header
SECURITY CENTER


Latest Virus Threats


DEFINITION OF TERMS

Virus: A computer virus is a small program written to alter the way a computer operates, without the permission or knowledge of the user. A virus must meet two criteria:

Firstly, it must execute itself. It will often place its own code in the path of execution of another program. Secondly, it must replicate itself. For example, it may replace other executable files with a copy of the virus infected file. Viruses can infect desktop computers and network servers alike.

Some viruses are programmed to damage the computer by damaging programs, deleting files, or reformatting the hard disk. Others are not designed to do any damage, but simply to replicate themselves and make their presence known by presenting text, video, and audio messages. Even these relatively benign viruses can create problems for the computer user. They typically take up computer memory used by legitimate programs. As a result, they often cause erratic behavior and can result in system crashes. In addition, many viruses are bug-ridden, and these bugs may lead to system crashes and data loss.

Trojan Horse: Trojan Horses are impostors--files that claim to be something desirable, but in fact are malicious. A very important distinction from true viruses is that they do not replicate themselves as viruses do. Trojans contain malicious code that when triggered, cause loss or even theft of data. In order for a Trojan Horse to spread, you must in effect, invite these programs onto your computers--for example, by opening an email attachment.

Spyware: Spyware is any program that gathers information about a person or organization without their knowledge. Also called a "spybot" or "tracking software", spyware is programming that is put in someone's computer to secretly gather information about the user and relay it to advertisers or other interested parties. Spyware can get in a computer as a virus or as the result of installing a new program. Spyware is often installed without the user's consent, as an automatic download, or as the result of clicking some option in a deceptive pop-up window.

Worm: Worms are programs that replicate themselves from system to system without the use of a host file. This is in contrast to viruses, which require the spreading of an infected host file. Although worms generally exist inside of other files, often Word or Excel documents, there is a difference between how worms and viruses use the host file. Usually the worm will release a document that already has the "worm" macro inside the document. The entire document will travel from computer to computer, so the entire document should be considered the worm. PrettyPark.Worm is a particularly prevalent example.

Hoax: Virus hoaxes are messages, almost always sent by email, that amount to little more than chain letters. These hoaxes commonly contain false warnings and scary phrases such as:

"If you receive an email titled [email virus hoax name], do not open it! Delete it immediately! It contains the [hoax name] virus. It will delete everything on your hard drive and [extreme and improbable danger specified here]. This virus was announced today by [reputable organization name here]. Forward this warning to everyone you know!"

HOW TO PROTECT YOURSELF

Update your virus definitions. Definitions are created by antivirus firms to “fingerprint” new viruses. Your software will not be able to conclusively recognize viruses without its definition. HIT recommends that you run the latest version of eTrust (currently 7.0). If you do not have an anti-virus program or if you have an older version of eTrust, and are supported by HIT, please submit a service request to have your computer updated. Once you have the latest version simply open the eTrust program from the start menu and click on the scanner menu across the top. Select "Signature Update Options" and the "update options" window will appear. Press the "download now" button and the virus definition will automatically update.

By following the Acceptable Use Policies, you greatly reduce the risk of all the aforementioned dangers. Also take a look at the FAQ section for further security information.

If you suspect that you have a virus, or that your computer has been compromised in some other manner, please do not try to address it yourself. Contact HIT for assistance.