Anti-Virus/Spyware
Other Links
Viruses and Spyware are an unfortunate reality for those who travel the Information Super Highway. The need for an updated virus and spyware protection software is greater than ever before. Below are 10 tips from Trend Micro for protecting yourself and your PC. For more information or if you think you may have become infected, call The Glitch Guys.
Security Spotlight: Top 10 Actions to Protect Yourself and Your PC in 2009: From Trend Micro
- Update and patch applications and operating systems.
Automatic update and installation features ensure that new updates are applied as soon as they are announced and that a system maintains a secure configuration and remains fully patched with the latest versioning. For the enterprise, experts advise deploying vulnerability scanning software on the network and then scheduling it to run weekly, at a minimum. Although many programs have an automatic update feature, check how often updates are installed and select the daily setting when possible. If software lacks an auto-update feature, users can update manually by visiting the software vendor's website and downloading the appropriate patch. - Keep security software up-to-date.
Installing regularly updated antivirus software will catch most exploits. Some products include integrated vulnerability and exploit prevention, firewalls, and content filtering. For large organizations, we recommend a vulnerability assessment package, which is used in tandem with the software to assess and report on the current network security level and to identify potential security vulnerabilities. Scan programs with your security software solution. Always read the end user license agreement and cancel if you notice other programs being downloaded in conjunction with the desired program. - Download a Web site reputation service and visit the Web site.
Download a free Web site reputation service to help you avoid surfing to Web pages that feature unwanted content and hidden threats. - Disable scripting and "widgets."
Many Web-based attacks use various scripting languages to run infectious programs in a browser or use downloadable "widgets" to execute infections locally. By disabling scripting and avoiding downloadable “widgets” wherever possible, surfers can disable these common attack vectors. - Be vigilant and stay suspicious.
Consumers are the first line of defense in protecting against phishing attacks. The best advice is to open attachments from known or expected sources only and to delete all unwanted and suspicious messages. If e-mail arrives from a known company or website, only click on links that are hosted on the same site. Redirections to another site are a sign the e-mail may not be legitimate. - Never send sensitive information in response to an unverified request.
Many consumers remain unaware that banks and other companies never request sensitive, personal information over the Internet. Also, banks never call and ask for bank account information or Social Security numbers over the telephone. It is best to never disclose sensitive information when receiving an e-mail or telephone call. Only provide private information when first initiating a phone call to verify the identity of the person at the other end. When asked for a Social Security number, provide the last four digits only. For example, phone companies request a Social Security number to verify account information but will accept the last four digits only if callers provide additional proof of identity. - Beware of clicking on spam.
Spam itself is not dangerous—it's what users do after receiving the spam that creates problems. For example, suppose a spam e-mail requests a user to click on a link for more information. This is where trouble begins. Refusing to click on embedded links can circumvent phishing attacks and malware downloads. - Avoid unverified pleas for help.
Although many volunteer organizations now use e-mail to solicit donations, verify a request for a contribution by calling the organization directly. Many phishing attempts, such as the 419 Nigerian scams, are disguised as solicitations for helping someone in need. - Stop forwarding e-Petitions.
E-mail chains and online petitions are almost never legitimate and instead represent scammers searching for quick and easy ways to collect a mass e-mail list. Unfortunately, people who forward these e-mails to friends and family are playing right into criminals' hands. Upon closer inspection, most e-mails fail to request that a certain action be performed to resolve a problem. Some petitions feature names, addresses, and e-mail addresses. Spammers use these lists to perpetrate phishing and other Internet crimes. - Businesses—create workplace policies and educate employees.
Company policies that dictate specifically who can access certain data should be clearly written and distributed to key employees and then enforced across the enterprise to prevent data leakage. Also, since many data breaches occur accidentally, companies can protect enterprise data through employee education and set procedures for handling sensitive data. Boosting awareness of the issue within organizations is an integral part of a layered protection strategy.
