Best Way to PROTECT new WINDOWS INSTALL from future viruses and issues??

[VirtualLarry]

Originally posted by: Skyzoomer
Then if your system gets infected, do a long (not quick) format on the entire hard drive before you do the backup restore.

That doesn't do anything, except to verify that all sectors on the HD or partition are readable by the HD (no low-level errors).

I think what you're trying to describe is a mfg tool "write zeros" to the HD, before doing the restore. Not a bad idea. But a "long format" from within Windows WILL NOT do that.

 

[VirtualLarry]

Originally posted by: NetGuySC
Here is a site built by anandtechs resident computer security guru..... mechBgon

Do a search for mechBgon here at anandtech. you can learn allot from his posts and his website.

http://www.mechbgon.com/build/security2.html

Seconded. Look at his section on SRP, Software Restriction Policies. Combined with a Limited User Account, almost no nasties can get in and take hold. (Unless you run a trojaned installer as Admininstrator. Beware warez sites!)

 

[Skyzoomer]

Originally posted by: DarkFudge2000
Pardon my ignorance on this, but let me ask you this....when dealing with malware, viruses, trojans and backdoor stuff, arent all these programs just modifying/replacing system files to do their dirty work?.....So in essence, wouldnt it be safe to assume that just doing a Back Up of a System State 9 which seems to use the least space and backs up the quickest) really the way to go if I dont want to do a complete Backup and Restore of my entire drive?


Also, can I just do the backup and restore to my 2nd internal drive?....or is that a no no?

Finally, lets say i get a nasty virus that doesnt allow me to properly boot....how do I now launch this .TIB restore file?

thanks and again sorry if this is obvious stuff

I believe the following strategy is a good one as far as doing backups is concerned, since you have two internal hard drives and Acronis TI.:

- Partition your system drive so your C: partiton is about 60 GB. This can be done after WinXP is installed as is true in your case. I use BootIt NG for my partition work. The balance of that HDD can be used for data storage. I store "all" of my data on my data drive (or data partition in your case). It's easier to backup my "data" this way without having to include backup of the WinXP system in the backup. I don't store any data in WinXP's documents and settings except for Outlook Express and Internet Explorer stuff which happens automatically.

- Partition your 2nd HDD to have about 30-60 GB for miscellaneous use. Use the balance of the 2nd HDD as the Acronis secure zone backup area.

- Backup your C: partition to your 2nd HDD in the Acronis secure zone. Backup your D: data partition to the Acronis secure zone.

- Be sure to make an Acronis TI rescue CD. This is crutial to be able to restore your backups!

In the event that your system HDD fails or gets infected, stick the rescue CD into your optical drive, set your ROM BIOS to boot from the optical drive before the HDD. The rescue CD will allow you to restore the TI backup from the secure zone to your new HDD.

The Acronis secure zone is not written in standard Windows format so is said to be imune to known viruses. This is why it is said to be secure even though it resides on an internal HDD that is always running.

I personally do this:

- System drive (120 GB) is partitioned into 3 partitions. 55.89 GB, 55.89 GB, 8 MB. The first partition is my WinXP Pro partition. --- The second partition is a second bootable partition using BootIt NG. It is a copy of the Boot-1 partition and I can use it anytime I have problems with the Boot-1 partition to see if it is a hardware or software problem. This has come in handy many times, let me tell you. --- The third partition is the BootIt EMBR partition.

- Second internal HDD is my data drive. It is 120 GB and not partitioned.

- Third internal HDD is my backup HDD. I backup my Boot-1 partition partition and my data drive to this HDD using Acronis TI. I also use BootIt NG's image backup to this HDD depending on the situation. I would normally restore from these backups since it's faster.

- External USB drive: I have a pristine Acronis TI backup of my fresh installed WinXP Pro with all updates to the time of the backup, all drivers installed and core software that I use a lot. I will never overwrite this backup copy as long as I will use WinXP Pro. I also store current backup copies of my C: partition and my data drive on this external drive. I would normally restore these "current" backups unless I get infected. In that case I would restore the pristine WinXP backup. --- I also have backups of my Vista laptop on this drive. I keep this drive in a floor mounted safe when not in use so if a burglary happens, I will have all of my data to fall back on.

Hope this helps you out,
Sky

 

[Skyzoomer]

Originally posted by: VirtualLarry

Originally posted by: Skyzoomer
Then if your system gets infected, do a long (not quick) format on the entire hard drive before you do the backup restore.

That doesn't do anything, except to verify that all sectors on the HD or partition are readable by the HD (no low-level errors).

I think what you're trying to describe is a mfg tool "write zeros" to the HD, before doing the restore. Not a bad idea. But a "long format" from within Windows WILL NOT do that.

Hi VirtualLarry,

Thanks for that info. I thought the long format did over-write all sectors but thanks for clearing that up for me. I will look for a program that does over-write all sectors after a format. If you have any recommendations for a free one, please let me know.

Sky

 

[RebateMonger]

Anti-Spyware software is pretty much worthless in PREVENTING malware infections. Non-Administrator accounts, UAC (in Vista/Win7), and Software Restriction policies will help avoid most attacks. A bit of suspicion and awareness of how malware behaves are valuable, too.

If you still get hit (it can happen to anybody), a system image backup of your PC is the best and fastest way to fix the problem. Windows Home Server does a great job at this, since it's fully automatic and makes daily incremental images that allow restoration from many possible dates. It's useful not only for malware recovery, but from most any hardware or software error that damages your system or your data. Acronis and ShadowProtect are also good alternatives.

 

[VirtualLarry]

Originally posted by: Skyzoomer
Thanks for that info. I thought the long format did over-write all sectors but thanks for clearing that up for me. I will look for a program that does over-write all sectors after a format. If you have any recommendations for a free one, please let me know.
Sky

DBAN, Derik's Boot and Nuke, will do a "write zeros" pass.

Also, check at the mfg's web site for your brand of HD. WD's Data Lifegaurd Tools will do a "write zeros", Seagate's SeaTools will also do that, and Samsung has a util that will do it too.

 

[DarkFudge2000]

Is it 'that' necessary to perform a full write zero pass when reinstalling a clean OS or restoring a Backup from True Image once your machine has been infected?

How many malwares, trojans, and viruses actually do any damage further than the OS system files?

Please give me an honest answer

 

[bob4432]

whenever i have helped friends out that have a virus and i really don't want to take the time to clean the hdd since they don't have anything important, i will wipe the drive - zero fill, then do a fresh install.

if you are constantly installing pirated software from warez sites and more than likely your os disk is a pirated version of xp, you are probably installing viruses from the get go. make sure you atleast have a clean start point - ie the os.

honestly, there are very few ways to get the amount of issues you are having, so you may want to change your "surfing habits"

 

[0roo0roo]

you shouldn't have to if you practice good web hygiene. as said, if you install pirated stuff and go to dodgy sites, well thats on you. sure antivirus and keeping your patches /windows update is also important, but if you install a trojan on there using a keygen or pirated program, you are just going to get around all your protection with that behavior. think twice before installing anything a website asks you to.. a system doesn't succumb to trojans so quickly without the user being heavily involved with acquiring the infection. just using ie or whatever is not enough.

 

[Skyzoomer]

Originally posted by: VirtualLarry

Originally posted by: Skyzoomer
Thanks for that info. I thought the long format did over-write all sectors but thanks for clearing that up for me. I will look for a program that does over-write all sectors after a format. If you have any recommendations for a free one, please let me know.
Sky

DBAN, Derik's Boot and Nuke, will do a "write zeros" pass.

Also, check at the mfg's web site for your brand of HD. WD's Data Lifegaurd Tools will do a "write zeros", Seagate's SeaTools will also do that, and Samsung has a util that will do it too.

VirtualLarry,

Very comprehensive list and I thank you for taking the time to post it.

Thanks,
Sky

 

[DarkFudge2000]

My other question is, just for my own knowledge, What is the actual differences and benefits of Differential Backups and Incremental Backups?

I went to True Images website and after reading it, it still didnt make sense in explaining how they are different. I think its just the confusing way they explained it that makes it unclear.


After I do my 1st FULL BACKUP on a fresh OS, I want to keep it updated periodically but am not certain which of these I should use and how they differ

thanks guys

 

[mc866]

Incremental image takes a base image and adds to it every time you back up your system, only changes are backed up so this takes less time

Differential creates a unique image file each time you run the backup.

Here is more info from the user manual:
A full backup contains all data at the moment of backup creation. It forms a base for
further incremental or differential backup or is used as a standalone archive. A full backup
has the shortest restore time compared to incremental or differential ones.

An incremental backup file only contains data changed since the last backup of any type
(full, incremental, or differential one). Therefore, it is smaller and takes less time to create,
but as it doesn?t contain all data; all the previous backups and the initial full backup are
required for restoration.

Unlike an incremental backup, when every backup procedure creates the next file in a
?chain?, a differential backup creates an independent file, containing all changes since the
last full backup. Generally, a differential backup will be restored faster than an incremental
one, as it does not have to process through a long chain of previous backups.

 

[JackMDS]

Originally posted by: DarkFudge2000
Is it 'that' necessary to perform a full write zero pass when reinstalling a clean OS or restoring a Backup from True Image once your machine has been infected?

.

No it is not needed TI writes directly to the drive enpty spaces are clean it does not leave the privous empty space.

How many malwares, trojans, and viruses actually do any damage further than the OS system files?

Please give me an honest answer

Very few as compare to the File level Viruses.

But you do not need more than one, and usually they wipe out every thing beyond regular rescue.