Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Just curious. What are the best practices and tools you use for safe Internet browsing? How to stay away from spywares, adwares etc?

Update: For my work, I use Internet Explorer on Windows and regularly have to browse through some links returned through google search results.

share|improve this question

migrated from Jul 7 '10 at 20:36

This question came from our site for system and network administrators.

How to stay away from spywares, adwares etc? Don't browse at all! =) – BloodPhilia Jul 7 '10 at 21:50

Firefox + NoScript + Adblockers.

Oh, and for true safety, browse on a non-Windows OS.

If you want to use windows anyway, you could browse from a virtual machine. I had a friend who use the virtual-machine-desktop-integration feature to set it up so that when he launched his 'browser' it really launched his browser within a VM so that any compromises or etc were of the virtual machine. Combine that with having the VM not save state on shutdown (so it always started up 'clean') and he could browse with no worries. (And no history, which I would find annoying but he didn't mind).

share|improve this answer
this is so overkill - ala Steve Gibson - effective but you miss out on all the beauty of what the internet is – Bobby Borszich Apr 30 '09 at 15:36
I agree with Firefox+NoScript+Adblockers. Not too much with the second sentence. Windows XP SP3/Vista SP1 with all patches is secure enough. I would add instead a good security suite with Firewall/Antivirus – Drake Apr 30 '09 at 15:54

I think the primary rule is to browse on an non-administrator account.

If that's not possible in your case, you can either create a limited one and use runas to start the browser under it or use DropMyRights or a similar application. Disable Flash for that configuration, since this plugin seems to be a major security hole, considering as recent as yesterday's zero-day flaw news.

share|improve this answer
+1. i use dropmyrights. – Gulzar Apr 30 '09 at 16:22

Most of safe browsing is just using common sense. Don't visit websites that spam you with pop-ups. Don't click on "Claim your free gift" ads. Don't give away sensitive info unless you trust the website and are using https. Be smart about passwords and don't use one password for all websites.

share|improve this answer

You will be generally infected when executing exe/bat/zip/ppt files download from not very clean web site...

So, my main advice is that you should try to avoid downloading and executing files downloaded from website that you don't know/trust.

If you need to go to the "underground web", I suggest you to use a Virtal Machine (like VMWare, Virtual PC, VirtualBox and so on) that you may delete if you think it's not clean anymore (or revert via use of snapshots).

share|improve this answer
Infected ad servers are enough to pwn you thru browser and/or plugin exploits. Last year, a torrent site hit me through IE (or Firefox?) on Windows 7 and Avira did nothing; still needed: – Cees Timmerman Nov 13 '13 at 17:32

In addition to the Firefox/NoScript/AdBlock recommendations already here, I add Sandboxie and OpenDNS configured to block domains I don't want to see anything from, such as doubleclick. The criticism that NoScript destroys the beauty of the internet is not valid. It is very easy to white list sites that you trust.

share|improve this answer

I always suggest OpenDNS, ThreatFire and an AV like MSE or AVG. Doing this as well as keeping your OS and all software up to date is the best way to go I think. Use things like FileHippos update checker and PSI from Secunia and you should be set to go.

share|improve this answer

For any operating system, you can update your hosts file to block a list of undesirable sites:

Granted, there are many legit sites in this list that support click-through advertising and such, and you need to go in and comment-out those sites, but I have found that a hosts file works very well at blocking ads as well as malware

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .