Practicing Unsafe Web

I mentioned last week that I needed to reinstall Windows XP onto my home computer. Since I wanted to erase the hard disk anyway, I decided to try a little experiment. We’ve all heard that broadband is far more susceptible to malware than is dialup; you have space for dozens of online transactions at once, and - if you’re practicing unsafe Web - it doesn’t take long for the bad guys to find you. After formatting the drive - which meant it was absolutely clean of everything - I reinstalled XP and Service Pack 2, along with Microsoft’s excellent spyware zapper. Then I did what unsuspecting folks in the same position might do: I enabled Windows XP’s built-in firewall and went online to download updates.

Well, the AntiSpyware program went nuts as soon as Firefox opened, popping up windows so fast I couldn’t read them. I tried to connect with Zone Labs. Something kept me from connecting to that address. Then I tried to connect to Grisoft’s site to see if I could download AVG Anti-Virus. I could connect, but every time I clicked the download button, something shut the link down. I reached over and killed the DSL modem. Total time online: less than two minutes.

Then I loaded the copy of AVG that I had ready for the occasion. One scan and there were 38 trojans in the bag, 34 of which the program “healed” and four of which I had to dig out manually. Another scan with AVG gave me several more. The total after three scans was 57 - all contracted during the two minutes I was online with Microsoft’s firewall up and running, and that’s not counting what the Microsoft anti-malware scanner caught at the door. To be on the safe side I re-formatted the drive, reinstalled everything, and then after installing AVG, ZoneAlarm (Pro) and the spyware catcher, I went online and immediately got the latest updates for Windows and the three protective programs as well.

All of this took about three hours, but it was very instructive. I won’t comment on what it says about Windows’ built-in firewall, but it’s clear that if you run a virus scan and find something, you’re well-advised to keep at it until you get at least one scan with no results. (Remember, I caught 23 on the 2nd and 3rd scans, and I didn’t do a 4th, I just erased the hard drive.)

Most new machines come with at least an anti-virus program ready to run. If at all possible, install a good commercial firewall as well (ZoneAlarm Free Edition is fine to start with) before you even plug in to an Internet connection. Trust me - you don’t need the excitement.