1. Domain guessing
2. Internet keywords
3. Keyworded bookmarks

I turn off Domain guessing and Internet keywords; and instead use Keyworded bookmarks extensively. Accessing two of these settings requires entering about:config in the address bar. This provides direct access to Firefox’s configuration settings but is not recommended for novices. Learn more on about:config. When you are done with your settings just close the window/tab displaying about:config.

Domain Guessing

This feature converts a poorly formatted address and guesses what properly formatted address you really wanted. See Domain Guessing for details. I disable Domain Guessing as a security enhancement. I do not wish to be automatically taken to a web site based upon my mis-typing.

Disable it

1. Go to about:config
2. Search for the setting browser.fixup.alternate.enabled, easiest to just type fixup in the filter bar
3. Double click the entry to change it from true to FALSE

Internet Keywords

This feature submits any word entered in the address bar to a search engine and then automatically directs you to the first search result. See Internet Keywords for details. I disable Internet Keywords for security reasons.

Disable it

1. Go to about:config
2. Search for the setting keyword.enabled, easiest to just type keyword in the filter bar
3. Double click the entry to change it from true to FALSE

Keyworded Bookmarks

Now that I have disabled two features that provide shortcuts for address bar entries, I will add my own keyword shortcuts. Once done, I can just type in:

• mail to be taken to my corporate webmail
• wiki to go to my wiki
• blog to be taken to my blog’s login page
• etc

The simple steps are (in Firefox 3.3.6):

1. Add your most used web site pages as bookmarks
2. Use the menu Bookmarks > Organize Bookmarks (or Ctrl+Shift+B)
3. Select a bookmark
4. In the bottom left click the More button
5. Add you keyword
6. Close the window

Now type your keyword into the address bar and quickly access your most used sites.

For more on Zeus, see this Wikipedia article.

As always; keep your software updated, use anti-malware detection software, use a well-configured firewall when accessing public Internet access point, and use common sense to recognize phishing attempts.

In the meantime, you can protect yourself somewhat and still use Acrobat Reader. These steps do not guarantee your safety but do reduce your risk profile.

Disable Javascript

Many of the attack vectors are related to the use of javascript, so the obvious solution is to disable javascript. Follow these steps:

1. Open Acrobat Reader
2. Open the ‘Preferences’ dialog from the menu Edit > Preferences
3. Uncheck the Enable Acrobat Javascript from the ‘General’ or ‘Javascript’ tab
4. Save your changes

Prevent the Display of Acrobat Documents in the Browser

This prevents malicious links from displaying a PDF in you browser. Combined with the next recommendation, it also forces you to be more aware of the files you are about to view.

1. Open Acrobat Reader
2. Open the ‘Preferences’ dialog from the menu Edit > Preferences
3. Uncheck the Display PDF in Browser from the ‘Internet’ tab
4. Save your changes

Prevent Internet Explorer from automatically opening PDF documents

This step involves editing your registry file and is usually reserved for advanced users. Please make a backup of your registry before completing this step.

1. Start the registry editor (regedit)
2. You will be modifying 2 key values, so navigate to these branches:
   • HKEY_CLASSES_ROOT\AcroExch.Document.7
   • HKEY_CLASSES_ROOT\AcroPDF.PDF.1
3. In each branch, modify the key EditFlags. The new value should be:
   • 00 00 00 00 (REG_BINARY)
4. Save your changes.

If regedit refuses to save your changes, you may need to modify the permissions on the branch. Do this by right-clicking.

Do Not Open Untrusted PDF Documents

If you do not know who the PDF is from or are unexpectly asked to open a PDF, just say no.

The Ten Dumbest Things People Do to Mess Up Their Computers

1. Plug into the Wall without Surge Protection
2. Surf the Internet without a Hardware Firewall and a Software Firewall
3. Turn off the Antivirus Because It Slows Down Your System
4. Install and Uninstall Lots of Programs, Especially Freeware
5. Keep Your Hard Drive Full and Fragmented
6. Open All Email Attachments
7. Click on Everything
8. Believe that Macs Don’t Get Viruses
9. Use Easy, Quick passwords
10. Don’t Bother with Backups

Now I’m certain that somebody will deliver a comedic version of this list but the ten items listed here are things to make certain YOU do not do.

It has been some time since I distributed the last report. The information contained herein is still relevant for all users.