New computer viruses are always coming out. We'll learn about some of them and what to do if we encounter them.
Guests
Brian Eckman
Brian Eckman
Brian Eckman has worked in technology-related jobs at the University of Minnesota for over six years and currently is a security analyst for the University's Office of Information Technology Security and Assurance unit. He submitted more than 60 virus files to Symantec between October 2003 and February 2004 that Symantec AntiVirus products had not detected and has supplied evidence to the FBI and the Secret Service to assist them in computer crime investigations.
Michael Waltonen
Michael Waltonen
Michael Waltonen is a technical consultant with Academic and Distributed Computing Services at the University of Minnesota. He also is an onsite technician for the Resnet program, which provides Internet services to the University's residence halls. He will graduate from the University in the spring of 2004 with a degree in computer science, and is particularly interested in computer networks and data security.
For Your Files
Brian Eckman said viruses, which are computer programs that spread themselves, can "basically do anything to your computer that you can do to it," which means viruses often cause damage to your computer. They may delete files, including critical system files so your computer won't work properly anymore.
Brian said there are a number of ways to keep viruses out. One is antivirus software: install and keep it updated. The rule used to be to update your antivirus software weekly. Nowadays, you can set most antivirus software to automatically update. Brian said, "if you can make that setting daily, I certainly would recommend it."
Brian had one other important comment about the antivirus program you select: you want to make sure it's doing what's called "real-time" scanning as well. When the virus tries to write itself to your computer it will stop it.
Brian also told us it is essential that we update our operating systems. Windows update is going to look for the critical updates and those are the security fixes that are very important. It also looks for other updates that you may or may not install.
If you get a virus, putting it in quarantine neutralizes it, but Mike Waltonen suggested using a "firewall" to keep the virus out in the first place. Firewalls only allow communications from the Internet to come in that you ask for.
And one final tip from Mike about basic e-mail security was: "If there's an attachment, don't open it unless you're expecting it. If you think you should be opening it, e-mail the person back first and say, 'You know I got this attachment from you; should I actually be opening this?'"
Links
Brian Eckman used InCtrl5 to check for modified files and registry entries. It is "free" with a paid subscription to PC Magazine's Utility Library.
Ethereal software monitors network traffic, and Fport detects newly opened ports. Both are free.
Patch
A computer program that fixes security problems in your operating system.
Registry
A part of your operating system that contains information critical to your computer's operation. Some viruses can infect your registry.
Spoofing
When a virus finds an e-mail address on an infected computer's hard drive and sends out e-mails that say they came from that e-mail address.