Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

How do I maximize security for XP even after support ends?

Sep 6, 2013 9:45AM PDT
Question:

How do I maximize security for XP even after support ends?


I would like very level heads to answer this request for me, please: How can I maximize security for XP when Microsoft stops supporting it in April 2014? That is a search term. Can someone help me with some answers. My system is Dell Dimension 3000 with XP, SP 3. I use MSE for security and also OnlineArmor Firewall with HIPS (free edition). I use MBAM as a second opinion as well as Hitman Pro, SuperAntiSpyware Free Edition. I am totally disabled and have used XP very comfortably, but I have no wish to buy more expensive hardware and software, thanks! Please try to answer within these terms: suggest ways to make XP very secure for along time. Many Thanks!

-- Submitted by: Robb T.

Discussion is locked

- Collapse -
Why?
Sep 21, 2013 9:16AM PDT

Because it is a very good computer at a very good price. Have you checked the specs? He could put the operating system of his choice W7 or W8 on. W7 is priced very low now, so he really comes out ahead. Now, take that same system with the operating system installed and the price really changes. It's the better of two evils.

- Collapse -
Bad Solution
Sep 22, 2013 1:03PM PDT

You're talking about a computer that's used, with only a 30 day warranty and no OS. That means another $80 minimum for a Windows OS and the hassle of installing everything.

Also, the processor is 4 generations out of date and Core 2 Duo's aren't exactly very fast with Windows 7/8. It looks like it uses Intel's integrated GPU, which means absolutely mediocre graphics.

Getting a new computer for approximately $350 to $400, with the OS, a better warranty, a larger hard drive, a much faster processor, a much better graphics solution (even if it's integrated), and all new parts, seems to me to be a better solution, if he decides that is his choice. Remember, he wanted a solution to his current computer and Windows XP.

- Collapse -
I am surprised
Sep 21, 2013 2:16AM PDT

at the number of offtopic answers here (with a few excellent exceptions). Robb clearly asked about how to keep his XP secure, not how to upgrade or switch OS.

The fact that MS stops support for XP in 2014 has no consequenses for most XP users. Very few people even now uses MS security measures at all. Windows is an operating system, not a security system. As an operating system XP has the largest software base of any operating system so far, and will continue to have so for a long time. Programmers know how to make programs for XP, where as You will continually have problems to find the same support for the newer versions. Why? Because when these newer versions are as shortlived as Vista, there will not be much effort made to write new software for them, as You will notice when You try to find drivers for any hardware. Yes, XP is an old OS, but it is therefore mature and pretty much bugfree today, as an OS. And that's how You should treat it; as an OS.

So, download a good third party antivirusprogram and firewallprogram, make all MS patch updates for up to today, and then switch off all MS security measures and updates. I have used XP since it came out, and I immediately did these measures, and I have not had a single virus or malware since, exactly because I have never relied on MS security. If You have a router, make sure You have configured it as the manual recommends. If, at some point You DO get a virus or something, which is unlikely, then the best advice I can give is: keep Your computer shut down for a few days. When You next time start it up there will already be an antivirusupdate that will fix the problem.

And take all the suggestions from the propellerheads with a large grain of salt. They are only interested in touting their own 'great' choices in OS and equipment, and many of their claims are downright erroneous.

- Collapse -
off topic (and here's why)
Sep 27, 2013 12:56AM PDT

ok I'm guilty as charged I KNOW what the op is asking but xp was NEVER all that secure to begin with and now that it lacks MS support it's now even MORE vulnerable
..so why would KEEPING xp BE such a good idea? seems to me most of the solutions offered here cost money..the point in my case is spend the money once and spend it on a newer op system or save the money and just use one of the open source op systems..

- Collapse -
Nothing lasts forever
Sep 21, 2013 2:26AM PDT

XP is 12 years old and has been supported much longer than any other version of Windows, but it's time to move on now. I'm impressed with the Ubuntu and Mint versions of Linux, but you're in for a learning curve and a search for compatible applications. There're a good number of them, but nothing like there is for Windows. I just upgraded my main desktop to Windows 7 Professional in March so I have XP Mode for running my few old XP apps. XP mode works very well for everything except high speed games. Card games like Solitaire are fine with it though.
Old hardware is going to wear out just like old cars do, and MS is pulling the plug on XP come April as we know, so if you can afford $350 or more for a new PC, you'd be well advised to do so. You'll have a so much faster processor, much more memory and a great deal more hard disk space. You'll also have years of support from MS, compatibility with all the latest software, and a new warranty for your hardware.
`
Good luck.

- Collapse -
How do I maximize security for XP even after support ends?
Sep 21, 2013 4:46AM PDT

After reading the replies, I believe the following are worthy of note:

- Gerry Rains 9/16/13
- don.tech 9/20/13
- neplusultraomni 9/16/13

There are always pros and cons to replies. It is difficult to find a completely unbiased one since the tendency is to promote programs we are familiar and comfortable with. At least the replies I have listed give useful information. The problem is how to decide which replies are reasonable. From my perspective, I use information based on how programs function to make choices as follows:

1. Software from the same developer have in house information that others lack so should be more compatible.
2. Software from different developers are programmed differently. In some cases this is an advantage, especially in the case of anti virus programs. If one does not find the virus, as a second defense, the other most likely will because of the difference in detection.
3. Running 2 similar programs at the same time is not a good idea. If the programs appear to be compatible, keep one running and run the second only as needed.
4. Hackers are always looking for ways to hide viruses in PC memory wherever they can. Scan all memory as thoroughly as possible.

I have found the 4 points a good way of deciding what programs to use and how. In particular, IT forensic presentations I have attended refer to points 2 and 4 that I have found work in difficult virus detection situations for me. Following points 1 and 2, I run MSE Quickscan continually in the background and run MBAM free as needed for backup (MSE because I use Microsoft Windows as my OS). Point 4 means I use full scans to detect difficult to find viruses.

I run full scans of MSE and MBAM from time to time to keep my system as clean as possible. Full Scans can take several hours so I run them when I do not need to use the PC. I also use SuperAntiSpyware free from time to time to remove unwanted intrusions. On one occasion, I did not detect the virus with MSE full scan but found and removed it with MBAM full scan. I am usually virus free.

I use Microsoft for my OS and supporting programs because that is what I am comfortable with. I also still use Windows XP SP2 on one of my support computers because I have program functions that will not work with SP3 and following OS releases.

- Collapse -
Let me answer this by asking a couple of questions...
Sep 21, 2013 5:23AM PDT

Robb,
1. when is the last time you had any virus or malware problems that the programs you mentioned could not handle?
It has been a few years for me.
2. Have you ever had to call M$ for support.
Never, so why do I care if they end their support.

This may seem simplistic but if you are like me you can spot a virus/malware program coming a mile away and when you suspect something wrong you try to take care of it immediately. - BY googleing what you think is wrong and running your background scanners.

As for your programs I would add winpatrol to the mix - it is a registry watching+ program that has save me more than once. I like avast (as stated by others on this issue always do a custom install, and I never get any of the browser add-ons that Avast offers)better than AVG (slows down my XP machine) - But also I have been experimenting with Bitdefender Free, because is lighter on resources.

I plan to keep using XP pro until it doesn't work any more, I suspect until my desktop dies.
I have windows 7 on my upstairs desktop I like it pretty well but I think it would be a really bad idea to update your XP machine with 7 unless it is at least a dual core processor with 3-4 gb of ram.

I agree with the person that said "If it ain't broke don't fix it" -SOMETHING M$ has never FIGURED OUT!!!
As for downloading anything from cnet - IF you see the green cnet icon on the file you just downloaded - RUN AWAY - HIT DELETE on the download - But there are several GOOD companies out there that won't let Cnet inject their crapware programs into their downloads malwarebytes, ccleaner, avast, are among some of these, but never take the typical install always do I custom install on everything, I mean EVERTHING!!!

I also like blackviper.com for figuring out what services you don't need or want to run. I also don't let stuff install in my startup except for winpatrol and my antivirus program period.

- Collapse -
If it ain't broke...................................
Oct 10, 2013 5:10AM PDT

.....................just keep fixing it until it is broke
Wonder if MS will send out a 'damaging' update to force people to stop using XP or maybe after support ends send their own 'malware'
I just don't trust MS to be working in consumers best interests

- Collapse -
Let me answer this by asking a couple of questions
Sep 21, 2013 5:25AM PDT

Robb,
1. when is the last time you had any virus or malware problems that the programs you mentioned could not handle?
It has been a few years for me.
2. Have you ever had to call M$ for support.
Never, so why do I care if they end their support.

This may seem simplistic but if you are like me you can spot a virus/malware program coming a mile away and when you suspect something wrong you try to take care of it immediately. - BY googleing what you think is wrong and running your background scanners.

As for your programs I would add winpatrol to the mix - it is a registry watching+ program that has save me more than once. I like avast (as stated by others on this issue always do a custom install, and I never get any of the browser add-ons that Avast offers)better than AVG (slows down my XP machine) - But also I have been experimenting with Bitdefender Free, because is lighter on resources.

I plan to keep using XP pro until it doesn't work any more, I suspect until my desktop dies.
I have windows 7 on my upstairs desktop I like it pretty well but I think it would be a really bad idea to update your XP machine with 7 unless it is at least a dual core processor with 3-4 gb of ram.

I agree with the person that said "If it ain't broke don't fix it" -SOMETHING M$ has never FIGURED OUT!!!
As for downloading anything from cnet - IF you see the green cnet icon on the file you just downloaded - RUN AWAY - HIT DELETE on the download - But there are several GOOD companies out there that won't let Cnet inject their crapware programs into their downloads malwarebytes, ccleaner, avast, are among some of these, but never take the typical install always do I custom install on everything, I mean EVERTHING!!!

I also like blackviper.com for figuring out what services you don't need or want to run. I also don't let stuff install in my startup except for winpatrol and my antivirus program period.

- Collapse -
Sorry to say this...
Sep 21, 2013 2:19PM PDT

Robb, I know you want to maximize your security with XP. You want level headed answers. So, that is what I am going to give you.

First, you are talking about XP. I know nothing about you, your age, etc. But, I do know when XP first came out, it was met with resistance. It wasn't until the first service pack (SP 1) that people began to like XP. It was too different, hardware and software was not compatible. By the time SP 1 came out, hardware and software was becoming compatible. We learned to like XP. But, there were still Win 98 holdouts. Eventually, they came on board. Then Vista came out, and everyone hated it. For the exact same reasons they hated XP. It was different, and nothing was compatible, Win 7 came out, and it was received well, but, thats because people's hardware and software was (for the most part) compatible to Vista. Those who (for the most part) loved 7, but, hated Vista, did not realize this. Now we are Windows 8, and about 18 months away from Windows 9. So, you ask how to secure Windows XP. Level-headedly.

Sorry to say this, but, anything you do will be very temporary. My suggestion is to begin now getting ready for Windows 8 and even 9. Or, if you are fed up with MS, you can try Linux or Mac. Linux will be cheaper, but, most likely more complicated than you may want to deal with. Mac will definitely be more expensive, but it will be compatible with all things Mac.

There's a lot of "fanboy" crap out there. I try to ignore it all. There's only one person you need to care about being a fan of anything. That is you. You can continue with XP, but, there will be problems down the line. As you are reading, and asking, security. But, as hardware breaks down, you have to ask, will new products be compatible with XP? Software. As new software comes out, and you want new programs, will they work on XP? Security programs. I see you are using free security programs. People suggest AVG and Avast as two "great" free programs. I've not been impressed with either. If you want free software, there's better ways to get paid security software for free. One is to go to their website, and see if they are part of TrialPay. They offer full version software for free, for trying other products.
Don't like that idea? During tax season, Office Max, Office Depot, and/or Staples tend to offer free security (and other useless software) for free with the purchase of any tax software (after rebate). Some stores offer rebates on software on a regular basis (Fry's electronics for one. Google them for their website).

<div>My point is, you can get better security programs for free, if you hunt them down. Just make sure you get rid of the old security programs (Kaspersky tells you what is not compatible, and if there's still bits hiding in your computer). My other point is, take the time to patiently get a new updated computer. You still have more than half a year before MS stops it's updates. And then another month before their next update would have been released.

But, consider asking yourself this question: With security issues growing by leaps and bounds each and every year, do you REALLY want to trust your security at the hands of free? And, when you ask yourself this, ask what exactly are you wanting security to do? Ultimately, to keep you safe from predators, identity theft, and people who just like to reek havoc on your system. Is it worth it to continue gambling with free software, or, invest in companies that get paid to protect you? As I said, there are ways to get the paid software free, but, you have to do your homework. </div>
So, my advice to you is, understand your budgetary limits, but, also understand what is at risk by staying with XP. Again, sorry to say this, but, unfortunately, it's what you probably need to hear, the most.

- Collapse -
To be honest
Sep 21, 2013 4:51PM PDT

To be honest, I think the bigger problem will be hardware problems. Your computer is 7-8 years old. Have you ever replace the CPU fan or power supply. IMO, those components only last so long as they are mechanical. Also, do you shutdown your computer daily? If so, I would suggest you do. Getting virus/malware is your biggest problem as you just need to re-install your computer with the operating system disk. But if your hardware fails, that will cost you $. Furthermore, some components may be impossible or expensive to source. I really recommend you power down your system as much as you can.

- Collapse -
I agree with you about the parts but...
Sep 21, 2013 10:53PM PDT

You are right, eventually, some part or other will reach end of life, probably a hard disk or memory but it could be anything. Replacements can be hard to find, IDE drives are all but extinct here in Australia and it's hard to get them shipped in from overseas. Depending what memory it has, that can be difficult for earlier than DDR2 or DDR3; DDR and earlier is still available with difficulty and the price reflects that. Then there is the Dell issue. In some of their earlier machines, they used nonstandard proprietary interfaces, in the power supplies for instance, so you are hunting for original manufacturer parts at original manufacturers' prices - if you can find them.

But that isn't an immediate issue, something to bear in mind and maybe in the interim start your upgrade fund for when the day comes.

The suggestion I would perhaps disagree with is turning the power off every night. If Robb has been doing that, fine, continue, the machine is used to it. But if the machine has been left powered on pretty much all the time, then frequent power downs/ups can shorten its life. Even the best power supplies can "spike" on power up and that can affect various components in the machine. It's a bit like your car engine, the few seconds from a cold start puts more wear on the engine until the oil is circulating at full pressure. So if Rob normally leaves the machine powered up, I'd continue doing that. Not good for the planet or the electricity bill, though!

- Collapse -
Way off topic but...
Apr 14, 2014 12:01AM PDT

There's no clear answer to whether leaving on or powering off is better for the life of a computer. Cycling on and off stresses components, but so does total running time. A given computer may have a power supply with capacitors that will fail from being baked continually at operating temperatures, or the hard drive may fail from frequent boot-ups. A fan may fail from the total amount of dust it has sucked into its bearings over its lifetime, or the bootstrapping circuitry of the switching power supply may fail from being exercised too many times. Something as simple as an incandescent light bulb, if powered up and down, is about 90% likely to fail during power up, but if left on it will fail after not that many more hours of operation (and waste power). Though computers and light bulbs are separate entities.

One thing I can guarantee, though, is that whether or not a computer is "used to" being powered off has absolutely nothing to do with whether it will fail. I jumped in once before to debunk this notion. May have even been from you.

- Collapse -
do NOT power down between every session..
Sep 21, 2013 11:17PM PDT

by now I thought this was common knowledge?? it's like the other poster said spikes happen during the time you switch the system on which places a higher than normal load on the xformer and other critical components..look at it this way..every power down there is an equal number of power ups at some point the machine will NOT power up at all! when that will happen is anyones guess I can tell you one thing it WILL happen when you need the machine to power up the most!!

dp NOT power it down even if you have been doing that..it's bad practice not a wives tale! just bad practice

- Collapse -
New OS but stuck in the 80's?
Apr 13, 2014 3:29PM PDT

Various test show there is no real difference in component life leaving computer on 24/7 or turning it off overnight when your not using it One re-boot a day isn't going to hurt anything
The only real advantage of being on 24/7 is to the power company

- Collapse -
Stick with XP, turn off computer when not using it
Apr 13, 2014 3:19PM PDT

I have XP and Ubuntu on 7~8yr old desktop (maybe more, I forget when I built it)
I've swapped out 5 hard drives, (increasing capacity- no longer run 'jbod') 2 or 3 power supplies, (I forget)
4~5 CD/DVD drives and had no issues with XP recognising anything
I even connect an EIDE floppy drive occasionally for some old files I have stored from the 90's on Win 95
Anything using SATA or USB just plugs in and works
The point is, XP will recognise hardware made in 2013~14, LG, NVidia, ASUS, Acer are still shipping equipment with XP support
I am going to remove Java and Adobe then install a different reader, I already run VLC as it's better supported
I absolutely HATE Quicktime so that's going

- Collapse -
Stick with XP but turn off computer when not using it
Apr 13, 2014 3:23PM PDT

I have XP and Ubuntu on 7~8yr old desktop (maybe more, I forget when I built it)
I've swapped out 5 hard drives, (increasing capacity- no longer run 'jbod') 2 or 3 power supplies, (I forget)
4~5 CD/DVD drives and had no issues with XP recognising anything
I even connect an EIDE floppy drive occasionally for some old files I have stored from the 90's on Win 95
Anything using SATA or USB just plugs in and works
The point is, XP will recognise hardware made in 2013~14, LG, NVidia, ASUS, Acer are still shipping equipment with XP support
I am going to remove Java and Adobe then install a different reader, I already run VLC as it's better supported
I absolutely HATE Quicktime so that's going

- Collapse -
2014 OS, stuck in the 80's mindset
Apr 13, 2014 3:30PM PDT

Various test show there is no real difference in component life leaving computer on 24/7 or turning it off overnight when your not using it One re-boot a day isn't going to hurt anything
The only real advantage of being on 24/7 is to the power company

- Collapse -
You might want to consider a new computer
Sep 22, 2013 1:45AM PDT

I have a desktop that uses Windows XP. Upgrading to Windows 7 or 8 is not an option as the hardware and memory won't support a new OS. I built a new desktop which uses Windows 8 and took my beloved XP machine offline. Every once in a while I connect it to the internet and allow Microsoft to update my XP. Once that support is no longer available I will probably stop getting online.

I took my XP computer offline because I started having support issues with stuff other than XP. My graphics card was having stability problems and I found that ATI was no longer updating the driver as it was "older". So far I have been able to update my other drivers and programs, including my security, but I fear that once Microsoft stops supporting XP others will as well. Just how long those of us who love XP have before this happens is a mystery but I am betting it will be sooner rather than later.

Another thing to consider is what it costs to repair older machines. I found out the hard way that DDR ram has become difficult to find and very expensive when compared to DDR3 ram which is what most new machines use. The older the machine's parts, the more expensive they become.

Windows 7 and 8 are really good and now might be a great time to buy a new computer. Desktops have become really inexpensive and some places are trying to sell off their Windows 7 machines at bargain basement prices. You can probably buy just the tower and continue to use your current monitor (I still use my very big, old Sony Tinitron CRT). A new computer doesn't have to cost a lot and may be an option worth considering.

- Collapse -
Recycling centers
Sep 22, 2013 5:38AM PDT

are excellent places to get old but working hardware at a fraction of what they cost as new. Unless You are a gamer they will be perfectly adequate for normal work and internet use. One thing that few sites, even expert ones, often fail to mention is; keep Your harddrive cool. Install an extra fan just for the harddrive(s). I have one computer which is on 24/7 and it still has the original harddrives after 6 years (with XP on).

With regards to PSU-spikes; they don't exist on the secondary side of switching power supplies, since the PowerGood signal doesn't start the computer until the voltage is stable. Some people may disagree, but as an electrician and computer installer for over 20 years, I know. I have tested more PSUs than I can remember. Computer PSUs are frequently used to power lab equipment and similar.

- Collapse -
Have to jump into this OT thread.
Sep 22, 2013 11:45PM PDT

Damage from power transients is somewhat like Malware in that a lot depends on how lucky or unlucky you are. I've never used any power line protection other than the cheap MOV's that happen to be built into most power strips. I live in an urban residential neighborhood. If I lived in a heavily industrialized area or in the mountains where power lines take lightning hits regularly things would be very different. I have to disagree with complacency about a switching power supply (or *any* power supply) providing 100% isolation from the primary power. A good size power spike could get through before that power good signal had a chance to put on its boots! Severe spikes will often find ways to do damage, often in counter-intuitive ways--even with the switch turned off. Personally, in all my years of using electronic equipment I've only had one instance where I knew for sure I had suffered damage due to a power transient.

Whether you're better off running a system continuously or shutting it down when not needed depends on many factors that run contrary to each other. Consider a simple incandescent light bulb (if such a thing exists anymore). Whenever it is powered on the filament is wearing away. Whenever you turn it on it momentarily draws several times its hot current and undergoes severe electromechanical stress. Consequently, most light bulb failures occur upon turn-on. Yet if you left them burning continuously instead of turning them off when not needed most light bulbs would last far fewer hours--not to mention using electricity and costing you more money. The best way of all to run them is soft start with a dimmer (not clicking it on and off and saving your position on the dimmer as many people do). I did this regularly with incandescent lamps, consequently I saw many more failures during use rather than turn-on than normal, but got more hours of use out of them

a computer system is much more complex than a light bulb. While running fans are spinning, wearing out their bearings and sucking in dust, both hastening their demise. To the extent hard drives are spinning they too are wearing out. Electrolytic capacitors get baked dry with heat and eventually fail--the more and more frequent the heat, the quicker. If you just walk away from your PC after use it usually eventually goes into "stand-by" or "sleep" and much if not all this activity ceases. When you switch it on and off it generates spikes which, on a bad day and the wrong spot on the AC waveform can generate spikes exceeding the reverse breakdown voltage of some semiconductor. As I suggested in another post, if left in a state where it may be awakened (e.g. "wake-on LAN) it poses a greater security threat than if turned off. If you boot up your computer from cold every day you end up spending hours of your life waiting for it to get to a useful state. So without a complex cost-benefit analysis for your particular system and situation I don't think one can make a blanket statement about whether it is better to leave it on or turn it off.

However there is one statement I have to balk at: the risk of turning your computer on and off in one particular instance has nothing whatever to do with whether it is "used to" being turned off. Regardless of whether your experience as an electrician and technician appears to bear it out, the statement that it does has no basis in reality other than pure random chance.

- Collapse -
Lightening and power surges
Sep 23, 2013 3:53AM PDT

Totally unrelated to XP continuation after April next year
In the 'good old days' of wired modems, I had modem literally blow out of the machine due to phone line being hit by lightening (had side cover off to fit 'better' video card
Power line has also been struck by lightening causing various electrical devices to 'fry'
I guess it's one of the 'joys' of living in central Florida
I've had to replace 5 fax-printers due to phone line electrical strikes, plus several sets of telephone 'base stations' for wireless phones the inline surge protectors have proven totally innefective on phone lines although seem to have done their job on power circuits
I'll continue turning off computer and un-plugging it, last time I left it on 4 days hard drive failed.
Pretty sure it's an urban myth about switching on and off over stressing components, in my experience things have lasted years longer being turned off when not in use (plus, it's 'greener' not wasting power)

- Collapse -
Your mileage may vary
Sep 23, 2013 5:27AM PDT

"Pretty sure it's an urban myth about switching on and off over stressing components, in my experience things have lasted years longer being turned off when not in use (plus, it's 'greener' not wasting power)"

Depends. Certain components have known failure modes that are more likely during turn-on. For example, a simple power supply, when turned on, charges its filter capacitors from zero, causing an inrush current. The increased failure probability may or may not be significant, depending on the component. Much more likely to blow a diode (or for that matter a fuse) during such times. In your case, given a significant probability of a lightning-induced failure, with the probability of such a failure proportional to the number of hours something is powered on (and attached to the mains) your experience is hardly surprising.

And of course you have to consider power usage. Eons ago I worked for a public television station. In those days they used large carrier modulation in the low UHF band for picture transmission. The klystron tubes used in the transmitter were very expensive (around $50k at the time). They were most likely to fail within the first hour or so of operation. Typically the klystron failure rate averaged about one per year. The general manager had the bright idea of remaining on the air 24/7. What this calculus failed to account for is that the electric bill for the normal broadcast day was in the tens of $k per month, which the new schedule extended about 33%. Therefore even if a klystron never failed from then on (which they did) it would not pay for the added electric bill. Eventually the 24 hour broadcast schedule was dropped. But in this era of DTV the economics are completely different.

- Collapse -
It seems this topic refuses to die:
Sep 22, 2013 2:40AM PDT

"How can I make XP secure after EOL?"

Answering first within the parameters you stated, as requested, there is one simple solution: stay off the Internet.

Given that's probably unacceptable and relaxing the parameters a bit but retaining the understandable requirement that you don't want to spend a lot of money on software, the suggestion you switch to free and open source software, including the Linux operating system, is not unreasonable--depending on what software you plan to use. There are several distributions of Linux out there now that do not require a technical guru to install and use, such as Ubnutu. There is so much good open source software that there is at least a fair chance of finding the special software you use to accommodate your disability, though you haven't said what you use. Not only would you have an OS and software patched to current standards for free but there are fewer security exploits to start with.

Finally there's the option or using XP with the best anti-malware you can find, which apparently you're already doing. Understand, though, that it's not just a matter of virus programs. Over time, as XP remains unpatched, there will be specific vulnerabilities subject to attacks that aren't malware per se. Being aware of obvious Internet scams helps, but scams have gotten sophisticated enough that even seasoned users can fall for them sometimes. But if you are careful, keep your anti-malware and all your other software as up to date as possible, and with some luck, you may not have problems with XP for a long time.

One simple thing you can do, if you're not already, is always run as an unprivileged user, never an administrator, unless you have a specific reason like installing software or making system changes--and as soon as you are finished, log back off the administrator account. Make sure all your accounts, especially administrator accounts, are protected by strong passwords. Log off your computer when not using it--full shutdown is probably best.

Also, I can't give specific instructions, but there is a way to configure XP so that it always requires the "three fingered salute" (ctrl+alt+delete) to sign on, and typing the username and password. This is less convenient than clicking on the icon for the account you want, but more secure.

- Collapse -
Sigh....
Sep 22, 2013 2:54AM PDT

...let it go people.

Dafydd.

- Collapse -
Fountain of Youth
Sep 22, 2013 4:41AM PDT

The OP's computer will die before this thread does...

- Collapse -
hahahahahah
Sep 22, 2013 5:16AM PDT

agreed

- Collapse -
Wrap The Loving Limbs of Linux Around it.
Sep 22, 2013 4:16PM PDT
"Given that's probably unacceptable and relaxing the parameters a bit but retaining the understandable requirement that you don't want to spend a lot of money on software, the suggestion you switch to free and open source software, including the Linux operating system, is not unreasonable--depending on what software you plan to use. There are several distributions of Linux out there now that do not require a technical guru to install and use, such as Ubnutu."

ROFL, I just had to use that, "loving limbs of linux".

I already use a triple boot, Kubuntu, Mint, Win2000 on one old computer (Avast AV still works on W2K) and the Linux distros can be used to access windows files when needed and help fix anything wrong with the windows system.

XP can still be safe from most attacks other than user inexperience, stupidity, or momentary lapse in judgment. Firewall on router, firewall in XP, AV which continues working and updating, and Linux GRUB controlling the MBR boot process can keep XP quite safe for a long while yet. In no windows will you be protected from yourself running an executable file you shouldn't and all windows are susceptible to that, even the newest ones.
- Collapse -
XP Security
Sep 22, 2013 5:16AM PDT

I've tried several different security options, I recently tried Hitman trial version after a nasty virus. I am currently using MSE and Ad Aware, CNet's free versions and have not had any problems other than resetting the Ad Aware definition search to 24hrs instead of every hour which made my internet activity slow to a crawl.

- Collapse -
I don't run any anti virus/mal progs.
Sep 22, 2013 5:23AM PDT

and have not since the early 2k's the entire time I've only had ONE browser hijack and it was a stupid mistake I clicked on something that should have been obvious anyhow I run wide open and have BEEN running wide open for years..no issues to speak of. just be alert! don't click on anything you don't trust! antivirus software is for NOOBS I know too many folks who run wide open and exclaim the very same thing..just learn better internet habits your sanity will remain intact and your wallet will thank you as well