ClubSymantec

your one-stop resource center for Internet security.


Article

Keep your Indentity and Your Information Virus Free

Online security threats are on the rise. Why? Not only do attackers learn from past experience, but they are also motivated by the enormous profit be found in stealing your information and identity. The attacks are becoming increasingly sophisticated, and utilize a variety of stealth technologies to do it.
Staying ahead of the bar also means doing more damage, not just infecting files, but launching full-scale plagues that extinguish individual computers and entire networks. And because the payoffs are different—an increased bankroll or wholesale destruction—and the sentences even more serious, malicious attackers are trying hard to avoid detection.
Two of the main technologies malicious operators are using to avoid detection are rootkits and polymorphic viruses. Well talk about these next. But remember, just because cyber criminals are trying to steal your money or attackers are attempting to kill off your computer, doesnt mean you have to let them.

Rootkits

Rootkits have become a huge threat. The technology is not new, its been around in the Unix world for a long time. But recently, Windows hackers have released it into the wild. Rootkits are a type of Trojan that keeps itself, other files, registry keys and network connections hidden from detection. Wrapped in a cloak of invisibility, rootkits enable an attacker to access and run the very root of a computer. Rootkit technologies can cloak viruses to evade detection, and when malicious code is spotted, make it harder to completely eradicate it from the infected system.
What do rootkits do? Anything they want to. Once theyve gained control of your computer, modify systems, hide malicious code, hide system processes, and more. They can take your identity. They can wreck your computer. Fortunately, there are a few basic ways to identify them:
  • Install a powerful antivirus tool that contains a powerful rootkit detection technology.
  • Consider a different browser platform or a newer one. For example, Internet Explorer 6 has had some vulnerabilities and security holes since its release in 2001 with Windows XP. Rootkits often find IE a ripe vector for infiltrating systems and bypassing other defense mechanisms. Using Mozilla, Firefox or another alternative browser is a relatively simple way to close a lot of significant doors into your Windows system.
  • Stay vigilant about uploading security patches
  • Make sure you have a strong firewall solution. A software-based firewall on your internal systems can seriously hinder rootkits from spreading.
  • Be sure to turn off any file sharing applications when they are not being used.

Polymorphic Viruses

They're back with a vengeance. Polymorphic viruses can rewrite their code every time they replicate and infect a new file, so they can slip through the system unrecognized. And heres the real catch, because they can run on any machine—yours for example—alongside that machines operating system, they can do whatever they want to and pin the crime on you. By adhering to these basic security practices, you can protect yourself from harm to your computer and being pegged for a crime you didnt commit:
  • Turn off and remove unneeded services. By default, many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server. These services are avenues of attack. If they are removed, blended threats have less avenues of attack and you have fewer services to maintain through patch updates.
  • If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.
  • Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services (for example, all Windows-based computers should have the current Service Pack installed.).
  • Create complex passwords to make it difficult to crack password files on compromised computers. This helps to prevent or limit damage if a computer is compromised.
  • Configure your email server to block or remove email that contains file attachments that are commonly used to spread viruses, such as .vbs, .bat, .exe, .pif and .scr files.
  • Isolate infected computers quickly to prevent further compromising your organization. Perform a forensic analysis and restore the computers using trusted media.
  • Dont open attachments unless you are expecting them. Also, dont execute software that is downloaded from the Internet unless it has been scanned for viruses. Simply visiting a compromised Web site can cause infection if certain browser vulnerabilities are not patched.

Conclusion

Viruses are becoming an increasingly dangerous problem to your network. Viruses are becoming stealthier, more destructive, and out for completely different gains than they were only a few years ago. As these viruses evolve, your arsenal against it must also become stronger and more effective.
Fortunately, by staying vigilant, informed, and by using security tools like Norton AntiVirus and Norton Internet Security you can help reduce your risk. Be sure to visit ClubSymantec and Symantec Security Response regularly to get the latest Internet security information.
We protect more people from online threats than anyone in the world.

Related Link

Norton Downloads
Legal Notices ·Privacy Policy · ·Contact Us ·Global Sites ·License Agreements ·RSS
©1995 - 2009 Symantec Corporation