Spyware

Posted on 29 Aug 2006 at 11:56

• 
• 

 1 of 2

Gallery

The firewall in Windows XP SP2 is now turned on by default and has more features. Although it is much better to use than no firewall at all, the Windows firewall doesn't monitor outgoing transmissions. ZoneAlarm (www.zonelabs.com) is free, and alerts you when a program tries to contact the internet from your PC. Kerio Personal Firewall (www.sunbelt-software.com) has more features, and costs £6 a year (see our Labs test of firewall programs in Shopper August 2006).

If another manufacturer's firewall is used, Microsoft recommends shutting the Windows firewall down. In the Security Center, click on the Windows Firewall link under 'Manage security settings for'. In the dialog box that appears, go to the General tab. This has options to turn the software on, off or lock out all the applications you've previously allowed through.

The Exceptions tab lets you keep track of all incoming transmissions, including those needed by applications installed on the computer such as anti-virus software, file-sharing and remote-access software. You can add programs to this list and also configure which ports to shut down and leave open.

The Advanced tab lets you choose on which connections to use the firewall and the Settings button drills even deeper. It allows you to select the services you leave open, such as FTP or Telnet. The IMCP tab controls communications using the Internet Control Message Protocol to send error messages.

PLUGGING THE GAPS

The final Security Center configuration is Automatic Updates. Microsoft releases new patches on the second Tuesday of each month and will also publish critical patches outside this schedule. Automatic Updates allows you to choose how and when to patch.

Choosing the Automatic option will give you the best protection, since the patches are installed immediately as long as there's an internet connection. But the downside is that many patches require a restart after installation and if you're in the middle of something important, this might not be convenient. The process also takes up bandwidth and processor power.

Alternatively, you can choose when to install the patches yourself. This gives you more freedom but will leave you open to a fast-moving spyware writer.

LIMITED LIABILITY

Aside from the Security Center, there are other protective measures that can be used. Windows XP runs by default with full administrative privileges, but if you pick up a spyware infection as an administrator it would give the spyware sender full access to your system. This could allow them to turn off your security software, install other applications or use your hard disk as storage.

Instead, you should set up password-protected limited accounts for individual users of the computer. This means that if a spyware infection is picked up, it can be controlled and removed with minimal system disruption. To do this, go to the Control Panel, and double-click on the User Accounts icon.

As a rule, use peer-to-peer file-sharing software only with people you know, rather than just downloading any old file. You can search by username. Another useful tip is to look for odd file sizes. For example, if you are searching for a popular piece of music, compare how much space is used by each file. Look for those that are far too big or too small, since these could be spyware in disguise.

GETTING RID OF IT

Getting rid of software that is designed to be hard to remove is tricky at the best of times. If you have the knowledge it's a tedious process, and if you don't, it can be harmful to the system you're trying to clean.