FACT:  Microsoft operating systems dominate the personal computer market.  From Windows 95 to Windows XP, Microsoft has developed desktop operating systems that are easy to use, full of features and packed with functionality.  As evidenced by the plethora of internet outbreaks of recent years, where these same Windows computers have played a major role in propagating viruses that bring down entire networks, e-mailing worms that replicate at lightning speed, playing host to Trojan horses that hide inside otherwise innocent programs, or inviting hackers that take over computers; security has taken a back seat to these same features and functionality.

Fortunately, there are numerous computer software vendors who have picked up where Microsoft has left off, as well as many computer professionals who are willing to help educate the online community on the perils of using improperly secured Microsoft desktop machines in an internet environment. Provided in this article, are some of the most essential tools and concepts for protecting desktop PCs and end user privacy.

Below, you will find information on Spam, System Updates and various miscellaneous security related tidbits.  - Spam is a major nuisance, and it's also a major contributing factor in virus infections. You've seen them, commercial advertisements that play on our curiosity and promise to make us all rich and grow more hair.  Well, you know the saying, "If it sounds too good to be true, it probably is". Even with the new Can SPAM laws, spam keeps flowing.  Best thing to do is delete it.  If it becomes too annoying, try some of the commercial anti spam tools available from numerous vendors.  The Anonymizer OnlinePrivacyStore lists two program under the Anti-Spam category; SpamCatcher by Mailshell, and ella for Spam Control. The tools both cost less than $25.  Before shopping for anit-spam software, make sure to know what type of mail client you have. Outlook Express is an example of a POP email client, which connects to the mail server over the internet. 

Operating System Updates - Newer versions of Microsoft operating systems (Windows 2000 service pack 3 and above) contain a new service called the Automatic Updates. This service will go out to the internet and contact Microsoft's Windows Update site to see if there are any updates for your operating system, at a configurable interval.  Most worms and viruses like to exploit security holes in Microsoft software, and it is absolutely critical that internet users stay up-to-date with at least the Critical operating system updates and updates for popular programs that are used on the internet like; Internet Explorer, Windows Media Player, and Outlook Express (ideally, all updates for the operating system and it's utilities should be applied).  If your operating system does not contain the Automatic Updates service, make sure to visit the update site at least once a week.

Additional Miscellaneous Tips -

* If you are visiting a website, and a window pops up that says you need to install a file in order to view the page, make darn sure     you know what you are doing.  If it is a site you don't know much about, better to be safe than sorry, as the file may contain a virus or Trojan horse. "Do not install software via the Web unless you are absolutely sure what it is and that you trust the company you are downloading it from," warns @Stake's Wysopal.

* Be wary of any email that requests for you to update personal or financial information in the form of an email (this is called phishing).  I've seen emails recently that purported to be from eBay and Paypal, that say I need to follow a link in the email body, which will take me to a web page where I can update my personal and credit information.  Best thing to do is close/delete the email and go directly to the vendors website and login.  You most likely will see nothing that indicates you need to update your information.  These types of emails are trying to steal your credit card number or are involved in identity theft. 

* Be wary of any email with an attachment that claims to be be a security update from Microsoft.  Microsoft does not send their security updates in the form of an email.  They do however, allow you to sign up for a security mailing list that will email you if there has been a critical vulnerability identified in one of their products.

* Be wary of email hoaxes.  Recent hoaxes have been responsible for end users deleting system files.  If you read an email that talks about a new virus, and it urges you to delete anything, visit your antivirus vendor's website for the official word.  There are also a number of websites dedicated to hoaxes like this.

* If you buy anything online, always look for the little lock at the bottom of your browser that indicates you are visiting a secure site.  You can also look at the URL, if it starts with HTTPS://, you are on a secure site.  Your browser will notify you if something is wrong with the site's certificate, if you see something like this, don't purchase from the particular vendor. 

*NOTE: ZoneLabs ZoneAlarm is synonymous with the following search terms: ZoneAlarm, ZoneAlarm Pro, Zone Alarm Pro, ZoneAlarm com, Zone Alarm com, ZoneAlarm Firewall, Zone Alarm Firewall, Zone Alarm Pro 4, ZoneAlarm Pro 4, Zone Alarm Pro 4.5, ZoneAlarm Pro 4.5, Alert Zone, ZoneAlam Security Suite, Zone Alarm Security Suite and Lab Zone.

About the author - Craig Larscheid is an Information Technology manager for a large government organization and specializes in Microsoft internet technologies. Craig has also obtained the prestigious SANS GSEC security certification. To read Craig's practical exam that examines securing Windows NT and 2000 servers, click Here.