How exactly do you get a virus/worm/trojan/spyware

[I_Know_Nothing]

I was always under the impression that you had to run an executable file, download an infected file, or use infected software to get this crap, but I keep hearing about people who get them just by visiting a website or opening an email. So how exactly do you get this stuff on your computer and what are the best ways to prevent it?

[Shalome]

Having good, up-to-date antivirus software will stop many viruses from infecting your computer.

Downloading and/or running infected files/software is one way to get a virus. However, there are worms out there (Like SQLSlammer, MSBlaster, and Nachi/Welcia) that scan netblocks and automatically infect vulnerable computers. There are malicious websites that have scripts that automatically download and run software on your computer, and this software can be a virus or trojan.

Spyware has several ways of getting on your computer -- either a pop-up window will ask whether you want to install it, or it will be attached to some good-sounding program (like WeatherBug), or it will just automatically download itself when you visit a website (just like the viruses and trojans do).

The best ways to prevent the 'sneakier' forms of virus/trojan infection:
1) Have a firewall. ZoneAlarm is a good free firewall that will block incoming worms like Slammer, Blaster, and Nachi)
2) Have good, updated antivirus software
3) Keep your operating system updated (download all security patches and service packs)
4) Raise the security level in Internet Explorer -- go to Tools, Internet Options, Security, Custom Level. Make sure it's set Medium to High. In the Custom Settings, you can always set all the Active X controls to 'prompt', since Active X is one of the most-compromiseds controls for malicious websites.

To prevent spyware/adware infestation:
1) If you're unsure of whether or not a program has spyware attached, you can always go to Google and type in the program name and the word spyware. For instance, say you got a pop-up asking if you wanted to install WeatherBug so you can always see what the weather report is in your area. Go to Google and type in weatherbug spyware. The first site that comes up is WeatherBug's site saying "this is not spyware" and then many sites discussing how to remove Weatherbug spyware from your computer. Therefore, WeatherBug is probably spyware and you probably shouldn't download it.
2) Download a free program like Adaware or SpyBot Search & Destroy and run it regularly. It will detect and get rid of adware/spyware.

Hope this helps!

[I_Know_Nothing]

Thanks. I guess this has gotten a little more complicated since I was in high school.

Originally posted by Shalome
There are malicious websites that have scripts that automatically download and run software on your computer, and this software can be a virus or trojan.

This is what I just don't get, although it will probably sound like a stupid question...why can't law enforcemnt just shut these websites down and fine the people who run them?

[Shalome]

For the same reason that law enforcement can't just find every virus-writer and every warez site and every hacking site.. it's simply not possible. The sites change addresses and internet providers, the code can be taken down quickly, there aren't enough technical people in law enforcement, etc, etc.

And the main reason:
Law enforcement doesn't have time to care about some little script-kiddie site that installs a virus when you go there to download porn or whatnot. It's small-time. Unfortunately, because of the nature of the internet, federal law enforcement would have to get involved, and that's pretty much the equivalent of asking the FBI to investigate a kid who threw a rock at you when you walked by.

[Maverick]

Originally posted by Shalome
that's pretty much the equivalent of asking the FBI to investigate a kid who threw a rock at you when you walked by.

Love the analogy :) ;) :p :D

[jet66]

Another nod for Spybot. You can even 'immunize' your computer with it. I rarely get anything more than tracking cookies, unless it's a new spyware/adware program.

Another way those things get on there is by the user's frustration. When those little 'do you want to install best-pal-buddy-o-mine search bar?' windows pop up, read them carefully. The first one asks that, with a 'yes' and 'no' button. You click 'no,' and instantly another 'yes' or 'no' box pops up, looking exactly like the first. Your first instinct is to click 'no' again for this seemingly persistent pest. Read closely and you will see that it is worded differently, asking if you are sure you do not want to install the program, ending with something like 'clicking no means you consent to installing the program.' Sneaky bastids...

[I_Know_Nothing]

Is there a way to require a password to download anything from the net so if my completely computer ignorant(I'm not really far off myself) brother happens to accidentally download spyware or go to a virus infected website, there would be another layer of protection? If not a windows option, is there a simple program that can be written? Would it work anyway?

[C-Money]

Hi,

For virus, trojans, ect. use AVG,
Norton is pretty mediocre, constantly letting stuff thru.

I have both Spybot and AD-aware, both are pretty good at getting rid of spyware, adware, parasites, ect.

(Jet66) Yeah, I feel your anger, I had that damn I-Lookup bar on my computer for awile and always sending me to porn sites or adware hell.

(I_Know_Nothing) I don't know about a password, but I use Kerio personal firewall in addition to my WinXP firewall.

[redwench]

spyware comes with the territory of the internet, theres no way to prevent it from landing on your computer entirely. heard of google? they give you a nice fat tracking cookie every time you do a search. i shudder to think whats on their toolbar, but its nothing to get excited about.
if you dont want your brother downloading stuff with viruses, use an antivirus program. or dont let him use your computer.

[Ckret_01]

I have Norton '03 SystemWorks and cisco router = no more damn port attacks..lol...