Securing your computer from viruses, spyware and other threats

(Please also refer to the document 'Resolving virus and spyware related problems' if you think you may have already been infected)

1. Install the latests system updates

   Use the 'Windows Update' icon (available from the start menu) to select and apply the latest windows updates for your computer. Further information on Microsoft updates is available from Microsoft. Mac users should use the instructions on the Apple website.

2. Update your anti-virus program

   The University has paid for a site licence for anti-virus software from Sophos. This can be obtained by logging in to OUCS Registration and will need to be re-installed every academic year. There is also Microsoft's free Security Essentials.

3. Check for spyware

   Spyware is code that can be added to your computer by some websites that can cause pop-up ads and monitoring of your online activity. You should regularly check for spyware using only a recommended package such as Microsoft Windows Defender (built-in to Vista and 7).

4. Avoid untrusted software

   Be wary of software from sources that you are unfamiliar with. Can you be sure that the software is safe and free from viruses? Many 'free' applications contain spy-ware and tracking tools to record what you are doing on your computer. Details on recommended software.

5. Be suspicious of every email message

   Exercise caution, even if you recognise the sender's address. The sender's address may have been 'spoofed', meaning that it is not actually from the source indicated in the email header. If the subject heading, message content or attachment is different to what you would normally expect from the sender, it could be a virus. If in doubt, email or phone the sender for information before opening a suspicious looking email. Be particularly cautious about email attachments that have the following extensions: .exe, .bat, .vbs, .vbe, .js, .jse, .wsh, .wsf, .shs, .shb, .hta, .reg, .scr and .pif.

6. Firewall

   Recent versions of Windows and Mac OS come with a built in firewall. You should enable this. Details on how to enable and disable the system firewall are available from the help system documentation (search keyword 'firewall').

7. Password protect and don't use Administrator level account for day-to-day work

   Create another user account for your everyday use, separate from the root / admin account. The operating system will automatically prompt you if you need Admin rights in install software for example.

8. Know about "Phishing"

   Phishing is a common scam that uses spam email (or a telephone call) to deceive people into disclosing their credit card numbers, bank account information, addresses, passwords, and other sensitive information. Never reply to or select links to sites that request 'confirmation' of personal details.

9. Do not distribute virus warnings

   They are often hoaxes.  Genuine virus warnings do not ask you to forward the message, or provide instructions on 'disinfection procedures'.  By following hoax virus instructions and forwarding the message you may actually be propagating a virus.

10. Backup data

    Always ensure that you have copies of important data saved to alternative locations, the OUCS HFS backup service is free to use.

    
    Further information is available at http://www.getsafeonline.org/