Risk Assessment / Security & Hacktivism

Malware: what it is and how to prevent it


The importance of a clean machine

Keeping your computer clean of malware is important for several reasons.

First and foremost, malware programs are a security risk. One can never be certain what information these programs are collecting about you from your computer. They potentially could have your name, physical address, e-mail address, credit card number, web site history, passwords, and any other information you have on your PC. The malware authors could use the information themselves or pass it on to others.

Second, malware programs are usually poorly written. They may be unstable, use up the majority of your PC's of resources, or simply slow the computer to a crawl. If you have several malware programs installed, they will often conflict with each other and cause even more problems. Even the fastest computer can be brought to its knees with only a handful of malware programs installed.

Third, any sort of adware will bombard you with advertisements. In addition to the familiar pop-ups and pop-unders, some adware will replace ads on a web site with their own. You do not even need to be surfing the 'Net to get pop-ups, as they will show up at any random time. They often contain adult content, advertise questionable products (including rogue malware removers), or link to scams and other questionable sites.

As mentioned before, malware programs are usually very poorly written and are thus likely to have security holes on top of their "features" which can report your personal information to the authors. Such holes could allow unauthorized access to your system.

Many malware programs also have the ability to update themselves, which not only means they can add new ? possibly more dangerous ? functionality any time, they can also run any other code sent to them by the author (or if there is poor security, anybody).

Broaching the subject of malware

Many people reading this work in IT or serve as a one-person help desk to friends and family. And as most of you know, it is often very difficult to explain technical subjects to those who are not technically inclined (e.g., managers, parents). So how do you get your technically-challenged boss or father-in-law to realize that malware is as bad it sounds and to be avoided at all cost?

First explain the obvious. Malware is responsible for slowdowns and crashes. Besides hurting the productivity and patience of those using infected PCs, it's a productivity waster ? a problem which takes time away from other issues.

If you are discussing the matter with your manager, explain that malware frequently causes pop-ups and other forms of unsolicited advertising to appear on work computers. Time spent closing pop-ups is wasted time. It may also be worth mentioning that ads from adware often contain adult content, content that employers usually try to block under most circumstances.

Finally, explain that malware programs are security risks. Spyware can capture online purchases and other sensitive information. It doesn't take too much imagination to come up with some consequences of having a keylogger installed on a work computer.

Of course you may hear something like "I don't use malware. I use Bonzi Buddy/Weatherbug (insert name of other problematic program)."

Counter with the fact that malware frequently comes attached to seemingly-benign pieces of software. The two parts are often inseparable. If your boss or father-in-law is attached to the functionality provided by a piece of malware, point him or her to a legitimate alternative.

Expand full story

You must to comment.