Safe Computing
Contents
Viruses and worms
Viruses and worms are malicious pieces of software that are typically transmitted via email, through the exchange (or access of) infected files, or by the exploitation of design flaws in operating systems, web browsers, database software, and other commonly used software. They may interfere with proper functioning of applications, slow down response time, display annoying messages, and/or destroy files. They may cause harm immediately upon infection, or lurk until a specified date time delay, or triggering event. They may cause harm to other computers either by infecting them or by participating in coordinated attacks under the control of a hacker. They may capture passwords or other sensitive information and forward them to hackers, and they may be programmed to allow the subsequent download of additional malicious code.
Never download software from sources that you are not absolutely sure of, and ensure that you have current anti-virus software and personal firewalls installed and activated.
Phishing
Phishing refers to email that directs users to illicit web sites that mimic those of real companies, often banks or other financial institutions, that request users to enter personal and financial information under the pretext of protecting themselves from fraudulent use. Typical messages may refer to attempted unauthorized access to your account, security audits, updates of account information, etc. NEVER click on any of these links, even if the message appears to come from a business you have an account with (unless there is personalized information in the email such as your account number, order number, balance due, etc., that refers to a specific transaction that you are aware of). Instead, go to the web site you would normally go to for the specified institution, whether you have it in a bookmark file or enter it by hand.
Spyware
Spyware refers to code that captures and retransmits information entered into your computer applications. It may be introduce into your computer in a variety of ways, including from web sites. In addition to invading your privacy, spyware may cause slowdowns, often severe, during typical use of your computer, including email, word processing, etc. The use of a personal firewall is of great help in preventing spyware infection (see below), and several tools exist for the detection and removal of spyware, as well as immunization against infection. The UC Merced IT Help Desk can provide further information about these tools.
Personal firewalls
Personal firewalls restrict network activity to known applications, and prevent malicious people and programs from exploiting holes in operating systems and other software applications. They exist for virtual all desktop operating systems, but are most critical for laptop users (who may connect their laptops to networks with varying degrees of protection) and for Windows users (because most attacks are aimed at Windows operating system and applications). The personal firewall found in Windows XP, Service Pack 2 has been found to be highly effective and easy to configure, and is strongly recommended. Information about personal firewalls for other desktop environments and potential restrictions on firewall usage may be obtained from the UC Merced IT Help Desk.
Anti-virus programs
Anti-virus software checks incoming files to detect those with known worms or viruses. Files may come via email, via portable media such as diskettes, CDs, USB memory devices, etc., from accessing file servers, and other means. They often have many configuration options, and in some cases may interfere with the normal functioning of certain applications. When in doubt, please contact the UC Merced Help Desk for assistance.
All desktop computers should have anti-virus software installed and operational. Computers configured by IT come with anti-virus software set up; licenses are available for other computers. As new viruses are constantly being created, and old ones updated, you should ensure that updated virus detection configuration files are installed on a weekly basis (IT provided computers are configured to perform these updates automatically). Also, because there will always be a time delay between when new viruses appear and the anti-virus protection can be updated, never rely solely on anti-virus software for protection. You should never open an attachment to an email unless you know the person who sent it AND you are expecting it or are reasonably sure that it is genuine. Many viruses propagate by using address files on infected machines, so just because a file appears to come from someone you know doesn't necessarily mean that it did.
Operating System updates
Current Windows and Macintosh operating systems can be configured to automatically download updates, including those that correct security flaws. Systems currently delivered by IT are configured for automatic updates, but older systems (or those which have been reconfigured by users) may need manual intervention to check for or approve the installation of available updates. Please ensure that updates are checked for and installed on a regular basis; the IT Help Desk can assist you in verifying settings.
Looking for help?
We offer a number of tutorials and FAQs available in the Guides & FAQs section.
If you have any questions, problems, or comments, please contact the IT Help Desk via email at helpdesk@ucmerced.edu, via phone at 209.228.HELP (4357), or visit them in the Classroom and Office Building room 132A.