Protect Your PC: Print All Three Steps

Operating System: Windows 2000
Last Updated: September 9, 2003

To print these instructions, click the Print button in the upper right of this window. When you are done, close the window to return to the previous page.

Step 1: Use an Internet Firewall

Before you connect your computer to the Internet, you should install a firewall. This is a piece of software or hardware that helps prevent hackers, and many types of viruses and worms, from accessing your computer.

Firewalls are the most important first line of defense for computer security. You should also use Windows® Update and antivirus software to help protect your PC.

If you have a computer with Windows 2000 Professional, Windows Millennium Edition (Me), Windows 98, Windows 95, or Windows NT, you should get and install either a hardware or software firewall. The following resources provide more information about some firewall options.

Hardware Firewalls

Hardware firewalls are a good alternative for earlier versions of Windows. Many wireless access points and broadband routers for home networking have built-in hardware firewalls. These provide sound protection for most home networks. The Microsoft Broadband Networking Wireless Base Station is one example of a wireless access point with a built-in hardware firewall and other integrated home networking features.

Software Firewalls

Software firewalls are available from several vendors, including:

• BlackICE PC Protection
• Computer Associates (12 months free)
• McAfee Security
• Symantec
• Tiny Software: Tiny Personal Firewall
• ZoneAlarm

To learn more about firewalls, read Checklist: Install a Firewall, from the Microsoft Security Web site. This article includes a discussion of software firewalls made by other companies, as well as hardware firewalls and network routers. This information can help you select a firewall solution if you use an earlier version of Windows on your computer.

If you have a different configuration, a small network, or if you encounter issues with regards to your firewall, see the Frequently Asked Questions about Firewalls.

Step 2: Get Computer Updates

If you are using Microsoft Windows 2000 Service Pack 3 (SP3) or later, you can take advantage of Automatic Updates, which can automatically download the latest Microsoft security updates while your computer is on and connected to the Internet. If you are not sure if you have the latest service pack installed, you can find out by following the instructions for checking your operating system version.

To use Automatic Updates to download and install any future critical security updates from Microsoft:

1. Click Start, and then point to Settings, and then click Control Panel.  
2. Double click the Automatic Updates icon to open the Automatic Updates dialog box. You'll see a screen like the one below.
3. On the Automatic Updates tab, check the box next to Keep my computer up to date.
4. Choose a setting. We strongly recommend choosing Automatically download the updates, and install them on the schedule that I specify.
5. If you choose the option to automatically download and install updates, select a day and time when your computer will be turned on, so the installation process can be finished.
   
   Note: We recommend a daily update.
   
   
   Choose Automatically download the updates and install them on a schedule that I specify

Click the balloon to install new updates

You will now download all future updates automatically.

Using Windows Update

1. Go to the Windows Update Web site at http://windowsupdate.microsoft.com.
    
2. On the Windows Update site, click Scan for Updates. Windows Update will scan your computer and give you a pre-selected list of critical updates.
   
   
   Click Scan for updates
   
   
   Note: Slower modems may take several hours to download all recommended updates the first time you use Windows Update. Your download times will vary depending on how long it has been since you last updated and your modem speed. To reduce download times, run Windows Update when you will not be using your computer for other Internet-related tasks.
    
3. In the Pick updates to install list on the left side of your screen, click Critical Updates and Service Packs. Windows Update will create a list of the updates appropriate for your computer.
    
4. Click Review and install updates. Select the updates to install, including any service packs and the critical updates pre-selected for you, including service packs, and then click Install Now. You may need to restart your computer after installing the updates.
   
   
   Click Review and install updates
   
   
   Note: Be sure to go back to Windows Update after rebooting to check for any additional updates. You may need to do this several times.

Important note for Microsoft Office users: You should also visit the Office Update site to install the latest security releases.

Step 3: Use Up-to-Date Antivirus Software

Antivirus software is a program that either comes installed on your computer or that you purchase and install yourself. It helps protect your computer against most viruses, worms, Trojans, and other unwanted invaders that can make your computer "sick." Viruses, worms, and the like often perform malicious acts, such as deleting files, accessing personal data, or using your computer to attack other computers.

Help your computer stay healthy by asking yourself the following questions:

1. Do you have antivirus software installed on your computer?
   
   Many major computer manufacturers include at least a trial version of a popular antivirus package on new computers.
• Click Start, and then click Programs. Look for an item in the list with a name like McAfee, Norton, or Symantec.
• If you don't have antivirus software installed, check out the following antivirus software companies for special offers on their products:
  • Computer Associates (12 months free)
  • McAfee Security
  • Symantec
• If you already have antivirus software installed, but you want to install a new product from a different company, be certain to uninstall your current product before installing the new one. Leaving the previous version installed can cause conflicts on your system.


2. Is your antivirus software up to date?
   
   Out-of-date antivirus software means ineffective antivirus software. Antivirus software relies on regular updates to help protect against the latest threats. If you aren't subscribing to these updates, your computer may be vulnerable to threats.
   • Make sure you have activated a subscription for continuous updates of your antivirus software.
   • Most antivirus software updates itself when you are connected to the Internet. To ensure your software is up to date, open your antivirus program from the Start menu or the taskbar notification area and look for update status. If you still aren't sure if your antivirus software is up to date, contact your antivirus software provider.


3. Is your antivirus software set up correctly to provide the best protection possible?
   
   The following settings should be turned on by default when you install the software. If you turn them off for any reason, be sure to turn them back on before you connect to the Internet.
   1. "On-access" or "real-time" scanning should be turned on. An icon in your notification area should appear to indicate that this setting is enabled.
   2. Antivirus software should perform a scheduled scan of your hard disk.
   3. Antivirus software should be configured to scan e-mail messages.