« E-Rate: Year Eight | Main | Your place on the Web »

Just Asking for Viruses

By: Eric Durrand

"I would like my computer to slow down, way down… like holiday traffic," says a character in a new AOL commercial ad that seems to be playing everywhere these days. A woman is asking to lose all of her music files, and another all of her baby's digital photos. One guy says he'd like it if someone stole his identity, and another is just dying to get a virus and give it to all his friends. "Millions of Americans are just asking for a computer virus", the ad summarizes, "because they are not nearly as protected as they think they are". While amusing this ad deals with a harsh truth, also, affecting teachers and school networks.

According to Trend Micro, the first creator of Anti-Virus software and one of the leading antivirus vendors, computer viruses had caused more than $55 billion in damage during 2003 alone! The financial damage caused was due to information loss, and downtime that resulted in loss of productivity. Viruses can delete important documents, slow down and stop computer activity and the internet connection, render a computer system unusable, infringe on users' privacy, and harm the reputation of respected establishments.

Teachers and schools may be at a higher risk of being hit by a computer virus. First, many schools lack the budget to defend against a virus attack. Second, frustrated or mischievous students may infect a teacher's personal computer, or a classroom computer. Spreading viruses is easy - you can often find the specimen online, and send it as an e-mail attachment yourself. Specialized tools for creating new viruses are also available online, and are fairly simple to use. A student can create and spread a completely new virus, not detectable by some antivirus tools.

A virus is a general name for self-spreading malicious software. It often arrives as an e-mail attachment, or spreads itself through network shares and the internet. Other times it may be a Trojan, a malware that disguises itself as legitimate software, only to do its damage behind the scenes. Viruses like Netsky, MyDoom, and Bropia spread like wildfire either through e-mail, instant messaging, or other means - and cause damage wherever they go. Once they are detected by all the leading antivirus tools, a new, slightly improved brand of the same virus may appear and start a new wave of infections.

Viruses spreading through e-mail, also known as e-mail worms, are by far the most common. One day you open your inbox to find a strange new message. It might seem to come from someone you know, or a stranger. It may have a reasonable title and content, or it could be a far fetched or random combination of words. Many times the content of the message will urge you to open the attached file. The rule is simple - if you didn't expect an attachment, and don't know exactly what it is - don't open it. If you are not sure about it, contact the sender and ask for a clarification, before you open it.

While common sense and basic precautions will go a long way in protecting you against viruses, the best defense against them is antivirus software. Brand names like Trend Micro, McAfee, and Norton Antivirus are the most popular, and offer many defense layers. Other contenders include Panda, Avast, Kapresky Labs, and VCatch. Most of these solutions offer a comprehensive set of tools against viruses: They scan incoming e-mails, run real-time memory scans, check potentially infected downloads before the virus can spread, and run pre-scheduled full system scan to detect any hidden viruses on your system. They are usually updated weekly with new “Virus Signatures”, protecting your system against new threats. Enterprise solutions offer the ability to manage, update, and scan all the computers on a network from a central location.

In addition to installing and configuring an antivirus solution, it is wise to stay current with virus news. Schools should register with mailing lists for virus alerts; popular newsletters include Symantec Antivirus Center, which provides the latest news and analysis of the risk posed by current viruses; Trend Micro Security Info Center which offers a similar service, and Help Net Security is an independent source that offers virus related news and a large virus encyclopedia.

Viruses are just one of the threats to the stability of the digital world. Spam, Spyware, Trojans and Hackers, as well as Phishing scams designed to steal your identity, are also part of the digital landscape. These risks, however, can be mitigated by using the right set of tools, and having the right knowledge. Only protecting their Information Technology assets will allow schools to meet their curriculum and saving their meager means for providing better education to our children.

Posted on January 31, 2005 at 12:25 AM | Permalink

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00d8341d42b753ef00d8347c151969e2

Listed below are links to weblogs that reference Just Asking for Viruses:

Comments

One should avoid use the term "computer virus" and replace it with "Microsoft Windows virus". Most people and lawmakers seem to think that viruses are a "computer" problem. It is not your computer that is susceptible to viruses and spyware, but your operating system. If you want to stop viruses and spyware in their tracks then stop using Windows. I am not about to tout Macintosh, Linux or BSD but these are all viable options, especially Linux if you own a Windows PC, because it can be installed on your existing hardware or ran straight from a CD ROM without even removing Windows, Knoppix is one such version:

http://www.knopper.net/knoppix/index-en.html

It is amazing how much time money and effort is spent on trying to fight something that can be so easily averted at little or no cost. Anyone who is tired of viruses and spyware should give it a try.

Posted by: John | Feb 24, 2005 8:59:28 PM

I couldn't disagree more.

Viruses are NOT a problem unique to Microsoft Windows. All the other operating systems you mentioned have viruses written specifically for them, and the only difference is one of numbers. If enough people move from Windows to Linux, then Linux will be the one more susceptible to virus attacks.

Even cell phones have been infected with viruses in the past. So it's true, a virus is a software and it needs an operating system to run on. Most of them aim at the most popular one, but some viruses are cross-platform, and infect both Windows AND Linux.

The benefits of using Windows in schools are often much more substatial than the threat of viruses, which is containable.

Posted by: Eric Durrand | Feb 24, 2005 9:18:15 PM

Name one recent virus or form of spyware that has affects anything other than Windows?

Posted by: John | Feb 24, 2005 10:16:14 PM

I agree with John. *nix based operating systems have been becoming more popular. The viruses and spyware that currently do exist for those systems are simply not able to propagate as easily as Windows viruses. With Windows an entire machine can be infected by a regular user by simply previewing an email or visiting a website. This just doesn’t happen with those other operating systems. If a non-root user does somehow manage to mess thing up, it is only that user’s home directory that gets trashed rather than the entire system. Which is why there is never an excuse for not making backups...?

It is true that as those systems become more popular there will be more ignorant people
Who log in as root (Administrator) while surfing the net. This will certainly be a concern for many if it does happen as it renders the entire system vulnerable to attack. This is one of the biggest dangers facing the Linux newbie. As root the simple command: rm -rf / can wipe out the entire file system.

Many *nix based programs such as the popular Xchat IRC client thankfully will actually scold the user with a message stating that is "stupid" to be logged in as root while using the program. I am not aware of any Windows applications that provide such warnings. Instead windows users must spend loads of money on extra software to watch out for X hundred thousand forms of viruses and spyware out there and yet they still get viruses and spyware.

Over the past 12 years roughly 100 Linux viruses may have been created, and just about all of them have been confined to a lab and never managed to spread.

Also, most Linux viruses out there don't usually attack the OS itself rendering it unusable, but rather take advantages of vulnerabilities in various services such as Apache or OpenSSL. This is usually fairly easy to fix when and if it does happen and does not require reinstalling the entire operating system. (backups)

In fact over 60% of the web servers out there are Apache web servers, many of which are running Linux, however most viruses that attack web servers were designed to attack Microsoft IIS.

The argument that Linux will see more virus threats as it becomes more popular is not true (provided users don't start doing everything as root) , because it already has and is becoming more popular yet it has been experiencing fewer and fewer successful attacks over the past few years unlike Windows where the rate of successful attacks has increased..


"The benefits of using Windows in schools are often much more substantial than the threat of viruses, which is containable."

This I don't understand. What benefits does Windows offer that the other options do not? A new Windows installation doesn't offer much more than a start menu, a control panel, Internet Explorer and Outlook Express? A standard Linux installation "out of the box" offers literally hundreds of applications that would be far more beneficial to students than a clicky clicky start menu.

Posted by: Mark K | Feb 25, 2005 3:36:42 AM

I don't work for Microsoft, and in certain cases I would certainly recommend trying a different operating system. HOWEVER, I don't think viruses should be a big consideration.

It's true that Linux viruses are practically nonexistent, and in recent years no new viruses were released. However, viruses like Bliss and Staog prove that it can be done. Virus writers want to make a big impact, and a Linux virus will not get you in the daily news. So naturally, Windows it targeted instead of the less popular operating systems.

Of course, this should be a consideration as well - because right now the threat IS much larger to Windows users. I simply think it's manageable, and schools who want interoperability and a range of educational software and interactive E-Learning tools would need to pick Windows.

Posted by: Eric Durrand | Feb 25, 2005 11:28:26 AM

The comments to this entry are closed.