Terry's Computer Tips - Newsletter
May 14, 2006

---

Terry's Computer Tips Newsletter
http://www.terryscomputertips.com
A computer tips newsletter for users of PC's.

---

Volume 1, Number 48 — Sunday, May 14, 2006

Part 1  Part 2  Part 3

IN THIS WEEK'S ON-LINE ISSUE:
   1.   Intrusion Prevention and Detection
   2.   Updates Last Week
   3.   Computer Running Slowly
   4.   Computer Running Slowly — Adware & Spyware
   5.   Email Links Don't Work
   6.   My Computer Security Software Recommendations
   7.   "Registry Has Problems" Messages
   8.  Recommend my Terry's Computer Tips Newsletter to Your Friends

Welcome to the on-line version of my Terry's Computer Tips newsletter.

My emailed newsletter is sent weekly to individuals who have subscribed to the newsletter. Click here to subscribe. It's free!

---

1.  Intrusion Prevention and Detection

Intrusion Detection is one of the computer concepts that has moved from the server world to the PC world.

Our first step, though, is prevention — keeping intruders out of our computers.

After years of total exposure of most Windows computers, Microsoft finally included a built-in software firewall in the original versions of Windows XP. By default, dialup connections had the firewall turned on. BUt, for high-speed network connections — the kind we have with cable or DSL, Microsoft set the default for the Windows XP Firewall to "Off."

Service Pack 1 made little difference. There were some firewall improvements, but still it was turned off by default. Finally, with XP Service Pack 2, the firewall is turned ON by default.

This is almost great. But, there's a major problem with the Windows Firewall -- it is a one-way firewall. It only blocks activity originating from outside the computer.

This means that, if you get your computer compromised with a downloader or trojan (you're not using IE with its Active-X are you?), the Windows Firewall will happily accept and allow all the spam that your computer starts to send, all the attacks that your computer makes on other computers, and all the illicit images that your computer serves to requesting browsers.

In other words, a one-way firewall doesn't solve the problem, if you have other means of getting infected or subverted -- such as emails and your web browser.

Read more in my article Intrusion Detection.

Microsoft Vista, the promised new version of Windows that will arrive some time in 2007, is reputed to have a 2-way firewall. Finally. But, I have read that Microsoft has decided to have it turned off by default. I hope that's not the case -- or perhaps the case only in the version for businesses.

The Firewall Solution

So, our first step is to protect our computers with software firewalls, such as ZoneAlarm, Sunbelt Kerio, or as part of a combination package from TrendMicro, or the many other firewall suppliers.

All of the third-party firewalls that I have found will function to control access from the Internet to the computer and from the computer to the Internet. This is what we need.

The Intrusion Detection Solution

One of the most well-known intrusion detection packages is no longer widely available. Black Ice Defender seems to have died. I haven't heard about it in years.

My choice for a firewall (Sunbelt Kerio Personal Firewall) includes host-based intrusion detection in its paid version (Kerio is also available as a reduced-function free version for home use).

Trend Micro Internet Security 2006 also includes intrusion detection as part of its package.

There is also a free program called AirSnare that can work with your wireless or wired router. It looks for unexpected MAC addresses on your network — and warns you if someone unexpected has connected to your network.

---

Stop Buying Video Games
Game Rentals Delivered to Your Door
No Late Fees, Free Shipping, Over 3,500 Titles
PS2, Xbox, Xbox 360, GameCube, PSP, GameBoy Advance, Nintendo DS
Starts at $9.95/month
Free Trial at GameFly

---

2.  Updates Last Week

Microsoft (operating systems, email, web browser, office suites):
Last week included "Patch Tuesday". Microsoft releases almost all updates once per month, on the second Tuesday. The "high priority updates" that I received included:

• Windows Malicious Software Removal Tool - May 2006 (KB890830)
  After the download, this tool runs once to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove any infection found. If an infection is found, the tool will display a status report the next time you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center or run an online version from microsoft.com. This tool is not a replacement for an anti-virus product. To help protect your computer, you should use an anti-virus product.
• Security Update for Flash Player (KB913433)
  A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system with a vulnerable version of the Flash Player and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.
• Security Update for Windows XP (KB913580)
  A security issue has been identified in the Microsoft Distributed Transaction Controller service that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.
• Windows Genuine Advantage Notification (KB905474)
  The Windows Genuine Advantage Notification tool notifies you if your copy of Windows is not genuine. If your system is found to be a non-genuine, the tool will help you obtain a licensed copy of Windows.
• Update for Outlook 2003 Junk Email Filter (KB916521)
  This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail. This update was released in May 2006.
• Windows Genuine Advantage Notification (KB905474)
  The Windows Genuine Advantage Notification tool notifies you if your copy of Windows is not genuine. If your system is found to be a non-genuine, the tool will help you obtain a licensed copy of Windows.
  
  Yes, this is yet another version of the Microsoft Genuine Advantage Notification tool. As they say in tennis, "Advantage Microsoft". This version has an End (L)User License Agreement (EULA) to which you must agree.
  
  Interestingly, Microsoft says that it will allow critical updates for pirated Windows copies (probably only if this utility is installed and not disabled). The EULA also tells you that you can disable the reminder.
  
  And, finally, this "critical update" Microsoft Genuine Advantage Notification tool is defined to be a "pre-release version" subject to bugs, etc. -- hopefully this is just the result of someone stupidly sticking in the standard boiler plate. If Microsoft truly considers this to be a pre-release version, they have no business installing this garbage as a "high-priority update."

Firefox (web browser, www.mozilla.com, free):
Current version 1.5.0.3, released May 2. This was a security update for a "denial of service" issue, where an attacker could crash Firefox.

Opera (web browser, www.opera.com, free):
No updates. Current version 8.54, released during the week of April 5, 2006. This was a security update release. Opera 9 Beta is now available for those who wish to try it.

Netscape (web browser, www.netscape.com, free):
Current version 8.1.

SeaMonkey (web browser, email, HTML editor, newsreader; www.mozilla.org/projects/seamonkey; free):
Version 1.0.1 was released on April 13th. This was primarily a security update.

Eudora (email, www.eudora.com, options: paid, sponsored or free/lite):
No updates this week. Current version 7.0.1.0, released 12/21/05.

Mozilla Thunderbird (email, www.mozilla.com, free):
New release version 1.5.0.2, released April 21, 2006.

OpenOffice (office suite — spreadsheet, word processor, presentations, graphics, web design; www.openoffice.org; free):
Version 2.02 released for Windows during the week of March 6th.

---

Prevent and Repair Windows Registry Problems
Scan, Repair and Optimize your Windows Registry with
XP Repair Pro. Download and scan for free. $36.95 to buy.
User-Friendly License: One purchase covers all your home PCs.

---

3.  Computer Running Slowly

Most of the time, when our computers are running slowly, it's because of all the things we have running in the background. Computer manufacturers seem to delight in loading up computers with 10 to 12 programs that run automatically and put little icons in the Windows Status Bar.

One would hope that these programs didn't interfere with our other computer activities. But, all too often, that is not the case.

So, how can you get them under control?

There are a number of tools that will let you control programs that start automatically — if you can figure out which ones you don't need...

For example, if you use Microsoft XP's built-in "msconfig.exe," you can stop many programs from starting automatically. Just uncheck the box beside a program to prevent it from starting automatically. But, you really need some of those — and need some of them for Windows to work (you'd think that MS would keep all of those out of msconfig, wouldn't you?).

Once you start msconfig, do not touch anything except things in the Startup tab. Click on the Startup tab and you will see the list of items that are starting. This will really be most of the automatically-started third party programs that require user interaction. (Notice the last 3 words!)

Pick one that you don't recognize. Let's pick "qttask" which almost everyone will have. The next column "Command" shows:

"C:\Program Files\QuickTime\qttask.exe" -atboottime

This is the QuickTime Task Scheduler, which Apple's QuickTime sets up automatically on every computer that gets QuickTime.

It's also totally unnecessary.

There is no reason that we should waste startup time, memory and CPU cycles on the QuickTime Task Scheduler. So, uncheck the box, click Apply and click Close. Note that when you reboot, you'll get a special boot-up warning that you're booting into a special diagnostic mode (or something like that) — click "don't tell me again" and "ok" and be happy.

If you didn't know what qttask or qttask.exe was, you could search Google for it. With a brief research on Google, you should know enough to decide what to do. If you're not sure, though, err on the side of letting things run.

A much better, easier way to handle startup programs is with WinPatrol. WinPatrol runs all the time and protects your computer's startup list. If a program gets added to the Startup Folder or to the Windows Registry so that it automatically starts, WinPatrol will ask if you want to allow that to happen.

WinPatrol also lets you turn on and off startup items, without causing the confusing warning message when you boot. More importantly, WinPatrol has a built-in capability to tell you what a particular program is. WinPatrol itself is free. Access to the WinPatrol database (online via your web browser, but accessed by clicking a button in WinPatrol) is $24.95. This is a one-time charge and covers all of your home PCs.

I run WinPatrol continually on my PCs. You should give it a try.

---

Trade your DVD's today
No subscription necessary.
Click here for a FREE DVD today!

---

Part 1  Part 2  Part 3

Volume 1, Number 48 — Sunday, May 14, 2006
Part 1 | Part 2 | Part 3

Copyright © 2006 Terry A. Stockdale.  All rights reserved.