Content of my Blog

Anti-Spyware and Freeware
Backing up and restoring simplified.
Building Your Own Computer
Do we need a Registry Cleaner? 
Getting the best out of your computer inks.
Google Maps and Google Earth - Quick Help Links
How to avoid computer viruses and other malware, identity theft, and spam
How to Improve the Readability of What is on Your Computer Monitor
Lost Your Blog?
No User Picture on Start Menu in Windows XP
Searching on the Internet
Travel Planning on the Internet

How to avoid computer viruses and other malware, identity theft, and spam

Malware - 

Malware includes all forms of malicious and unwanted intrusions into our computers for a wide variety of improper purposes. 

Wikipedia summarises it thus:

“Malware, short for malicious software, consists of programming (code, scripts, active content, and other software) designed to disrupt or deny operation, gather information that leads to loss of privacy or exploitation, gain unauthorized access to system resources, and other abusive behavior.  The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

Software is considered to be malware based on the perceived intent of the creator rather than any particular features. Malware includes computer viruses, worms, trojan horses, spyware, dishonest adware, scareware, crimeware, most rootkits, and other malicious and unwanted software or program.”

The Wikipedia entry notes that while early malware was designed as a prank it developed into computer vandalism and use for profit.  It includes:

·   infectious malware known as viruses, which require user intervention to spread, and worms, which spread automatically;

·   concealment malware known as Trojan horses or trojans, rootkits, and backdoors:- a trojan is any program that conceals a harmful or malicious content, a rootkit modifies the operating system so that the malware is concealed in the computer, a backdoor is a method of by-passing normal authentication procedures on the computer.

As Wikipedia notes malware for profit can take the form of spyware, botnets and keystroke loggers.  Spyware gathers information about your use of your computer.  Botnets are co-ordinating systems used by attackers.  Keystroke loggers are software designed to give information from your key strokes of your credit card and other commercially sensitive data.  The objective of all this malware is data stealing for profit by direct or indirect dishonesty.  For a fuller overview read the Wikipedia entry.

Malware does not include phishing or spamming which are dealt with separately below.

What can we do about malware?

Let’s look at what Microsoft suggests in its very good guide to PC Security and more:

“Build up your malware defenses

Install antivirus and antispyware programs from a trusted source

• Never download anything in response to a warning from a program you didn't install or don't recognize that claims to protect your PC or offers to remove viruses. It is highly likely to do the opposite.
• Get reputable anti-malware programs from a vendor you trust.....[See below.]

Update software regularly

Cybercriminals are endlessly inventive in their efforts to exploit vulnerabilities in software..... That is why you should:

• Regularly install updates for all your software—antivirus and antispyware programs, browsers (like ... Internet Explorer), operating systems (like Windows), and word processing and other programs.
• Subscribe to automatic software updates whenever they are offered—for example, you can automatically update all Microsoft software.  [If you are an experienced user you will probably adopt one of the other alternatives Microsoft offers.]
• Uninstall software that you don't use. You can remove it using Windows Control Panel.

Use strong passwords and keep them secret

• Strong passwords are at least 14 characters long and include a combination of letters, numbers, and symbols. Find out how to create them.  [Microsoft has a useful guide to this.  Better still use a good password manager like LastPass, which is excellent and free, or RoboForm, which is excellent but isn't free.  In any event bear in mind that a longer password of at least 10 characters using a combination of numbers, upper and lower case letters, and symbols is the strongest type of password.  If you create your own consider using Vesik Method Revised to defeat key loggers.]
• Don't share passwords with anyone.
• Don’t use the same password on all sites. If it is stolen, all the information it protects is at risk.
• Create different strong passwords for the router and the wireless key of your wireless connection at home. Find out how from the company that provides your router.

Never turn off your firewall

A firewall puts a protective barrier between your computer and the Internet. Turning it off for even a minute increases the risk that your PC will be infected with malware.

Use flash drives cautiously

Minimize the chance that you'll infect your computer with malware:

• Don't put an unknown flash (or thumb) drive into your PC.
• Hold down the SHIFT key when you insert the drive into your computer. If you forget to do this, click the cross in the upper-right corner to close any flash drive-related pop-up windows.
• Don't open files on your drive that you're not expecting.

Don't be tricked into downloading malware

Instead, follow this advice:

• Be very cautious about opening attachments or clicking links in email or internet mail, or in posts on social networks (like Facebook) — even if you know the sender. Call to ask if a friend sent it; if not, delete it or close the IM window.
• Avoid clicking Agree, OK, or I accept in banner ads, in unexpected pop-up windows or warnings, on websites that may not seem legitimate, or in offers to remove spyware or viruses.
• Instead, press CTRL + F4 on your keyboard.
• If that doesn’t close the window, press ALT + F4 on your keyboard to close the browser. If asked, close all tabs and don’t save any tabs for the next time you start the browser.

• Only download software from websites you trust. Be cautious of "free" offers of music, games, videos, and the like. They are notorious for including malware in the download.”

Scareware or Rogue Ware:

This is worthy of separate mention.  Click on Scareware for the Wikipedia entry.  The FTC says this:

“Free Security Scan”Could Cost Time and Money

Messages telling you to install and update security software for your computer seem to be everywhere. So you might be tempted by an offer of a “free security scan,” especially when faced with a pop-up, an email, or an ad that claims “malicious software” has already been found on your machine. Unfortunately, it’s likely that the scary message is a come-on for a rip-off.

The free scan claims to find a host of problems, and within seconds, you’re getting urgent pop-ups to buy security software. After you agree to spend $40 or more on the software, the program tells you that your problems are fixed. The reality: there was nothing to fix. And what’s worse, the program now installed on your computer could be harmful.

According to attorneys at the Federal Trade Commission (FTC), the nation’s consumer protection agency, scammers have found ways to create realistic but phony “security alerts.” Though the “alerts” look like they’re being generated by your computer, they actually are created by a con artist and sent through your Internet browser.

These programs are called “scareware” because they exploit a person’s fear of online viruses and security threats. The scam has many variations, but there are some telltale signs. For example:

• you may get ads that promise to “delete viruses or spyware,” “protect privacy,” “improve computer function,” “remove harmful files,” or “clean your registry;”
• you may get “alerts” about “malicious software” or “illegal pornography on your computer;”
• you may be invited to download free software for a security scan or to improve your system;
• you could get pop-ups that claim your security software is out-of-date and your computer is in immediate danger;
• you may suddenly encounter an unfamiliar website that claims to have performed a security scan and prompts you to download new software.

Scareware purveyors also go to great lengths to make their product and service look legitimate. For example, if you buy the software, you may get an email receipt with a customer service phone number. If you call, you’re likely to be connected to someone, but that alone does not mean the company is legitimate. Regardless, remember that these are well-organized and profitable schemes designed to rip people off.

How Do the Scammers Do It?

Scareware schemes can be quite sophisticated. The scam artists buy ad space on trusted, popular websites. Even though the ads look legitimate and harmless to the website’s operator, they actually redirect unsuspecting visitors to a fraudulent website that performs a bogus security scan. The site then causes a barrage of urgent pop-up messages that pressure users into downloading worthless software.

What to Do

If you’re faced with any of the warning signs of a scareware scam or suspect a problem, shut down your browser. Don’t click “No” or “Cancel,” or even the “x” at the top right corner of the screen. Some scareware is designed so that any of those buttons can activate the program. If you use Windows, press Ctrl + Alt + Delete to open your Task Manager, and click “End Task.” If you use a Mac, press Command + Option + Q + Esc to “Force Quit.”

If you get an offer, check out the program by entering the name in a search engine. The results can help you determine if the program is on the up-and-up."

Minimum protection for malware:

• A firewall, which you should have in your Microsoft operating system and if you have a broadband or wireless router in that as well.  It’s only if you have an old version of Microsoft’s operating system and dial-up that you really need to think about a firewall.  Check that your Microsoft firewall is on.
• One, only one, anti-virus programme or security suite.  It can cause problems on your computer to have two different anti-virus or security suite products installed at the same time.  There are at least three free anti-virus programmes you can choose from and use with confidence, Microsoft Security Essentials, Avira AntiVir Personal and Avast!, and there are a number of excellent non-free anti-virus programmes and security suites.  Every new review seems to score a different anti-virus programme or security suite as the best.  If you want one of them make sure you get a well-regarded one. 
• One or two anti-spyware or anti-malware programmes in addition to your principal anti-virus or security suite programme.  If you have a security suite programme one should do and it can be a passive one that you run from time to time and not an active one giving real time protection.  If you are running a good anti-virus programme you might want to have two anti-spyware or malware programmes as well.  Whether you have an active one or just run passive ones is really up to you.  It seems reasonably safe to just run a free one or two passively if you take normal precautions when using your computer and your e-mail and the internet.
• There are at least two free anti-spyware or malware programmes that are well regarded, Malwarebytes’ Anti-Malware and SUPERAntiSpyware.
• Whichever web browser you use will have options and extensions that can make your internet browsing safer.  Go to one of the workshops about browsers or look for help about your particular browser.
• Make sure your security and other software and Microsoft updates are up-to-date.  In particular always have the latest version of your anti-virus software
• Consider using Secunia PSI to check that your essential software is up-to-date.  First try using the on-line version to see whether you want it.
• Consider using KC Softwares’ SUMo, in its "Free of all sponsors download links : SUMo" light edition, to check all of your other software.
• If you think you have an infection or want to check out your machine independently of your installed programmes try using the Microsoft safety scanner or Malwarebytes’ Anti-Malware or one of the free on line programmes of one of the reputable security companies like Kaspersky, ESET, Trend Micro, McAfee, BitDefender or Symantec.  If you are really stuck have a look at one of the excellent articles in Windows Secrets by Fred Langa or Ryan Russell. 
• Microsoft is developing a Microsoft Standalone System Sweeper, at present in a Beta form, a recovery tool that can help you start an infected PC and perform an offline scan to help identify and remove rootkits and other advanced malware. In addition, Microsoft Standalone System Sweeper Beta can be used if you cannot install or start an antivirus solution on your PC, or if the installed solution can’t detect or remove malware on your PC.  

Identity Theft –

Malware may or may not disadvantage you financially.  The whole purpose of Identity theft is to make you poorer.  So if there is some repetition in what follows it is with the hope it will stop you losing money through identity theft.

The US Federal Trade Commission, US FTC, says this about identity theft:

“What is identity theft?

Identity theft occurs when someone uses your personally identifying information, like your name, Social Security number, or credit card number, without your permission, to commit fraud or other crimes.

The FTC estimates that as many as 9 million Americans have their identities stolen each year. …..

How do thieves steal an identity?

Identity theft starts with the misuse of your personally identifying information such as your name and Social Security number, credit card numbers, or other financial account information. For identity thieves, this information is as good as gold. 

Skilled identity thieves may use a variety of methods to get hold of your information, including:

1. Dumpster Diving. They rummage through trash looking for bills or other paper with your personal information on it.
2. Skimming. They steal credit/debit card numbers by using a special storage device when processing your card.
3. Phishing. They pretend to be financial institutions or companies and send spam or pop-up messages to get you to reveal your personal information.
4. Changing Your Address. They divert your billing statements to another location by completing a change of address form.
5. Old-Fashioned Stealing. They steal wallets and purses; mail, including bank and credit card statements; pre-approved credit offers; and new checks or tax information. They steal personnel records, or bribe employees who have access.
6. Pretexting.  They use false pretenses to obtain your personal information from financial institutions, telephone companies, and other sources.  For more information about pretexting, click here.”

  

The NZ Police give this general advice about identity theft:

“How to prevent identity crime

• Security of personal and business information is critical. Criminals commonly rummage through the rubbish bins looking for personal identifying data that they can steal and use to commit fraud and other offences in your name.
• Take time to shred or destroy old bank statements, credit card bills, utility bills or other documents to prevent this material falling into the hands of criminals.
• Be careful to whom you give personal information. If you have to reveal personal information, ask some questions about the security of the information and be very cautious giving out any information over the phone or Internet unless you know who you are dealing with.
• Guard your mail from theft by securing your letterbox. Criminals value your mail and will use it to commit fraud with your accounts or open loans or credit in your name.
• Minimise your identification and the number of cards you carry in your wallet to what you actually need.
• Check your bank and credit card statements to make sure there are no unauthorised transactions - this may be the first sign someone has stolen your identity.
• If you believe that you, or your business, have become a victim of identity crime, or that your name or someone else's has been used for criminal purposes, you should report the matter immediately to your local police.”

Don't forget that if your computer or any technological aid, of whatever kind, with personal data on it is lost or stolen the data will be in someone else's hands.  The degree of protection you adopt might depend on how much data is involved and how easy it is to lose the item involved or have it stolen.  For example, you can encrypt your hard drives and your flash drives and protect your smart phone in various ways.  I have got in to the habit of encrypting any flash drive that I take with me travelling by using TrueCrypt, a free open source software programme.  Most smart phones enable sophisticated security protection just as good as that available for computers, including encryption. remote locking and remote wiping, as well as anti-malware programmes.  If you are in doubt web search for "smartphone security" for your smart phone.

However, in the context of our computers perhaps the commonest form of identity theft relies on “phishing”.

The US FTC says this:

“Phishing is a scam where internet fraudsters send spam or pop-up messages to lure personal and financial information from unsuspecting victims. To avoid getting hooked:

• Don't reply to email or pop-up messages that ask for personal or financial information, and don't click on links in the message. Don't cut and paste a link from the message into your Web browser — phishers can make links look like they go one place, but that actually send you to a different site.
• Some scammers send an email that appears to be from a legitimate business and ask you to call a phone number to update your account or access a "refund." Because they use Voice over Internet Protocol technology, the area code you call does not reflect where the scammers really are. If you need to reach an organization you do business with, call the number on your financial statements or on the back of your credit card.
• Use anti-virus and anti-spyware software, as well as a firewall, and update them all regularly.
• Don't email personal or financial information.
• Review credit card and bank account statements as soon as you receive them to check for unauthorized charges.
• Be cautious about opening any attachment or downloading any files from emails you receive, regardless of who sent them…..”

Both our Ministry of Consumer Affairs and the NZ Police give somewhat similar advice.  The Police site gives some good examples of phishing scams:

“Common scams sent by spam email

·        Get rich quick schemes - offering opportunities to earn thousands of dollars a week, but your earnings may be dependent on selling the scheme to others.

·        Nigerian fee scam - this age-old scam offers you a percentage of millions of dollars in exchange for letting the sender use your bank account to transfer the funds out of where they are currently held. The Nigerian letter has many variations. For more information see http://www.consumeraffairs.govt.nz/scamwatch/protect-yourself/no-the-scams/upfrontmoney.html. An American perspective is available at http://www.scambusters.org/NigerianFee.html. New Zealand IT commentator Bruce Simpson describes his experience with this scam athttp://www.aardvark.co.nz/daily/2001/0517.shtml. If you have never received a Nigerian fee scam email seehttp://internet-fraud.com/internet-fraud/ for examples.

·        NEW! IMPROVED! fee scam - new versions of the Nigerian scam feature authors ranging from deposed African leaders to Afghan refugees to an alleged U.S. commando http://www.wired.com/news/business/0,1367,53115,00.html.

·        Prize notifications - you are told you have won a prize in a lottery you haven't entered. But, you have to pay money to the operators before they will release the money. For more information see Ministry of Consumer Affairs' Scamwatch

·        Internet auction scams - where buyers use stolen credit card numbers to buy high price items. Sellers may also try selling a lot of items at once then take the money and run. In many cases the fraudster is based overseas. See Consumer's Click 'n Buy report on online auctions.

·        Phishing - Phishing attacks use 'spoofed' e-mails and fraudulent websites designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords, social security numbers, etc. By hijacking the trusted brands of well-known banks, online retailers and credit card companies, phishers are able to convince up to 5% of recipients to respond to them. See Anti-Phishing Working Group.

What should I do with scam mail ?

·        Check the Ministry of Consumer Affairs' Scamwatch service to see if there is a warning about that particular scam. If there is, delete the message.

·        Don't reply. A reply only serves to confirm that your email address is active and ready for further "offers".

·        Notify the spammers Internet Service Provider (ISP). If spamming is against the ISPs policy for email account holders, the ISP may sanction the sender.

·        Notify your own ISP or IT support. They may be able to advise you about whether filters can be placed on your email programme to stop such emails.”

The Ministry site gives this advice:

“Protect yourself from banking and phishing scams

·        Keep your ATM and account details, PINs and passwords secret and safe.

·        Check your account statements and credit card bill to make sure no-one is accessing your accounts.

·        Don't share your PIN with anyone.

·        Use difficult passwords that cannot be guessed.

·        Don't give your account details to anyone you do not know or trust.

·        Don't give out details over the phone unless you made the call and you definitely trust that the number you called is genuine.

·        Don't open suspicious or unsolicited emails (known as spam). Delete them.

·        Don't respond to these emails in any way. Don't reply. Never click on any links in a spam email, or open any files attached to them, or call a number included in the email.

·        Never visit your bank's website by clicking on a link. It can activate all kinds of hidden programmes. Type in the website address yourself.

·        Check the website address carefully. It may be similar to your bank's, or paypal's, but not quite right.

·        Never enter your personal details into a website unless you are sure it is genuine.

·        Never send your personal details or accounts or passwords in an email. Email is a very insecure system.

·        If you receive a call, ask for a name and number so you can call them back. Check that number against a number you know to be genuine.

·        If, despite everything, you think the email may be genuine, call the institution, using a number you know to be genuine. Ask their advice. Do not use the number listed in the suspicious email, unless you know it is the right one. The scammers may have used it to add to the email's false sense of legitimacy.

·        Don't buy anything over the internet using your credit card details unless you know and trust the business. Ensure that if you make a payment to a trader via the internet that the payment page is secure, normally demonstrated by a padlock symbol somewhere on the page, and that the website address starts with 'https://'. The 's' stands for secure.

·        Don't use software on your computer that fills in forms for you.  [There are safe exceptions to this such as LastPass and RoboForm.]

·        Keep safe from credit card skimming. This is the type of fraud that copies the contents of your card's magnetic strip. Never let your card out of your sight at a store, say 'no' to requests to swipe your card through more than one machine, and if an ATM has a suspicious device attached to its card slot, don't use it (and report it immediately). If you think your card has been skimmed, or you notice unexpected items on your credit card statement, contact your bank immediately.

·        Order a credit report every year to make sure no-one is using your name to borrow money or run up debts.”

The US Securities and Exchange Commission gives similar advice to the above under the heading "Phishing" Fraud: How to Avoid Getting Fried by Phony Phishermen. 

If you have a Skype account beware as such accounts seem to be particularly vulnerable to scamming.  At the very least ensure you have a strong password for it.

 

The simplest advice of all is to focus on getting to the correct site rather than trying to identify a fake one. All users need do is bookmark (add to favourites) all the web sites where they conduct financial transactions and use these bookmarks whenever they need to access these sites rather than the links contained in any email.  The best way to bookmark those sites is to login to the site and bookmark the opening page, which is almost always a secure site.

Here is the Wikipedia page on the topic.

Spam –

If you want a reasonably brief overview of e-mail spam have a look at this Wikipedia page.

Here are five of six suggestions from Cloudeight InfoAve on what to do in respect of spam, the second of which is really an anti-phishing tip:

“1. Never respond to unsolicited email. One response or “hit” from thousands of emails is enough for spammers to justify the practice. In addition, a response lets the spammer know that your email address is active, which makes it more valuable and opens the door to more spam.

2. Never send your personal information (credit card numbers, passwords, etc.) in an email. Spammers can fake the format of ANY trusted sites. Banks and other trusted sites will never ask you to send your password or credit card information by email. Not really an anti-spam tip, but a reminder… OK?

3. Never follow a spam email’s instructions to reply with the word “remove” or “unsubscribe” in the subject line or body of the message unless you are sure of and trust the source of the email. Normally, this is a ploy to get you to react to the email, which tells the spammer that your email address is valid.

4. Never click on a URL or web address listed within a spam email, even if the message tells you that’s how you unsubscribe. This is another trick to that tells the spammer your email address is valid. Once they know your address is valid it can be added to databases which are sold to professional spammers on DVD or CD for a few hundred dollars. And this will result in you getting more spam for sure!

5. Don’t fall for sites set up to help you remove your name from spam lists. Although some of these sites MIGHT be legitimate, most are really collecting valid email addresses to sell to spammers. If a collector gets your address and they know it’s a valid, working email address, it is worth a lot of money to them. They’ll put your email address in one of their databases and sell these databases to professional spammers. Not only won’t your email address be removed from spam lists, it will added to many spam lists. And you’ll get more spam.

6. "[This relates to ISPs who filter your mail for spam.  It points out that you might not get all of your good email and might not even be aware it existed.  It recommends to get a Gmail account and set it up in Windows Mail, Outlook Express or your favourite email program. Gmail provides instructions on how to do this.  Gmail also has spam-filtering but you have the final say.  If something ends up in your spam folder all you have to do is mark it ‘This is not spam’ and it should never be dumped in your spam folder again.

I haven't set out the suggestion in full as the odds are that all of us are using an ISP with a spam filter.  Just don’t worry about it.  What it does mean is that you must regularly check your web mail for that ISP and look in the spam folder to see if by some mischance mail you want has got into it.  If there is genuine mail in your spam folder select the “This is not spam” choice for that mail.]

Our Department of Internal Affairs, ICO, the UK’s Information Commissioner’s Office, and Microsoft all give somewhat similar advice to Cloudeight’s.

Most e-mail programmes contain their own spam filters giving a second line of defence to that provided by our ISPs.

If you are annoyed beyond endurance by the amount of spam you receive then the simplest free answers are:

·   Use GoogleMail, either as part of your existing e-mail system or by using a GoogleMail address or addresses.

·   Use a free spam filter such as MailWasher or SPAMfighter, both of which are recommended by various reviewers and whose Pro products are equally highly regarded.  [See Gizmo’s Freeware for a discussion and links to other ways of reducing and filtering spam.]

Whatever you do you are likely at some stage or other to receive spam from yourself as someone, somehow, has adopted and adapted your address for sending spam.  There is nothing you can do about it.  Usually it goes on for a relatively short period and then stops.

Wireless Network Security

Not mentioned above except in passing in the quote from Microsoft about passwords under Malware is the need for security if you are using a wireless network within your home using wi-fi and a wireless router.  Your home broadband router has its settings fixed by your ISP.  Your wireless router must be set up for maximum internet security.  If you have had it installed for you the installer should have attended to that.  If you did it yourself you must ensure the security is the tightest you can make it.  In particular you need Wi‑Fi Protected Access (WPA or WPA2).

WPA and WPA2 require users to provide a security key to connect. Once the key has been validated, all data sent between the computer or device and the access point is encrypted.   If possible, use WPA2 because it is the most secure. Almost all new wireless adapters support WPA and WPA2, but some older ones don't. In WPA-Personal and WPA2-Personal, each user is given the same passphrase. This is the recommended mode by Microsoft for home networks. 

I hope its not necessary to add a warning about using public facilities in libraries or cafes or free Wi-Fi for accessing any private information, such as e-mails or banking or anything else that requires you to log on to a site.  You simply don't know whether they are safe or not.

ESSENTIAL PROTECTION AGAINST DISASTER 

Ensure you have recovery disks for your operating system and back ups of all your essential data. 

Make sure you have a set of instructions on what to do if your computer crashes.  Before you do anything extreme stop and walk away from the computer for a little while.  Get them and read them through before you do anything.

If you are inexperienced in computer repair follow these rules:

• Keep your cool. It may not be as bad as it seems.
• Don't fiddle with anything you don't understand.
• Call your technical support number or your knowledgeable computer nerd friend.
• If the computer won't start up, turn it off.  Otherwise leave it on until you know what to do.
• If the computer is asking you for a decision, do not turn it off. Also, don't guess at the answer.
• Always read everything on the screen, especially if being asked a Yes/No or Yes/No/Cancel question.

If you are experienced in computer repair but have no set of instructions on what to do look at H2G2 from BBC and, perhaps, PCTechNotes.

ABBREVIATED SUMMARY

Minimum protection for malware:

• An active firewall(s).
• A single anti-virus programme or security suite. 
• One or two anti-spyware or anti-malware programmes to at least run passively from time to time.
• Whichever web browser you use will have options and extensions that can make your internet browsing safer.  Go to one of the workshops about browsers or look for help about your particular browser.
• Make sure your security and other software and Microsoft updates are up-to-date.  In particular always have the latest version of your anti-virus software
• Consider using Secunia PSI to check that your essential software is up-to-date. 
• Consider using KC Softwares’ SUMo, in its "Free of all sponsors download links : SUMo" light edition, to check all of your other software.
• If you think you have an infection or want to check out your machine independently of your installed programmes try using the Microsoft safety scanner or Malwarebytes’ Anti-Malware or one of the free on line programmes of one of the reputable security companies. 
• Microsoft has a Microsoft Standalone System Sweeper, at present in a Beta form, a recovery tool that can help you start an infected PC and perform an offline scan.  

Other Protection against Malware, Identity Theft etc:

• Use strong passwords, at least 14 characters long and including a combination of letters, numbers, and symbols, and keep them secret.
• Use flash drives cautiously.
• Don't open files on your drive that you're not expecting.
• Don't be tricked into downloading malware.
• If you’re faced with any of the warning signs of a scareware scam or suspect a problem, shut down your web browser. Don’t click “No” or “Cancel,” or even the “x” at the top right corner of the screen.
• Never respond to unsolicited email. Don't reply to email or pop-up messages that ask for personal or financial information, and don't click on links in the message.
• If you need to reach an organization you do business with, call the number on your financial statements or on the back of your credit card, not that in an email.
• Don't email personal or financial information.

Travel Planning on the Internet

An idiosyncratic list of available web sites to give the flavour of what is out there. Just right click on the site to open it in another tab or window.

The Big Picture: Where do you want to go?  When do you want to go?  How do you want to go - in a tour or independently, by air, land or sea?  Where do you want to stay - a camping ground, a doss house, a youth hostel, an hotel, B & B, motel, apartment or a swap home?  What are your priorities - people, places, arts or activities?  Some aids to the big picture inlude - Google Earth: World weather: Tourism Offices Worldwide Directory: Consumer NZ. 

Thinking Ahead: Never forget that some things just cannot be done at the last moment, e.g., passports, visas and the US Visa Waiver consent and immunisations. And if you want the travel of your choice with the greatest savings some forward planning is essential, whether it be for air, rail or accommodation bookings or to gain access to some things you might really want to see or hear. Its not much good booking to stay in a place on the day your destination of choice is closed or of arriving without an essential permit or visa.  

Safe & healthy destination or airline? safetravel.govt.nz: Travel health: Air Safety

You want a tour? Try Affordable Tours for a simple overview or look at one of these sites for Seniors and others: Elderhostel: Calder & Lawson Travel and Learn: VUW Study Tours: Footprint Tours: Savvy Senior Travellers.

Cheap Air travel? 

There are some general tips:

• Be flexible with your proposed schedule.
• Book well in advance.
• Time your travel, e.g., avoid holiday periods.
• Try opting for returning from a different city from that you arrived at.
• Flights involving a stop over are often cheaper than non-stop.
• Remember that there are better times of the year, as there are high, low and shoulder seasons for fares, and better days of the week, usually mid-week, for cheaper travel and that red eye, usually but not always early morning, flights are often cheaper than others.

You probably know the airlines push out early bird or companion travel lures in the last and first quarters of the year.  The travel agents usually have a better handle on the long haul routes than we can get ourselves and if you are looking for the best long distance deals it almost certainly pays to use an agent if you can find one that does not charge fees.  Often the best deals involve multiple carriers and the avoidance of departures from airports with high taxes, such as Heathrow.  It can be difficult to handle all this for yourself while the agents have it at their finger tips on purpose made software.  However, don't be dissuaded by that comment from looking for yourself.  Even if you end up using an agent it is best to work out what you want to do and get an idea of what is offering for yourself.  For example, the sites of the individual air lines nearly always list their promotions and specials.

If your travel is local or to a Pacific destination it is often much easier to do it for yourself on-line.

FareCompare and Hipmunk are useful ways of seeing what's available and whether your choices are the best.  And if you're in to Twitter, I'm not, I believe its a good source.

For cheap Air NZ flights go to Air NZ Grab a Seat, where its specials are shown.  For a comparison of cheapest NZ fares for some air lines go to the Flight Centre or Webjet.co.nz.  However, beware of booking on those sites as there are fees involved, although sometimes they might still save you real money.  [There are similar sites for other countries such as the Australian Webjet site and the more general Jetweb site.]  FineTravel is another New Zealand site listing deals to overseas destinations.

For flight information generally try Zuji, a division of Travelocity, which covers flights from New Zealand and Australia in particular.  Zuji's home site gives links to its other sites world wide.  There are no fees involved with Zuji.  An alternative, although not the cheapest, is Matrix, a division of Ita Software.  There are global search engines for flights such as Expedia, which is a NZ site,  DoHop, Yahoo, Kayak, and Mobissimo.  There is also Rome2Rio, in Beta at present, that helps you plan from anywhere to anywhere.

If you are booking the travel for yourself it makes sense to sort out what looks good and then go direct to the site(s) of the airline(s) involved.  

When buying air travel be aware of all the wrinkles introduced of recent years, not only with taxes and departure fees by governments and airport companies but also charges for luggage, food, the use of credit cards for payment and the like by the airlines.

For more general sites about the world's airlines there are SoMuchEasier [with links to most airlines] and Airlines on the Web. For tracking flight prices and travel bargains generally, US oriented, there is Yapta. 

Go to Frequent Flyer for all about frequent flyer programmes.  There are some real gains posssible through their use if you're using long haul flights.  

Skytrax enables you to find out how other travellers have found individual airlines and airports.

And if you want to know about the art of sleeping in airports, as opposed to hotels at airports, and which airports are best to sleep in there is sleeping in the airport.

If you are concerned about jet lag there are all sorts of suggestions such as flying at night and from east to west: see Wikipedia, Avoid Jet Lag and Hit the Ground Running.

The best plane seat? Wikihow: SeatExpert: SeatGuru: BestFlatSeats: Air Lines on the Web. To get the seat you want you will probably have to go through an agent as you usually have to commit to your travel before you can get a seat on-line.

Rail travel everywhere and much more? TheManInSeat61 Is there a more comprehensive site anywhere? Go there for links to rail sites everywhere including German Railways, particularly for on-line bookings for Germany related European travel, and French Rail, sites relating to New Zealand, Rail Plus and NZ Only.  At least for much of Europe, including the UK, and the USA it is pretty easy to book tickets and often seats on-line, even if you might have to pick them up in the country you are travelling in.  Often bookings don't open until about 90 days prior to the travel date.  For undergrounds or urban rail try  everything you need to know about the world's undergrounds including maps or just maps or urban rail generally.

You'd rather cruise? VacationsToGo: www.seascanner.com: Fielding's Cruise Finder and search for Cruises: TravelPage.com: Small Ship Cruises: CruiseOpinion.com: Canal Boating: French Waterways: Yacht Charters - Europe

You need a car? NZ? Car Rentals Compared: Australia, USA, UK? Car Rentals Compared: Europe? Driving in Europe; CitroenDriveEurope; Peugeot Eurolease; Renault Eurodrive.

Route planning and maps: General: Google Maps, Wikimapia. New Zealand: AA NZ, NZ Topo On Line. Australia: RAA. Further afield: UK has Transport Direct and there are numerous other sites such as BingMaps, Via Michelin , an excellent route planner, Nokia Maps, Mappy and MapQuest. Incidentally if you have a Nokia smart 'phone you should be able to download Google or Nokia Maps on to it, so that your map is in your pocket. Similarly if you have a different smart 'phone you should be able to access Google Maps or download your maps of choice on to it.

Accommodation?

General: If it is just for a night or two then an hotel, a B & B, a motel or the like is probably easiest and best, but if it is for about a week or more then an apartment might be best, while if its a lengthy stay then a swap house arrangement or a long term let might be best?  The shorter the period the more you need to be close to what you want to see and do.

What’s it like? TripAdvisor: RealTravel.

Last minute cheapos? Wotif: NeedItNow: Rates To Go: Last Minute Au: Late Rooms

Worldwide: In most countries the information office of the city or town of your choice will have a guide to local accommodation, e.g., to take two French examples, Parisinfo.com or Colmar. Then there are often national accommodation guides, such as some of the ones referred to below under individual countries. Then there are the international sites such as Hotels Combined: BookIt.com: Hotel Club: World Hotels: Michelin Guide: Hotels Worldwide: Accor Group: Places to Stay: B and Bs: B and Bs and more: More B and Bs: HomeLink International: HomeExchange: HolSwap: InterVac: Vacation Rentals by Owner: Owners Direct: Green Theme.  Some of these you can join as a member and get savings and specials as a result. There are no apartment sites listed but if you're staying for more than a few nights it always pays to check out whether you can get an apartment. For example in Paris there are a number of agencies specialising in apartments. Just Google your destination for apartments and see what sites and addresses most appeal.

NZ? AATravel: Jasons: Qualmark: B and Bs: Friars Guides

Australia? AAA Tourism Australia: RAA: Jasons: Dawsons

UK? AA: Information Britain: Charming Small Hotels: B and Bs

France? France.com: Logis: Gites: Bonadresse. 

USA? Travel Hero: B and Bs

How far is it from your accommodation to your destination? Various city transport systems will tell you how far it is from where you are to where you want to go and how long it will take, e.g., in Paris, Los Angeles or Philadelphia. You can also find out via Google Earth or Maps and other mapping tools.

What will it cost? Always check on the web through different sites and with any travel agent you might be using. There is no rule as to what the cheapest and best alternative for you might be - sometimes its from the "home" site, sometimes it is through an agent, sometimes it is for a package, sometimes it is well in advance and sometimes last minute. However, you can almost always be sure it will be cheaper through the internet than over the counter. For example did you know you can get parking at Wellington Airport cheaper on-line than at the airport and cheaper still if its a month or more ahead? And if you are booking direct or by telephone it doesn't hurt to mention what you can get it for on-line as sometimes the price will be met or you will have it confirmed that its cheaper to book on-line.

Money - You can't go without it. Sometimes there are wrinkles as to the cheapest and best ways of getting it. Cash, credit cards, travel debit cards in the currency of your destination, travellers' cheques and US$, all have their place depending where you are going. Make sure you protect yourself as far as you can with how you carry it and keep details of your cards, cheques or whatever and who to ring in case of loss or theft.

ATMs Worldwide: Visa: Mastercard

Currency exchange rate guides: NZ & Universal

Another Essential: Travel Insurance Link it to a high level credit card if you possibly can as that is the cheapest way. Mind you not all banks are created equal and you might have to shop around and make sure you read the fine print.  Usually you have to pay 50% of the main travel cost with the card.  Otherwise its a case of trying to compare apples with apples. If you're a member of Consumer or have access to its magazine look at its site or magazine as it has a good article on the topic with useful comparisons. Don't forget that North America is the most expensive place for medical help, which makes it all the more essential you have appropriate insurance if you are going there.

Eating out: Michelin Guide: Zagat: Gault Millau guides to major European countries.

A Different Kind of Necessity: Find a toilet worldwide at SitOrSquat, The Bathroom Diaries or Toilets of the World.  Here is a guide to some of the common and less common signs.

Baggage and package: Think light. As has been said elsewhere, not entirely in jest, take half what you think you will need and twice the money. If you can get everything into a carry on bag it will save you both money and time.  For bags look at the Travel Insider site, dealing with carry on and checked luggage and how to pack.  It has an US slant but you can't have everything. Does your baggage comply with airline requirements? NZ: International overview. If you're going to the USA make sure any lock complies with US security requirements.

Simple Security: Don't forget to make copies of all essential documents such as passports, visas, travel insurance policy, driver's licence and credit cards, any medication or eye lenses prescriptions and copies of essential telephone numbers in case you need to use your travel insurance or cancel credit cards or contact your Government's Embassy or High Commission office or your family or bank. And while you are at it why not scan copies of essential documents and essential information on to a document on your computer and not only put it on a thumb or flash drive, preferably in an encrypted form, but e-mail it to yourself, your travelling companion (if any) and a member or members of your family so that wherever you are and whatever happens you can access what is necessary.

Create Your Own Itinerary: Use TripIt on the web or an Excel worksheet or try Microsoft Office Travel Templates.

Got everything? Valid passport and visa(s), up to date health immunizations, tickets and booking vouchers, travel insurance, money, best ATMs for your bank, mobile global roaming, bags [with name and telephone numbers inside and out] and packing lists, travel itinerary, medications, power adapters and chargers, emergency contacts list and copy essential documents. Are your essential documents, money, medications [not exceeding permitted quantities], keys, phone charger on you or in your carry on luggage? Does your carry on luggage comply with security rules? Forgotten anything - an NZ approach? Or for an Australian approach go here. Advised your bank/credit card provider of your movements? Does your insurer require to be advised? Your house security? Stopped your paper and your mail? What else can you think of? Pets? Power switches? Watering systems? Key to your house? Away for more than three months? Look at suspending your vehicle registration but first make sure your insurance isn't affected if you do so.

NZ Superannuitant Going Overseas?

If you receive New Zealand Superannuation and travel overseas, you are meant to let Senior Services (part of the Ministry of Social Development or MSD) know of your travel plans. You can either telephone Senior Services or email your travel plans to seniors@msd.govt.nz.

If you're going to be away for less than 26 weeks no issues are likely to arise if you do not do that.  However, if you plan to be away for more than 26 weeks or it is possible you might be for reasons outside your control, you not only must notify Senior Services so that it can advise you of your options but it is in your own interest to do so.  If you don't contact Senior Services before you leave you could end up losing your NZ Super. MSD is notified by the New Zealand Customs Service if someone receiving NZ Super leaves the country so your travel is known to the MSD.

Special dishes Stephen Joseph Theatre Scarborough: Barnes Foundation Philadelpia: Hermitage Museum: La Roseraie du Val de Marne: Museums of Paris: Australian Botanic Gardens

Duty Free: For additional concessions think of joining the Frequent Buyer Club of Duty Free Stores NZ. And it may be you can get duty free goods from your favourite store once you have your flight booked. Its worth enquiring.

You want to communicate? By e-mail? Why not carry a smart phone? Or if you want to lug something heavier a netbook or notebook? Or use an internet cafe? By telephone or text? Use your mobile and global roaming but that can be expensive for telephoning or hefty data usage. Consider buying a local sim card if you're going to be anywhere for a period. Pay as you go sim has information about pay as you go mobile phone plans from all over the world.

Basic terms in all the main languages. Gestures to avoid 1 and 2. International Etiquette Guide and much more.

Travel Guides: Eyewitness: Lonely Planet: Rough Guide: Frommers: Fodors: Time Out

Travel Resources on the Internet: Travel Yahoo: Wikitravel: SmarterTravel.com: Round the World Travel Guide: Travel Document Systems: About.com: Travel Resources on the Internet 2: Library Lounge PBWiki.

[Updated 20 February 2012.]