Security needed for computers in modern offices

Antivirus programs, firewalls and broadband routers can help protect your computer, privacy.

Issue: April 1, 2004

ByJeffrey R. Brant, MD

Are you frustrated by how slow that new computer is running after just 3 months of use? Are you bombarded by annoying pop-up ads and windows when you are trying to do something on the Web? Is your e-mail box stuffed with spam messages?

If you answered yes to these questions (and I bet you did), you are not alone. All of us who use computers with any kind of Internet access are under a constant and escalating attack.

But there are things you can do to protect your computer from being taken over by outside forces. And there are steps you must take to protect your identity and personal information.

Unfortunately, most people are spoofed into installing unwanted applications on their computers that do everything from tracking the Web sites they visit, delivering banner ads and pop-up windows and, worse, “zombifying” their computers by forcing them to send out spam messages to countless other computer users without their permission or knowledge. Many of these messages contain malicious viruses. Even if you use the Internet infrequently, it is still your duty as a good “netizen” to prevent your computer from performing the latter task.

The best advice is to take action as soon as you start using a new computer. It is much easier to protect your PC before it becomes festered with “malware” than it is to try to repair things later. Many malicious programs take over your operating system and actually prevent it from being easily repaired.

Here is my personal cookbook of steps to protect a new computer. (This discussion is limited to Windows XP-based systems.)

Updating Windows

The first thing to realize is that the shiny new computer you just purchased from Dell, Gateway or another manufacturer does not have the latest Windows security patches and fixes. As soon as you connect the components, turn on the system and go through the initial Windows setup and registration process, you need to get the latest Windows patches. Fortunately, this is very easy to do thanks to Windows Update Service.

Be sure you have an Internet connection. Then, open Internet Explorer and click on the Tools menu and select “Windows Update.” Click on the “Scan for updates” link. Follow the on-screen directions. Make sure you install all the critical updates and service packs. These are very important to your operating system security. You may have to run the Windows Update procedure several times in order to get all the updates. After installation, you may be instructed to restart your computer. You should also download and install the noncritical Windows XP and driver updates. You can click on the links on the left-hand side of the update page to see what is available. Once you select the updates you want, Windows will download and install them for you. Just follow the on-screen prompts. If you are still using a slow dial-up Internet connection, plan on spending a couple of hours downloading the updates.

Antivirus programs, firewalls

Next, you need to make sure you have an up-to-date antivirus program running on your computer at all times. Chances are, one came with your new system. You must activate it before it will work. These programs use subscription services that charge a monthly or annual fee. Most computer manufacturers will throw in a few months at no cost to you. Make sure your antivirus program automatically updates itself as new threats are discovered. My favorite antivirus program is McAfee VirusScan Online (www.mcafee.com). I like it because it is easy to download and install, it has very little effect on system performance, and it does a superb job of blocking virus activity on your computer. Norton Antivirus is also a good choice. These programs run in the background, watching for viruses or other suspicious activities. They can also scan your system to look for hidden viruses and other unwanted programs. You should run a full scan once every week or two, and most anti-virus programs can be configured to do this automatically on a schedule of your choice.

Your computer should always operate behind a firewall. This helps hide and protect your computer from outside intruders. Firewalls can be either hardware or software. Windows XP comes with a rudimentary software Internet firewall, which you should make sure is turned on. But it is best to have a more robust solution. My favorite software firewall is Zone Alarm Pro from Zone Labs (www.zonelabs.com). The program is inexpensive and nonobtrusive. It puts your computer into “stealth” mode by closing unnecessary ports, thereby hiding it from hackers. In addition, you can tell it which programs should be allowed Internet access.

Broadband router

If you have broadband (cable or DSL modem) Internet access, you should think about purchasing a broadband router. This inexpensive hardware is easily installed between your cable or DSL modem and your computer or local network. It is the best way to share Internet access among all your home computers, and it allows you to share resources such as printers and disc drives. Most routers have built-in firewalls, further blocking your computers from outside attacks. They take care of assigning each computer a local IP address and transparently directing data packets to and from the appropriate machine or resource. A good example of this is the Linksys WRG54G wireless broadband router. It not only allows you to connect up to four PCs through Ethernet cables, but it provides wireless Internet access for your wireless-enabled notebook or desktop computers. This is very convenient if you do not want to run wires through your walls in order to network your computers. Less expensive models (without wireless capabilities) are also available. (Although setting up a home network is beyond the scope of this article, it is not difficult or expensive to accomplish.)

Spam

Educate your family about the lurking dangers of opening e-mail from unknown senders and surfing to malicious Web sites that often disguise themselves as something fun or useful. A common practice among clever identity thieves is to send out mass e-mailings that spoof legitimate services and ask the recipients to update their account information. Many times a link is provided to a Web site that looks just like the real thing (e-Bay, PayPal, AOL, etc.). But if you very carefully inspect the Web address in your browser’s location field, you should be able to tell that it is not legitimate. If you provide the requested information (credit card or social security number, address, etc.), you are giving away your personal and financial identification to a thief. As a rule never send credit card numbers through e-mail, and if you receive mail like this, do not click on links contained in it. Instead, open the site yourself (such as www.ebay.com), and find out if your account really does need updating. Chances are it does not.

Never respond to any spam e-mail, no matter how tempting it might seem. If prices for software or other products seem too good to be true, they probably are. If the e-mail does not indicate a legitimate telephone number or physical address, you can be sure it is a spoof to trick you into entering your credit card information. Once spammers get this information from a few people, the Web site is shut down, leaving you without the merchandise you thought you were purchasing; your credit card number could also be sold on the Internet.

Computer viruses, Trojan horses and worms enter your computer through various routes. Many are contained in harmless-looking e-mail, often cute animations or jokes that contain embedded malware just waiting to hop into your computer and start creating havoc. We are all guilty of forwarding such e-mails that we receive from family and friends. Best advice: Do not forward them, unless you are absolutely certain they contain no unwanted elements.

Spyware

Scan for and remove “spyware” on a regular basis. An excellent and free application known as Spybot Search and Destroy is readily available for download (www.safer-networking.org). This program will systematically scan through your entire system, looking for programs that spy on your browsing habits and direct junk e-mail and Web ads at you. The program is simple to use, and you will be amazed at how much junk is running on your PC without your knowledge. An added benefit of removing the spyware is that your computer’s performance should noticeably improve. This program will even “immunize” your computer against future inadvertent installation of such elements. The author also frequently provides updates to the program as new threats are discovered. The program allows you to easily download and install these updates. I recommend running this program at least once a week to keep your PC free of spyware.

Staying safe

If you already have a system riddled with viruses and spyware, restoring it could be quite challenging. But by using the methods and programs discussed here, you should be able to remove all but the most vicious offenders.

Set up an additional, free e-mail account (Hotmail, Yahoo, etc.) and use that address whenever you are required to provide an e-mail address by a site that you are not familiar with. That way, if your e-mail address ends up on spam lists, you can always cancel the account. This will help prevent lots of junk mail from filling up your regular e-mail box.

Computers and the Internet are wonderful tools and necessary for your tasks of information management. But when your PC becomes unusable because of unwanted programs, they can be a hindrance to your productivity. With some knowledge and effort, you can protect your system and online identity while making the Internet a safer place for everyone.

For Your Information:

Jeffrey R. Brant, MD, can be reached at the Allatoona Eye Institute, PC, 962 JF Harris Parkway., Suite 201, Cartersville, GA 30120; 770-382-3598; fax: 770-382-4892; e-mail: alltoonaeye@mindspring.com; Web site: www.allatoonaeye.com.