MENU

INTRODUCTION GEEK SPEAK CONTROL VIRUSES DEAL WITH SPYWARE AVOID PHISHING SCAMS MAILBOXES FOR SPAM PATCHES AND UPDATES FIREWALLS DEMYSTIFIED SHOP ONLINE SAFELY AVOID HACKERS BACK UP YOUR DATA TEST YOUR KNOWLEDGE ABOUT WRITER FEEDBACK

LINKS TO MORE INFO

CERT HOME USER GUIDE MS SECURITY BASIC MS SECURITY ADVANCED MORE SECURITY BASICS BUSTING HOAXES PROTECT RIGHTS ONLINE GUIDE TO RAID HOW FIREWALLS WORK ADVANCED TOPICS

CONTROL VIRUSES

We'll start with what should be a security no-brainer. Antivirus software. If you don't already have it, purchase some antivirus software and keep it up-to-date. Stick with a well-known name, which you'll find most of in the first two pages returned by any seach engine when you plug in "antivirus software." A few reliable free alternatives exist if you spend some time investigating. Try "best free antivirus reviews" or something similar.

Even if you have AV software and usually ignore it, open up the application and look at the options. Check the help index in the menus if you don't know what something means - especially if you don't know an unfriendly term such as 'heuristics' (GS). You can configure it to scan while you're asleep and in real-time as you're working or browsing. Also, even though most AV programs are set to do scanning automatically during the software installation, you really should make sure of it, especially if you happen to have more than one hard drive. Change it to daily if it's set to weekly. Who wants to risk letting a virus sit on their machine for up to seven days?

You can, and should, set the software to check for new definitions (GS) at least daily. Check them hourly if your program supports that option. The defaults are often set to weekly to reduce traffic on the AV company servers. But you've paid for this virus protection, and you should have more of it the instant more is available.

Okay, so you have antivirus software already, or you're getting it - and you're be certain to look at the options soon, making sure it scans your system and gets updated definitions regularly. Good. But antivirus software isn't enough. Not to patronize, but you have to think when you sit at your computer. And not just at home when there's no IT staff to help keep your computer safe. Even at work you have to be proactive to keep data safe - both your's and your company's. Don't open up an email attachment just because your brother or best friend sent it to you. Ask yourself why your brother or best friend sent you a .zip file that says 'game.zip.' If your friend sends you games via email, tell him to stop. This is often a gray area for people, especially those people who don't enjoy spending their spare time improving networks and increasing network security - which is to say most of you. The debate usually goes something like this:

USER: "But my brother always sends me attachments. Pictures, games, silly stuff. It's how we keep in touch these days. I like using email for that. Email is for sharing, and that's what he shares."

NETWORK ADMIN: "Does your brother have a website where he can put these things for you to download?"

USER: "What?"

NETWORK ADMIN: "Does your brother realize that people send out bad things in the same fashion, and they could easily make it look like it came from his email address?"

USER: "Um, I dunno."

NETWORK ADMIN: "Okay, so how about this. Ask your brother to always zip up attachments in a file called 2mysister.zip. That way, you know he sent it because someone would have to have a lot more info about you or him to target you directly, information that's much harder to come by... like the personalized name of a file your brother sends."

USER: "But then all of the attachments are the same, and I won't know which is which."

NETWORK ADMIN: "Then have him tell you what's in the zip in the subject line or the body."

USER: "That's a lot of work. Can't you just block the viruses from getting through?"

NETWORK ADMIN: "*sigh* Most of the time, yes. But more and more often, the antivirus writers are beating the antivirus software companies to the punch. Sometimes the virus definitions aren't available until a day or so has passed, and by that time, you could easily open the wrong attachment. I can block ALL attachments to solve the problem, or you can ask your brother to send you email with the notion of protecting you and your machine."

USER: "Well, if you put it that way..."

NETWORK ADMIN: "Good. You can have your fun, and your machine stays protected, too. We both win."

*cheers in background*

Okay, it's never that simple, and besides, at home there's no network admin nagging you about security and telling you what to do to protect your machine (unless you're married to one). So adapt the conversation to your own situation. It's true that most viruses get caught in the antivirus email filter (now a part of most antivirus software packages), but there are days when dozens of viruses may get through. If you don't keep alert as to what's coming into your inbox, you might pay the price. It may be an easy virus to clean. I won't scare you with FUD by saying something like, oh, 'it might download porn to your machine for hours or wipe your hard drive when you reboot.' Humor aside, viruses can be written to do just about anything you can think of and then some. Most are thankfully benign or so poorly written that they fail to execute.

The advent of automated virus creation programs used by script-kiddies (GS) on the IRC channels (GS), made most antivirus software learns such a program's signature (GS) and blocks all variants (GS). But that doesn't mean you shouldn't be careful. It means that you don't have to know all of the inner workings of the system to feel protected by simple actions such as paying attention to attachments and noting the date of you most recent virus definitions. Don't let a lack of understanding of the technical issues keep you from being a smart online netizen.