(Guide) How to safely use Windows without Anti-virus security

***READ THIS: The following guide should only be used as an informational resource. I am not forcing anyone to follow this guide, nor will I take responsibility for any consequences that result from its use. Please use it at your own risk and please also refrain from using the thread to debate the usefullness or necessity of anti-virus security software.***

You have been warned.

---

​

Now the good stuff. I'm compiling a list of security measures that can be used as an alternative to the major security programs such as Norton, Macafee, AVG, and others. I'm not saying those programs can't be useful, I just want to expand general security knowledge and give users other options in addition to or besides the mainstream anti-virus programs.

I tried to list the items in order of how well they can protect you, but without a scientific method of checking, it's purely guesswork. With each item I will assign a security level, such as low, medium or high security. This way you can decide what level of security you might like to use on your system. I'll take suggestions for changing the level of importance for items in the list.

I'm only adding things to this list that are free to use or that come built into Windows. There are hundreds of security programs out there that you can pay for, but why should you if there are so many useful safety measures for free? Remember that I'm not going to cover free anti-virus programs either. This is meant as an alternative or additive to any anti-virus program.

Your feedback about how particular security measures has helped protect your system would be appreciated. I haven't used all of them myself on my main system, but I've set them all up at one time or another. In two years on three different computers in my house, I've only contracted one virus using only a few of these methods. Your mileage may vary.

---

​

1. Virtualisation (Level: HIGH) – This includes running your operating system as a virtual machine (VM) or using virtualised processes like sandboxIE. If you run a VM or sandboxed application, any infection you obtain will only affect the VM or sandboxed process. Think of it as a quarantine for your programs or system.

A few good options for running VM include

• Vmware: Free VMware Player: Run Windows 8, Chrome OS on a Virtual PC and if you have Windows 7 Professional or higher,
• Virtual PC or XP mode: Windows Virtual PC: Home Page
• Sandboxie - Sandbox software for application isolation and secure Web browsing
• VirtualBox

2. User Account Control (Level: MEDIUM) – This is for Vista and 7 users only. UAC is the most annoying and effective measure that Microsoft has made to ensure you don't perform an action you didn't mean to. It also flags inappropriate actions by your computer, such as malware trying to run without your permission. If you click on an unsigned executable (a program) to run or install it (for example), UAC will stop you in your tracks and make sure you meant to do that. If a virus tries to run without your knowledge or permission, UAC will pop up with the usual continue or cancel message giving you one last chance to stop that particular infection. In my opinion, this annoyance is completely unecessary if you just use common sense, but some will find it useful.

UAC can be adjusted in the Control Panel under User Accounts.


3. Use Firefox, Chrome, Opera, Internet Explorer 9 or Safari (Level: MEDIUM) – Internet Explorer tends to be the least secure of browsers available on the market out of the box, but properly configured and used it is close to the level of security of other browsers. You should just make sure you have the most updated version of your browser, and no matter what browser you use, make sure you are knowledgeable about the security features it comes with.

Firefox Security Features
Chrome Security Features
IE Security Features
Safari Security Features
Opera Security Features

All the major browsers have support for extensions or add ons, and the options available for each browser increase security against harmful websites or downloadable files. No matter what browser you use, it's a good idea to make sure it always asks you where to download files so no infected downloads sneak up on you. You should also consider using the private browsing feature if available as this can protect you from tracking cookies and other malware.

You can find them each here:
Firefox
Chrome
Safari
Opera
Internet Explorer 9 (Vista and 7 only)

If you love IE, you can still get away with using it by following a few tips. Make sure you have version 8 with the latest security updates or above by running Windows updates. Any version below 8 is no longer secure enough for today's sophisticated malware attacks. Even version 8 is iffy, but a necessary evil for Windows XP users. Another must is making sure InPrivate and SmartScreen filters are active.

If you are a Vista or 7 user, you also have the added benefit of running in Protected Mode, which is on by default. This mode works in conjunction with UAC to stop most threats from becoming serious system stoppers. One last piece of advice for IE users, always know what ActiveX you are installing and always know what file you are downloading. The easiest way past IE's security is through you, the user, so don't just say yes to the pop-ups because you don't feel like reading them.

Please take a look at this link as it will explain some of the best security add-ons for your browser: In-browser security

One more way to increase IE9 security is through Tracking Protection Lists. You can download them from the link below. These third party lists act just like a "do not call" list, keeping your private data safe from the websites in the TPL.
Internet Explorer 9 Tracking Protection Lists



4. OpenDNS (Level: MEDIUM) – Third party DNS servers block malicious sites on the web and can perceptibly speed up your internet experience. When you type a URL into your browser's address bar or click a link on a website your "request" (request to load a new page) is redirected through Domain Name Servers. Think of it as a way for your browser to find a page, just like postal workers find your house by its address. This is not a forum for discussing the finer points of DNS.

What OpenDNS does is redirects your requests through a third party server which is managed and updated to optimize speed and security. Using the OpenDNS server can keep you from visiting known malicious sites or keep malicious scripts from running. This is especially useful for multi-user environments because you can create an account and manage in more detail what sites your computers are allowed to visit (parental controls).

This link takes you to their site which includes instructions for setting it up. OpenDNS | Internet Navigation And Security


5. Safe Interenet Practices/Common Sense (Level: MEDIUM) – Almost nothing is as important as common sense when avoiding viruses. Sadly, common sense is difficult to teach, and I won't be able to sum up how to browse, download, chat, email, etc. safely in this already wordy guide. Do a personal online common sense test by asking yourself a question: "when my anti-virus software catches a virus, do I know where it came from?" If the answer is no, you need to actively be more careful and follow this guide closely.

This guide is just a fraction of the knowledge and resources available, so it's a start, but don't stop here. Let me list a few good practices to follow when using the internet:

1. If it's questionable in real life, it's probably the same online. Downloading illegal torrents, visiting shady sites, and looking for bomb-making information is an easy way to ask for a virus infection.
2. Know what you're clicking on. This sounds very easy, but I have seen Ph.D-smart people get viruses because they said yes to a pop-up box. You have the time to read every pop-up, I promise.
3. Maintain your computer. When you don't change the oil in your car, the engine dies. When you don't run regular maintainance on your computer, it becomes slow and vulnerable.
4. Monitor all activity on your computer. If you're not the only user on your computer, make sure the other users are practicing safe internet habits too.
5. Reach out and ask questions. It's ok not to know if a certain website is safe or if an email is a scam. Ask more knowledgable people or research the subject to find out if it is or not.

6. Firewall (Level: LOW-MEDIUM) – Windows has a built in firewall that should be activated at all times. This safety measure is a good method for blocking communication on rarely used or unassigned ports, and usually notifies you when a program is trying to access the internet.

If you prefer using third party firewalls, ZoneAlarm is tough to beat, but the free version is limited: ZoneAlarm Free Firewall - Free software downloads and software reviews - CNET Download.com


7. Peerblocker (Level: LOW-MEDIUM) – This is a program that has the same idea as using a hosts file. You might find Peerblocker to be more user configurable than a hosts file if you're not used to editing text documents and playing around with IP addresses. It functions like a firewall, except it uses IP address checking instead of port checking. You can find it here: User Guide ? Peerblock Site


8. Limited User Account (Level: LOW) – A limited user account (LUA) removes Administrative priviledges from your user account. Much of why you hear that Mac users don't have virus troubles is due to Apple's OS restricting user account actions right out of the box. In Windows, you can accomplish the same thing by setting up a limited or standard user account, which would require an administrator password to install programs and drivers, and perform other administrative actions.

Viruses that depend on a user to install them will be thwarted by this security measure, but only if the user realizes that they didn't intend to install the virus in disguise. If you prefer having the ability to act as your own administrator and install programs without interruption, you may not want to use this measure. If you are unsure of what programs are good to install and what programs are bad, you may want to use LUA and give a more tech savvy person the administrator password. Accountability goes a long way in preventing mistakes.

You need two separate user accounts to use LUA, one with administrative priviledges, and another with limited priviledges.


9. Windows Update (Level: LOW) – Windows, as all software, was not created perfectly. Over time hackers and virus programmers discover holes in Windows code that can be exploited. Microsoft often issues critical updates to patch the holes and protect your system. Needless to say, if you're still running XP SP2 because it's your favorite, good luck. XP users can visit the Windows Update website to find the latest updates, and Vista and 7 users can see the updates from within Windows.

You should never feel that it is too dangerous to run Windows Updates because you have heard stories of people losing all their files and not being able to boot after updating. Yes, this can happen, but if it does there is usually an easy way to fix it and get Windows running again without risking the loss of your files. Besides, the odds of Windows being corrupted when running updates correctly without interruption are very low.


10. Ccleaner (Level: LOW) – This is a tool for securely deleting temporary files created by the operating system and web browsers. I find this free and lightweight tool very handy for keeping the operating system well maintained and virus free. As you use various programs in Windows and during your web browsing, Windows saves temporary files to your hard drive.

For example, when you visit a website in your favorite browser, images, stylesheets, cookies and other various files can be downloaded into a temporary folder on your hard drive. The purpose of downloading them is to speed up future visits to that same website or other pages on the same website.

Malware is like any other software in existence, so it needs a physical location to reside in, like the temporary files on your hard drive. Once the malware is saved to the temp folder, it has a chance to begin attacking your system files or program files, depending on the malware's behavior. Using Ccleaner to frequently and securely remove temporary files increases your chances of deleting malware before it can attack your system.

To download Ccleaner, visit their website: Piriform - Download CCleaner, Defraggler, Recuva, Speccy - Millions of users worldwide!


11. Adblock (Level: LOW) – Using an ad blocking service such as Adblock for Firefox or Chrome can eliminate any malware from attacking your system that comes from online advertising. This method isn't foolproof, as not all ads are blocked, and sometimes it may block necessary elements on the page you're viewing. Still, it's better than browsing the internet with all ads displayed. At any time if you wish to view a page's ads you can simply disable Adblock for that page or for all pages.

Adblock Plus — for annoyance-free web surfing


12. MVPS Hosts File (Level: LOW) – Flipfire clued me in to this, so credit where it's due. If you use the hosts file found at mvps.org, known bad sites will be blocked because Windows checks the hosts file before it redirects to the IP address. In other words, it's a behind the scenes malicious site blocker. More information can be found on their website: Blocking Unwanted Parasites with a Hosts File


13. NoScript for Firefox (Level: LOW) – Javascript is pervasive on the internet, and probably every site you visit has some form of it. Unfortunately, malware can be executed through Javascript, so if you don't mind losing a little functionality this extension can help protect you online. It only applies to web browsing, so make sure it's not the only security measure you use. Visit the site here: NoScript - JavaScript/Java/Flash blocker for a safer Firefox experience! - what is it? - InformAction


14. Data Encryption (Level: MEDIUM) – Encrypting the files on your hard drive or using a flash drive as an encryption key has the potential to slow down or stop hackers and keyloggers in their tracks. As long as you use a strong enough password, you can prevent someone from accessing files on your computer or plugging in a flash drive and transferring a nasty virus into your system.

If you're one of those people who is paranoid about someone stealing your laptop or accessing your computer without permission, this would be a good idea for you to look into. Two programs get mentioned in this guide, although they are not the only options available. TrueCrypt is an open source project that has powerful tools for encrypting your hard drive, certain files, or even external drives. Use this program carefully, though. Forgetting the password or losing the drive you have your password saved to could lock you out of your own computer for good. TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux

Encrypt Stick Free is a similar program. Meant to be used as a portable program only, it runs from a flash drive, locking your computer against someone who doesn't have the flash drive key. It's worth noting that neither of these programs are 100% tamper proof, but the time it would take even for an experienced hacker to gain access limits the likelihood that you will be targeted.

Encrypt Stick Free | Encryption Download | PCWorld

15. Use Cloud Storage (Level: High)
If you use cloud storage, your files are stored on a location other than the hard drive of your computer. This is about as close to being virus proof as your files can be, aside from burning them to a removable media and hiding them in a safe. Cloud storage has its pros and cons, but as long as you can deal with needing internet to access your files and you don't mind a third party holding your files on their server, it should all be gravy.

Free 7GB - Microsoft Cloud
Free 5GB - Amazon Cloud
Free 2GB - Dropbox
Free 5GB - Box.com

---

​

I would love to hear what you think and how any of these security measures has helped you keep your system virus free. Thanks for reading and participating.

 

While the things you list may be good security measures to implement, none of them are replacements to antivirus software. It's like telling a bank to hire a bunch of guards, but to leave their vault wide open.

 

that is great guide actually.. but in Windows, antivirus software is a must

 

Common sense/IT knowledge is a better defense than any antivirus. Between that and NoScript I've run 2 computers without antivirus for 6+ months without getting a virus.

 

While we here at NBR may have the "proper" IT knowledge and common sense, Joe Blow isn't necessarily going to have this.

An anti-virus is much easier for the majority of users. Users, in general, do not care how or why it works, only that it does. This is why Norton and co are so successful: It just works.

 

Why don't you just spare a few clock cycles, to download MSE and be the end of it.
Virtualisation is great but there are performance penalties and your virtual harddisk (file) is still prone to malware attack then you have to start all over again...

 

thanks for the great guide micman.

Although the sad fact is that the average joe cannot comprehend all those points you have listed. That is why you see people buying MACs.

 

The page you linked to is for Virtual PC, which is exactly what I linked to as well. Unless I'm missing something, they are the same thing.

I wasn't trying to define UAC, just to describe to users what it essentially does. I gave running unsigned executables as an example, not a complete definition. And yes, UAC stops the computer from performing an action you didn't intend, which would have to be the result of a user action in the first place, so exactly how is my explanation off? Isn't this the same as whether the chicken or the egg came first debate?

I'll revise my browser section with a discussion on the proper use of IE, but my original intention was to point out that it "tends" to be the least secure out of the box. If you use InPrivate and SmartScreen filters or Protected Mode, yes it adds security. A lot of people don't use those features, they use it how it comes installed out of the box.

Speaking of out of the box, did you know that roughly 30% of IE users are still using IE6? Source: Internet Explorer Dips Below 50% Market Share | ConceivablyTech

You can also see that IE has a lot of security holes that are constantly being patched if you look around. Here is one recent example: Microsoft to fix 49 holes in Windows, IE, Office, and .NET | InSecurity Complex - CNET News

 

Indrek, I wrote this guide to help anyone looking for resources on the security measures not already covered extensively by countless other posts here on NBR. Either you can continue to pointlessly argue with me, or you can respectfully make suggestions on how I can improve the guide.

I understand you disagree with me, and that you may even be 100% right; however, my goal is to spread knowledge, not debate back and forth over what cannot possibly be scientifically proven. If you would like to make a suggestion for additions or corrections, I'm all ears. Let's work together to make this as useful and accurate a resource as possible.

 

Not looking to put down your work or anything so don't think that... I just want to ask, why is this all so much more appealing than just using an av program? This all seems so much more complicated, time consuming (and potentially expensive) than it needs to be. Do all these things use less comp resources, cost less and are more secure than a top rated AV program? Also, should you get an infection, you will still need an AV program or removal tool to disinfect.

A program like Avira Premium ($25/comp, 1 year) or Avast Pro ($35) use less than 30,000K of memory. Avast has shut itself down to ~2,500K right now on the XP running Vaio I'm currently using, can't beat that. VMware looks geared towards businesses rather than individuals. I don't see prices on their website (didn't go through each link though) so chances are, it's not cheap. Avast does support sandboxing.

I tend to think UAC is a sort of prank from Microsoft for anyone who is above the truly oblivious user. That's fine & all but I keep mine OFF, lest I go insane. I know I'm not alone here. If someone downloads an infected torrent, they go to run that app or play that song and UAC says 'are you sure?' User says yes, they still get infected. If they say no, then no Hannah Montana today. Well, what then did the user download the torrent for? UAC doesn't detect anything or give you reasons for its behavior (malware detection, outgoing connection, unauthorized execution, etc.), it just second guesses your every move. I have found no way to configure UAC other than on/off.

I do use and love Peerblock which likes about 40,000k in RAM for itself but with 8 gigs and Peerblock's functionality, I'm fine with that.

I also love Comodo 5. It has gotten much less docile with its popups and security checks since version 3 and has an added sandbox. It will also allow you to use Comodo's DNS service. I haven't tried this yet. The firewall and DNS listing is free.

DNS I've never gotten reliable improvements with though. I've tried Google DNS, Open DNS and a one or two others I've seen in threads on NBR. Leaving my computer to automatically select these seems to work best for me.

I use CCleaner too but it doesn't always pick out everything that Windows Disk Cleanup does...and vice versa. PerfectDisk also has a clean utility and lately I've been weighing that against the other two. I also set my browsers (Opera and Firefox) to not store a disk cache, just use memory which of course is cleared on exit.

I've never used a host file service but seems like something a web scanner in many AV programs will do as well. Check the site you want to access against a database to see if it's safe. Peerblock can filter HTTP sites too but can be very broad with its lists.

I'm giving the no AV program a shot and just sticking with Comodo free and my full subscription to Malwarebytes. I keep Clamwin and Superantispyware on a flash drive for emergency or when someone I know has problems.

I do agree that common sense is the most important safeguard here but a good browser like you suggest and a good firewall...IMHO...are all that is needed otherwise. There are still many who would argue even that is overkill. IMHO DNS, Virtualization & encryption...with all this, I might as well just use Avira and surrender a mere 20,000k of RAM and $25 for Avira. The real time scanning is what I like most (and why I still use MBAM). I also don't keep super sensitive material on my computer.

Different uses for different users but I'm just surprised when some say that they don't need an an AV cause they've built a mote around their house and wear HAZMAT suits when on the internet. Ok, slight exaggeration but I'm sure you see my point....

Again, not looking to dispute, just understand your reason for the extras but if that's what works for you, then great. You've obviously put a lot of work into your setup.

 

99% of the ppl who think they don't need antivirus or firewall or don't even know about them don't reach minimum IQ in computer usage and should never ever touch one
So from that point making this tutorial useless.
Do not make ppl-s life harder who fix these computer noobs pc-s

Never use windows without antivirus and firewall if connected to the internet.

 

I'm not sure whether to consider you a troll, or to consider myself in that 1%, perhaps both. The internet isn't a giant cesspool of viruses, only some sites will give you spyware, only certain files with give you viruses. Don't live in fear of what you don't know, rather get educated on what a virus really is, and how in some cases your antivirus does more to harm your computer from a performance perspective than your run of the mill spyware.

 

Modern antivirus uses so little resources that if you're feeling a performance hit from running it, you need a new computer. Back when Symantec and McAfee were throwing everything including the kitchen sink in their products you could of made the argument that AV slows your computer down. Currently it's quite silly to make the same argument.

 

All the mentioned security measures here are free and some use little to no system resources. I updated the VMware link to make it easier to find the free version, sorry for the confusion.

OpenDNS doesn't work for everybody, but it should for most people. But as an example, I can't use it because the Sprint 3G network charges extra to allow users to provide their own DNS. If you weren't noticing a difference in speed or responsiveness, did you check to make sure it was working right? Maybe your ISP doesn't allow different DNS servers.

Ccleaner gets most of the (un)important temp files, and I've never seen Disk Cleanup find anything Ccleaner didn't. If you look in Ccleaner's options, you can find additional items to delete and check their corresponding box to wipe them out. The only result I ever get from Disk Cleanup is old/unused file compression, which I stay away from due to speed concerns. Compressing hard drive files usually doesn't save much space anyway.

I apologize if I may have been unclear, but I'm not actually using each method I mentioned on my main system. In fact, right now I'm only using a few of them. I merely wanted to include as many helpful security alternatives as possible in the guide for people to use as a resource.

I absolutely want the information in this resource to be as accurate as possible. I also want it to be readable so that even an average user can learn from it if they are inclined. I wasn't always a geek, and I learned a lot by reading online resources and talking to other geeky people, so I hope this can be a good starting point for people who are learning. Experienced IT users know their stuff already, so I know I don't have to explain anything to them.

I made several changes and additions to the guide in light of the corrections you made. I hope this clarifies things more accurately.

Instead of letting what you think is 99% of the world rot with a lack of information, I decided to share my knowledge for those who care to learn. There are people out there who wish to secure their systems with other methods, either as an alternative or an additive measure.

I treat every "computer noobs" as if they have as much or more knowledge than me, even when they have made the most ignorant mistakes. My attitude toward my clients is why they keep coming back, and bringing more clients to me. If you treat everyone like they are too stupid to ever learn about computers, I guarantee you they will never learn.

Yes, modern anti-virus programs use fewer resources. Yes, I like saving 5mb of memory here and there. Yes, it's pointless with as powerful a computer as I have.

I realize there aren't many people in need of this kind of security advice. Most people just use anti-virus. Still, I wanted to increase the available options for anybody looking for more information. Whether they decide to run these measures with or without anti-virus on their system is not up to me. I'm only providing the info, you choose whether to use it or not.

 

It's great that you created a guide detailing some security measures, but by titling it "How to safely use Windows without Anti-virus security", you're insinuating that your methods provide overlapping functionality that makes antivirus redundant - which your listed methods do not.

It's interesting that you ask for criticism, yet quickly rebuff anything said that is contrary to what you wrote.

 

Lithus, can you read some of this thread really quick and get back to me with your opinion? http://forum.notebookreview.com/sec...ning-windows-without-anti-virus-software.html

It's the basis for this thread. Maybe it will provide some insight into why I started this one. Maybe not.

 

Anything running constantly in the background monitoring your computers activity will cause a slow down. Would I notice the slow down on day to day activities, probably not, but I don't live my life in fear of viruses either. Understanding what you're up against is half the battle and after that antiviruses are more problematic than viruses themselves.

 

If your point is that it's entirely possible to not get a virus while running a computer without antivirus software, then you are very correct. I don't think anyone's debating that point with you.

There are two issues I have with what you posted. Firstly, as I said before, your thread title insinuates that the security measures that you've listed are to replace antivirus and make running antivirus software redundant. Second, quite frankly, not running antivirus is just stupid. Yes, it's very possible to look down the barrel of a gun and not get shot in the face. But it's probably smarter to not be looking down the barrel of a gun in the first place.

When you enter a car and buckle your seatbelt, do horrific pictures of car accidents flash through your mind? Probably not. So why do you buckle your seatbelt? Because it's the smart thing to do. It's silly to suggest that people are using antivirus only because they're deathly afraid of getting infected.

What antivirus have you been using? Hillbilly Bob's "Git Me's Compooter Safe" security package?

 

Do I need to remind of you of Mcafee's wonderful svchost incident, beyond the routine blocking of applications it shouldn't, false positives, and annoying popups. This thread is about being free of those daily annoyances which end up turning a lot of people off or onto Mac's. Almost all of the current computer world is unknown to a majority of users, and antivirus companies have capitalized on that. People will fear the unknown which is why the strongest defense a person can have is knowledge and with that knowledge plus a few tools antiviruses are nothing but a nuisance.

 

My only issue with private browsing is that it rejects all tracking cookies... that is why I've just been 'limiting' cookies based on site addresses.

For example; I go to www.notebookreview.com to read articles and reviews but I'm not logging in so I setup ff to deny all cookies that tries to store itself into my browser. Whilst in forum.notebookreview.com I need to accept cookies so that I could post; so I made that address an exception to be allowed to accept and store cookies.

Any website I just visit and I don't need to login; I simply deny their cookies. And so far I've had zero (1s to 2s) results from malware scans; for the past 4 years.

This takes more effort; denying cookies from all new sites you visit but the results in the long run have been worth it.

just an IMO.

 

I just linked to a thread where several NBR users besides myself gave testimony that they have been running without anti-virus software for a while without contracting malware. The evidence speaks for itself. By saying that "not running antivirus is just stupid," you have clearly identified yourself as a person who believes that anti-virus software is the only way to keep viruses out.

You are wrong. I have personally worked on several computers with Symantec and Macafee software suites (just to name a couple) installed that had contracted nasty malware despite real-time protection, automatic program and definition updates and automatic scans. Talk about looking down the barrel of a smoking gun.

I never stated that these methods would keep 100% of viruses out, but I do believe they would be as effective or better than a majority of security suites if used correctly. In that sense, I do not believe my title is misleading.

I also did not say anyone had to follow this guide if they don't want to, as you'll see if you read the first sentence in the first post. And I didn't say to stop using anti-virus software. I left the choice up to the user. If they followed the methods described herein, I believe they could safely use Windows without anti-virus software.

Your posts have become increasingly off-topic from what I asked in the first few paragraphs of my first post; that is to say, you are no longer contributing to overall knowledge of running Windows with alternative security measures. So I have two suggestions for you: 1. Keep using anti-virus software, and 2. If you have further arguments against the thread take it up with a moderator and let them decide what to do.

I see that you have been a very avid NBR user, and I respect your many posts and high reputation here. I also respect your opinion. I just ask that you would do the same for me as I am merely trying to help other NBR users, however few there are that would benefit from this guide.

 

I have learnt by now to stay out of these kinds of discussions, but I'll make an exception for this one...

Yep, exactly. I have probably something like 20+ computer-years (10 years on multiple computers, one of them our family computer(s), that my wife and kinds have been using for years) experience of running Windows machines without any anti-virus software. We have never, ever, had a virus. We also have never had to deal with any of the multitude of issues that were, and are, routinely caused by anti-virus software.

I am not sure if that is suggested by the OP, but you should understand the following: In contrast to what seems to be your understanding, it is the other way around: Running your computer securely is essential, including using UAC, and always running your day-to-day work as a limited user (I may add in parentheses that I seem to disagree with the OP, whose guide I do not find particularly helpful). No anti-virus package in the world can substitute for that. And, yes, with a bit of work and some discipline, you can set up a Windows machine so that it is far more secure than any standard Windows configuration with any number of anti-this-or-that packages added. For the naive user, anti-virus packages may be helpful, but they are really of very limited, if any value for a competent user.

Quite frankly, I do not think you are in any position to make a pronouncement of this kind. I'll leave it at that...

... and inane analogies really do nothing to help your argument.

 

You have an interesting strategy, one worth taking note of. Quick question, if you needed to, could you transfer your cookie denial settings from one computer to another? Just curious.

I appreciate your perspective, and admire your experience in avoiding viruses. Especially considering you have a family that uses your computers without your full supervision. Although with LUA there are lots of things they can't do without your permission I'm sure.

If you get a chance and you feel like it is worth your time, could you make suggestions as to how this guide could become more helpful? I'm rather disappointed with it myself, considering that most of the discussion taking place hasn't been very productive. I would really appreciate it.

 

Nope; you can't (in firefox 3.6 anyways).

 

To be honest, all it takes is a few years computer experience and know how to run Windows with anti-virus. I did it on XP for a few years and NEVER got a virus. All it takes is some common sense and a more secure browser such as FireFox.

Everything else such as messing with UAC, NoScript for FF, etc is just secondhand stuff to make it a bit easier.

 

It's too bad those settings can't be saved. I was thinking you might be able to transfer the profile over to another computer, but that also saves all your bookmarks, history, password data, etc. If you only wanted cookie data there's no way I know of to pinpoint just that :/

I also remembered you can do something similar with Ccleaner. If you wanted Ccleaner to remove all the cookies except for a certain few, you can just add those cookies to the exception list. That's obviously not as safe as denying cookies altogether, but it's pretty close.

 

The guide just got some updates to include more timely information on browsers, plus new links. Also added a section on cloud storage, which is one of the ways I safeguard against losing files/data to a virus.

 

I think it's common sense that's the most important thing of all.

I haven't used Anti-virus in 2 years and don't do any virtualization or any special gimmicks, and haven't had a virus.

 

Common sense is much more restricting than any software on my computer.

 

Not necessarily.
One can easily set up an admin account in Windows so you could browse the net without an AV.
Common sense in it's basic form is hardly restricting.

 

A user account is, by default, restricted. Common sense dictates that you won't go to a site if you suspect it's malicious. Common sense in and of itself forces you to second guess actions.

That's no fun.

I'll take a nice light security setup and no common sense.

 

Good stuff in guide - general knowledge that many can benefit from.

And yes - most users should still use AV. It usually protects them from themselves.

 

I agree. Well said.

 

^QFT

Very useful guide.
Well done.

 

After having some issues with trying other anti-viruses and issues with compatibility I have decided to go without an anti-virus.

One reason for also eliminating an anti-virus is that I do use common computer sense. I don't go to questionable sites and I use ABP and NoScript wisely (it was common sense for me as to which domains are ad domains and which ones aren't) to prevent contraction of viruses.

I do run other programs such as SuperAntiSpyware and Windows Firewall (and I would not connect to the internet directly without being behind a router).

Also I haven't had a virus in at least 7 years. (I am a moderately heavy internet user. I frequent youtube and various other websites for 5 hours average per day, usually around 10 hours.) [Yes I do other things also and I have a job.]

Now, would I recommend my friends to go the same route? Absolutely not. Most people don't really think about what they are doing in terms of internet useage until they have already clicked on links and so forth. Some do have questionable habits and do have a need for an Anti-Virus.

 

^I'd recommend you consider an extension such as Web of Trust.

 

+1
this is one of the extensions mentioned in the cnet article under my browser extensions part of the guide. It works in all 5 major browsers. Highly recommend.

just added info:
Tracking protection lists for IE9: http://ie.microsoft.com/testdrive/Browser/TrackingProtectionLists/
and updated info on sandboxie to better reflect info on the website (thanks Baserk)

 

Just bumping this thread up with an interesting factoid for anyone still interested. After exactly 2 years of running my computers without anti-virus protection, I finally got a virus on one of them. Rather than wasting time removing it I just used it as an opportunity to try out a cool program called RT 7 Lite, which strips down the windows 7 installation and allows for some neat tweaks.

Anything I should do to update this thread or is it beating a dead horse? Your thoughts appreciated.