The BIG keys to remember that will HELP keep you safe:
NEVER click links in emails. Yes, I know we all get those ones from a site when we forget a password or create a new account, but if they give you the option to type in an address and then a code, use it. Just because it looks like its taking you to http://www.google.com doesn’t mean it is. HTML code allows a coder to specify any address and any text they want, its simply part of the design of the code. Further, just because it says its from your best friend, doesn’t mean it is. And even if the headers say it came from their server, that doesn’t mean THEY aren’t infected with a nasty bit of code, which is using their email book to email copies of itself to everyone they know.
Stop using Internet Explorer. Because IE is included with every copy of windows, and so many people use it ‘because its there’, IE is the preferred attack vector through exploits in the IE coding. Its possible to use IE safely, but it takes configuring complicated settings and disabling scripting and ActiveX applets among other things. Firefox is better, and combined with NoScript addin, it presents a fairly robust barrier to exploit-based infection. Chrome too. They both use push updates which means that you don’t have to do anything to keep up to date. If an exploit or vulnerability is discovered, its only hours before they have an update or patch ready and its being pushed out to their users. Microsoft only updates on the second Tuesday of the month as a general rule.
Unfortunately even then, you can still be subjected to “drive-by downloads”. There was a nastyf malformed jpeg image exploit a few years ago. By intentionally mal-forming a jpeg, someone was able to take advantage of a buffer-overflow exploit in a jpeg decoder. That image was sent to myspace ads. It infected millions of computers before the exploit was repaired and patches pushed out. All you had to do to get infected was load a page that hosted the image as an ad.
Robust antivirus is a must these days, as are antimalware and firewall. One thing to consider, Don’t buy multi-year subscriptions to an antivirus company’s product. For the longest time Norton was considered the best until it got to the point where it consumed so many system resources that you couldn’t use your computer any more. It fell from grace. Two years ago Microsoft’s new antivirus was actually considered the best available. The next version skunked so bad that it went to the bottom of the list in the reviews.
To keep up to date on the latest info, consider joining the throngs of viewers of the TWiT network. This Week in Tech, located at http://www.twit.tv has twenty-five active podcasts, available in Audio or video, covering Windows, Mac, iOS, Android, ham radio, hardware, and a host of other topics, including my favorite, Security NOW!.
Unfortunately, my other favorite podcast is currently down, they had their server (which had been running for the last 10+years) die, completely barbequing their archives and site in addition to a few other sites and all the hardware that they ran on. They are in teh process of getting a new server, but until then, you can still listen to the live broadcast on Saturdays at 12noon EST on Jazz90.1’s stream at http://www.jazz901.org. If you have computer questions, you REALLY should give SoundBytes.org a listen to.
Just remember, computer using places you on the frontlines of an ongoing war between the malicious hackers, crackers and script kiddies and those who continue to slam shut the doors as fast as they can: Steve Gibson and the hosts of others working at developing hardware and software against these exploits.
One thing to keep in mind, ALWAYS keep your data backed up. Its not just about hardware failure… there is a nasty branch of malware, nicknamed “hostageware”. Once your system is infected, it starts encrypting your data, and only offers to decrypt it if you pay them money. Beyond the insult, the problem is you have to hope they a) decrypt once you pay them b) they only charge you the amount you think they will, and that they only do it once. There have been reports that they haven’t decrypted, and others where people have had their accounts wiped out… and still didn’t get their data back.
If you keep a good backup, you can simple issue a system format command and be done with the problems.
Surfing the net is like exploring space: there are discoveries to stir your spirit and terrors to freeze your soul. You just need to decide if the benefits are worth the risk. Be careful and watch your links.
And now you know more of the story… G’day.
Especially that HJ feller. 
