=================================================

A Guide to Spyware, Viruses, and Other Malware

Written by Rajiv Kirpalani

Florida International University

============================================

Do many people know how to protect their computer from worms, viruses and other malware? When dealing with these cases, there are three steps that you must keep in mind:  prevention, detection, and deletion.  Furthermore, there are three types of programs that are essential in these processes: firewalls, anti-spyware and anti-virus programs.  One can take the following measures to help make your system more secure for you and your users.

Prevention:

Step One:  A firewall.   This program protects you on the internet.  It acts by closing your ports, or in other words, “closing and locking your front door”.  This prevents intruders from gaining access to your system and installing harmful scripts on your computer.

Where can you get one?

Well, Windows XP comes bundled with a firewall if you upgrade to the Service Pack 2.  You can also download free firewalls from the internet.  One that is trusted and ranked highly among millions is Zone Alarm (www.zonelabs.com).  They offer both free and upgraded paid versions of this software.  You can also get firewalls bundled in common antivirus suites such as Norton (http://www.symantec.com), MacAfee (http://www.mcafee.com/us/), or TrendMicro (the suite I currently use and would recommend, http://www.trendmicro.com).

Step Two:  Anti-Spyware.  This program helps prevent and remove mainly ad and marketing companies from getting private information off your computer to help them boost sales.  This type of malware usually slows down your computer and causes many annoying popup ads.  By installing anti-spyware, you can remove and prevent such companies from taking over your computer.

Where can you get one?

A free anti-spyware that I currently use right now is called Spybot Search and Destroy.  You can get this free off of the internet by going to its homepage at http://www.safer-networking.org/en/index.html .  It may not be graphically stimulating, but it is one of the best anti-spyware programs out there (that’s free too!).  Another alternative is Ad-aware.  This program is offered with a free “trial” program (slightly less powerful).  It is more graphically attractive and does solve other problems (you can always pay for the upgraded version).  I use this as a backup if my main choice fails to work (rarely).  Their website is http://www.lavasoftusa.com/software/adaware/.  An additional item to note is that Microsoft is currently developing an anti-spyware program that will be offered free with windows (it is currently in beta phase).  The reviews look promising, so look out for that.

Step 3:  Windows Update.  This can be found on most windows machines when the user clicks on the start menu.  The icon “Windows Update” will open up your web browser and patch up most of Microsoft’s software (bug fixes, security updates, new versions of programs, etc.)  This feature will help update your system stability and security. 

Further information:

You will probably want to install the Service Packs before you install any other patches.  The service packs usually include multiple patches in one install.  Please be careful when installing these packs, and note that your system may run significantly differently after an install.  Also note that with the newer versions of Windows, you can allow automatic updates to be installed.  By insuring this is enabled (in Windows XP SP 2), access the Security Center (start, programs, accessories, system tools) and click on Automatic Updates (configure as you like).  The Security Center is another useful tool that will aid in monitoring your firewall and antivirus status.


Detection and Deletion:

The main program for detection is some sort of antivirus or anti-spyware program.  Since I went over the anti-spyware in the section above I will focus mainly on anti-virus software.

Step one:  Anti-Virus.  This program acts as a “security guard” that removes intruders from your home.  Antivirus programs detect and then try to repair or delete the virus.  With the proper precautions (a good firewall and anti-spyware) viruses are rare, but can still appear on occasion. 

Where can you get one?

I personally use and would recommend TrendMicro (http://www.trendmicro.com).  They offer a free online scan and a security suite that is bundled with a firewall, anti-spyware and a few other useful features.  Runner-up would be Norton, however, I find that their product is a system hog (slows down your computer).  I have used MacAfee, and found it to be pointless.  It just took up space on my computer and left me with a false sense of security.  My third choice would be various free scans that are listed in the Summary section below.

Concluding comments:

How do you know what you need?  I would recommend using one software program from each of the three categories.  I wouldn’t advise doubling up on firewalls or antivirus software (although you could), because they usually just use a lot of system resources and conflict with each other.  After protecting your system with such products, you may want to scan your computer to make sure everything is indeed safe.  You can do so by using one of the listed online test scans in the summary section.


Quick Summary:

Firewalls:

ZoneAlarm (http://www.zonelabs.com) – Free/Recommended
Trend Micro (http://www.trendmicro.com) – Recommended
Sygate - http://www.sygate.com/
Norton Firewall (http://www.symantec.com)
MacAfee Firewall(http://www.macafee.com)
Windows XP SP 2 (http://www.microsoft.com) – Included with Windows XP

Anti-spyware:

Spybot S&D - (http://www.safer-networking.org/ ) - Recommended
Ad-aware  - (http://www.lavasoftusa.com/software/adaware/)
Microsoft Spyware Removal - (http://www.microsoft.com/athome/security/spyware/ )

All of the above anti-spyware programs are free.

Anti-virus Products:

Trend Micro (http://www.trendmicro.com) – Free online/Recommended
Norton Antivirus (http://www.symantec.com)
Panda Antivirus – (http://www.pandasoftware.com)
MacAfee (http://www.macafee.com)
Avast – (http://www.avast.com/eng/avast_4_home.html) - Free
AVG – (http://free.grisoft.com/freeweb.php/doc/2/) - Free
NOD32 – (http://www.nod32.com/purchase/purchase_usa.htm)

Free Online “Test” Scans:

GRC Shield Up! – (https://grc.com/x/ne.dll?bh0bkyd2)
Sygate Security – (http://scan.sygatetech.com/)
Norton/Symantec – (http://security.symantec.com/default.asp)
Trend Micro – (http://housecall.trendmicro.com/)