Stopping Malware on a New PC

Reader Matthew writes: I was curious if you knew any good articles or had advice for first installing Windows and then all your basic application, like anti-virus and spyware detectors. The problem I find myself and with others who have called me for help is that when your first installing Windows and you make that first internet connection you get bombarded with viruses and spyware.  You rush to get your anti-virus installed and updated and usually end up have to go through most of the steps you decribed in your removing spyware part 1 and 2 article. Thank you for your time and consideration.

Sure thing! Here's how I ensure that a PC isn't compromised before I can get it protected with security software.

Some of you readers may not even realize this, but plugging an unprotected PC into a non-firewalled internet connection is a surefire way to find it infected by viruses, spyware, and worse. All IP addresses are regularly scanned for security holes and they are automatically attacked if one is found. You don't have to open your browser or email client to get infected. Just plugging the PC in or turning on an unfirewalled wireless connection will ruin the computer.

How to avoid this? It's actually pretty simple:

1) Always connect through a firewalled router. You should never plug your PC directly into the DSL or cable modem. Rather use an intermediary. Every router today has a firewall built in, and I've never seen one that wasn't turned on by default. It doesn't need to be anything fancy. Searching any tech store for "router" will turn up hundreds of models. You can get a name brand unit (wired) for 20 bucks or a wireless model for $40. It's well worth the investment for the security alone.

2) Install using Windows XP Service Pack 2. If you can't connect with a router, simply install using an XP disc that has SP2 already included. (It will say so right on the disc.) SP2 has the Windows Firewall included and it's turned on by default. So you'll be protected the moment the install is complete.

3) Install while disconnected. If you don't have a router and you don't have an XP disc with SP2 on it, you have one more solution. Disconnect your machine from the internet, and install XP normally. Then use an SP2 update CD to add the patch (including the firewall) before connecting to the internet. Microsoft will ship you an SP2 CD for a few bucks to cover shipping. You can order one on this page. Alternately you can install a third-party firewall like ZoneAlarm. Just make sure you have a copy on disc to work with before you plug into the net.