Serious security issues have been identified for Microsoft Internet Explorer 6. Even if Internet Explorer 6 is not your main Web browser, but you have it installed on your computer, you must patch it immediately. To do so:

1. Go to http://www.microsoft.com/downloads/. Find and click Internet Explorer 6 Service Pack 1.
2. On the Download Details page, click Download (upper right corner).
3. Click Open to run the setup, then follow the instructions on the screen.
4. Restart your computer to complete the installation.

1. Go to http://www.microsoft.com/downloads/. Find and click Windows Internet Explorer 7 for Windows XP SP2 (IE 7 is included by default with Windows Vista).
2. On the Download Details page, click Download (upper right corner).
3. Click Open to run the setup, then follow the instructions on the screen.
4. Restart your computer to complete the installation.

Many users log in as 'Administrators' for every computer session. While administrative privileges are necessary for software installation, viruses and trojans are most harmful when entering via an Administrator Account. We recommend that you always log in with a User Account for everyday use. To create a User Account:

1. Go to Start > Settings > Control Panel > User Accounts.
2. On the Users tab, click Add.
3. In the Add New User window:
   • In the User Name field, enter a name, then click Next.
   • For the level of access, select Standard User, then click Finish.
4. The new user name should appear under Users for this computer on the User tab.
5. Log out of the administrator account by hitting CTRL-ALT-DEL and selecting Log Off, then log back in as the new user.

To switch to the Administrator Account, use the Run as... feature:

1. Press Shift and simultaneously right-click on any application icon.
2. Select Run as... from the drop-down menu.
3. In the Run as Other User window, enter your Administrator user name and password. Click OK.

Most hacked computers have either a poor password or none at all on the Administrator Account. To create a password for your Administrator Account:

Windows 2000

Windows XP

Intended for temporary users, Guest Accounts are an easy point of entry for hackers. We recommend that you permanently disable them.

1. Go to Start > Settings > Control Panel > Users & Passwords.
2. In the Users & Passwords window, select the Advanced tab.
3. In the Advanced User Management section, click Advanced.
4. In the Local Users & Groups window, select the Users folder (left panel). All system users will be listed in the right panel.
5. Right-click Guest, then select Properties.
6. In the Guest Properties window, select Account is disabled. Click Apply, then OK.

Make sure everyone who uses your computer needs a user name and password to log in. To set up password requirements:

1. Go to Start > Settings > Control Panel > Users & Passwords.
2. In the Users & Passwords window, on the Users tab, select Users must enter a user name and password to use this computer.
3. On the Users tab, under Users for this computer, check all accounts and make sure they all require a password.

IIS is an application that allows your computer to become a server. Because IIS may threaten system security when you are online, we recommend that you de-activate it. To do so: