Information Security
Frequently Asked Questions
Viruses, Trojans and Worms
How do I protect myself from computer viruses?
- Install anti-virus software on your computer
McAfee anti-virus is available to all TU faculty, staff, and students
free of charge, for use on systems located at home and at the
university. Go to
OTS software downloads to download.
- Update your virus definitions regularly
New virus identities (IDE) from McAfee are released almost every day. By
applying these IDE files, you ensure that your system is fully
protected between monthly updates. See the
OTS Download page for further information, as well as
information on how to perform an automatic or manual
installation of the IDE files. Additionally, McAfee gives you
the latest virus warnings and news by e-mail... subscribe to
McAfee e-mail notification services.
- Use good judgment when opening strange e-mail attachments
and/or files
Never open an e-mail attachment from someone you don't know. It is wise to
check with a known user if you receive an attachment from them
that you were not expecting. The type of
attachment can be a tip, as well. If you get an e-mail
attachment that ends with two periods, such as .txt.doc, .xls.exe,
or any combination of file extensions, DO NOT OPEN IT! To find
out the real name of an attachment, right click on it and choose
"properties". If the file has an .exe, .vbs, .com, .cmd, .pif,
or .lnk extension, do not open it UNLESS you were expecting it
or it was sent by a known (trusted) user and you have confirmed
that they meant to send it to you.
- Backup your data
The original file that's become infected or was destroyed can be restored if
you have it backed up.
How can I tell if a message warning me of a virus threat is
real or not?
It is true that many messages warning about viruses are actually email hoaxes
designed to frighten people and desensitize them to real virus
threats. A list of known virus hoaxes is available at the
Symantec Security Response - Hoax Page. It is best to
rely on known dependable sources of accurate information. When
REAL virus threats come to bear the ISO posts information about
them.
What do I do if I think my computer is infected with a virus
or otherwise compromised?
If you have reason to believe that your computer has been the victim of a
virus or other compromise, there are some important steps to
take and points to remember as you investigate.
- Remain calm! Remove your computer from the network (e.g.,
unplug the ethernet cable and disable any wireless connections).
- Record any error message or details about the possible
compromise.
- Do not use your system for further work, and don't
add/change/remove any files.
- Check to see if your computer has anti-virus software, and the
last time the virus definitions (DATs) were updated. Make sure
they were updated within the last day.
- Check to see if you've applied all the latest operating system
patches for your system.
- If you have anti-virus software that is up to date, scan all
files on your computer and clean any infected files.
- If you're still not sure your machine is clean and
uncompromised, contact the your departmental IT support or the
OTS Help Desk at 4-5551.
- It may turn out that your computer was not compromised, but if it is, the above
recommendations can help minimize risk to your files, and could
possibly aid in identifying the source of the intrusion.
I keep getting email messages returned to me, but I never sent such a
message. Does this mean I have a virus?
No. The majority of email worm viruses in circulation forge the return
address field of the infected messages they send, using an email
address found on the infected computer. You are receiving the
bounce messages because, on an infected computer, your email
address was found and used by the virus to forge the return
address. You will likely continue to receive such messages until
the person with the infected computer realizes it and removes
the virus. Nonetheless, there is never a bad time to make sure
that you have up-to-date antivirus protection on your computer
and to scan your system for known viruses.
Why should I use McAfee AntiVirus instead of Symantec or Norton?
There are a few advantages of using McAfee AntiVirus.
- McAfee AntiVirus has already been paid for
- McAfee AntiVirus updates itself automatically without any action required by the user
- McAfee AntiVirus is what OTS supports. If you have problems related to another antivirus product, OTS
may not be able to help resolve them.
How can I tell if I have any antivirus software installed on my computer?
It really depends on the specific software your computer may be running.
Most antivirus programs have icons that sit in the system tray
of your computer's desktop (for Microsoft Windows) to indicate
their activity. Looking there is a good way to tell if you have
antivirus software, and which software package it is. Also, most
antivirus software will display a "splash screen" when the
software starts (usually, automatically when your computer has
just been turned on).
My computer has already been infected by a virus, will installing McAfee remove the
virus?
Generally, no. If you have already been infected by a virus, it is best to
have the virus removed before antivirus software is installed.
Please contact the OTS HelpDesk and arrange for assistance.
I need to install McAfee AntiVirus. How can I do that?
Installing McAfee AntiVirus is a simple and quick thing to do.
The package and instructions for installation can be found at
the
Software Downloads page of the OTS website.
Information Security Office
Office of Technology Services
Cook Library, 4
Hours: Monday - Friday, 8:30 a.m. to 4:00 p.m.
E-mail: infosec@towson.edu
Administration and Finance Questions
|
