Recommended *free* firewall & anti-spyware programs for

[Johan]

Greetings, everybody!

I have just spent more than one full day first doing a complete backup of all user data, user-, network-, printer- and many other settings on a T42, before finally doing the BIG thing (because first time, for me!): A complete re-install of Windows on the T42 (thank you, IBM Rescue & Recovery!), as all attempts to re-establish communications with a Canon digital camera, via the dedicated Canon software, and via USB, had failed. I suspect the cause of the problem is owing to some update of an unknown program - leaving only one way: A fresh install of Windows. That's done, and I'm up and running again, hurray!

So, before starting to use the PC again, and before installing any unknown programs again, or accepting unknown/suspicious updates, I intend to install all major user-programs (not many, actually; only word processors etc., browsers, mail-program and a few others, incl. the Canon digital camera program) AND of course anti-virus, firewall plus anti-spyware software, and finally to set up mail, network and printer things. Then, I'll restore the user-data, and finally - when I have made sure that all programs works perfectly, I intend to make an image of the entire now fresh and "well-functioning" disk (to an external USB harddisk, and using the wonderful Acronis True Image software)... so, in the case of problems later on, I can then, and very quickly, roll back the "PC-in-perfect-shape-setup" onto the internal T42 harddisk.

OK; so far, so good.

Now, I am in the need for your advice with respect to a recommended and free:

a) Firewall (at present, I use the Windows XP SP2 built-in firewall by Microsoft, but reading about it, it does not seem to have received the best criticism),

b) Anti-Spyware. I have previously used Microsoft's Anti-Spyware (http://www.microsoft.com/athome/securit ... fault.mspx), but - in my opinion - it pops up with way too many messages that are not easy to translate into something meaningful (unless, perhaps, being an anti-spyware expert). Because of this, I am looking for another free anti-spyware program, which is more user-friendly compared to Microsoft's, and also recommended with respect to its core functionality: Safety!

With respect to anti-virus, I have been using, and still is, the free "AntiVir PersonalEdition Classic" (http://www.free-av.com/), which I am very satisfied with, and therefore have decided to keep.

The PC in question belongs to a dear friend of mine, who is a girl, who I like very much, and who has many fine qualities, but eehm... being particularly technical and computer-minded is not, well, between the most pronounced of them... Because of this (no doubt: Typical!) user scenario, I would very much prefer to install a firewall and an anti-spyware software that communicate to the user in a manner which is reasonably easy to understand. Safety and simplicity (and free!), and only requiring few computer resources, are the major key-words.

I understand that the "ZoneAlarm" firewall program (http://www.zonelabs.com/store/content/c ... lid=nav_za) is recommended by many, but that it has also caused problems for several ThinkPad T42/T43 users (according to http://forum.thinkpads.com/viewtopic.php?t=19269). Because of this mixed user feedback, I would highly appreciate other ThinkPad-user's recommendations for other free firewall programs, which are known to work well in T42's, under Win XP, SP2, and which does NOT slow down the computer.

For the Anti-Spyware program, the same goes: What free program(s) do you recommend; program(s) which always runs silent in the background, which does not take up many resources, and yet catches all the Spyware, that tries to infect the T42.

Thank you all very much in advance for any feedback!

Kind regards,

Johan

PS: I have read a lot about firewall and anti-spyware programs, and in case anybody is interested, I have found these links very useful:

Personal Firewall Reviews: http://www.firewallguide.com/software.htm

Anti-Spyware Guide: http://www.firewallguide.com/spyware.htm

[DIGITALgimpus]

I'm kind of a security nazi, most say I'm insane when it comes to this stuff... but I know to many people who are experts in the topic... and paranoia is contagous.

NOTHING is 100% secure (and anything that claims to be, is likely about as effective as snake oil). I recommend a multi-tiered approach....

1. Hardware firewall. Most basic WiFi Access Points, provide a basic hardware firewall. NAT isn't a firewall, but has many of the same benefits. I'd look for one with SPI (Stateful Packet Inspection). Even if you have only 1 computer, well worth the $50 to get a good device.

2. Software Firewall. Personally I found Windows Firewall to be better than nothing, and good if you have a strict security policy... but not ideal for all situations. Because of that, I ran Sygate Personal Firewall (now discontinued, and I wouldn't recommend it). Right now I'm Using Sunbelt Kerio Personal Firewall, and consider it to be a pretty good product. It's a nice balance. It's somewhat slim, fast... flexible... and pretty non-invasive. That's really what I was looking for. It has a free basic version. I did upgrade to pro though (it was on sale, so a great deal). I think it's normally $19. You get the download as pro for the first 30 days, then it turns into the free version if you don't pay. IMHO worthwhile to try.
http://www.sunbelt-software.com/Kerio.cfm


For Spyware Protection, the only known solution is multiple products. I've yet to see ANY documentation that 1 does an effective job in scanning. If your smart about downloads it will always return 0 items... but still doesn't hurt to have. My rundown:

* MS Antispyware (the only one that actually runs all the time).
* Spybot S&D (free, scan with it weekly)
* Ad-Aware Personal (free, scan with it weekly)
* Spyware Blaster (free modifies registry so spyware can't easily install... complements Spybot S&D).

I do a Spyware scan when I do a virus scan every week. Doesn't take long, and with those, I think there is a 99%+ effective rate in detection.

THe latest MS AntiSpyware (now Windows Defender) includes an option to become a "basic" or "advanced" member of MS Spynet... if your "advanced" it prompts you all the time. "basic" is essentially silent. Depends on your tolerance.


Hopefully that helps.

[kam_]

I use kerio (if you leave it in basic mode it only blocks incoming traffic, and is actually no better than windows built in firewall - but in advanced mode its very good)

I don't bother with live running spyware programs. They are usually a waste of time because their databases are not updated as well as antivirus ones which include all dangerous spyware these days.

I do however run spybot every week or so as a precaution.

I've re-imaged my thinkpad about 6 times trying different firewalls and combinations. I've found nod32 + kerio personal firewall impact performance the least (hardly noticable actually). nod32 has also won the most prectigious virus awards and is hailed by industry. Actually it gets about 4 virus signature updates a day!

I skimed through your post, but did read you need something that doesn't use complicated language etc.

In that case use kerio and set it to 'basic' during the install. Then go into the settings and enable application behaviour blocking. Tell your friend to hit PERMIT on program's she recognises only and that should be suficient if you run nod32 as well. Nod32 monitors TCP and UDP streams so should block spyware before it gets to you.

The downside of this aproach tho is that if spyware did somehow get in, and you did permit it thinking it was ok, you won't get more prompts every time it tries to access a non standard port - but realisitically if you were careless enough to permit the program in the first place, thats hardly going to help.

Oh and if you do go this route, make sure to do one final reboot once everything is installed and permit all the programs that load during startup.

EDIT:

Oh and the windows firewall isn't actually tha bad, but remember it only blocks incoming, and allows all outgoing.

The main reason not to use MS firewall or MS anti spyware is that its efectively 'default'. Its what you can expect the majority of users out there to be using. So any new virus or spyware will most likely target it specificaly to hit the most computers.

I think the same can be said for symantec these days as it comes free with most computers!

[simms]

I've never really had problems with ZA.

As for spyware, a good dose of common sense, using Firefox and staying updated do wonders. I've never had to deal with spyware removal on my own PC, but for others... well, they're not as lucky.

[ibmuser]

Of the freebies, I've taken to Safety.Net 3.61:

http://www.netveda.com/consumer/safetynet.htm