3/5/08

Virus

Virus :-
DOs
Do install anti-virus software and scan personal computers (PCs) regularly using the latest virus signatures;
Do scan all e-mail attachments, downloaded files, floppy disks and compact disks before use;
Do keep PC operating systems and software up-to-date with the latest security updates and patches;
Do perform online transactions only at reliable websites that offer security protection, such as use of encryption, Secure Sockets Layer (SSL) or Secure Electronic Transaction (SET) techniques;
Do choose passwords that are difficult for others to guess, and change them regularly;
Do enable the password function for screen savers and power-on sequences;
Do back up your programs and data regularly; and
Do disconnect your computer from the Internet when it is not in use.
DON'Ts
Don't visit suspicious websites;
Don't download files from doubtful sources;
Don't open or forward suspicious e-mails and e-mail attachments. Delete them immediately;
Don't enable automatic processing of e-mail attachments;
Don't disclose or submit personal information unnecessarily;
Don't use system default passwords;
Don't save login passwords into PCs;
Don't disclose Internet accounts and passwords to others or share accounts with them; and
Don't use illegal software.

Following are some basic anti-virus rules to follow.
·

Do have a written anti-virus policy that details the responsibilities of management and staff, how anti-virus is to be maintained, and specific instructions on what to do in an emergency.
· Do make sure that anti-virus software is installed on every machine, even if the machine is not capable of running e-mail. Viruses can sit undetected in files on any machine.
· Do update anti-virus signature files and scanning engines regularly. A weekly update is good, although daily is better. If your company has a central anti-virus server, it can install updates on other machines on the network. However, a computer must be turned on for this to work. If a machine was not turned on at the time of the update, it will have to be updated manually.
· Do run the anti-virus program in full-time, background, automatic, auto-protect, or similar mode.
· Do enable scans of the memory, master and boot records, and system files upon start up of every machine. It doesn't take long for an anti-virus program to complete these scans and it's just plain silly not to enable these features.
· Do configure the anti-virus program to scan all files — not just executable programs. Viruses come in all sorts of files and just scanning executables is not enough.
· Do enable the anti-virus heuristic controls (if they are available). A heuristic scan takes longer, but not so much longer that it makes much difference to users.
· Don't allow Windows Scripting Host (WSH) to run on machines that don't need it. Although some Windows programs need WSH to run, most machines can have this removed without harm. WSH controls the Visual Basic Language and many viruses have been written with it. By removing WSH, the virus can't operate.
· Do enable Macro Virus Protection in all your Microsoft Office programs.
· Do disable the Preview Pane view in Outlook and Outlook Express. Some viruses can be launched by simply previewing them, even if the message is never opened. Disabling this feature saves you a lot of grief.
· Do not enable JavaScript for e-mail. Although there are no JavaScript viruses, it's only a matter of time before they appear, too. There are other vulnerabilities in JavaScript other than viruses, so it's a good idea to disable this feature in any case.
· Don't allow your e-mail programs to "auto open" attachments.
· Don't open attachments from people you don't know or attachments that seem suspicious.
· Do configure your e-mail programs to display messages in plain text only if HTML formatted e-mail isn't necessary. This is especially true for Web-based e-mail as there have been a number of vulnerabilities found in using HTML-enabled e-mail.
· Do educate all your users on the dangers of e-mail attachments and viruses in general. Also educate users about virus hoaxes and how to tell the difference between real and imagined threats.
· Do use the security features that come with the product. This includes preventing general users from being able to make changes in the program. Some users try to turn off the virus detection and you don't want them to be able to do that.
· Do educate your users about the anti-virus program you are using and how it works. This helps eliminate confusion, and staff will be less likely to try to disable the anti-virus program on their desktop machines.

No comments:

Post a Comment