There are four main entry points for virus/Troj to enter a computer system:
1. User installable program (portable media)
2. User Installable program (download from internet)
3. Email and Email attachment(s)
4. Internet connection tcp/ip stack
Back in the day, the ''sneaker net'' where friends, family and co-workers exchanged programs/data via floppies and self authored CD's, virus's could spread like wildfire in these circles.
The solution to plug this hole was simple:
1. Dissable any ''autorun'' on your computer
2. SCAN the portable media before using it
3. Use write protected media
Friends/relitives/co-workers computers which were infected were easy to spot. Their boxes would insist on attempting to WRITE to the write protected media thereby creating an ERROR which in turn would lead to a virus scan of their computer.
I doupt if there is a computer user that never has downloaded a program or two from the Internet. There surely are some fun and interesting programs that can be had for free.
You can feel safe downloading programs from the interent as long as you follow some simple guidelines:
1. Only download from trusted or popular sites.I get drivers/programs/updates at the MANUFACTURERS website, NOT some fly-by-night corner of the internet.
Downloading from ''ter1 players'' such as: Microsoft, Adobie, mcafee and symantec, cnet and yahoo (as examples) makes sense. If Ulead has a free add-on for its image editing software, I download it from Ulead's website, NOT from some untrusted sourse.
2. Only download from sites which pre-scan all posted downloads. Many of the ''ter1'' sites like ''download.com'' do this for free.
3. Check for number of downloads and read user opinions before downloading. If a few thousand people downloaded the program before you and gave it a ''THUMBS UP'', then its likely a safe download.
4. Never-ever-ever download or install software which is presented in a pop-up. For windows users NEVER EVER click on the popup to close it, ''pop-ups'' will show on your progam bar and use the RIGHT CLICK/CLOSE PROGRAM on the progam bar to close the pop-up.
As I write this, a close friend of mine is suffering from the effects of a virus laden email attachment. We may need to FORMAT/REINSTALL his computer because he did not follow some simple rules in regards to email.
1. De-Install/Remove ''Outlook'' from your Windows box.
While this may prove UNPOPULAR and un-do-able in a corporate environment, in my 25 years of computer usage I've found that EMAIL which is anything MORE THAN simple ASCII text can and often is carrying something more that you surely don't want on your computer.
Back in the days of timed/toll ''dialup'' it made sense for users to ''get in/out quick''. Loging into your ISP, downloading your email and disconnecting was the norm.
SMTP/POP email clients allowed users to download the email content to their computers so that they could read/compose replies at their leasure while not encuring online charges. At the time this made sense.
We now live in a world where ''unlimited'' connections from Dialup to cable to DSL/Fibre is the normal connection to the internet, so using a special (buggy!) program to email makes no sense at all.
Since Microsoft forced on us ''enhanced email'' which may have embedded vbs scripts and other nasty ''goodies'' which RUN AND EXECUTE by default, it was clear that a ''stick to the basics'' approch to email was/is needed.
Hence, I only use WEB-EMAIL.
My web-browser (Firefox/Opera) is the ''client'' and Hotmail/Verizon/Yahoo scan my email (and attachments) before I read it, if there is something NASTY/BAD embedded in it, Firefox/Opera does not have a clue as to what a ''VBS'' is so they won't automaticly or otherwise do anything with it.
Likewise, even if I'm STUPID ENOUGH to open/click on or otherwise OPEN a attachment from a UNKNOWN SOURSE, there is NO OUTLOOK on my computer or EMAIL ADDRESS BOOK on my computer to USE and SCAN to send the VIRUS to my friends and family.
While I have finally allowed OUTLOOK onto one of my laptops, it is only used for keeping my SCHEDULE and as such has no ADDRESS LIST or EMAIL SERVERS defined.
If you use WEBMAIL, you can BLOCK the SMTP port on your firewall. <grin>
Speaking of firewalls.....
Finally, a computers TCP/IP stack is gets most of the press these days. This is the program or series of programs that likely your OPERATING SYSTEM author created to allow your computer to network on the internet.
Simply put, ALL TCP/IP code has bugs in it. Be it: Unix, BE, OS/2, Linx, FREEBsd or even Windows.
While it could be argued that since:
1. TCP/IP was invented/developed on UNIX
2. UNIX is the oldest implimentation of TCP/IP
3. Many comercial sites run on UNIX
that a UNIX or UNIX derived (FreeBSD/Linix) TCP/IP is less buggy then other implimentations (IE: Windows).
The simple fact is that NONE of the TCP/IP implimentations were EVER tested at the EXTREAM's that current virus writers exploit.
It is interesting to note that most if not ALL of Microsofts TCP/IP problems come from their "enhancements".
The FACT IS that if you connect your computer to the INTERNET WITHOUT a FIREWALL, you'll be infected within only FIVE to TEN MINUTES.
Since SOFTWARE is always BUGGY, (as reflected in the countless revisions to ZoneAlarm and the like) the only REAL solution is a HARDWARE FIREWALL.
No computer of mine has EVER attached to the internet without at least a SOFTWARE firewall. All my computers at home are behind a Hardware firewall.
One COULD go so far as to say, "just don't use Microsoft products" and be fairly safe. For the almost 10 YEARS that I used OS/2 I'd simply LAUGH at all the problems that Windows users were having. Most if not all the "issues" are with Microsoft products.
Lets face it, most of the "exploits" are taking advantage of "features" that are UNIQUE to Windows.
Unix/BE/OS2/Linx/FreeBSD/Exc simply don't know what VISUAL BASIC is or what to do with ACTIVE-X code or have a ADDRESS book to exploit or a OUTLOOK (express or otherwise) to flood friends and family with infected email.
While many might feel that my measures are extream, it has allowed me to operate safely for years of computer enjoyment without the frustrations that come with infections.
Mark0.