Feature
Article
Ken Hopkins
Sacramento PC Users Group
Contact Information:
Ken Hopkins
For me to ask for someone to take over my column after writing the very first article, it is very odd. But I am. I have been trying to find someone to write a column such as this for a quite awhile and I thought that it might be easier if this column's next author knew what content and format Sacra Blue wants. Well, this is it. If you think you can continue this column, please let me know.
|
|
Virus of the Month Club
It seems that every month, there is some new deadly computer virus launched upon the world. The best protection is knowledge. If you know what is happening you can adapt accordingly. This column will highlight the new viruses and tell you how to avoid being infected.
|
This Month's Feature Virus
A new variant of the destructive Klez worm, known as Klez.e, overwrites victims' files with random content on the sixth day of odd-numbered months. It can spread automatically on Windows systems that use an unpatched version of Microsoft's Internet Explorer.
If you have updated Explorer since March 2000, you should be safe from the virus automatically loading, but you may still have a window pop up asking you if you wish to run a program called Klez.e. You MUST answer NO. You should run Windows Update to ensure you are protected against the auto-executing features of this worm.
Klez.e arrives in an e-mail message with a subject heading generated from a list of more than 20 keywords, or forged to look like the heading on an undelivered message. The body of the message is empty or has random text.
The worm infects Windows archive files with a copy of itself. It also attempts to circumvent antivirus programs and defeat some competing worms by shutting them down if they're found running.
Do-It-Yourself Virus
In addition to the viruses that do whatever damage they do, there are also e-mail messages that require you to do the damage yourself. We recently reported one that was an e-mail saying it is from the IRS and asking for important numbers like Social Security and bank account numbers. This turned out to be a hoax but the warning is still worthwhile. If you give these numbers, you can probably expect to have your bank accounts emptied. You may even find that someone has opened a bunch of credit card accounts in your name and run up quite a bill. Do not give this information to someone who e-mails (or telephones) you. If you think the request may be real, verify it by calling the appropriate agency at a telephone number you acquire from an independent source (like the phone book).
Protecting Your System
As viruses become even more powerful, you must make your defenses even more powerful.
- The first level of protection depends upon you. NEVER open an attachment that you get in your e-mail unless you know what it is. Often these attachments will insert a virus onto your system. It may not be apparent that it is doing harm at this point; it may do its harm much later (when you least expect it). The attachment may even be useful.
- Be aware that viruses will probably come from someone you know who let their system become infected. Many of these viruses spread themselves by sending new messages to everyone in your address book.
- Update your Windows system. There have been lots of security holes found in the various versions of Windows that are possible entry points into your system. Keep your system up to date by running Windows Update. If you deleted the icon, you can just go to the Web site at Windows Update and click the link to get you the product update. It will check your system and tell you which updates are available. Be sure to get at least the security updates.
- Turn off the preview pane in Outlook Express. Most of the viruses require you to do something, but at least one virus has been launched automatically when the message was viewed. Just pointing to the message and previewing the message also launched the virus.
- Delete strange messages. If you suspect a message, delete it before reading it. Spam is pretty easy to detect from the subject and the from: and to: addresses. I do not know how many viruses come in on spam, but why take chances.
- Increase your security settings. If you are using Outlook Express, go to Tools/Options and select the security tab. Set the Internet Explorer security zone to Restricted sites zone. This will protect you from ActiveX functions running from the e-mail. You will get a warning each time an e-mail tries to get through. There is no good reason to allow ActiveX in e-mail. If you use a different e-mail client, search for an equivalent setting.
- Run a firewall. A firewall can hide your system from many intruders. This is even more important if you have a high-speed link, but it is valuable for any system. I recommend the free ZoneAlarm program, although there are lots to choose from. Keep this program up to date for better protection; a flaw was recently found in a different firewall and you need to download the patch to complete your protection.
- Use an anti-virus program. I am not as hardcore about anti-virus programs as others are. I think the above precautions will protect you pretty well. I do not run all the automatic checks that these programs wish to enable. I do a periodic manual check of my systems and always come up clean. I often run a check after something strange happens just to eliminate viruses as a possible cause.
- In case you missed it the first time, DO NOT OPEN ATTACHMENTS. Opening attachments is how most of these viruses get into systems.
That is all I can think of now. I will continue to add tips as the months go on.
|
|
