		My Primary Several Link to the Virus & Hoax Page Utility Software Links to many tested security programs
This page tries to provide useful security links. Links to security news and reference sites, spyware software links, firewall software links, file encryption links, password storage links and more are all included here. send any useful security link(s) or other information, with some commentary describing its interest or value

The Security Page - Computer & Internet Security

Online security tests

These are some of the best places to have your computer's security from internet threats tested:

Spyware and Adware Control

Some of the best software for dealing with spyware, adware, etc. is listed below. Just a note: I've checked a lot of spyware programs, most because they got rave reviews on somebody's site. It's claimed that hey catch more spyware than any other program the reviewer knows about, including all the ones I'm using. One that I checked maybe half a year ago, claimed to find quite a few pieces of spyware that I had totally missed. It listed them, and asked me what how I wanted to handle them. I went to look at the errant files, and they wasn't there. These extensive spyware finds were imaginary. Unfortunately, I don't remember the name of that program.
Another, which I tested last week, was also reviewed in glowing terms by one site. This was the commercial program ewido. It found over 120 hits of the BargainBuddy Spyware program. Fortunately they were all false positives. When the program found the "spyware" it asked if I wanted it quarantined or removed. Fortunately I had them quarantined. After a couple dozen such answers, I told it to continue checking, but do nothing to any further "infected" files while I investigated further. The tech support over there was prompt, courteous, and helpful. They asked me to send them some of the"infected" files and confirmed that they were false positives. The program was missing some basic features, such as a way to list files I didn't want scanned (I have one called killcmos.com, which anti-virus programs, and some other anti-malware programs want to catch & kill), or information about the "infections" it found. The programs I do recommend are listed below.

Spybot Search and Destroy Excellent spyware find and removal program
Ad-Aware The original high quality spyware removal tool
Microsoft Anti Spyware Microsoft bought one of the top antispyware companies, rebranded it, and so far doesn't seem to have ruined it. They provide it for free. Don't consider it a replacement for the above programs.
SpywareBlaster Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted pests. Blocks spyware/tracking cookies in Internet Explorer and Mozilla/Firefox. Restricts the actions of potentially dangerous sites in Internet Explorer. Does not have to stay resident in memory, but should be updated regularly
SpyWare Guard real time scanning engine for spyware and hijack protection - similar to how virus protection works
WinPatrol This was the first program I discovered that effectively prevented RealPlayer and Quicktime from installing themselves at Windows startup, but have discovered other useful features as well. It's a good spyware and adware program, it controls unwanted IE add-ons, it prevents undesired file association changes, and automatically filters unwanted cookies, so you don't have to remove cookies such as doubleclick, for example, which are continually reinfecting your computer. WinPatrol also prevents start page hijacking for those still using Internet Explorer, it detects HOSTS file changes, and has a few additional tricks up its sleeve as well

Software Firewalls

Windows XP firewall only offers inbound protection, so a different firewall is highly recommended to get outbound protection as well. Outbound protection is necessary when a piece of spyware attempts to send out information from your computer. Note that the head of security at Symantec once let it slip that their firewall had a backdoor for the US government to check on you at will. He recently left Symantec and now is part of the Bush administrations computer security team. Router firewalls also provide only inbound protection.

ZoneAlarm Free for home use
Kerio Personal Firewall also has network and mailserver versions. Like ZoneAlarm, the straight firewall is free for home use, additional features cost.
Tiny Personal Firewall for home use - free for 30 days, then $49
System Safety Monitor Firewall isn't really the right term for this software. In much the same way a firewall controls what programs can and cannot access the internet (of course firewalls do do more than that), this program controls which programs are allowed to run or not run on your computer. It does a lot more. For example, it also controls which programs are allowed to set themselves to start automatically when the computer is booted, and monitors certain types of registry access. It is freeware, but the beta license is time limited. This program is currently hard to find. A couple places to look are here and here

Spyware Self-Help Sites

Excellent Spyware resources to help people who run into problems.

Spyware Warrior
SpywareInfo.com (past Link of the Month winner)
AntiOnline
CounterExploitation
Home PC Firewall Guide: Anti-Spyware
CastleCops
PC Pitstop Spyware Information Center
How to Remove Spyware and Malware - Michael Horowitz
Security Wonks

Security News Sites

SpamHouse News
also check the statistics at the bottom of the Home page
Netcraft recently discovered security risks
Network World Fusion - security
Symantec Executive Security Center
Microsoft Security Page
Grey Magic News
Secunia monitors vulnerabilities of over 4000 products (and does more)
Computer Security articles in the NY Times
Computer Security articles at Silicon.com
CERT Coordination Center a center of Internet security expertise, located at the Software Engineering Institute, a federally funded research and development center operated by Carnegie Mellon University.
Computer Security articles in The Register
Spam Statistics
from Unspam.com. There are 6 pages of statistics that are navigated from the bottom
MessageLabs Intelligence Page
MessageLabs scans well over 1 billion emails a month for viruses and spam. This is their report.
Donna's Security Flash Donna Buenaventura is a Microsoft MVP specializing in security. Some of her other sites include Dozleng.com, and her calendar of software updates
NGS (next generation security) Research is a London based computer security firm. Be sure to check the "Whitepapers" and "Advisories" links

This from Susan Bradley in November 2005 I normally keep an eye on several security blogs. In addition to the MSRC blog from the Microsoft Security Resource Center, I'm keeping my eye on the following security blogs:
• Microsoft Switzerland Security Blog • Donna's Security Flash • Security Manifest • Harry Waldron • Siljaline's • IE and Security blog • Spyware Sucks • Patchaholic • The WSUS blog • Castle Cops	• DP's Security blog • Security guide blog • TaoSecurity Blog • Schneier on Security • Martin's Network Security Blog • Security Awareness for Ma, Pa and the Corporate Clueless • Jesper Johansson's blog • Steve Riley's Blog • and lots more at the Microsoft Community Blogs database.

Security Certification

SANS security training and certification

Browser Hijacking

A Hijacker is any software that resets your browser's settings to point to other sites. At this point Microsoft Internet Explorer is the only browser subject to hijackings. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower.
• Search Hijackers change your search settings.
• Homepage Hijackers will change your home page to some other site.
• Error Hijackers will display a new error page when a requested URL is not found.
Hijacking has become very common, as these examples illustrate. This document explains how to clear such hijacks of Microsoft Internet Explorer (IE) manually and how to prevent it by disabling scripting.

info Pest Patrol on How to Clear a Hijack
info Article in spywareinfo.com on browser hijacking and how to repair They also have an excellent
and very easy to follow article on preventing hijackings.
CW Shredder is a fairly straightforward freeware program for cleaning most variants of the CoolWare hijacking trojan. It can be downloaded from this site or many freeware download sites
Hijack This is another piece of software for cleaning a Hijack. It is more powerful, and requires a more technical understanding of computers to use effectively. It can also be found at the same site as CWShredder
SpyWare Guard will prevent browser hijacking (and more)

Helpful Online Sites

These are sites that provide services online that could be provided no other way.

With the use of this site and a FireFox extension you can automatically log on to thousands of sites without having to register. This maintains privacy and reduces spam.

Bug Me Not

You need to register to see or use many sites. You may be sent an email that you need to reply to. This requires that you supply a functioning email address. The sites below provide you with temporary (or semi-permanent) email addresses you can use for this purpose without having to compromise your real email address. They each work a little differently, so check them each out before deciding which to use.

File Encryption

The PGP (Pretty Good Privacy) Page PGP is a program that gives your electronic mail something that it otherwise doesn't have: Privacy. It does this by encrypting your mail so that nobody but the intended person can read it. hen encrypted, the message looks like a meaningless jumble of random characters. PGP has proven itself quite capable of resisting even the most sophisticated forms of analysis aimed at reading the encrypted text.
Zero Footprint Crypt
TrueCrypt
BladeBox
Cypherix
AxCrypt
PowerCrypt 2000
IceCrypt

Encrypted Password Storage

Other Peoples' Security Recommendations

Richard the Lion Hearted Check out the spyware and anti virus sections

Miscellaneous

Pest Patrol's How to section (eg "Clear a Hijack", "Configure Ad-Aware" ...) <
PCStats Beginners Guides some excellent security articles included
Windows Process Library
Check here too These list and describe the function and purpose of all Windows processes such as userinit, spool32, csrss, lsass, etc.
Spam-me-not This will convert the email address in your home page to hexadecimal. "Steve" will look like this "steve"
Doc Scrubber removes lots of identifiable info from Word documents
MRU Scrubber MRU-Blaster detects and cleans MRU (most recently used) lists on your computer. These MRU lists contain information such as the names and/or locations of the last files you have accessed. They are located ALL OVER your registry, and for almost ANY file type. By looking at these MRU lists, someone could determine what files you opened/saved/looked at, what their file names were, and much more!