Re: Dumb Question When Buying A New Computer As A Gift

From: Phil Weldon (notdisclosed_at_example.com)
Date: 12/26/03 

Date: Fri, 26 Dec 2003 02:19:36 GMT

Using a known clean computer, used the Internet Setup Wizard or the software
supplied by your ISP to establish an Internet connection. This software and
the site accessed will be cleaned. Just don't accept any 'freebies' at this
time. Then just use the Windows Update button, which will take you to the
Microsoft site, examine your Computer for necessary updates, then download
and install them (allbeit with a few restarts.) Then do the same thing with
the 'Live Update' or equivalent for the installed antivirus program. Both
of the sites you access are clean, so there will be no chance of getting
infected at these locations. As long as you complete these three tasks
before doing anything else, your system should still be clean. Most systems
that are manufactured 'just-in-time', so your operating system should be
reasonably up-to-date out of the box.

You should also not use any floppy disks or CD's that are not factory fresh
before completing the updates above. Even a supposedly blank floppy can
carry an infection, as can a CD copy.

If you are very concerned about infection, you might want to install a
software firewall AND a hardware firewall (hardware firewalls have become
very cheap... I have seen a Microsoft wireless 802.11b
Basestation/firewall/DHCP Server kit with one wireless PCI card for less
than $100 US.

After all the above, use one of the security check sites maintained by
antivirus program publishers to check if your system is vunerable, then make
any changes that might be recommended.

Infections cannot magically jump into your system. There must be some path.
If the sites you visit are clean, they cannot be a source of infection. If
the removable media you use are clean, they cannot be a source of infection.
That leaves either a evil-doer who identifies your system IP address and
hacks into your system even though you are not visiting a site OR infection
from another system on your local area network. Even floppies infected with
boot sector viruses are rendered harmless when your operating system is
Windows 2000 or XP, the file system is NTSF, and there are no other
operating systems installed.

Be suspicious, but not paranoid. 

-- 
Phil Weldon, pweldonatmindjumpdotcom
For communication,
replace "at" with the 'at sign'
replace "mindjump" with "mindspring."
replace "dot" with "."
"Erik" <anonymous@discussions.microsoft.com> wrote in message
news:021f01c3ca6e$d2413d10$a301280a@phx.gbl...
> I am considering buying a new computer with Win XP and
> assume that:
>
> a) it is not going to come up-to-date on its patches off-
> the-shelf
> b) the antivirus on it will not be fully updated off-the-
> shelf
>
> So the first time I connect to the internet (even via
> dialup), I will not be fully patched or antivirus
> protected.  I expect to get blaster, or worse! when
> trying to download patches or virus updates the first
> time.
>
> What steps can I take _before_ connecting to the internet
> to protect my computer?
>
> 1) Enable Win XP firewall
> 2) Download dcombobulator on another machine, burn to cd,
> and install on new machine?
> 3) Anything else?
>
> I am probably not up to the level of sophistication
> needed to manually select XP patches ahead of time and
> burn to CD -- I trust WinUpdate to do that for me.
>
> Thanks in advance!
Loading