Tips for Keeping Your Lenovo Safe Online

[Bugbatter]

Many of you have started your "Spring Cleaning" at home. How about that Lenovo? Is it time to revist your security practices for staying safe online?

Here is my standard list of simple steps that you can take to reduce the chance of infection..

The following suggestions are general prevention and are not customized for your computer. You may have already taken some of these steps, and depending on your current security, you may not need to implement all of these:

1. Visit Microsoft Update: Make sure that you have all the Critical Updates recommended for your operating system, Office, and IE. The first defense against infection is a properly patched OS from Microsoft Update at update.microsoft.com. More info HERE.

2. Please use a firewall and realtime anti-virus. Keep the anti-virus software and firewall software up to date.. Run a complete system scan with your anti-virus at least once a week...preferably in Safe mode.
If your anti-virus program is a paid/licensed version that is about to expire, you can consider using a free one such as:
Microsoft Security Essentials
AntiVir Personal Edition Classic
Avast! 4 Home Edition

If you prefer not to use the Windows Firewall, there are several of the freeware Firewalls available on the public domain.

Please see this list for anti-virus, firewalls, and other FREE SECURITY SOFTWARE.

3. Using an alternate browser can reduce your chance of certain infections installing themselves. You might consider installing Mozilla / Firefox.
http://www.mozilla.com/en-US/

4. Do not use file sharing. Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities.

5. Keep your software updated...make it easier on yourself and install the free security tool Secunia PSI .

6. If you have not already done so, you might want to install CCleaner and run it in each user's profile: http://www.ccleaner.com/ ** UNcheck the option to install the Yahoo toolbar that is checked by default for the Standard version, or download the toolbar-free versions (Slim or Basic) when given the option for those.

7. Web Of Trust , uses colored alerts to warn about risky websites warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:

• Red for Warning = STOP
• Yellow for Use Caution
• Green for Safe
• Grey for Unknown

There is a Web Of Trust version for Firefox as well.

8. If you still wish to use Internet Explorer, please make sure you install SpywareBlaster:  http://www.javacoolsoftware.com/spywareblaster.html
It will:
Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted software.
Block spyware/tracking cookies in Internet Explorer and Mozilla Firefox.
Restrict the actions of potentially unwanted sites in Internet Explorer.
Tutorial here:http://www.bleepingcomputer.com/forums/tutorial49.html
Periodically check for updates.

9. You might want to install Winpatrol. Winpatrol is heuristic protection program, meaning it looks for patterns in codes that work like malware. It also takes a snapshot of your system's critical resources and alerts you to any changes that may occur without you knowing. You can read more about Winpatrol's features here.  You can download a free copy of Winpatrol or use the Plus version for more features.
You can read Winpatrol's FAQ if you run into problems.

10. Many of us in the online security community have tried and tested programs to determine their abilities. Please remember that there is no guarantee regarding computer security. However, the available software, combined with the rest of these recommendations will contribute to helping your system running safely.

Here are some helpful articles:
* How did I get infected?  HERE
* I'm not pulling your leg, honest?
by Sandi Hardmeier  HERE

Happy and Safe Surfing!

[JaneL Community SuperMod]

Great tips, BB - thanks for posting this to help everyone!

Anyone out there have a tale to tell of a trap that you fell into?  What all did you have to do to recover?  Did you have to start from scratch, or were you able to salvage your existing installation?

[MrPeter1985 Guru]

For all those who do somehow get those Rogue AV (Fake AV's that say you have virus's) From the ones that hide the desktop, stop you from loading things, pop up all the time or show crap that you do not want to see, The fastest and easiest way to remove them is to run a scan from http://www.superantispyware.com/portable (it's FREE and does not need to be installed) I have used this tool to remove more than 5 different Rogue AV's in less than 5mins.(Yes even the new ones too) Just run a quick scan then follow the instructions. Then run the full scan later when you have time. If you work on PC's like me this come in real handy. Don't just take my word for it...Try it yourself!

[Bugbatter]

Super Anti-Spyware is good at finding tracking cookies and adware, but sometimes it takes other tools to remove what SAS misses.

Users who run a resident anti-virus and feel that they are careful online often ask how they acquired fake alerts/rogues. Here is a good video by SOPHOS that shows you how this can happen by simply using a search engine:

[MrPeter1985 Guru]

I do not know the last time you have tried SAS. Yes the program does take awhile to load and does miss things. But the new SAS PORTABLE hasn't missed things for me. It picks up what spybot s&d, adawareSE, and the old fav malwarebytes. You should try the new portable (like I've stated within minutes it will find the ROGUE AV's) It hides from malware by running like DOS (atleast when you right click the properties it shows DOS) and has a nice GUI. It uses random file names so malware can not hide from it. A whitehat Hacker friend of mine confirms it is great. He uses it often like me. No install just run it. But yes like you have stated it is not good to rely on just 1 tool. I use MSE, Avast 5, SAS portable, spybot (for the other options it has) ccleaner, easycleaner, advanced system care 3, zonealarm 9, and firefox with addons, and peerblock.

[Bugbatter]

When did I last use SAS? That was on 06/02/2010 at 09:23 PM / Application Version : 4.38.1004 / Core Rules Database Version : 5023 /Trace Rules Database Version: 2835
It was the installed version, however, which uses the same database as the portable version.

Actually, there is an updated version 4.39.1002 available as of yesterday which is offering improved speed, enhanced services scanning/removal.  It scans Firefox and Chrome cookies, as well as IE.  (64-bit Users: Autoupdate will be active after 6/15/2010)

In the case last week and in all other cases, I use multiple tools, just to be sure all remnants of infection have been cleaned. SAS has not been a one-shot deal for me in about 4 years.  As long as SAS works for you when you need it, that's good. Sometimes computers are like people in that what medication works for one does not work for another.

Thanks for the info on the Portable Version. That will be handy to have.

[MrPeter1985 Guru]

Hey Bug, I just refound what a lot of people have forgot about or didn't even knew was out there. But all (alteast most) of the top AV venders have a FREE Rescue CD that you can download and use.

Here is a description of them and a small review of the top 13. I did see that these tests were done in late 2008. But they are still out there with newer CD's. Top 13 Rescue CD's

They basically a bootable CD that runs there AV software in a Linux Environment. They even update to the latest version when connected to the ethernet.

You can burn the ISO's to a CD or even better use SARDU Here is a list of AV's SARDU can use. To make these AV's listed boot from a USB device. Basically meaning you can have a Ultimate Bootable AV USB stick having multiple AV software on it (add other tools if you figure it out, along with having a Linux LiveCD too). If you click on the antivirus tab it shows you the AV available to be put on the USB. Click the link and you can download the latest ISO image.

Just thought I would share this info. A lot of us have forgot about these wonder tools.

Edit Note:fixed the 13 AV's link and changed the AV List picture to a link...

[MrPeter1985 Guru]

Last months AV-COMPARATIVES On-Demand test is out. G-DATA does it again. (they usually always do) MSE whats up with the slack. I may go back to AVAST 5. I liked AVIRA, but the tests use the Premium not the Free version. (so not sure if there is much of a difference) I also did not care too much for the daily popup ad to buy it. I do however like AVAST's network/website detection. Like when surfing the web and you click on a link to download something and it pops up a virus warning even before you get asked where to save it to. AVAST was always good at preventing for me but when you got something it had a little trouble removing them. But this test was on-demand scan. So it looks like AVAST has improved.

[JameZ]

Hi All,

Just recently Lenovo came out with "Client Security Solution 8.3 for Win 7 32bit and 64bit" and maybe you guys can check it out

Note For users using Password Manager 3.20.0320.00 and Microsoft Office 2007, it is required to download a patch to fix the compatibility issue and install it after you install CSS 8.3 on your system. For more information, kindly click on the link below:

Click here to download the patch to fix the compatibility issue between Client Security Solution 8.3...

Above note applies for those using Office 2010 as well.

//JameZ

[Bugbatter]

Sophos's Recommendations for Facebook Security

ID fraudsters target Facebook and other social networking sites to harvest information about you. Here's how we recommend you set your Facebook privacy options to protect against online identity theft.

Continued here:
http://www.sophos.com/security/best-practice/facebook/