Viruses

What is a virus? A virus is a computer program written by a person. The programs are called viruses because they do some things similar to animal viruses. Their program code is written so that they:
  • duplicate themselves and spread to other computers
  • often slow down your computer
  • sometimes do bad things to the 'infected' computers
  • they are hard to find and harder to get rid of
  • change their own file names and include dummy code to make it harder for virus programs to recognize them.
Fundamental Rules: Because viruses are programs they cannot do anything unless they are running. 

If you wanted you could start a collection of viruses stored in a folder on your hard drive and they would be completely harmless unless you open them move them or run them. 

Once you accidentally run them they usually modify your computer's code so that they run automatically every time you start your computer or every time you open certain programs.

MAC Users: There may be 100,000 viruses and only about 40 of these do damage to MAC computers. This is because the nutters that write the virus programs want the maximum impact against the maximum number of computer users so they write their viruses for windows computers not MACs. For the same reason the majority of viruses can distribute themselves through Windows, Internet Explorer and Outlook Express.

MAC users - if you get a MAC virus talk to Apple. If you get emails with attachments do not forward them to non-MAC users unless you are sure of what the attachments are. To a windows user the attachment may be a virus. 

For non MAC users, read on:

How do viruses get from one computer to another? If there is a virus program running in your computer it is probably coded to duplicate itself using all the following methods:

1. Viruses can attach themselves to data and program files as you load them onto a floppy disc, zip drive or writeable CD for transfer to another computer.

2. Within a business with a Local Area Network (LAN) some viruses can modify the code to infect every computer visible on the network. This may happen extremely quickly after the virus is first run on one computer.

3. Via the Internet in one of several ways
- Attachments to emails that look like they are legitimate emails from your friends. 
- Imbedded in the email itself (no attachments)
- Virus program code hidden inside things that look like web pages, sometimes still sent to you via email.
- Hidden in the code that makes up web pages you are viewing
- Hidden in cookies associated with web pages
- Some viruses search the net for computers and when they find one connected to the net they directly enter.
- Programs you purchase or are given, sometimes contain viruses.
- Data files given to you that have the ability to contain programs (i.e. word documents, spread sheets, etc).
What can be done to minimize the chances of getting a virus? If you never connect your computer to the net or another computer, never load any programs or data into your computer you are unlikely to get a virus, but your computer would be relatively useless to you. You should therefore take as many of the following precautions as you can:

1. Purchase good quality Virus Protection Software and for a small annual fee, purchase ongoing updates that you can then download through the Net. (Easynet can sell you suitable software and install it). Leave the Virus Protection Software running monitoring everything all the time your computer is on. (If this is impractical or slows your computer too much, after getting the virus protection program to scan your whole computer - programs, data, the lot, you may be able to turn off the checking for viruses when files already on the computer are moved or run, only having it checking things coming in from the Net or via removable discs. The downside of this is that some viruses are not recognizable until they are running)

2. Your antivirus program would normally be set to update itself automatically once a week. With Broadband this is OK, but if you are non dial up and do not stay connected to the net for long enough it may not get all its updates. You should open the antivirus program regularly (once a week) and see that it shows dates for its updates that are no more than a week old. If they are trigger a manual update and stay on line long enough for it to completely download.

3. Go to the Microsoft web site and download all the bug fixes for windows, outlook express etc. at least every couple of weeks. These fix various problems including ways hackers and viruses have found to get in in spite of antivirus software..

4. When using your web browser (Internet Explorer, Netscape etc) have the security settings set to not automatically run Java, Active X, cookies and other program code hidden within web pages. Possibly set to the level where your browser warns you and gives you the choice of running all the elements of a web page or not. From sites you are sure of like your bank you can tick always accept and you won't be asked again.

5. Never have your email program settings set to automatically open or preview email messages ('Preview pane' in the in box is a horizontal split that shows the in box list in the top half and part of the email selected in the bottom half. Turn off preview pane.) Never have your email program set to automatically open attachments.

6. When you get emails that suggest you click to go to a web site, don't ever. If you want to go to that web site manually type its address into your browser yourself.

7. When you get emails without a subject delete them immediately without opening them.

8. When you get junk email from someone you were not expecting mail from, delete the message without opening it, no matter how attractive the subject sounds.

9. When you get an email with any attachment, think very carefully before opening or running the attachment. If it is a virus once opened it is too late unless your virus program happens to catch it. Most viruses once in your computer will send an email message, with the virus attached, to everyone you receive messages from and to everyone in your email address book. They address themselves as though they are from you, or from one of the email addresses in emails on your computer, and choose a friendly subject and description such as 'Check this out it's great'. This way whoever gets it is deceived into opening the attachment since it seems to be from someone they know, without the necessary forethought. This is only one of the methods of virus distribution. It is good practice to never open or run any attachment with a file extension that looks like a program (some examples .exe .pif) Also be very careful opening word documents (.doc), spread sheets and any document that may contain macro programs. Opening data files that are not normally 'run' as programs is safer (e.g. graphics attachments with extensions such as .gif .jpg sound files .mp3, .wav, etc. and of course, text files .txt) 

10. Never ever open attachments sent to you as a result of Chat Room or ICQ sessions on the Net. It is easy to make attachments look like .gif .jpg etc even though they are executable viruses or spyware. The senders are anonymous.

11. If someone legitimately sends you an attachment then it is best to save it to disc then scan it with your virus program before you open it just in case it includes an imbedded virus the sender did not know about.

12. Never forward virus warning emails. They are typically of the form 'Urgent warning, Microsoft or IBM or CompuServe has announced a particularly destructive virus that will destroy..............please advise your friends urgently' 
Unless you have been to the Microsoft or IBM or Nortons web site and copied the virus announcement from there yourself, then you are passing on garbage produced by the same Nutters that make viruses. Some of these emails have been circulating for years, and people keep forwarding them to their friends without checking if they are current and without checking if they are correct - are you guilty.

13. Be careful of software you are considering downloading from the Net either using a download button on a web site or using an FTP program (file transfer program)

14. Regularly backup all the data from your computer to somewhere out of your Network. We provide a service for doing this. Easy Vault saves a copy of critical data off your computer to our Easy Vault Server each night. (Once you know you have a virus you should stop backing up so as not to overwrite clean data with virus corrupted data.) 

15. To reduce the chances of Email viruses some people avoid the Outlook Express and Netscape Mail Programs and choose a less common one such as Eudora Mail or Mozilla.

16. If you open an email and it wants to download a program, Don't. Also make sure your email program is not set to automatically download such things.
Personal Training: Easynet can explain the above in more detail during a training course at your home or when you are getting us to upgrade your virus protection software. Basic and advanced email training is the most common training requested by our customers.
How do I recognize if I have a virus? Just because your computer or your internet connection is acting strangely or one of your programs isn't working quite right, it doesn't necessarily mean that you have a computer virus. Many problems blamed on viruses are actually caused by software configuration errors, software upgrades, not enough RAM or other problems that have nothing to do with a virus. (Examples of things that may or may not be viruses - sometimes runs slow, files move, files are deleted, something has changed the settings in your email program, email no longer works, your web browser now always contains adds, Emails you send now have a signature with web link, etc) If you are getting large numbers of emails saying that emails you sent failed to be delivered, and you did not send them, you most likely have a virus. You are most likely to find out you have a virus when a friends virus program detects an email containing a virus from you.

Many viruses do no more than send themselves on to others, with the main effect being temporary slowing or crashing of LAN networks or computers. Often the only effect to you is the embarrassment of 'infecting' your friends, and the time it takes to remove the virus and re-load programs the virus has modified. Unfortunately some viruses do serious damage, often lying dormant for months before destroying data and programs on your computer. With these you do not realize you need to warn people they may have a virus from you. There are many viruses that monitor your key strokes and pass on your bank and other passwords and statistics about your internet usage, as well as files and documents from your computer. Many people find sensitive data from their computer has been passed to their friends or to others unknown.

Viruses do not cause your computer or monitor to go up in flames or to be irretrievably destroyed, in spite of what you see in bogus email warnings 

The best way to test for viruses is to purchase quality up-to-date virus software and fully scan your computer, but even this is no guarantee. Once you already have viruses, many will stop your virus software from working fully and remain hidden from it. Your local computer store may be able to look further into your computer. Easynet can come to your site, remove all viruses, update your virus programs and train you in how to keep it up to date.
How do I get rid of a virus? First thing, warn all your friends you have sent them a virus, some may not yet have run the virus and may be saved from going through what you are about to go through. (Similarly if someone sends you a virus let them know immediately as they may not have infected everyone they know yet) When you buy a good virus program from us or a computer store, if already infected, there is a good chance the program can kill off the virus along with only a small number of your files. It will not be able to fix damage already done to your data, your programs and your operating system, so you may need to engage the help of Easynet or your local computer store technicians. In the extreme you may have to save your data to another medium, reformat your hard drives, reload your operating system and program files, then with an up to date virus protection program running reload and scan all of your remaining data.

If you do not have a virus program get one and install it on all of your computers as soon as you can. It is better to minimize the chance of getting viruses BEFORE you get them. Easynet can come to your location and do this for you.

Sometimes a virus program will identify the virus but will not be able to remove it. Often there are instructions available on the Net to help you remove specific viruses. Make sure instructions are from a reputable source as many are actually additional viruses that you then inadvertently load onto your computer.
Easynet Disclaimer: We provide you with connection to the Net. We do not block traffic to you, including viruses (although some viruses may be blocked at National level). It is up to you to protect yourself from viruses, assuming that you do not want to receive them. This web page is an introductory guide only and can never be complete or up to date as new virus types are being devised by programmers every day.

Once you know you have a virus you may be legally responsible for damage it causes to other computers that get it from you, especially if you have not taken steps to remove the virus promptly, and to stop it from spreading while you do so.

Easynet has staff trained to remove viruses and update virus protection software. Most of our customers who take advantage of this service, also get some Personal Trainer support for other aspects of their computer while our staff are on site.

Click here to 'Easynet Home' for full contents Copyright 1997 Easynet Pty Ltd