Ok, here is my suggested approach:
Core concept: a fresh installation of WindowsXP is easy prey for direct worm attacks from the network. All the worms need is for your network cable to be plugged in, and they got you. Your primary defense against this is a firewall, plus patching WindowsXP to eliminate the vulnerabilities that the worms are looking for in the first place. The key is to have the defenses in place
before the network cable gets plugged in.
PREPARATION
- Download these files using your laptop, and burn them to a CD:
- The full-file Service Pack 2 installer found on this page
- Intel motherboard-chipset driver found here
- Assuming your Dim8300 has the Radeon 9800Pro, download video drivers from here (direct link)
- The Microsoft .NET framework from here, the video drivers will require it as a prerequisite
- Go to http://support.dell.com/support/downloads/index.aspx? and enter your Service Tag number, then get the audio and network drivers downloaded and put them on your CD too
- I suggest getting a 30-day trialware of Kaspersky Antivirus Personal 5 from here or just go ahead and buy it for $35, it's excellent.
- Back up your stuff, don't forget your Favorites list
- Unplug the network cable and leave it unplugged
REINSTALL WINXP
- Find your actual WindowsXP Operating System CD that Dell sent with the system
- Insert it and reboot the system, then press a key at the Press Any Key To Boot From CD... prompt. If no such prompt appears, restart again and look at the first DELL screen for the key to hit in order to get a boot menu, I think it might be F12.
- Once Windows Setup is running from CD-ROM, get to where it shows the partitions on the hard drive, delete them all, then press the F3 key twice to EXIT from Windows Setup. This ensures that you don't have a silly screen in your boot-up asking which Windows installation you want to boot from.
- Now start Windows Setup from CD a second time, and follow on through the process. Keep the network cable unplugged the whole time, network = :evil: right now.
- Before installing any drivers or stuff, install Service Pack 2 and reboot. When asked if you want Automagic Updates enabled, go ahead and enable them.
- Now right-click My Computer, choose Properties, and do like shown in this picture, fully enabling DEP.
- If you have the Kaspersky trial antivirus software, install it, max out the real-time protection, and go to Threats & Exclusions and switch it to the Extended Databases. Also hit Configure Updater and set the update schedule for hourly.
- Now you can install your Intel motherboard drivers first, then reboot.
- After the mobo drivers are installed, install the .NET Framework and then you can install your video drivers afterwards, and reboot again.
- Install your network and audio drivers if needed.
FINISHING UP Now you have firewall protection, antivirus software, and most known worm vulnerabilities have been eliminated thanks to Service Pack 2. Plug into the network and immediately update your antivirus definitions. Reboot if needed, then drag it over to Windows Update, get a load of updates, reboot, and go back to Windows Update again.
Now you can grab your Dell program CDs and install anything you actually want, such as Works or Office or Roxio or whatever they sold to you.
Install Microsoft Baseline Security Analyzer 1.2.1 from
here and also version 2.0 from
here and scan with both.
After all that, run Disk Defragmenter and take a snack break
😀
edit: I also suggest that you password-protect your system's Computer Administrator-class accounts, and make a Limited-class account named
Visitors that is
not password-protected. That way, if your friends/GF/roommate borrow your computer, they don't install junk or have much chance of infecting it.
More info on Limited accounts right here 🙂
To get all your Admin-class accounts protected, do this:
- Start > Run > cmd to open a command box.
- type the command net localgroup administrators to see which accounts are Computer Administrators. Maybe the accounts are DELL_Owner and Vincent, or whatever.
- For each account, type net user name-of-account-here Vin0134@AT and this would set the passwords for these accounts to Vin0134@AT, a nice strong password yet easy to remember. 🙂
- Now go to the ScreenSaver window and checkmark the box that says to display the Welcome Screen on resume, and if you leave and the screensaver locks, no one can come along and help themselves to anything but the Visitors account 🙂