'm not willing to go through what we went through for nearly 3 years.

I do keep hearing about Spyware Blaster and their record of reliability. And I looked them up and they don't seem to charge much for their services. I also use Spybot which is a good secondary insurance.

Thank you for your suggestions

Ken J.

clearwater - I'm pretty sure every techie knows about the hardware firewall

Like myself I believe the hardware firewall is hardly worth mentioning and therefore doesn't exist in my mind. I might even look at you funny when you say you might rely on this weak firewall. It has nothing to do with not knowing about it. It's wondering why you would even mention it.

Don't get me wrong every little bit helps.