I run Win2k server with Ad-Aware, McAfee VirusScan, and ZoneAlarm Pro.
I also plan on buying a hardware firewall so that my other systems are
protected (like my xbox). Despite all that, for some reason I just
never feel truly secure because I have no way of actually checking to
know if I've left open some big security hole (either by installing a
trojan or virus or by installing some software that opens a port that
is highly vulnerable or by having an unnecessary windows service
enabled that is open to hacking).

I'd like to buy some software that I could run internally to check the
security of my system. It might also be cool to pay for a service that
checks my system to see if it's secure from the outside.

It might also be nice to have a program that watches my network
traffic and tells me if any one program is doing something that I
don't think it should be doing.

One thing that always bothers me is that sometimes general programs
require access to the net. For instance, some programs will require
that I tell ZoneAlarm to allow services.exe to access the net. Others
require that I allow javaw.exe access the net. That's all fine except
that those are general use programs that, once I say ok, will be
available to absolutely every program to use to access the net. It
would be like just turning off my firewall wouldn't it?

---

Clarification of Question by mxnmatch-ga on 01 Jan 2005 16:45 PST

Actually, I think it is "Generic Host Process for Win32 Services", not services.exe.

---

Clarification of Question by mxnmatch-ga on 01 Jan 2005 16:48 PST

Actually, it looks like it's both.

Never mind, that wasn't really the most important part of my question anyway.

mxnmatch,
The information provided shows you are taking all reasonable
precautions in the usage of your computer except in two areas (which
I?ll get to). However, first things first---relax.

Now that is out of the way, you are correct that the systems in place
can be corrupted, but the same would be true of any further systems
installed or services engaged to monitor your computer usage. Anything
can be gotten around (that?s a universal truth) that can be handled
three ways:
-Opt out (disconnect from the Internet forever).
-Freak out (making some security providers more wealthy and still have
the problem).
-Work the problem.

Still with me I see, so to the basics. You have virus protection. You
have Firewall. Properly configured (including regular updating same)
you are already doing most of what a reasonable person can, to prevent
unwanted intrusion.

Ad-ware is OK but I think of it, as more a ?fun? program (just seeing
it eat its way through my file structure is reassuring). What I have
in mind is a more thorough cleaner of your system. Personally I use
Evidence Eliminator but there are a number of ?cleansing? programs
which will purge history lists from your computer (including cookies
and lots of places where viruses may be hiding).

A great information tool for security is here (opened to the basics
page) but note that the webpage has some embedded cookies (harmless
ones that serve the purpose of highlighting a browsers security
flaws):
http://page.freett.com/xxxti/darkfaqs/SurfSafe.htm

Lastly you may like to consider the advantages of using proxies in
your general web surfing practises (subject covered in reference
site).

Kind regards,
gfmaster

You might find Steve Gibson's site interesting
http://www.grc.com

Look down the page for ShieldsUp - it probes your ports