Tuesday, March 9, 2010

Internet Threats and Viruses

Microsoft recently released information regarding a potential security threat for users still running Windows XP while browsing the web. The F1 key, a command that opens up the “Help” menu in Internet Explorer, has been associated with potentially opening a security breach to your computer, and should be temporarily avoided until an official update is released by Microsoft. This security breach, which would allow malicious code to infect your computer, is only a threat for users running older operating systems while browsing infected websites. “If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, arbitrary code could be executed in the security context of the currently logged-on user”.

The problem exists in that unsafe websites can have malware hidden in them, waiting to download to your computer. Certain viruses would be given easy access to your computer through a glitch when the user uses the F1 key to open the “Help” menu; essentially giving the malicious code a path to sneak onto your PC. Users running Windows Vista or Windows 7 have nothing to worry about from this threat. For users with Windows XP, be cautious about what sites you browse to while at work. As always, this is one of the best ways to avoid viruses and malware from infecting your computer. In the case of this particular problem, Microsoft claims that avoiding pressing the F1 key while browsing the web will keep users safe. This exploitation can only run with there is both malicious code available and when the user presses the F1 key to open the “Help” menu. Avoid suspicious sites and avoid using the F1 key on your keyboard while browsing the web until Microsoft releases an update.

On a similar note, we have recently seen an increase in infections from the “AntiVirus 2010” virus. This program downloads itself to and infects the user's computer. The virus then pretends to be an anti-virus program and alerts the user that a virus has been found on the computer. The “AntiVirus 2010” program pretends to scan the computer, finds infections that it itself has placed, and then attempts to sell the user a solution to the problem.


AntiVirus 2010 “Anti-virus scanner”

If this virus is encountered, avoid clicking on any of the pop-ups or windows it generates. There are a few known websites that your PC can be re-directed to through a bad link, a pop-up, etc, that will download this virus without you knowing. As an added measure of security, it's possible to add these sites into your Internet browser's list of blocked sites. For Internet Explorer, follow these steps:

Open IE and click on Tools > Internet Options > Security Tab > Restricted Sites (red circle with a line icon) > Sites

This will open a window that allows you to enter in website addresses to block. From the list below, type or copy and paste each web address individually into the bar that says “Add this website to the zone:”, and then click Add. When finished, click Close to close that window, and then OK to close the Internet Options windows. If a bad link tries to redirect your computer to one of the Antivirus 2010 websites that download the virus, the page will be blocked. Again, having real anti-virus software is very important in keeping your computer safe, but avoiding non-work related sites is equally as important.

Sites associated with AntiVirus 2010 to block:

  • download-antivirus2010.info

  • microsoft-browser-security-center

  • mybestantivirus-download.info/en/exe/StageThree.exe

  • av2010.net/install.php

  • av2010pro.com