Protect your Personal Computer (PC)

Antivirus Software - An Overview
We strongly recommend that you help protect your computer from viruses by installing and using an antivirus program. The Internet is full of fun places and vast amounts of information, but also some dangers. Your computer can be damaged by a computer virus sent through e-mail or through a program downloaded from the Web. If you do not use antivirus software, you run the risk of passing viruses along to other computers as well. If you administer a network without virus protection software, all of the computers on your network might be vulnerable.


Virus

A virus is a program that can copy itself and infect various parts of your computer, such as documents, programs, and parts of your operating system. Most viruses attach themselves to a file or part of your hard disk and then copy themselves to other places within the operating system. Some viruses contain code that inflicts extra damage by deleting files or lowering your security settings, inviting further attacks.


Worm

different from viruses in that they copy themselves from system toA worm is a program that makes copies of itself and can spread outside your operating system; it can copy itself from one computer to another by using e-mail or another transport mechanism. Worms can damage computer data and security in much the same ways as viruses, but are system.


Trojan Horse

A Trojan horse is a harmless-looking program designed to trick you into thinking it is something you want, but which performs harmful acts when it runs. It is typically received through downloads from the Internet. Trojan horses do not spread by themselves like viruses and worms. Most virus protection programs only detect a limited number of Trojan horses. A good way to help protect your computer from Trojan horses is to visit only Web sites you trust, and avoid downloading things unless you trust the source as well.


How do antivirus programs help protect your computer?
horses. If a virus, worm, or Trojan horse is found, the antivirus program either quarantines it or deletes it entirely before it damages yourAntivirus programs scan e-mail and other files on your computer for viruses, worms, and Trojan computer and files.

antivirus programs have an automatic update capability. When your antivirus software is updaSome companies that make antivirus programs provide regular updates for viruses. Manyted, new viruses are added to a list of viruses to check for, protecting your computer from new attacks. If your antivirus updates are not automatic, we recommend that you check for updates on viruses are identified every day. If a frequent basis because new the antivirus program you are using requires a subscription, we strongly recommended that you keep the subscription current to receive regular updates. If your list of viruses is out of date, your computer is vulnerable to new threats.

Where can I get an antivirus program?
There are many antivirus programs on the market.

Some of the companies which sell Antivirus softwares are listed above.

Web Security Trends

Cyber-criminals are developing a new genre of highly sophisticated and evasive attacks designed to bypass signature-based and database-reliant security technology.

The latest Web Security Trends Report (Q2 2007) from security firm Finjan warns of a proliferation of "affiliation networks" based on a "hosted model" for malicious code.

The networks use off-the-shelf malicious code packages to compromise highly popular websites and even government domains.

Finjan's study points to the growing presence of malicious code in online advertising on legitimate websites.

"Recent findings reveal that hackers have created a new class of highly evasive attacks which represent a quantum leap in terms of technological sophistication, going far beyond drive-by downloads and code obfuscation," the report states.

"In order to minimise the malicious code's window of exposure, evasive attacks keep track of the actual IP addresses of visitors to a particular website or web page."

Using this information, the attackers restrict exposure to the malicious code to a single view from each unique IP address.

This means that the second time a given IP address tries to access the malicious page, a benign page will be automatically displayed in its place. All traces of the initial malicious page completely disappear.

"Evasive attack techniques, where malicious code is controlled per IP address, country of origin or number of visits, provide hackers with the ability to minimise the malicious code's exposure, thereby reducing the likelihood of detection," said Yuval Ben-Itzhak, chief technology officer at Finjan.

"Moreover, evasive attacks can identify the IP addresses of crawlers used by URL filtering, reputation services and search engines, replying to these engines with legitimate content and increasing the chances of mistakenly being classified as a legitimate category.

"The combination of these evasive attacks with code obfuscation techniques significantly enhances the capability of sophisticated hackers to go undetected. "

A follow-up study conducted by Finjan's Malicious Code Research Centre warns of the growing presence of malicious code in online advertising.

As websites depend more on ad revenues, they often display ads from third-party advertising networks over which they may have little or no control.

While legitimate website owners trust advertisers to display non-malicious content, advertisers sometimes "sublet" space to others.

This hierarchy can often comprise several layers, seriously compromising the level of control the website owner has over advertising content.

The report includes an analysis of an innocent blog site that deploys keyword-based advertisements placed automatically from an ad server.

Finjan found that the ad content also included obfuscated references to malicious code on a third site that uses multiple infection techniques to download a Trojan key-logger to the user's machine.

Another recent example was a banner ad hiding code with the ANI exploit that was being hosted unknowingly on one of the most popular techie websites.