Anti-Virus Sites
McAfee
Dr.Solomon
Symantec
InoculatePE

This section covers issues relating to the safeguarding of your computer system. When you log on to the Internet your computer joins a global network, and technically your computer is accessible by anyone else on the Internet. The major safeguards against violation of your system by outsiders are to ensure that your computer does not offer file sharing to others on the network, to understand the basic mechanics of computer virus infections, and to back up your data and registry settings.

Check File and Print Sharing settings

Check your Network settings in Control Panel and make sure that File and Print sharing is disabled. If you have these settings enabled someone else on the network (i.e. anyone else currently surfing on the Internet) would be able to view and alter files on your hard disc.

Use a good Anti-Virus program at all times

Never download files into a mission-critical computer such as your main surgery fileserver. If your Internet workstation is connected into the surgery system you should run anti-virus software at all times.

Various companies offer good cheap anti-virus software, and you can usually get a free trial from a computer magazine CD. Remember that you will need to download virus signature updates regularly to maintain protection. Excellent programs include those offered by Symantec (Norton), McAfee, and Dr.Solomon. You should run regular anti-virus checks as well as configuring the anti-virus software to run in the background.

The best free anti-virus software which I have found on the Internet is InoculatePE, which can be downloaded free, and has regular free updates (notified to you via E-mail).

Understand the security risks of E-mail attachments

E-mail from any source may contain viruses. When you open E-mail remember that the virus is contained in the attachments, not in the text message, so you will be OK provided you do not double-click or open the attachments. Some E-mail programs have the facility to hide file extensions (the last three letters of the file name after the dot). This is not a good idea, as you will not know the file type of the attachment, and this facility should be disabled.

Executable files or programs end in extensions such as .exe, .bat, and .vbs (e.g. computerkiller.exe is a file with the extension 'exe' which means that it is a program). Never run an executable file unless you are very clear that it comes from a 100% reliable source and you are expecting this file in your E-mail. Remember that Word documents can contain macro viruses, and therefore you should have macro protection enabled in Word (configured via Tools/Options/General).

If you must open or run an attachment, then save it to your hard disc in a quarantine folder/directory, and virus scan it before opening.

The one exception to the rule that E-mail viruses can only be spread by running an attachment is the Kakworm virus which makes use of a security hole in Outlook Express/Internet Explorer 5. Microsoft has issued a security patch for users of these programs.

Check your browser's security settings

In Microsoft Explorer look in Tools/Internet Options/Security and ensure that the setting is on Medium or High. If you don't like the idea of cookies then set it on High.

Downloading programs

In a word - DON'T

If you intend to download programs from the Internet you should have a clear understanding of the pitfalls. You will be relying on the ability of your virus scanner to detect a virus within the program, and you will be relying on the integrity of the program author. Even apparently useful programs may contain Trojan viruses - virus programs hidden inside.

Under no circumstances download a program into a mission-critical computer (e.g. your surgery fileserver). If you must download an executable file from the Internet then only do so from reputable sites, download into a specific directory, and anti-virus check immediately.

Plug-ins

Browser plug-ins (Active X control or Netscape Plug-In) also fall under the heading of programs. Download only from a reputable site. A Java applet is less dangerous because of restrictions in the Java language on what it can do to your operating system.

Back up your data

Important data files should always be backed up, so that data can be restored after virus attack, or hardware failure.

Back up the Windows Registry

When you install a new program it may change your Registry settings. Occasionally the Registry may become corrupted and in severe cases you may not even be able to get into Windows. At such times being able to restore an older copy of your c:\windows\system.dat and c:\windows\user.dat files will be invaluable in getting your operating system up and running. Anyone who is familiar with DOS command lines will have no problem with the instructions below. If you have never used DOS it would be better to get an experienced person to do it for you.

Create the back-up directory c:\windows\registry using Windows Explorer. Start your computer in command prompt mode and change to the windows directory (usually by typing cd \windows ).

Type attrib -h -s -r system.dat and press Enter and attrib -h -s -r user.dat and press Enter. This makes the Registry files available for copying. Type copy system.dat .\registry and press Enter and copy user.dat .\registry and press Enter. This copies the Registry files to your back-up directory. Type attrib +h +s +-r system.dat and press Enter and attrib +h +s +r user.dat and press Enter, to restore the Registry file properties to their normal protected status.

 

Raouf Allim
22 Benjamin Road
High Wycombe
Bucks. HP13 6SR
raouf@wycombe.com
23^rd June 2000