Installing Internet Security Products

After years of installing Internet security products on our home network, this is the best way that we have come up with to do it. Frankly, the first time that you go through this is a pain in the neck. It's like going to the dentist, it's not fun but it is good for you.

The result is a cleaner, faster and more secure computer system. Thereafter, maintaining the system is much easier. You should do it about once per year. Spend a week or two getting ready a little bit at a time. Set aside a whole day for the actual work. Most of the following steps apply to either a brand new system or to an existing one. For Windows Vista, see our update below then continue reading here.

New System Warning! A brand new computer is unlikely to have the latest "critical updates" for Microsoft Windows. Before connecting a new Windows XP or Vista based computer to the Internet, TURN ON the XP or Vista firewall (or install another firewall) for protection from new worms and go to the Windows update web page and download and install any "critical updates" or service packs. DO NOT set up email accounts or download email until after you install and/or update anti-virus software and virus definitions. Note: These files may be big and take quite a while to download with a dial-up connection. Dial-up users should consider having their computer store download and install these updates before they take delivery of their new system.

Why Do This? Some personal firewall products scan your system during installation looking for applications that can connect to the Internet. It may find dozens or even hundreds of them. Some may be Trojan horses or spyware. Trying to figure out which ones may be uninvited guests one by one is very difficult. So, at the very least, you should scan your system with anti-virus, anti-Trojan and anti-spyware software before installing your personal firewall. However, none of these products is (or will ever be) 100% effective. Even worse, people who should know better write articles and create security checklists for end users that assume or flat out say that anti-virus software takes care of Trojan horses or bots. This May Not Be True! Therefore, your best bet is to start with or to create a clean system.

The following steps are "mostly" for cleaning up existing computer systems. First, read Making your personal computer safe, Roger Grimes, InfoWorld, July 11, 2008.

Step #1 -- Think about your choices, make your decisions, create a step-by-step list. Find all of your software installation disks, write down all of your passwords, registration numbers, and so on. If any of your favorite software products include spyware, consider replacing them. Create an update folder in your browser favorites and create software and firmware update links. Print out two copies of your password list and put one in a fireproof safe.

Step #2 -- If you have not done this already, decide how you want to backup your data files and downloaded software. If necessary, buy storage software, hardware and/or media (USB, hard disk, Zip, CD, DVD, etc). See Keep Your Data Backups Safe, Simple and Fast, Jon Jacobi, PC World, December 22, 2005; and Back Up or Else! Robert Lipschutz, PC Magazine, August 17, 2005.

Step #3 -- On an existing system, update your existing security software and hardware firmware. Select and install new security software and hardware. See our Overview page for a discussion of your Internet security choices and our Best Reviews page for top products. If you download software or firmware, save copies before installing. Run anti-virus, anti-Trojan and anti-spyware software to clean your system and data files before backing them up in Step #6.

Step #4 -- On an existing system, throw out the trash. Empty the waste basket, delete browser cookies, temporary files and history, delete old data files, and so on.

Step #5 -- On a new computer system (not an existing one, see #7), uninstall software that you do not want and never plan to use. Always use the vendor's uninstall utility if there is one. If not, use the Windows add/remove utility. Then use Windows utilities or use third party tools for maintenance chores. See Junkbusters! Jon Jacobi, PC World, September 18, 2007; and Zap the Crap on a New Windows PC, Dave Methvin, Computerworld, PC World, April 30, 2007.

Step #6 -- On an existing system, find and move or copy all of your data files to one location like "my documents", same thing for archive copies of downloaded software and firmware, browser favorites and so on. Finding, moving and backing up email files can be difficult and may require some research on your part to figure out. Make two copies of your data files. DOUBLE CHECK to make sure that the copies work. Put at least one of the copies in a fireproof safe.

Step #7 -- On an existing system (not a new one, see #5), wipe your hard disk, delete all files and programs, and use security software to overwrite the entire disk. Anything not on your back up copies or software installation disks is now gone including a lot of junk files and any remaining viruses, Trojans, bots, worms or spyware. CAUTION -- This step is irreversible! If you have any doubts, STOP, and go back to Step #1.

Step #8 -- On an existing system, install Windows. Before you begin, make sure that your computer is NOT connected to the Internet. If you have not already upgraded to Windows XP or Vista (assuming that your computer meets the minimum requirements), this would be a good time to do it. On a new or existing system, turn on the Windows XP or Vista firewall (temporarily) for protection from worms while you download updates. Next, plug into the Internet and go to Windows online update and download and install all "service packs", "critical updates" and "device drivers". DO NOT SURF. You may have to do this two or three times because some updates must be installed separately and the system must be rebooted before installing the others. This is also a great time to have broadband (DSL or cable) Internet service. If you are using dial-up, Order Windows XP Service Pack 2 on CD a few weeks before you start this process. Set up user accounts with passwords. Set up automatic updates. If you use Internet Explorer and/or Outlook Express, configure the security features.

Step #9 -- Restore your data files and downloaded software and firmware files to your hard disk. Restore your favorites to your browser. Now install your software except for security software. Go online to download software updates as needed for each program. DO NOT SURF. Go directly to the download sites using the links in your update folder in your browser favorites. Configure the security features of each product. If you can password protect data files for programs like Quicken, do so. Then run Windows utilities or use third party tools for maintenance chores.

Step #10 -- Install security software using your downloaded files or installation disks. Go online to download updates as needed for each program. DO NOT SURF. Configure the security features of each program. Set up automatic updates if available. Then run Windows utility software or use third party tools for maintenance chores. Now run your anti-virus, anti-Trojan and anti-spyware software. NOTE: If your firewall software scans your hard disk during installation for programs that can connect to the Internet, make sure to install the firewall as your very last step. Turn off the Window XP or Vista firewall before installing a third party software firewall. Check the firewall with an online testing service like Security Space to make sure that you configured it correctly [a basic audit for a home PC is free]. NOW YOU CAN SURF

Windows Vista Update April 2007

These are our tips on upgrading a home computer to Vista.

• Back up all of your data before upgrading your hardware or installing Vista.
• Check that your software and device drivers (printer, etc) are Vista compatible (or that updates are available).
  • Run Vista tests offered by Microsoft -- Windows Vista Upgrade Advisor and AMD ATI Vista Readiness Advisor
  • Check Applications that have earned the "Certified for Windows Vista" logo or the "Works with Windows Vista" logo, Microsoft, February 22, 2007
• Focus on test results for Vista Home Premium (the basic version is not worth the trouble).
• If you need to upgrade your computer hardware such as memory or a video card:
  • Check your computer's specifications before shopping. Go to the computer vendor's online support site. Confirm specs by using utility software like Windows XP System Information (start >> programs >> accessories >> system tools >>) or Astra32 (free trial).
  • For more memory, find out what type (like 184 pin DDR), what speed (like PC3200), what size (512 MB or 1 GB)... You should have a minimum of 1 GB for Vista and 2 GB is better.
  • For a new video card, find out what type of motherboard slot (PCI, AGP or PCI-E), what speed (like AGP 4x or 8x) what power supply requirement (minimum of 250 watts, 300 or more), Vista certified (Direct X9, etc.)...
  • Note that upgrading may not be worth it if the motherboard is limited to 512 MB of memory, the power supply is less than 250 watts, it does not have a DVD drive... consider buying a new computer with Vista Premium pre-installed instead.
  • After upgrading hardware, run the Vista readiness tests again to make sure that the hardware upgrades you have made are working correctly before installing Vista.
  • If you do not want to do the installations yourself, do the research first and then look for a package deal at your local computer store including hardware upgrades, Vista and labor.
• From a security perspective, erasing the entire hard disk and doing a clean install of Vista instead of an upgrade is better. This means buying a full version of Vista, not an upgrade version. Shopping for memory, video card... Try an online merchant like NewEgg because their search utility lets you narrow the results based on technical specifications so you don't spend a lot of time reading about great products that won't work on your system.
• Lastly, don't be in a rush to upgrade. Let others report their problems and give Microsoft time to fix them first.
• For more information about Microsoft Windows Vista, see:
  • Windows Vista Service Pack 1: Not for the Impatient, Brian Krebs, Security Fix, Washington Post, April 17, 2008
  • Test Results: Does SP1 Fix Vista? Scott Dunn, PC World, March 19, 2008
  • Vista and Internet Explorer 7, Part II, Mark Hinton, PC Magazine, May 23, 2007
  • Vista Security, Ryan Naraine, PC World, April 27, 2007
  • Minimize Your Vista-Related Hardware Hassles, Kirk Steers, PC World, April 26, 2007
  • Vista Made Easy: 50 Tips and Tricks, Jeremy Kaplan, PC Magazine, April 18, 2007
  • System Maintenance with Windows Vista Part 1 and Part 2, Mark Hinton, PC Magazine, April 10/24, 2007
  • Five Tips to Bolster Vista Security, Joe Hutsko, MSNBC, March 26, 2007
  • Forced software upgrades can add up for Vista users, Eric Lai, ComputerWorld, March 4, 2007
  • How Tough Is Vista's Defensive Lineup? Andrew Burger, TechNewsWorld, March 3, 2007
  • Symantec: Vista Blocks Almost All Malware, for Now, Neil Rubenking, PC Magazine, February 28, 2007
  • Microsoft's List of Verified Vista Applications, Eric Lai, Computerworld, PC World, February 22, 2007
  • DRM in Windows Vista, Schneier on Security, February 12, 2007
  • Hands On: The Essential Vista Upgrade Guide, Preston Gralla, ComputerWorld, February 2, 2007
  • 10 reasons you should upgrade to Vista (and 10 reasons you shouldn't), Joshua Hoskins, TechRepublic, January 23, 2007
  • Upgrade from Windows XP to Vista, Joel Durham Jr., Extreme Tech, January 16, 2007
• Return to the top of this page.