Viruses

A requirement of all students is to have adequate virus protection and to update that virus protection on a regular basis. We don't need to panic or be afraid of e-mail attachments, but we do need to be cautious in dealing with them.

Before we discuss virus protection, let's review preventative measures you should take when reading e-mail, reading newsgroup messages, or surfing the Web. The most-recent virus (worm*) infecting our systems is the KLEZ virus. The guidelines for recognizing and eliminating the KLEZ virus are the same as for all viruses, so we'll use the KLEZ virus as an example.

Remember to treat ALL e-mail attachments and ALL downloads from the Web as though they have a virus. ALWAYS suspect a virus and deal with ALL files the way you would deal with a file you know contains a virus.

How do I deal with e-mail viruses? Look at the following message header from my Outlook Express:

Explanation of the colored arrows:

  • The paper clip indicates this message has an attachment, so you should just assume it has a virus and treat it accordingly. See notes below on how to check attachments.
  • The message is from someone I don't know, so I am going to delete this message without even reading it. You should never accept an e-mail with an attachment from an unknown person. However, some e-mail viruses send infected messages to entries in the Address Book of infected users so that message comes from a known person. Thus, if I receive an attachment from someone I know, I am still VERY careful. 
  • The subject of an infected message is usually very enticing. You will see subjects such as "Congratulations!" and "You Have Been Selected." 
  • The size of a KLEZ virus (worm*) message is about 120-130 KB. 

Because this message has an attachment, because it comes from someone I don't know, because the subject is somewhat enticing, and because the size is 121KB, I can almost guarantee you it contains the KLEZ virus. I will delete it without even opening it. 

Most viruses in attachments infect your computer when you try to open the file or attachment; but the nasty thing about the KLEZ virus (*worm) is that it infects your computer when you open the message itself. Most people have their preview pane open in Outlook Express (it is open by default). As such, OE is automatically opening the message when it appears it in the preview pane; and thus, it can automatically infect your computer.

PREVENTATIVE STEPS TO AVOID VIRUSES

STEP ONE: To prevent the spread of e-mail viruses, turn off your preview pane in Outlook Express. In the VIEW menu, select LAYOUT. On the Layout dialog box, remove the check from the Preview Pane.

STEP TWO: If you receive an e-mail with an attachment from an unknown user, delete the e-mail without even opening it. If you receive an e-mail with an attachment from a known user but you weren't expecting the e-mail, write a new message to that user and ask if they sent you an attachment. Don't open the e-mail or the attachment until you hear back from the user.

STEP THREE: When you DO open an e-mail with an attachment (even one from someone you know), you should assume it has a virus in it. Do not open the attachment directly from inside the e-mail. If you try to open an e-mail attachment with an automatic virus, you should receive the following message:

STEP FOUR: ALWAYS save the file to disk where you can check it for viruses rather than opening it. NEVER open a file that may contain a virus (and remember, we ALWAYS assume ALL files have viruses). If you have good virus software, it will check the file as you are saving it. Otherwise, after saving a file, RIGHT-CLICK on the file and choose "Scan with ..."  If the file has a virus, you will receive a message similar to this:

STEP FIVE: Update your virus protection on a weekly basis. Virus software comes with a list of all known viruses so it knows how to detect those known viruses, but the original list of known viruses is only good for the viruses known at the time the list was created. Many people buy a computer that comes with virus software, so they think they are permanently protected from all viruses. The KLEZ virus was not known just a couple of months ago. Thus, if you have not updated your virus software in a couple of months, your virus protection will not be able to detect KLEZ. New viruses and worms come out weekly, so it is IMPORTANT that you update your virus software WEEKLY. Have an active Internet connection and go to the Web site for your virus checking software. Follow the instructions for updating your particular version of the virus software. Some software can automatically update itself if you are connected to the Internet when it is scheduled to update.

 

VIRUS CHECKING SOFTWARE

A requirement of all students is to have adequate virus protection and to update that virus protection on a regular basis. Three popular virus-protection packages are:

I prefer AVG because it is free and it does an excellent job of detecting viruses, including e-mail viruses. Regardless of which software you choose, you should update the virus software at least weekly.

 

*VIRUSES, WORMS, AND TROJAN HORSES

VIRUS: A standalone program or programming code embedded in another program. When activated, it replicates and infects other programs, boot sectors, documents that support macros, or partition sectors on your local computer. Most viruses do not do damage (but a few do).

WORM: A standalone program or programming code that copies itself automatically across disks or through e-mail. Most worms do damage and compromise the security of your system. KLEZ is a worm, not a virus; although, worms are generically referred to as viruses.

TROJAN HORSE: A standalone program or programming code that neither replicates nor copies itself. You must download a Trojan horse from the Web or have someone send it to you. It cannot e-mail itself to you as a worm can. It typically comes disguised as a joke or a useful program (hence the name, Trojan Horse). Many Trojan horses do damage.

 

Maintained according to Earthlink Publishing Guidelines by Jolene M. Morris
©2001 Jolene M. Morris - All rights reserved
Last updated on  Saturday, May 04, 2002