Most of your question should be answered in this part.
Some ByteDefender and FurTech made this little guide a while ago. The are now retired, but the Administration team kept the idea!