Preventing PC Infections
Here in the IT Services Department of Tech Lizard Web Design and IT, our most common calls are for assistance with PC infections. These calls occur so often in fact that we thought we'd take the time to discuss the problem. For the purposes of this discussion we'll use the term "Predatory Application" to cover threats such as viruses, trojans, worms, adware, spyware, etc.
Protection/Prevention
The best way to avoid a service call for repair and/or recovery is to ensure that your computer is well protected to avoid infection. There are a number of excellent applications available for protecting computer systems from the many predatory applications online. Be sure to choose a product that not only actively detects virus threats, but also actively detects threats from malware and adware, which are categorized differently but are equally threatening.
Active protection means the application is always running and is always monitoring for threats. Passive protection comes from software that checks the whole computer for problems when you decide to run the application. Here are some recommended applications
Updates and Scans
In addition to installing the application you'll want to be sure that the application is receiving its periodical updates. Most can be configured to self update on an event such as startup or on a schedule, but these settings will need to be adjusted to your preference as a part of the post installation. You'll also want to schedule regular scans to be sure that the computer is free from threats. System scans tend to affect system performance while they run, so if this is a concern, schedule them for a time when the computer is on, but may not be in use, such as overnight.
Use a Firewall
Most internet protection suites will include a firewall with pre-configured exceptions and rules for the most common internet activites such as email, instant messaging, internet browsing, secure internet browsing and file transfer protocol. When a firewall is first installed some time will be needed to configure your own exceptions and for a lot of users this can be frustrating. The firewall will notify you when an application is attempting to use the Internet, or when a computer is trying to access your computer and you will be prompted to Allow, Deny or Cancel. Additionally there will be a check box which offers to create a permanent rule that will record your response and not prompt you again.
It's tempting to just click Allow for any notification, but doing this is the equivalent of not using a firewall at all. Take the time to think about what makes sense: Should the application you're using need to access the internet? If it's a game that is played online the answer is yes. If it's a screensaver the answer is no. If you're particapting in desktop sharing, another computer will need to access your computer, but most times outside computers should not be permitted to access yours.
Don't be impatient, the firewall will need to learn and ask your permission to use the internet for your specific case, but after a while your firewall will protect you without much attention needed at all. Eventually you too can enjoy the geeky thrill of denying an attempt to disrupt your use of your computer while saying "Nice try but I don't THINK so!".
Lower User Privilege
Consider lowering your user privleges, or at the very least create limited user accounts for children.
Wait, what?
I know. You own the machine and you and your family run in Administrator level user accounts because it makes it easier to do the things you want to do. Maybe you use a computer at work and "The Administrator" is kind of like the computer police, so you find some strange freedom in running your home computer "as an Admin".
Unless you're really knowledgeable about what can go wrong and how to deal with it, this is really just pride getting in the way of sensibility.
Most brand name computers create an administrative, full access user when they're first turned on. This allows you to do whatever you want as the owner of the computer and cuts down on their support calls, and that sounds good right? Well the problem is that running Windows as an admin not only lets you do what you want, but it lets malicious software do what it wants on your behalf, sometimes without your knowledge or permission.
A good example is the pop up ads that suggest that your computer has been infected and you should click a button to correct the problem. Most people don't understand how computers work and so they're susceptible to advertisements that suggest that there is a problem that can be fixed with just this one click. The problem is that the click leads to an installation of an application that will make your future computing a nightmare. If you're running in the context of an admin this bad software is going to do its thing because as an admin you said it was OK to fix whatever problem this advertisement said was wrong. Clicking that button opened you up to problems!
Wouldn't it be better if you didn't have to wonder? If you ran your computer as a user who didn't have permission to install applications? What if the bad click couldn't do its harm on your computer because you as a user don't have the permission to allow it to continue. Wouldn't that be good? Yes, it would.
Installing desired applications happens so infrequently that signing in as an admin to complete the task should be powerful to us. The rest of the time we're just running applications that user level accounts can run with no problem. Learn more about how and why to use limited access user accounts.
Avoid File Sharing (P2P) Networks
We find that computers that have been infected with predatory applications tend to have one thing in common: They have P2P (peer to peer) file sharing applications installed. Examples of P2P applications are Morpheus, LimeWire, KaZaa, Bear Share and BitTorrent. While P2P networks have legitimate, legal uses, we find that they're primarily used for downloading free copies of copywritten material such as music, videos, movies and software.
Some of the applications used for accessing P2P networks come bundled with spyware that is installed as you install the software. Once you're on the network, that song you really want may be a predatory application that has been given a misleading filename. All you have to do is download it and try to play it to infect yourself with whatever that file contains.
Common Sense
You don't have to be a computer expert to develop common sense while computing, but you do need to be a bit skeptical.
Tips for Common Sense in Computing:
- Don't trust people or websites that you don't "know".
- Understand that adult sites, gambling sites, and sites that share illegal music, videos, movies, software or software keys are often riddled with adware or worse. Never install applications that you haven't requested.
- Don't open email attachments, install applications, or follow links from people you don't know.
- Be skeptical of email attachments and strange links from people you do know. Some infections spread via email, sending themselves to addresses in the local email address book! This could've happened to your friend.
- Be skeptical of "free". Free screensavers and other "cute" applications, usually come bundled with undesireable side effects. Whether they're malicious software or applications that track your internet activity to report to others for marketing purposes, resist the cute, free applications and reserve your respurces for your own use.
- When in doubt, Google it. People who have been burned by applications tend to be very vocal about it, check to see if the application has caused problems for others.
- Pay close attention to notifications from programs you have installed, take the time to understand the question and your options and answer accordingly. Patience.
- Do not accept recommendations from pop up windows on the internet or for applications you have not installed. Only accept advice for software installations, scans and maintenance routines from trusted sources.
Great Apps
There are a number of great applications available which will help to protect you while computing, but we don't want to overwhelm anyone with a long list of choices. Here are a few free apps we like and use
Free Applications
AVG Free Anti-Virus for home users Note, this app actively monitors for viruses but not malware, spyware or phishing scams.
Subscriber (Paid) Applications
Trend Micro Internet Security Pro
** Don't forget, you get what you pay for.