1. June 2008 Surf Safely with a Clean Computer Roger Thornburn

2. Surf Safely with a Clean Computer Roger Thornburn June 2008 2 Seminar Goals Internet Security Background on internet security threats How to protect your computer Using a Sandbox A Clean Computer Using CCleaner To clean out temporary files To clean the registry Disk defrag Scheduling these tasks

3. Surf Safely with a Clean Computer Roger Thornburn June 2008 3 Unwanted Visitors! The Four Main Threats to Your Computer Hackers Viruses, worms & trojans Spyware and hijacks Operating System/Apps security holes Annoyances Email Spam Adware Pop-up Ads See Wikipedia (http://en.wikipedia.org/wiki/Malware) or handouthttp://en.wikipedia.org/wiki/Malware

4. Surf Safely with a Clean Computer Roger Thornburn June 2008 4 Dealing With the Threats Hackers Use a Firewall. Windows XP and Vista both have a good built-in software firewall If on broadband, then use a router with a h/w firewall Viruses Use ONE Anti-Virus tool Spyware Use ONE real time Anti-Spyware tool Can use more than one anti-spyware scanner

5. Surf Safely with a Clean Computer Roger Thornburn June 2008 5 So, Are You Safe Now? Better – but not completely Security holes not yet patched. Not yet acknowledged by software suplier No fix yet available Havent updated all your programs Pop up windows requiring user action Standard Window with a question or offer, with Yes/No buttons So, still at risk from: Drive-by that exploits a software security hole Malicious java script, Flash animations, etc. Both exploit weaknesses in poorly written software that enable Spyware, Hijacks, Worms, Bots, etc. to be put on your computer, directly from a Webpage

6. Surf Safely with a Clean Computer Roger Thornburn June 2008 6 The Answer Is …. A sandbox is a special software program that isolates any application running inside it, from the rest of your computer. After running your application, delete the sandbox and all traces of the application are also deleted. So, if we open our Internet Browser inside a sandbox, then any malware that tries to enter our computer, either by accidentally clicking the wrong thing, or by a drive-by, will be trapped inside. The sandbox I will show you today, is a freeware program called Sandboxie Can be downloaded from www.sandboxie.comwww.sandboxie.comA Sandbox!

7. Surf Safely with a Clean Computer Roger Thornburn June 2008 7 How Sandboxie works Hard Drive Without Sandboxie Using Sandboxie Reads Writes Sandboxie temporary storage Reads Writes For a complete explanation, see http://www.sandboxie.com/index.php?FrequentlyAskedQuestionshttp://www.sandboxie.com/index.php?FrequentlyAskedQuestions

8. Surf Safely with a Clean Computer Roger Thornburn June 2008 8Sandboxie Basics All programs can be opened sandboxed Main use is for your Internet Browser and email client Can also be used to run downloaded or other programs to test without leaving any traces on your computer Email attachments opened inside the sandbox Files you want to keep can be copied from the sandbox Do I still need A-V and A-S? Yes. Sandboxie will stop any program or software being written to your hard drive. It does not do any virus or Spyware checking

9. Surf Safely with a Clean Computer Roger Thornburn June 2008 9 Using Sandboxie Good tutorial. Open Sandboxie, click Help>Getting Started Tutorial Sandboxie automatically creates a desktop icon that opens your default browser in a sandbox (e.g. Internet Explorer) Just double click this icon Use Right Click and select Open Sandboxed to open any other program in a sandbox Use for email – Outlook Express, Windows Mail, etc. Also for testing new programs. When using a sandboxed browser or email client, nothing is saved: Cookies, temporary internet files, favorites New add-ons (e.g. Flash plug-in) Downloaded files or programs Saved attachments

10. Surf Safely with a Clean Computer Roger Thornburn June 2008 10 Using Sandboxie Saving files from the sandbox Download to My Documents or Desktop Sandboxie will allow you to recover these files Other folders can be added to be recovered Online banking, credit card, brokerage or other trusted website. As cookies will not be saved, these hi-security sites may require you to answer a security question Go to these sites once, outside the sandbox, login and the cookie will be saved Other By default, favorites will not be saved Can make a change in the Sandbox Settings

11. Surf Safely with a Clean Computer Roger Thornburn June 2008 11 Sandboxie Settings Open Sandboxie Default Settings Open Sandboxie Control click Sandbox>DefaultBox>Sandbox Settings Recovery folders click Recovery>Quick Recovery. Add folders if necessary Automatically delete sandbox when no longer active click Delete. Check Automatically delete….. Enable web browser favorites: click Applications>Web Browser. Check Allow Direct Access to ….. And/or for Firefox Also check Allow Full Access to Protected…. If you use saved password. Enable email client: click Applications>Email Reader. Check the appropriate check box for you email client.

12. Surf Safely with a Clean Computer Roger Thornburn June 2008 12 Summary for Safe Surfing Use a Firewall – Windows XP/Vista is fine Keep your Windows and internet enabled apps patched/updated Use ONE Anti-Virus program Use a ONE real time Anti-Spyware program Consider using a combined A-V & A-S, e.g. AVG 8, Norton AV, Kapersky AV, Webroot, Avast, etc. A total internet suite is not a necessity. Use an email/ISP service that scans ALL your email Yahoo, Excite, Google, Dell, etc. Only download programs from known sites Dont accept programs on CD from unknown people Use Sandboxie for surfing the web and email

13. Surf Safely with a Clean Computer Roger Thornburn June 2008 13 Lets do some more demos

14. Surf Safely with a Clean Computer Roger Thornburn June 2008 14 Cleaning Up Your Computer Use CCleaner Removes all temporary files Internet Logs Windows Removes cookies Select those to keep Registry cleanup Defragment your Hard Drive Combines fragmented files Speeds up disk operations Slightly different interface XP to Vista

15. Surf Safely with a Clean Computer Roger Thornburn June 2008 15 Suggested Sequence Download and install Sandboxie & CCleaner In CCleaner, select items to clean, include all cookies Run CCleaner including the Registry cleaner Open non-sandoxed browser, and login to all your hi- security sites (bank, credit card, etc.) and any customized page (e.g. Yahoo) Reopen CCleaner, in Options>Cookies, move all cookies to Cookies To Keep Change settings to default Sandbox Applications>Web Browser Check to Allow Direct Access to Internet Explorer Favorites Check to Allow Access to Protected Storage Applications>Email Reader Delete>Invocation and check Automatically delete contents Now can run browser in sandbox and run CCleaner

16. Surf Safely with a Clean Computer Roger Thornburn June 2008 16 Scheduling the Cleanup Vista Defragmenter includes a scheduler Select daily/weekly and time (computer needs to be on) Use Task Scheduler for CCleaner Control Panel>Administrative Tools>Task Scheduler Action>Basic task – set day and time (computer needs to be on) Select CCleaner and type /auto for the argument Windows XP Create a batch file (c:\cleanup.bat) c:\program files\ccleaner\ccleaner.exe /auto c:\windows\system32\defrag.exe c: Use Scheduled Tasks to run this batch file Control Panel>Scheduled Tasks>Add scheduled task Select c:\cleanup.bat – set day and time Check Open advanced… and check Run only..

17. June 2008 Enjoy Your Surfing Experience