They’re Out To Get You: Preventing Spyware, Viruses On Your Computer

by D.B. Grady


You're not paranoid. They're out to get you.

You probably have spyware on your computer. There's a good chance you've got a virus or two. Your personal files are likely insecure, and your hard drive might be shared for the entire world to see. In real world terms, you've not only left your car unlocked, you've left the windows down, the doors open, the engine running, and a sign on the dashboard reading FREE CAR.

If you are infected, you will probably need to visit a local computer repair shop. Malicious software is notoriously difficult to remove, and the wrong combination of deleted files can often result in a computer that doubles as a boat anchor, doorstop, or shooting range target. If your computer is in proper working order, however, there are a few practices you can implement that will keep you both protected and secure.

Windows Update (sometimes, in its more expansive mode, called Microsoft Update) is a utility built into Windows that keeps your computer up to date. As bugs and security vulnerabilities are discovered, and new features are added, Microsoft releases patches and service packs free for download. Windows Update automates the installation process, checking the files of your operating system against a central repository at Microsoft, and applying the newest versions.

This may be the most critical part of your computer housekeeping routine, as an out-of-date operating system is as secure as an ATM card with its password written on it. Windows Update can be found under the Start menu, in the Programs folder, or oftentimes in the system tray (bottom-right of the screen, next to the clock) as a yellow shield pleading with you to "click here to install updates."

Every Windows-based computer needs antivirus software. Popular programs include McAfee Total Protection ($34.98/year), Norton Antivirus ($39.99/year), and Trend Micro Antivirus ($39.95/year). Free alternatives include AVG Free and Avast Home Edition. Upon installation, allow the antivirus to download and apply the most current virus definitions, and run a full system scan.

Once your computer is protected, like Windows Update, make it a priority to update your antivirus software regularly. (Note that virus protection software can often be acquired for free though public libraries, colleges, government agencies, and the military. Check their websites for more information.)

Spyware is often the easiest malicious software to install and the hardest to delete. It often appears in friendly, apparently helpful website popup ads warning that, "Antivirus 2009 has detected 32 threats on your computer! Would you like to remove them?" Clicking either yes or no results in the same thing: an infected computer. Unless you are computer savvy, the safest course of action when faced with such prompts is to exit your web browser entirely.

Two of the most effective and anti-spyware utilities on the market are Spybot and Windows Defender. Both programs are free, and in both cases, the installation and maintenance procedures are similar to those of antivirus software. Upon setup, allow the programs to update, and run a full system scan. Update the spyware definitions regularly.

While an updated operating system, strong virus-protection, and a spyware monitor are crucial to safe computing, they will not do the job on their own. It is up to you to adopt smart practices to keep your computer secure. This means never opening email attachments from people you don't know. It means carefully reading the screen whenever an unexpected window is prompted. (Blindly clicking "Next" is a recipe for disaster.)

It also means avoiding the more unsavory areas of the Internet—most notably file-sharing sites such as Kazaa and Limewire. In addition to the legal ramifications of downloading copyrighted music and software, every illicit file runs the risk of bringing with it malicious software.

It's a dangerous web out there. If it seems like "they" are out to get you, it's because they are. Thankfully, safe computing doesn’t require an advanced degree. All it takes is a little discipline and a couple of free programs.

Software referenced in this article:
McAfee Total Protection: http://www.mcafee.com ($34.98/year)
Norton Antivirus: http://www.symantec.com/norton ($39.99/year)
Trend Micro Antivirus: http://us.trendmicro.com/us/home/home-user ($39.95/year)
AVG Free: http://free.avg.com (Free for personal use)
Avast Home Edition: http://www.avast.com (Free for personal use)
Spybot: http://www.safer-networking.org (Free)
Windows Defender: http://www.microsoft.com/defender (Free)

Million Dollar Password

by D.B. Grady

Have a technology-related question, or advice for other users? Email me at tech@timessw.com

When they come for your money, they won't break into the bank. Online identity thieves are too smart for that. They're gambling that you use the same password for every website. Why attempt a break-in on a guarded, highly encrypted financial site when they can steal your password from the fly-fishing forum you frequent?

Passwords are the great annoyance of the Internet. (Well, one of the great annoyances. I still can't get the "peanut butter jelly time" song out of my head.) Major players in the web industry have attempted to unify logins through such initiatives as OpenID and Passport, but have fallen short in the kind of ubiquity required for such programs to succeed. In the meantime, users are forced to remember countless credentials for a never-ending array of sites. As a result, they have fallen into dangerous practices.

A few simple security guidelines can go a long way toward a safer Internet experience. The first, most important rule is: never repeat a password. Your bank and email and Amazon accounts should have unique and varied passwords that cannot be guessed by personal knowledge. (That is to say, if you are a dog breeder, "puppy1" is a bad idea.) Passwords should be changed regularly, and should always increase in complexity, with greater creativity than adding the trailing digit plus 1. A strong password utilizes case, numerals and punctuation. There are 101 keys on a standard keyboard. Use them. "Madden-09" is an improvement on "football," but "09(mAddeN" is even better).

Never give your password to anyone for any reason, ever. A common online scam involves third parties claiming to be with technical support, emailing users and asking for their log-in information. Assorted reasons are given. Sometimes it is to "verify accounts." Sometimes it is to "renew subscriptions." But the reasons are always a lie, and the results are always the same. Once they've got your password, they've got your identity.

There are several programs and websites designed to help you track multiple passwords. Passpack is a free online credential manager that utilizes a government-approved encryption algorithm for maximum security. Because it is web-based, it can be accessed anywhere (Passpack: http://www.passpack.com).

Roboform is an automated tracker that installs to a computer or thumb drive, and remembers passwords as you type them. In addition, it will generate a strong password if you're stumped, and fill in password fields automatically when a site is revisited. Stored information is protected with encryption up to 256-bits, which would take a hacker the better part of two centuries to crack by brute force. Because it can be installed to a USB thumb drive, it can be taken with you and used on any Windows-based computer. Roboform costs $29.95, with a 30-day free trial (Roboform: http://www.roboform.com).

Mobile phones are an excellent place for password storage and management, provided the data is encrypted. iPhone users can take advantage of mSecure, a native application that stores not only passwords but also credit card, banking information and even clothing sizes. Data can be traversed with the iPhone's trademark "swipes," or sorted and searched by site and type. MSecure is available on the iTunes App Store, and runs $2.99 (mSecure: http://www.msevensoftware.com/msecure.html). SplashID offers Blackberry, Palm, and Windows Mobile users an application that provides all of the features of mSecure, as well as password generation. A companion desktop client allows for easy data entry and synchronization. SplashID costs $29.95, with a 30-day free trial (SplashID: http://www.splashdata.com/splashid).

Identity thieves want your money, and they know how to get it. Until unified credentialing services like OpenID proliferate across the web, it's up to you to stay one step ahead of the game. Strong, varied passwords of mixed case and special characters go a long way, so long as you keep the passwords secret. And because nobody should suffer alone, it's peanut butter jelly time! (http://www.albinoblacksheep.com/flash/banana)

Have a technology-related question, or advice for other users? Email me at tech@timessw.com