Virus/Worm/Trojan
 

 

 

 
What is a virus?
  A virus is a piece of computer code that attaches itself to a program or file so it can spread from computer to computer, infecting as it travels. Viruses can damage your software, your hardware, and your files. Viruses are designed to replicate and spread to other computers through diskettes, CD-ROMs, e-mail attachments, and over the Internet.
What is a Trojan Horse?
  A Trojan Horse is a malicious program that disguises itself as a beneficial or entertaining program, such as a free game, movie, song, etc., but that actually damages a computer or installs code that can collect passwords or personal information, allow a malicious user to take control of your PC to launch denial of service attacks, or use it to send spam. For a Trojan horse to spread, you must, invite these programs onto your computers--for example, by opening an email attachment or downloading and running a file from the Internet. Please Note: Regular users of IRC need to be especially wary of receiving trojan horses in files they download from other users.
What is a Worm?
  A Worm is a computer program which replicates itself and is self-propagating. Worms, as opposed to viruses, are meant to spawn in network environments and move from machine to machine across network connections often clogging networks and slowing down the Internet.
How do I know if a Virus, Worm or Trojan Horse has infected my computer?
 

Infected computers may slow down, stop responding, restart every few minutes, crash frequently, lose files and other data.... and more. Other telltale signs include:

  • Unexplained activity (windows opening or closing on their own, mouse moving on it's own, cd-rom opening or closing etc.)
  • Unusual message boxes or strange error messages
  • Outlook or outlook express taking a long time to close or seeming to hang when you preview a specific message
  • Your e-mail client returns a large number of messages with any of the following error messages: Message could not be delivered, delivery failed, Mail System Error - Returned Mail, Returned mail: see transcript for details, Returned mail: Data format error etc., etc., etc.
  • Corrupt files
  • Unknown programs in the task list
  • Alerts from your firewall about OUTBOUND communication from an unusual source
I've been told I have a Virus/Worm/Trojan Horse but my antivirus program doesn't remove it. What do I do?
  If your PC has a virus, worm, or trojan, but your antivirus software has not detected or stopped it, take these steps to prevent it from spreading:
  Pull the plug: Physically disconnect network cables, and wireless cards (or turn built-in wireless units off). This will instantly stop viruses and Trojan horses on your PC from connecting to or infecting other computers until you are ready to attempt to clean your PC.
     
 

Virus/Worm Removal: Visit the following sites for quick, free virus detection and removal tools and online scans.

First, download and run the McAfee AVERT Stinger** virus cleaner. This tool can remove many common viruses, but it can't prevent virus infection. It will target and remove many viruses that disable or damage anti virus and firewall software.

Second, visit the following sites and scan your PC. You may have to use more than one removal tool to find the culprit infecting your computer. After trying the free Online tools, try to update your antivirus software and scan your PC again for viruses.

   
     
  Trojan Horse Removal: Trojans are often not caught by virus scanning programs, because they work in a different way.
The solution to a trojan infection is to delete the file or files that comprise the malicious program. Visit the following sites for help removing trojans.
   
     
  What is the W32.SQLExp.Worm/SQL Slammer worm and the SQL Spida Worm?
  SQL Slammer and SQL Spida are worms that target system running Microsoft SQL Server 2000, as well as Microsoft Desktop Engine (MSDE) 2000. The worms perform Denial of Service attacks due to the large number of packets they send. Only machines running Microsoft SQL Server 2000 are infected by these worms. However, the SQL server is embedded inside MSDE 2000 - Microsoft Data Engine 2000. There are a lot of applications that silently install Microsoft SQL Server or MSDE 2000. Please Note: Antivirus programs may not detect these threats.
     
  I am infected with the SQL Slammer worm/SQL Spida worm. How do I remove it?
 

First, download and run the SQL Server Critical Update Wizard for Microsoft SQL Server 2000 and Microsoft SQL Server Desktop Engine (MSDE) 2000**. The wizard will walk you through the steps of detecting a vulnerability to Slammer and updating any affected files.

Second, download and install the latest Windows Updates for your operating system**. An "unpatched" operating system is vulnerable to re-infection.

Third, download and run the following removal tool: W32.SQLExp.Worm Removal Tool**

Fourth, visit the following sites and scan your PC. You may have to use more than one removal tool to clean your computer. After trying the free Online tools, try to update your antivirus software and scan your PC again for viruses.

     
  Keep it clean  
  Hopefully after visiting the above sites your PC is now clean, if not, you may need to enlist the help of a computer savvy friend or co-worker. The following tips should help to keep it clean.
     
 

Use both Firewall and Anti-Virus protection protection

Download and install FREE EZ Armor Security Software
* provided by Computer Associates to Road Runner customers. You get FREE Anti-Virus protection, Firewall protection, Pop up Blockers, Anti-Spam, Anti-Spyware, product upgrades and updates, and web support*
Please note: You must have the latest version of Flash Player** to download EZ Armor Security Software* from Road Runner.
*Subject to terms and conditions. Road Runner reserves the right to discontinue any feature or offer at any time. EZ Armor Security Suite software must be downloaded from the Road Runner National site.
*Spam and Virus protection software not available on Macintosh computers.


Download and install the latest updates "patches" for your operating system and Internet software, including your web browser and your e-mail client. Even with updated anti-virus software your computer is vulnerable if it has not been patched. For information on patching your operating system visit the following links.**
Windows Update
3 steps to secure your PC
Frequently Asked Questions About Updating Your Computer
Questions about or problems with Windows Update
Windows Update Support Center
Apple security site
SecureMac.com

Update your antivirus software. Some antivirus protection programs have a feature that will automatically link to the Internet and add new virus detection code whenever the software vendor discovers a new threat.

Scan your system regularly. It's a good idea to let your antivirus software scan your entire system frequently for viruses.

Don't open attachments. One way to prevent virus infections is not to open attachments. Even if the e-mail is from a known source, be careful. A virus may take the mailing list from an infected computer and send out new messages with a destructive payload attached. Pay close attention to the file extensions. Many viruses have a .vbs .pif, or .exe extension. However, just because an attachment does not have one of these extensions is no guarantee it's not a virus. File names can be misleading. Always scan an attached file for viruses before you open it. And unless it's a file or an image you are expecting, delete it.

Turn off the preview pane in Outlook and Outlook Express.

To help increase your e-mail security, set Outlook 2003 or Outlook Express to read all messages you receive as plain text.

Do not click on unsolicited links received in email, instant messages, web forums, or internet relay chat (IRC) channels.

Understand your browser's security settings. Go to Working with Internet Explorer 6 Security Settings* to learn what you can do to tailor Internet Explorer's Security Settings.

Stay informed. Did you know that there are virus and security alerts almost every day? Keep up-to-date on breaking viruses and solutions by bookmarking our Around Town site.

If you choose not to use EZ Armor Security Software please purchase and use virus protection software such as Norton Antivirus** or Mcafee Antivirus**. If you don't already have antivirus software on your machine, acquire some now.

  **For your convenience Road Runner has added links to some popular products or websites. Time Warner Cable and Road Runner do not endorse or support any of the products. They are listed for your reference and represent only a portion of those commercially available.
1
 
 
 
 
     
 
©2006 Time Warner Cable, Inc. All rights reserved. ROAD RUNNER character and name are trademarks of Warner Bros.