Invasive Software

BB_TX · May 21, 2003

This may prevent you some grief. /forums/images/graemlins/mad.gif
 MSNBC Story 
It also provides a link to free download software to combat the invasive software. The free software seems to have been researched by credible sources to verify that it in itself is not just more trash. Haven't tried it yet, but plan to.

Gary_in_Indiana · May 21, 2003

Here's a simple policy I have to avoid such problems.

1) I don't download anything from anyone I don't know.

2) I don't download anything from someone I do know unless it's something they originated (not something they got from someone else).

3) I don't download anything from anyone unless I'm expecting it.

4) I don't download anything I am expecting until I've confirmed that what I'm about to download is, in fact, what they sent and meets the above criteria.

It is simple enough to do and it works.

Anonymous Poster · May 22, 2003

Good suggestions. These will help too.

Make sure your email program is NOT set to open attachments automatically.

Don't open any email attachment unless you KNOW by its file extension type that it is not any sort of executable file--i.e., jpg, gif, png are OK. Just because it's not an exe doesn't mean it's not executable.

Or use something other than Windows for an operating system.

SnowRidge

cowboydoc · May 22, 2003

I run spybot on all of our computers once a week.

WVBill · May 22, 2003

( Just because it's not an exe doesn't mean it's not executable....)

Exactly - Most Microsoft Office applications have macro (small executable program) capabilities. But worse - Microsoft Access Database (.mdb extension) files can be SELF executing. Microsoft itself recognizes this and its Outlook e-mail application will not accept Access Database (.mdb) file attachments because of the danger.

Generally, my rule is if I don't recognize the sender, I delete the e-mail without opening it whether it has an attachment or not.

On a similar note - I never return calls to phone numbers I get on my pager unless I recognize them. There are scams there too that will cost you big time for just dialing the number.

sendero · May 26, 2003

Here's something I always do just to be safe.

Use Windows Explorer's Search feature to find a file called wscript.exe. It will be in your Windows\System32 folder I believe.

Right click on the filename and select Rename. Name the file wscript_.exe or something similar.

This is the program Outlook uses to execute attachments. If it cannot find it, there is no way for it to execute anything from your mailbox. This eliminates the possiblity of inadventently running something you know you shouldn't.

I got this tip from a coworker of my wife's who has to keep 140 computers running. They still get "not a nice word" people running stuff explicitly and infecting their network periodically, but this trick helped a lot.

Anonymous Poster · May 27, 2003

I use netscape, not so many holes and not so much stuff targeting it. I use common sense as outlined above and have no problems.

looch · May 27, 2003

Wscript.exe is actually the Windows Script Host. It is used to run Visual Basic and Java scripts on your machine. Unlikely to be used on a home PC and is probably a good idea to rename.