Locking Down Your Computer

Identity theft can happen in more ways than you can shake a stick at. But one of the reasons why attacks on our computers bothers us so much, apart from the fact that they can be the most dangerous, is that it feels a little like a home invasion. The thought that something nasty and dangerous has crawled across the world, stalked it's way over the internet, and for whatever reason is now on your computer, in your home, inside your walls, makes it feel like a very personal crime.

Which is why you don't want it to happen. Your computer should be free from viruses, spyware, bots, keyloggers and all those other nasty things that go bump on the net. It is a pretty easy thing to do, but failing to do it is not so pretty.

Pests, Pests, Everywhere!

Computer viruses are like an umbrella organization for all the bad stuff that can sneak on to your computer. It's often referred to simply as malware (short for malicious software) and is usually a catch-all for all kinds of computer pests including spyware, Trojans, keyloggers, and even worms.

• Spyware focuses mainly on monitoring your computer use and creating a connection with the spyware author so he or she can spy on your activities and potentially steal your information.
• Trojans are similar to spyware and get their name because they usually pose as something else, like a legitimate software program, in order to trick you into downloading them.
• Bots and zombies are another type of code that tries to infect your computer and take control of it. They will then either try to steal your personal information, or hijack your computer and add it to a large network of infected computers (called a botnet) that is used by criminals to attack other computers and web sites, and even store and exchange pornography.
• Keyloggers are designed mainly to monitor your keyboard use, grab anything that looks like a password, and pass it on to the creator of the keylogger.

What Malware Can Do

Once it's on your computer, malware can carry out a variety of pre-programmed and unsavory tasks like:

• Pilfer your personal information.
• Steal your identity.
• Track your online activity.
• Redirect your Web searches.
• Deliver unwanted advertising.
• Hijack your PC and browser.
• Use your computer to attack other computers or as a hiding place for stolen information and even pornography.
• Force you to pay for fake software in order to end irritating pop-ups.

And there's growing concern that infected or hijacked computers could also be used in terrorist attacks against a wide variety of targets.

How to Protect Yourself

Preventing malware infections like viruses and spyware requires a mixture of good computer habits, smart security rules, vigilance, and the right technologies.

• Make sure you have good quality anti-virus and anti-spyware software installed on every computer you use. That's one of the few reliable protections you may have. Brands like Norton, McAfee, Trend Micro, Kaspersky, AVG, and Webroot are all reputable.
• Don't download or share software from sources you don't completely trust. This includes screensavers, PC performance tools and utilities, video and music clips, mortgage calculators, games and other similar programs.
• Be very discerning about the websites you visit, and if you get any kind of a pop-up window, close it by hitting Alt+F4 instead of using the Close button. That can help spoil any attempt to covertly use the pop-up as a spyware install.
• Always read the fine print in the terms of service before signing up for any online service or installing any software.
• Make sure you have a good firewall installed that can block outbound traffic. Firewalls such as ZoneAlarm can prevent malware from dialing home with your passwords or other stolen information.
• Keep up-to-date with system patching. Most types of malware can take advantage of known and unpatched vulnerabilities, especially in Windows products like Internet Explorer. So make sure you regularly check Microsoft and other web sites for the latest news and patches.
• Regularly sweep your computer for viruses, spyware and other pests. A complete computer sweep once a week is ideal.

What Else Can You Do?

• Manage your passwords carefully. That means always create random passwords that are hard to guess and at least 8 characters long; never use a word or series of numbers, but instead use a mix of numbers, letters, upper and lower case, and symbols (like %&$).
• Change all important passwords often, ideally every 3-6 months. Don't share them with others, don't store them on your cell phone, and avoid keeping them stored in obvious places (like on or near your computer).
• If you have multiple passwords to remember, consider using a password manager that will lock all your passwords in a secret vault on your computer. All you need is one master password to access all of your passwords and usernames.

Imagine receiving a call from a complete stranger who claims to have a computer hard drive with your personal information, a hard drive you were told had been destroyed more than a year previously. That's exactly what happened to a Cincinnati computer user who took a computer to a local Best Buy store to have the hard drive replaced. The store promised that the old hard drive would be destroyed and yet a year later that same hard drive, complete with personal information, showed up again at a flea market in Chicago selling for just $25.

Every year in America about 150 million old hard drives are thrown out, passed on, or resold. Yet very few computer users properly erase their hard drives before dumping or selling their computer. What most users don't realize is that simply deleting files and then emptying the recycle bin or folder does not permanently erase the data or remove potentially sensitive information.