Understanding Security and Safe Computing

Security Center shows you the security status of your computer and displays any tasks that you need to perform to make your computer more secure. Security Center checks your computer for the three security essentials:

  • Firewall: A firewall helps protect your computer by preventing unauthorized users from gaining access to it.
  • Virus protection software: Antivirus software can help protect your computer against viruses and other security threats.
  • Automatic Updates: With Automatic Updates, Windows can routinely check for the latest important updates for your computer and install them automatically.

Security Center can detect if your computer would benefit from enhanced security in one of these three areas. If so, you will receive an alert.



What are security alerts?

Alerts are displayed in the notification area, which is to the right of the taskbar, next to the clock. If Security Center detects that your computer might need enhanced security in one of the three security areas (firewall, virus protection, or Automatic Updates), you will see an alert notification every time you log on until the problem is fixed.

To find out how to address the problem, click the alert and it will take you to Security Center. In Security Center, click Recommendations.

If you think that the alert you receive is in error—for example, if you are using an antivirus program that Windows does not find—you can select the I have antivirus software that I'll monitor myself check box in the Recommendations dialog box, and then click OK.

To turn off alerts

  1. Click Start, click Control Panel, and then double-click Security Center.
  2. Click Change the way Security Center alerts me.
  3. Clear the check boxes beside the items for which you don't want to receive alerts, and then click OK.

When you turn off alerts, it continues to check and display status in Security Center.

What is Windows Firewall?

Windows Firewall is a barrier that checks information (often called traffic) coming from the Internet or a network and then either turns it away or allows it to pass through to your computer, depending on your firewall settings.

A firewall helps protect your computer by preventing unauthorized users from gaining access to it through a network or the Internet. Windows Firewall is built into Windows XP and is turned on automatically, helping to protect your computer against viruses and other security threats.

Windows XP Starter Edition is designed to provide the best possible safe and secure computing for beginning users. In Windows XP Starter Edition, the firewall is set to ON.

Understanding how firewalls work

A firewall is different from antivirus software, but the two of them work together to help protect your computer. You might say that a firewall guards the windows and doors against strangers or unwanted programs trying to get in, while an antivirus program protects against viruses or other security threats that can try to sneak in through the front door.

When someone on the Internet tries to connect to your computer, we call that attempt an "unsolicited request." When your computer gets an unsolicited request, Windows Firewall blocks the connection. If you run a program such as an instant messaging program or a multiplayer network game that needs to receive information from the Internet or a network, the firewall asks if you want to block or unblock (allow) the connection. If you choose to unblock the connection, Windows Firewall creates an exception so that the firewall won't bother you when that program needs to receive information in the future.

For example, if you are exchanging instant messages with someone who wants to send you a file (a photo, for example), Windows Firewall will ask you if you want to unblock the connection and allow the photo to reach your computer. Or, if you want to play a multiplayer network game with friends over the Internet, you can add the game as an exception so that the firewall will allow the game information to reach your computer.

Why do you need antivirus protection?

It is strongly recommend that you help protect your computer from viruses by installing and using an antivirus program. The Internet is full of fun places and vast amounts of information, but also some dangers. Your computer can be damaged by a computer virus sent through e-mail or through a program downloaded from the Web. If you do not use antivirus software, you run the risk of passing viruses along to other computers as well.

Antivirus programs scan e-mail and other files on your computer for viruses, worms, and Trojan horses. If a virus, worm, or Trojan horse is found, the antivirus program either quarantines it or deletes it entirely before it damages your computer and files.

Many antivirus programs have an automatic update capability. When your antivirus software is updated, new viruses are added to a list of viruses to check for, protecting your computer from new attacks. If your antivirus updates are not automatic, we recommend that you check for updates on a frequent basis because new viruses are identified every day. If the antivirus program you are using requires a subscription, we strongly recommended that you keep the subscription current to receive regular updates. If your list of viruses is out of date, your computer is vulnerable to new threats.

Understanding viruses

Viruses are destructive or deceptive programs that spread from computer to computer over the Internet or a network. Viruses can be attached to other files or disguised as files that look ordinary. They can copy themselves and infect various parts of your computer, such as documents, programs, and parts of your operating system. Most viruses attach themselves to a file or a part of your hard disk and then copy themselves to other places within the operating system. Some viruses contain code that inflicts extra damage by deleting files or lowering your security settings, inviting further attacks.

Understanding worms

A worm is a program that makes copies of itself and can spread outside your operating system; it can also copy itself from one computer to another by using e-mail or another transport mechanism. Worms can damage computer data and security in much the same ways as viruses, but are different from viruses in that they copy themselves from system to system.

Understanding Trojan horses

A Trojan horse is a harmless-looking program designed to trick you into thinking it is something you want, but which performs harmful acts when it runs. It is typically received through downloads from the Internet. Trojan horses do not spread by themselves like viruses and worms. Most virus protection programs only detect a limited number of Trojan horses. A good way to help protect your computer from Trojan horses is to visit only Web sites you trust, and avoid downloading things unless you trust the source as well.

Finding out if your computer has antivirus protection

If you are unsure whether or not you have antivirus software installed on your computer, you can find out by taking the following steps. Many major computer manufacturers include at least a trial version of antivirus software. However, the presence of virus software on your computer does not automatically guarantee that it is running or being updated regularly.

To determine whether your computer has antivirus protection

  1. Click Start, and then point to All Programs.
  2. In the list of programs, look for the word "antivirus."
  3. If you do not find any programs with the word "antivirus" in the name, you should purchase and install an up-to-date antivirus program to help protect your computer. For a list of popular antivirus programs, see Microsoft Antivirus Partners.

If you have antivirus software installed on your computer but you want to install a new product from a different company, be sure to uninstall your current antivirus software before installing the new one. Having two different antivirus programs installed can cause problems on your computer.

Using antivirus software that Windows cannot find

If you receive an alert about your virus protection software or the status in Security Center indicates that the antivirus program on your computer needs attention, but you know that it is installed and current, take the steps below to stop receiving the security alerts. You should only do this if you are sure that you have a full, up-to-date antivirus program installed on your computer and that real-time scanning, which checks every file before it is opened or used, is turned on.

To specify that you are using an antivirus program that Windows cannot find

  1. Click Start, click Control Panel, and then double-click Security Center.
  2. In Security Center, under Virus Protection, click Recommendations.
  3. In the Recommendations dialog box, select the I have antivirus software that I'll monitor myself check box, and then click OK.

The Recommendations button is not available when your Virus Protection setting is marked ON.

When you follow this procedure, Security Center displays your Virus Protection setting as Unknown, and does not send you alerts.

Getting an antivirus program

There are many antivirus programs on the market. For a partial list of programs that are designed to work with Windows XP, visit the Windows Catalog on the Microsoft Web site.

What is the Automatic Updates feature?

Microsoft offers important updates for security and other critical updates that help you protect your computer against new viruses and other security threats that can spread over the Internet. Other updates contain enhancements, such as upgrades and tools that can help your computer run more smoothly. Automatic Updates provides high-priority updates, which include security and other critical updates that can help protect your computer.

Scheduling Automatic Updates

Automatic updates can be scheduled and delivered to your computer in four different ways:

  • Automatic (recommended)
  • Download updates for me, but let me choose when to install them
  • Notify me but don't automatically download or install updates
  • Turn off Automatic Updates

For enhanced security, you should set up Automatic Updates so that it automatically downloads and installs critical updates as soon as they are released.

Selecting the 'Automatic (recommended)' option

When you are connected to the Internet, Windows finds and downloads updates in the background—you are not notified or interrupted during this process and the updates do not interfere with other downloads. If you do not change the default schedule, updates that have been downloaded to your computer will be installed at 3:00 A.M. local time.

If your computer is turned off during a scheduled update, Windows will install the updates the next time you start your computer. If you need to help complete the installation process, Windows will notify you. For example, you might need to accept an End-User License Agreement (EULA) before some updates can be installed. If you need to restart your computer for an update to take effect, Windows will notify you and will restart your computer at the scheduled time.

Selecting the 'Download updates for me, but let me choose when to install them' option

After downloading is complete, the Windows Update icon appears in the notification area and an alert pops up, letting you know that the updates are ready to be installed. To review and install available updates, click the icon or the alert. You can install all or some of the available updates.

Selecting the 'Notify me but don't automatically download or install updates' option

To manually download and install updates, you must be a member of the Administrators group for your computer. Windows checks for important updates and notifies you if any are available; updates are not delivered or installed on your computer until you choose to do so. When Windows finds updates for your computer, the Windows Update icon appears in the notification area and an alert pops up, letting you know that updates are ready to be downloaded. After you click the icon or the alert, you can select some or all of the updates to download.

Windows downloads the updates in the background—you are not notified or interrupted during this process and the updates do not interfere with other downloads. When downloading is complete, the Windows Update icon appears in the notification area again, this time to let you know that the updates are ready to be installed. You can choose to install all or some of the available updates.

Selecting the 'Turn off Automatic Updates' option

You will never be notified when important updates are available for your computer, and you will never be asked to download or install them. This means that your computer can be vulnerable to security threats and harmful viruses that can damage your computer or your files. Viruses can also spread over the Internet to other people with whom you exchange e-mail or share files. If you do not turn on Automatic Updates, we recommend that you regularly install updates from the Windows Update Web site This link requires Internet access. The Web page will open in a new window..

To schedule automatic updates

  1. Click Start, click Control Panel, click Performance and Maintenance, and then click System.
  2. Click Automatic (recommended).
  3. Under Automatically download recommended updates for my computer and install them, set the time and day you want Windows to install updates, and then click Apply.

Scheduled updates are automatically installed at the scheduled time. Some updates require you to restart your computer before they can take effect. Make sure you save your work before restarting your computer, especially before scheduled installation times.

Setting Automatic Updates options

New viruses and security threats are continually developed by attackers, so helping protect your computer is an ongoing process. If you turned on Automatic Updates, Windows automatically checks for important updates for your computer. These updates can include critical updates, security updates, and service packs. Windows notifies you about (or automatically installs) important updates, based on your Automatic Updates settings.

It is also a good idea to visit the Windows Update Web site This link requires Internet access. The Web page will open in a new window. on a regular basis to get optional updates, such as recommended software and hardware updates, to help improve your computer's performance.

To change how updates are downloaded and installed

  1. Click Start, click Control Panel, click Performance and Maintenance, and then click System.
  2. Select a setting, and then click Apply.

To check for new updates for your computer

  1. Go to the Windows Update Web site This link requires Internet access. The Web page will open in a new window..
  2. Click Express Install.

If updates are found, we recommend that you first install all high-priority updates, and then install all other updates, such as software and hardware updates.

Some updates require you to accept an End-User License Agreement (EULA) before you can install them. If you decline, these updates are not installed. If you change your mind, you can install them later by visiting the Windows Update Web site This link requires Internet access. The Web page will open in a new window..

Some updates require you to restart your computer before the updates can take effect. Make sure you save your work before restarting your computer.

Reviewing and downloading updates

Based on your Automatic Updates settings, Windows can notify you when updates that apply to your computer are ready to download. You can review each update and choose whether to download it. To help protect your computer, we recommend that you download and install all updates that apply to your computer as soon as they are available.

To review and download updates

  1. When you are notified that new updates are ready to be downloaded, click the Windows Update icon that appears in the notification area.
  2. By default, all updates are selected to be downloaded. If you do not want Windows to download an update, clear the check box next to it.
  3. Click Download.

If you are using the Automatic (recommended) setting, Windows automatically downloads important updates as soon as they are available. You are not notified or interrupted during the process. As a result, Windows Update software might automatically be updated prior to applying any other updates.

Hiding and restoring updates

Hiding an update means that Windows will no longer try to download it when checking for updates that apply to your computer. If you change your mind and want to download a hidden update later, you can install them by visiting the Windows Update Web site This link requires Internet access. The Web page will open in a new window..

You must be connected to the Internet to take these steps.

To hide updates

  1. When the Windows Update icon appears in the notification area, or when you are notified that updates are ready to download, click the icon.
  2. Review the recommended updates. If you do not want to download an item, clear the check box next to it.
  3. Click Download. (If you cleared all the check boxes, click Close.)
  4. In the confirmation dialog box, select the Don't notify me about this update again check box, and then click OK.

To restore hidden updates

  1. Click Start, click Control Panel, click Performance and Maintenance, and then click System.
  2. Click Restore hidden updates.

The next time you connect to the Internet, Windows will check for any high-priority updates for your computer, including updates that you previously declined. Windows will either download the updates automatically or notify you that they are available, depending on your Automatic Updates setting.

Alternately, you can restore hidden updates by visiting the Windows Update Web site This link requires Internet access. The Web page will open in a new window..

To restore hidden updates from the Windows Update Web site

  1. Go to the Windows Update Web site This link requires Internet access. The Web page will open in a new window..
  2. Click Custom Install.
  3. In the left pane, click Restore Hidden Updates, and then select the updates you want to install.
  4. Click Install.

When you restore hidden updates, Windows determines which updates still apply to your computer. If you cannot find a specific hidden update, you might have installed a more recent update that replaced the original.

Some updates require you to accept an End-User License Agreement (EULA) before you can install them. If you decline the agreement, the updates are not installed. If you change your mind, you can install the updates later by visiting the Windows Update Web site This link requires Internet access. The Web page will open in a new window..

Some updates require you to restart your computer before they take effect. Make sure you save your work before restarting your computer, especially before scheduled installation times.

To uninstall an update

  1. Click Start, click Control Panel, and then double-click Add or Remove Programs.
  2. On the top right, select the Show updates check box. All installed updates appear at the top of your program list.
  3. Click the update you want to uninstall, and then click Remove.

Where can I get worldwide help for security-related issues?

Microsoft provides free support for virus- and security-related issues for Windows XP Starter Edition (connection-time fees might apply).

If you are currently online, please visit Microsoft Security Sites Worldwide This link requires Internet access. The Web page will open in a new window. for the most up-to-date support options and the telephone numbers for your region.