Virus protection
How can I protect myself from computer viruses?
Install anti-virus software on your computer
McAfee VirusScan scanning software is available to all University staff, and students free of charge, for use on their own PC or on a University owned PC. Downloading and installing McAfee VirusScan software explains all you need to know.
Update and scan for virus definitions regularly
Run the VirusScan Console from under Network Associates in the Start - Programs menu. Double-click the Auto Update entry in the list. Click the Schedule tab at the top of the resulting window, and put a tick next to the Enable box. Create a schedule to make an automatic connection to the Network Associates website and download updated virus definition files. Set this so it happens once each week, at a time when you usually have your PC switched on. e.g. every Tuesday at 1.00pm.
Use good judgement when opening strange email attachments and/or files
Never open an email attachment from someone you don't know. It is wise to check with a known user if you receive an attachment from them that you were not expecting.
The type of attachment can be a tip as well. If you get an email attachment that ends with two periods, such as .txt.doc, .xls.exe, or any combination of file extensions, DO NOT OPEN IT! To find out the real name of an attachment, right click on it and choose 'properties'. If the file has an .exe, .vbs, .com, .cmd, .pif, or .lnk extension, do not open it unless you were expecting it or it was sent by a known (trusted) user and you have confirmed that they meant to send it to you.
Backup your data
The original file that's become infected or was destroyed can be restored if you have it backed up.
Phishing
Have you received email with a similar message to those detailed below?
It's a scam called 'phishing' - and it involves Internet fraudsters who send spam or pop-up messages to lure personal information (credit card numbers, bank account information, Social Security number, passwords, or other sensitive information) from unsuspecting victims.
Phishers will send an email or pop-up message that claims to be from a business or organisation that you may have previously dealt with. For example: an Internet service provider (ISP), bank, online payment service, or even a government agency. The message may ask you to 'update,' 'validate,' or 'confirm' your account information.
Some phishing emails threaten a dire consequence if you don't respond. The messages direct you to a website that looks just like a legitimate organisation's web site. But it isn't. It's a bogus site whose sole purpose is to trick you into divulging your personal information so that the operators can steal your identity and run up bills or commit crimes in your name.
Examples of phishing messages
Example 1
"Dear Subscriber: Your information in our file was marked (flagged) as incorrect (fraudulent). To avoid any inconvenience or an interruption in your service, please take just a moment to update your account and billing information. Be sure to enter information in all the fields to avoid possible mistakes.
To respond and update your information, click on the link below: http://billing_department.yourISP.com/fraud_department" SAMPLE - Link is not active.
Example 2
"We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below and confirm your identity."
Example 3
"During our regular verification of accounts, we couldn't verify your information. Please click here to update and verify your information."
Tips to help you avoid getting hooked by a phishing scam
If you get an email or pop-up message that asks for personal or financial information, do not reply, don't click on the link in the message, either. Legitimate companies don't ask for this information via email. If you are concerned about your account, contact the organisation mentioned in the email using a telephone number you know to be genuine, or open a new Internet browser session and type in the company's correct Web address yourself. In any case, don't cut and paste the link from the message into your Internet browser - phishers can make links look like they go to one place, but that actually send you to a different site.
Use anti-virus software and a firewall, and keep them up to date. Some phishing emails contain software that can harm your computer or track your activities on the Internet without your knowledge.
Anti-virus software and a firewall can protect you from inadvertently accepting such unwanted files. Anti-virus software scans incoming communications for troublesome files.
A firewall helps make you invisible on the Internet and blocks all communications from unauthorized sources. It's especially important to run a firewall if you have a broadband connection. Operating systems (like Windows or Linux) or browsers (like Internet Explorer or Netscape) also may offer free software 'patches' to close holes in the system that hackers or phishers could exploit.
Don't email personal or financial information. Email is not a secure method of transmitting personal information. If you initiate a transaction and want to provide your personal or financial information through an organization's website, look for indicators that the site is secure, like a lock icon on the browser's status bar or a URL for a website that begins 'https:' (the 's' stands for 'secure'). Unfortunately, no indicator is foolproof; some phishers have forged security icons. Review credit card and bank account statements as soon as you receive them to check for unauthorised charges. If your statement is late by more than a couple of days, call your credit card company or bank to confirm your billing address and account balances.
Be cautious about opening any attachment or downloading any files from emails you receive, regardless of who sent them. These files can contain viruses or other software that can weaken your computer's security.
Links to Websites
Microsoft video – What you should know about phishing identity-theft scams
