Malicious Virus Spreading Because of Lack of Security Savvy

Computer Viruses : What to do to protect your computer from viruses

Lack of security savvy helps create the perfect breeding ground for this year's most virulent worm.

LOS ANGELES, September 24, 2002

The Klez.I worm has dominated all other viruses over the last three months, wreaking havoc on computers. Even though there are countless viruses and malicious code out there plaguing computers, the Klez.I worm has been identified as the most virulent by Panda Software.

From April thru August 2002, the Klez.I worm topped the list as the most malicious code affecting users' computers - according to results obtained by Panda ActiveScan, the free online antivirus. Contrary to popular belief, this prevalence is not due to any highly sophisticated programming, but primarily due to exploiting ordinary users' lack of security savvy. Klez.I in fact takes advantage of two basic factors:
A vulnerability detected in the Internet Explorer navigator, corrected by Microsoft, which lets the virus run automatically when viewed through Outlook's Preview Pane; and
Social engineering. The worm is able to change the name of the sender, giving the impression that the message has been sent by someone who may not even be infected themselves.
Klez.I demonstrates how necessary it really is to adopt permanent security measures to protect computers.

Although Klez.I is in a league of its own, the continuous emergence of new worms like Dadinu and Frethem is also a cause for concern and underscores the need for constant antivirus protection, 365 days a year.

To protect your computer from viruses, it is highly recommended that you adhere to the following advice:
Install a good antivirus software, which can be updated daily so that it can detect and disinfect the latest viruses. The antivirus should also include: permanent technical support (to solve problems related to viruses or the functioning of the antivirus program); and, quick solutions to new viruses and a virus warning service.
Scan inbound e-mail messages before opening them. You should scan all messages received, including those from familiar sources, with reliable antivirus software. Remember that some viruses can resend themselves to all contacts in an address book and therefore will appear to have been sent by people you may know and trust.
Install patches and updates sent by software developers to correct vulnerabilities discovered in programs.
When participating in chats or newsgroups, reject any unsolicited files, as they could contain viruses. Similarly, files that are received from unknown sources should always be scanned.
Avoid downloading programs from dubious or non-secure websites.
Stay up-to-date with the latest security issues. Read the latest security news and visit portals that deal with IT security. Users should also subscribe to security bulletins like Panda Software's Oxygen3 24h-365d which keep readers informed of the very latest issues.
As a final recommendation, administrators in corporate environments should also protect each and every workstation and terminal in the network. This should include antiviruses installed in both firewalls and proxies. This is the only reliable way to minimize the risk presented by employees who use free e-mail servers such as Hotmail, Yahoo, etc., which are common targets for viruses.

About Panda Software:

Panda Software (http://www.pandasecurity.com/) is a leading international developer of computer security software for all types of customers: corporate clients, small and medium sized companies and home users. The company has recently released two new enterprise antivirus solutions, Panda Antivirus Enterprise Suite and Panda PerimeterScan. Panda's 100% in-house, cutting-edge technology has received awards and quality certifications from the most widely respected IT security institutions.  Panda Software was the first to allow truly automatic, daily signature updates, as well as centralized administration of antivirus protection, both of which have revolutionized the antivirus industry. The quality of Panda Software's products has been endorsed by the major industry watchdogs including Virus Bulletin, ICSA Labs and CheckMark.

For more information:
Amanda St. John
Public Relations Director
amanda@pandasecurity.com
(818) 543-6901