PDA

View Full Version : Solve Security Issues in Windows XP



Ron
11-07-2006, 04:00 AM
Solve Security Issues in Windows XP
by Ron

PS: I'm Ron from moparisthebest.com in case you don't trust this topic. Here is a link of this tutorial on Moparisthebest.com (http://www.moparisthebest.com/smf/index.php/topic,2208.0.html).

Do you not believe me? Think I'm some crazy hacker? Think I'm weird? Well ok then lol. All these tweaks are from websites such as www.TweakXP.com, www.TweakHound.com, www.WinGuides.com/windowsxp/, and www.MarkusJansson.net/exp.html so I'm not just pulling these tweaks right out of my bum. All I have done is organized it, and put all the most efficient and compatible tweaks that will still keep your operating system very stable with very few problems. At the end of this tutorial you can scan your computer for open holes and such and I guarantee you that you will have about 20 or so holes fixed on XP. This tutorial is practically a necessity if you don't have a firewall such as McAfee, Norton, or Zone Alarm.

WARNING: Please Create a system restore before even thinking about doing this tutorial. To run a system restore click on Start > Program > Accessories > System Tools > System Restore > Create a Restore Point.

Sorry for all the people that have XP Home and not the Pro version. Turns out if you give Microsoft more money they will include more security features in the Microsoft OS, but won't turn them on because they are assholes. Anyways, all the Categories for each listing says if it's for XP Pro Only or XP Home/Pro which means for both. Now here's the tutorial.

-> Closing MANY MANY Holes by tightening up Windows Registry & Services - XP Home/Pro

Just download this .zip (http://goons.freepgs.com/downloads/SecureRegistry_and_Services.zip) file and run the .reg and .bat file. :)
After running both of them. Reboot your computer.


-> Network Connection Security - XP Home/Pro
Go to Start > Settings > Control Panel > Network Connections > Right click on Local Area Connection 2 > Click on Properties.
On the General Tab, uncheck every checkbox except for Internet Protocol (TCP/IP).
Now click on Internet Protocol (TCP/IP) and click on Properties.
On the General tab, click on Advanced at the bottom. Advanced TCP/IP Settings should pop up.
Click on the Options tab, then click on TCP/IP Filtering and click on Properties.
Uncheck Enable TCP/IP Filtering (All Adapters).


-> Change Remote Scheduled Tasks - XP Home/Pro
Instead of having to wait for the remote scheduled tasks, which is useless information to anyone who is not a system administrator remotely configuring scheduled tasks, you can disable this feature.
Go to Start > Run > regedit > HKEY_LOCAL_MACHINE > Software > Microsoft > Windows > CurrentVersion > Explorer > RemoteComputer > NameSpace
In the NameSpace folder you will find two entries. One is "{2227A280-3AEA-1069-A2DE-08002B30309D}" which tells Explorer to show printers shared on the remote machine. The other, "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}", tells Explorer to show remote scheduled tasks. This is the one that you should delete.
If you have no use for viewing remote shared printers and are really only interested in shared files, consider deleting the printers key, "{2227A280-3AEA-1069-A2DE-08002B30309D}", as well. This will also boost your browsing speed.


-> SafeXP - XP Home/Pro
Safe XP is a small executable program that does not require installation. It brings up a window with many settings to secure your computer such as disabling many vulnerabilities that my tutorials nor system mechanic could have done. It's a very useful program, and it's only 324 or so KBs

Download Safe XP (http://www.theorica.net/download.htm)
Run the SafeXP.exe, move your mouse over any check box, read the description in the status bar at the bottom of the window, and check which one you like.
If you're lost and don't know which one to check. Download my settings (http://www.megaupload.com/?d=BLFV1VDB) and then just click on "Restore Settings from File" on the bottom left of the SafeXP screen once you have loaded it, and then find the location of the SafeXP.dat file and click ok.
Click on Apply and you're done!


-> Firefox, an alternative to Internet Explorer - XP Home/Pro
This program is the best web browser on the internet and clears soooo many holes by using this browser instead. Plus it has many positives and few negatives, while Internet Explorer has many negatives and few positives. More info here on Mozilla Firefox vs. Internet Explorer (http://goons.freepgs.com/stuff.php?p=Mozilla_Firefox_vs_Internet_Explorer).

-> User Accounts - XP Pro Only
By default, the Guest account password is blank. Make it something difficult, such as a combination of letters and numbers, preferably not based on dictionary words.
Go to Start > Settings > Control Panel > Administrative Tools > Computer Management > Local Users and Groups > Highlight User Account > right-click and click on Set Password.
Remove/Delete any unused accounts, especially any 'remote assistance' accounts.
Disable the Guest account since you can't delete it.
Go to Start > Settings > Control Panel > Administrative Tools > Local Security Policy > Local Policies > Security Options Account > Rename Guest Account - Double click and rename the account to something weird like Fa98sasjd9as (this is where the weirdo leet language comes into play, but only here).


-> Remote Machines - XP Pro Only
If you do not need to connect to your computer from a remote machine, be sure to turn this off.

Go to Control Panel > Administrative Tools > Local Security Policy > Local Policies > User rights Assessment > "Access this computer from the network" and then delete all users and groups. This should now be blank.
Click on "Deny access to this computer from the network" - this should include all users and groups. Double click on the policy, click Add User or group, click Advanced, click Find Now, highlight all the accounts and click OK.
Under System Properties > Remote > Turn off Remote Desktop and Remote invitations


-> Reboot your Computer - XP Home/Pro
Check to see if your internet works.
Check to see if you can have other programs connect to the internet.
If you can't, then post in this topic for help. I'll be able to figure your problem and help you find a solution.


-> Windows Updates - XP Home/Pro
I can't stress this enough. You NEED to do windows updates. Microsoft sucks so much, but everytime they issue out a patch or whatever, download it immediately. Every now and then just check for Windows Updates by clicking here (http://update.microsoft.com/windowsupdate/) or going to your Start Menu and clicking on Windows Updates right above Programs. If there are any updates to install, download and install them, and then reboot your computer once again.



Don't be lazy.
Don't be late.
Keep your Computer, up to date.


-> Run Online Security Checks - XP Home/Pro - Use IE for this only. Sorry Firefox fans.
Hacker Whacker's Sweet Security Scans (http://www.hackerwhacker.com)
GRC - Shields Up (https://www.grc.com/x/ne.dll?bh0bkyd2)
Emsisoft's Security Checks (http://onlinecheck.emsisoft.com/en)
Sygate Tech's Security Checks (http://scan.sygatetech.com/)
TrendMicro's Online Virus Scan (http://housecall.trendmicro.com/)
Hacker Watch's Test Your Firewall (http://www.hackerwatch.org/probe/)



- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
YAY! Your computer should be much faster, much safer, and just much much better! Great job!

Want to Tweak your computer even more? Click Here (http://www.tweakxp.com).
Also try this topic: http://www.governmentsecurity.org/forum/index.php?showtopic=6526

~Ron :)

September 3, 2006: Added .bat file and included it with the .reg file in a .zip file!
September 2, 2006: Many more registry security added! Also included a .reg file!
June 11, 2006: Updated a lot and added Safe XP.

YoHoJo
11-07-2006, 04:07 AM
thanks a lot ron
only thing i miss from mopar after i got banned is the awesome tut section
thanks for brining this one here!
Dank or Fawki should make a Computer Fix Tut section

Happy to see you more active at SRL

Infantry001
11-07-2006, 04:16 AM
heh awesome tut! stupid microsoft :P

Ron
11-10-2006, 04:35 PM
Thanks guys, it means a lot to know that you like the tutorial. This one I worked exceptionally hard on since I didn't want to ruin any one's computer by turning off the wrong feature. :)

solarwind
11-10-2006, 04:59 PM
Nice tutorial. But you know how to be the most secure? Get no viruses, trojans, key loggers and so on...? Use Linux!

Ron
11-30-2006, 04:45 AM
lol Solarwind, that's an old joke. But most people don't know how to use Linux, Microsoft is easier it's true. BUT it fucking sucks and can be 1000x better.

Maybe I'll figure Linux. :)