KIM KOMANDO'S DAILY COMPUTER/INTERNET TIP

AND NOW FOR TODAY'S TIP... When good computers go bad

I'm dispensing with the Q&A format today to talk about the MyDoom virus. This malicious program poses a threat to all of us and to the Internet. This is important, so stay with me.

Last weekend, the SCO Group's Web site was attacked by thousands of infected machines. These are mostly private machines, owned by individuals. They have been turned into zombies by the MyDoom virus. MyDoom is a backdoor virus, so-called because it uses an obscure Windows communications channel out of the zombie computers to reach the Internet.

More attacks are expected. Microsoft also is expected to be attacked. McAfee, the anti-virus company, estimates that 175,000 machines have been turned into zombies. Other estimates range over 1 million.

The incident over the weekend is known as a Distributed Denial of Service attack. These attacks bombard network servers--in this case, servers at SCO Group--with requests for service. The overwhelming traffic slows the Web site to a crawl, or causes it to crash.

Programs like MyDoom can do much more than attack Web sites. They can be used to find credit card and Social Security numbers, passwords, and other sensitive information on the zombie computers. They can then send that information back to the people who wrote the virus.

Backdoor programs like MyDoom also are used as spam engines. They can send millions of spam e-mails from infected machines. In most cases, the owners never know. You could be spewing pornography to the world without your knowledge.

This is very serious business. You must protect yourself. There's really no reason to be snagged by this--or any other--virus. If you take three simple steps, you'll be safe.

First, install anti-virus software. Then--and this is critical--go to the manufacturer's Web site and download the latest update. It will include code that can uncover the most recent viruses. Your anti-virus software will be useless if it is out of date. Scan your computer with the anti-virus program. If you are infected with MyDoom, the anti-virus program will find it.

There are a number of anti-virus software companies. Four are: McAfee, Symantec, Panda and Grisoft. The latter makes the free AVG program. The others charge for their programs. Because you're paying the first three, you'll probably get better service if you have a problem. Their Web sites are:
http://us.mcafee.com/default.asp
http://www.symantec.com
http://www.pandasoftware.com
http://www.grisoft.com/us/us_dwnl_free.php

Free tools are available if you can't get MyDoom off your computer. Find them at:
http://vil.nai.com/vil/stinger/ (McAfee AVERT Stinger removal tool)
http://snipurl.com/mydoomresponse (Symantec removal tool)
http://snipurl.com/48de (Panda Software removal tool)

The second step: Install a firewall. These programs hide your computer from hackers on the Internet. Good ones also refuse to let backdoor viruses communicate with the Internet. My favorite firewall is ZoneAlarm, which is free. Get it through my site at:
http://www.komando.com/bestshareware.asp

Do not depend on the firewall built into Windows XP. It will not block transmissions from backdoor programs.

If you have a network and a router, you may have a built-in firewall. Check your router's documentation. Be sure the firewall has been enabled and updated, if necessary.

Your last step should be updating Windows. Microsoft issues security updates when vulnerabilities are discovered. Automatic updates are easy in Windows XP, ME and 2000. Get the details at:
http://www.komando.com/tips_show.asp?showID=6086

Manual updates are also easy. The link to my site above explains that, too. The manual update works with all versions of Windows, including 98.

This is an unsafe world, and protecting yourself is your responsibility. Don't let the bad guys take control of your computer. Follow these steps, keep everything updated, and you'll be fine.

Hope this helps. I'll see you tomorrow with another great tip!

Kim :)

For more information about Kim’s e-letter, go to http://www.komando.com

-- Copyright 2004, The Kim Komando Show. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of The Kim Komando Show is prohibited and strictly enforced. Newsletters may contain links to sites on the Internet owned and operated by third parties. The Kim Komando Show is not responsible for the availability of, or the content located on or through, any such third-party site. Information in this document is provided "as is," without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose and freedom from infringement. The user assumes the entire risk as to the accuracy and the use of this document. We will not be liable for any damages of any kind arising from the use of this information, including, but not limited to direct, indirect, incidental, punitive, and consequential damages.