Anti-AOL

Also see how to cancel AOL.

Last updated 3-16-09.

3-16-09: See this checklist for an up-to-the-minute rundown on signs your computer may already be infected with the malware discussed here. The article also lists preventive measures you can take.

This post aims to pierce some myths about how safe the Web is and lay out the truth very clearly so you can take a few simple steps to protect your computer and enjoy life without AOL.

Myth #1: Broadband is "safer" than dial-up.

Fact: Dial-up is generally safer than broadband. I used dial-up for about a year. I downloaded 3 viruses each time I installed AOL dial-up. AOL also installed adware like New.net, another reason I couldn't stand it. (Here's a more concise definition of New.net.) Before I tried to cancel AOL I switched to PeoplePC and while I've had problems with their service, online safety isn't an issue, so I still use PeoplePC in emergencies.

It's impossible to defend your PC against everything; whether you choose broadband or dial-up doesn't matter. It's how you defend your PC against games that hackers and online businesses play that counts.

Myth #2: the Internet is safe overall.

Fact: The Internet isn't like it was 10 years ago when it was wild but unsophisticated; hackers were both bemoaned and laughed at for having nothing better to do; search engines existed in only the most unevolved of fashions, and almost no one thought to game them for profit, popularity, or to destroy other people's computers, peace of mind and privacy. It's much worse.

Games That Bad Guys Play

Phishing Sites

Phishing sites look like sites you know and trust. Ebay's famous for the amount of phishing sites it spawns. Phishing sites are introduced through spoof emails. Watch this amazing video from identitytheftsecrets.com that explains how. Spoof emails look like those from the real site, include a link to what's supposed to be the real site, and warn you need to visit to update info, verify a purchase, or confirm identity theft.

When you look at the anchor text for the link, you see this: eBay. Click it: eBay. Not what you expected? It's that easy to pull off. The anchor text (what I wrote) hides the address it's attached to. So it's important to use non-HTML email (with a white background and plain text).

Once you tell phishers what they want to know, you can kiss everything from your credit card to your IDENTITY good-bye. You've given these crooks all they'll need to max out your credit card and get anything, from room service to a new car, using YOUR info.

Misspelled Domain Names

Say you want to visit eBay. Who doesn't? You type the URL into your browser's address bar and click "Go," failing to notice you just typed in "ebbay." Typo-squatters wait to greet you on the other end of that request. Why is that? Why doesn't the URL just 404? Who wants a misspelled domain? Plenty of people, and they can't wait to take advantage of your spelling errors to sell you things, taking you from doorway pages to more and more ads, usually by Google.

Doorway Pages

Gaming search engines is big business and big money. The object is to land sites well in search results so they can take money and computer privacy away from you. To do that, some results lead to doorway pages full of ads. Click and you're redirected to sites with more ads for things you must buy. Some doorways offer links to free or paid program downloads which sound legitimate but install hijackware, keyloggers, adware, and spyware instead.

Hacks and Cracks

Hackers and crackers have been at it for 15 years. They've learned from those who've gone before them and the knowledge base, if you really look at it, is quite astounding.

They take an amazing thing -- instant communication, the ability to talk and get things done quickly -- and turn it into a game where only the most protected and knowledgeable survive comfortably.

Given these facts, let's highlight the steps you should take to defend your PC against attack.

Ways to Protect Your PC

Keep your operating system's security patches and service packs up to date.

Most people use Windows XP, so my advice is based on that. XP has many security holes, also known as flaws. Flaws are imperfections in code used to write programs that operate your PC. Coding involves computer languages, and in order to execute code correctly, it must be perfect. You want Spock writing it, not human beings. Since we're stuck with human beings, all operating systems have flawed code, not just XP. Linux, Microsoft, Apple -- no software is immune.

Microsoft issues more patches and updates than any other company because XP is the most popular operating system in the world, so a lot is at stake for those who hack it. If you use XP, it's good to visit Microsoft Windows Update and take what the Express Installer recommends. Keep visiting for more updates, or turn automatic updates on (the link shows how). Not only do new exploits come out every day; sometimes the patches are just as exploitable as flaws they're meant to overcome.

Use a good firewall.

Turn on your XP's built-in firewall (the link shows how), or try Comodo Free Firewall. A comprehensive list of free and paid firewalls is here. I use Comodo; I no longer recommend Zone Alarm. You can't surf without a good firewall anymore; it's as essential as good anti-virus security.

Use the most updated version of your browser.

IE version 6 doesn't cut it. Even with dial-up it takes just a few minutes to update your browser, and saves you delays in the future. Your browser is as exploitable as your operating system. It can be hijacked, causing your computer to redirect to spam sites when you try to visit a legit one, and download nasty things like adware and spyware without your knowledge. While using an updated browser won't always prevent these problems, using it to block ads, websites, and malicious scripts will reduce the chances and make your time on the Web faster, safer, and happier.

Use the best virus, spyware, and adware protection you can find.

Be careful who you trust with anti-malware security. In the last few years many companies infiltrated the malware field with nothing but bad intentions. They gain trust as defenders against malware, then install it, and on top of that many companies charge for it. Once it's installed, your PC's taken over by malicious programs that only let you visit their sites, turning it into a zombie PC -- a drone, part of a botnet that does nothing without permission from its mother-ship.

Here's a comprehensive list of sites and software to watch out for, and here's a list of some free anti-adware and anti-spy products that are safe and effective. A list of good anti-virus products is here.

It's important to find one anti-virus product you like and stick with it. If you change your mind, uninstall it before installing another one. Using 2 antivirus products may cause compatablilty issues that slow or freeze up your computer.

Hijack detectors and rootkit revealers are essential.

I've recommended Hijack This! since it helped me teach others how to uninstall AOL by showing me what to disable, and I've found more uses for it since then. Don't want a program running at start-up? Kill it with Hijack This! Don't know which toolbars have been silently installed without your permission? Find them with Hijack This!

The problem is going from bad to worse with rootkits, which can turn up in any program that's downloaded from the Web or installed from CD. There's few ways to find rootkits except to see if they have "hook" modules or comparing unique "hive" scans. Rootkits are a fairly recent problem, so finding and getting rid of them is hit-and-miss at best. Informit.com explains what rootkits are and has 4 programs for download that find and uninstall them for you.

Use common sense and caution when surfing.

Be aware of your online "surroundings." Give as little trust to personal and retail websites as possible. Click with care and caution. Don't analyze which sites are safe by how they do in search results. You don't have to enter a site to download nasties. You merely have to attempt to and your operating system is gone. There's no way to tell which sites offer what until it's too late, so be as discerning and distrustful as you can.

See my How-to Section for more ways to get AOL out of your life.