EEB Help: Computer Security FAQ (updated June 2004)

Q: What can I do to avoid viruses and spam?

A: You need to do the following:
1. (Windows & Mac) Enable the Spam Assassin filter on your UA email account
2. (Windows & Mac) Report Spam to the CCIT Postmaster
3. Windows only: make sure Windows Update runs automatically so that the latest security patches are immediately and automatically installed.
4. (Windows & Mac) Install Sophos anti-virus software
   install Sophos
   enable Sophos, including having it run automatically
   set up Sophos to download updates automatically
5. Windows only, home use only: Install Ad-Aware for data miners and spy bots, and run it regularly.
6. Windows only: Install Kerio personal firewall

Q: I use a Mac, so I don't need to worry about viruses and other security threats -- right?

A: Macs are generally more secure than PCs because they haven't yet become a favored target of the hackers, and because their security is inherently superior to PCs. However, they can still be affected by email viruses (although Macs won't be infected by email viruses, they can still receive large numbers of infected emails, clogging the inbox). In addition, some significant weaknesses in OS X and in Safari have recently emerged (see article from BBC News).

Q: My virus protection program says I don't have any viruses, but I still get emails from people saying I sent them a virus!

A: Viruses have the ability to "spoof" your email address--that is, send out messages that look as though they came from your email address, when they didn't. Many viruses, once they hit a computer, will harvest all the email addresses found on that computer. So if someone who has your email address in their address book gets hit with a virus, your address can then be used in the "From:" header in the email used to spread the virus.

This is compounded by the automated mail servers noticing the incoming virus and replying to your address notifying you that you might be the culprit.

There is nothing you can do about it at the moment, though changes in the internet mail system are afoot. Best to delete without rancor and chalk it up to the price of 'free' email.

Q: What's the best virus protection program to get?

A: If you have a PC connected to the U of A ethernet system, you must install Sophos, the U of A free anti-virus tool - now available for remote update via tcp/ip.

Q: Viruses always arrive via email, right?

A: Email is not the only way you can get a virus or worm. The Sasser virus spreads through open TCP\IP ports on Windows PCs that have not been patched with the latest Microsoft patches. See the Sophos website for a description of the Sasser virus, now on campus as of May 3, 2004, and a link to the removal tool.

Q: What about a firewall--should I get one of those too?

A: Yes. you can use Kerio, the U of A free firewall for PCs.

Q: What's the best way to stop all that horrible SPAM I keep getting?

A: The University uses a tool called Spam Assassin. Here's how to enable it.