How to secure my computer?

with Firwalls & AV but still not secured

[ashii]

I got a static IP address to my computer & I feel I am still not secured.some one did(Or atleast try) to steal info from my computer.

I have 2 anti Virus(Macfee & AVG)
2 Firwalls (Keiro & Macfee = ya,I know its hard to run two)
AVG Spyware protection & Sypbot(Search & destroy)
I use Only Firefox(IE is on my machine,but I don't use it)

I belive all these products are Good and make good name.

My question is if I can still be Not Secure?
What else I can do to protect me?

PS:Moderators:I did not find the best forum to post this questions,please move it if possible.

[physics]

There will always be OS holes but it sounds like you've done a lot to secure your info. A couple more steps you could take:

1) Get a router with a hardware firewall
2) Encrypt your most sensitive data
3) Don't run web sites off of your home IP (is that why you got a static one?)
4) Get a Mac or use Linux - make sure you tweak the settings for max security on those too
5) Set your firewalls to drop any potentially bad incoming network traffic, i.e. not even aknowledge that your computer exists

[physics]

You also might look into using port triggering so that ports are only opened to let traffic in from outside when a program from your side requests it. Also, set your PC to automatically go into standby mode after a certain amount of time and/or turn it off when you're not using it. All of this might be going too far but you asked ;)

[ashii]

You also might look into using port triggering so that ports are only opened to let traffic in from outside when a program from your side requests it.

any idea how to do that?

[vincevincevince]

Assuming wired internet, the most effective way is to produce a discontinuity within the Internet connection from the back of your computer. I recommend a gap of at least one inch between socket and plug.

[zCat]

1. never connect a consumer-grade OS (be it Windows, Mac or even a Linux desktop machine) directly to the Internet; use some form of hardware router.
2. Unless you specifically require Windows, think about getting a Mac. The initial cost is a little more (way less than it used to be) but the time and monetary savings in not having to buy and install all this antivirus stuff and not worry ingabout every other MS vulnerability more than repay the extra cost. (Not that Macs are 100% secure, but I'd say they're an order of magnitude more secure than Windows).

[zCat]

Assuming wired internet, the most effective way is to produce a discontinuity within the Internet connection from the back of your computer. I recommend a gap of at least one inch between socket and plug.

Unfortunately hackers are now able to used modded WiFi cable to plug these kinds of gaps.

[youfoundjake]

Turn off any non-essential services that are running. You don't really need to be running everything that is... Along with the encryption, use a strong password, minimum 8 alpha/numeric characters and even some alt characters. Keep up to date on security patches and critical updates or what ever your OS maker releases. If you don't have system logging enabled, enable it and review frequently. Google penetration testing and you will find companies that will scan the machine for vulnerabilites. Keep in mind that the safest computer is one that is not connected to the Internet and the average time before some type of infection or exploit is about 15 minutes.. generally straight out the box machines. If you are really serious about security, look into some third party hardware/software for multiple forms of authenication, such as a password and a smart card of some sort that requires the user to be at the system. On a darker side, check out some hacker forums to see what tricks they are using.. and find out what applies to your situation and remedy it. Just a random thought or two, hopefully they helped.

[physics]

By the way, Macs have a thing called FileVault which causes your whole home area (which is where all your stuff is on a mac) to be encrypted so that even if your laptop is stolen and someone manages to get root access to your computer they still will not be able to decrypt the home area (at least that's my understanding). However, I have had some unusual problems with file system corruption using this so I don't necessarily recommend it. Hopefully mac and windows will step up to the plate and come out with some reliable, comprehensive 'transparent' encryption software (as FileVault tries to be) so that we can stop having to hear about all of these laptops with a million ssn's and cc numbers on them being stolen.

[Liane]

As has already been suggested, get yourself a Mac. You can also add "FileVault" if you want to go that extra mile. FileVault automatically encrypts and decrypts the contents of your home directory on the fly. See Mac Security [apple.com]

<added> Ooops ... see what happens when you have a veeeeery slow connection! Haven't had any problems with file system corruption reported by physics though

[digicam]

I would say:-

Use a hardware firewall, the Linksys one is great

Run XP pro and use its own firewall.
A few XP things like NTFS disk system, possibly use disk encryption feature, definitely dont use the admin account for everyday use, just use local user accout.

Do a new install of XP, install all the updates from MS.

Run one antivirus program.

Run perhaps two spyware progs, Adware free version and Spybot are enough.

Use the gibson research firewall tool to test your system, they also have some advice on stopping a few unneeded services, messenger I think.

Things like banking passwords should be kept in an encrypted file, I use a free program which is excellent:- [schneier.com...]

After this the big problem is installing software from unknown sources, things like that latest piece of SEO software you want to trial - we all do it, do you have any idea what it really does? of course not, that is the main problem I think, if you do the above your system is fine but if you pollute it unknowingly then all the above is in vain, no AV will stop devious software sending your info somewhere, my solution is to dual boot into a new XP installation which I only use for internet banking and nothing else, the everyday installation is fairly secure and nothing really serious like my banking gets done on it, that is the best advice I can give you.

cheers.

[henry0]

Digicam is correct never use two AV
their underlying conflict could and do create more problems than security
Avoid using maccrappy!
The web is overloaded with manual offering instruction to rem it from your system; it's like a well spread cancer, did I mentioned that I don't like that AV :)

[ashii]

Thanks to all for valuable suggestions.

I guess problems increases when you are a Software developer & you need to work on windows to earn.Even need to install some software(some times unknown ) to just see it.

I installed "gibson research firewall tool" as pointed by digicam and it says I am safe.

I am still surprised many softwares like IIS wants to access Internet when u are installing them(u can see that only with firewall)
.I will not understand what IIS has to do with Internet runnong on a local machine.

[zCat]

Another possibility that's just occurred to me would be to use software like VMWare to create virtual machines which you can use to experiment with different software, and if anything goes wrong you can easily reset them to a known state.

[digicam]

If anyone is interested here is the gibson link,

[grc.com...]

The shields up tests are halfway down, the "shoot the Messenger" and "kill dcom" is also worthwhile doing.

If you are running IIS then it will try to contact the internet, a firewall will block it's antics, if you dont need it then definitely uninstall it is the way to go.

Strong passwords also help, make something up like "Bill Gates Has Loads Of Money" becomes:-BGHLOM for example makes remembering easypeasy.

cheers.

[ashii]

If anyone is interested here is the gibson link,

[grc.com...]

The shields up tests are halfway down, the "shoot the Messenger" and "kill dcom" is also worthwhile doing.

and it says I am pretty sure & my computer did not even reconised that it exists.

So I fell I am little secured now!

[wmuser]

Get a router with a hardware firewall
Turn off all uncessary WIndows services
Google and you will find out which ones

[miklamf]

On a darker side, check out some hacker forums-------- where is that? :)