Skip Navigation LinksHome > Operations and Support > Security Awareness - Viruses, Worms and Trojan Horses

Security Awareness - Viruses, Worms and Trojan Horses 

The best way to avoid getting a virus is to not open e-mail attachments.   If you must open attachments, make sure you look closely at the filename extensions.   These extensions can be activated by going to My Computer, clicking on Tools, Folder Options and the View tab.   Locate the box next to Hide File Extensions, if this contains a ‘check’, click on it to clear.

Most viruses spread by e-mailing themselves using the victim’s address book and spoofing (the act of impersonating one’s identity) the sender’s name.   Even if you know the sender listed, it’s possible they really didn’t send you the e-mail.   In addition to spoofing the senders name, the virus writer will use a form of ‘Social Engineering’ to entice you to open it by creating an ‘interesting’ subject line as was done with the ‘I Love You’ and ‘Anna Kournikova’ viruses.

The original intent of virus writers was to simply do damage.   Now, with the amount of personal information available on PCs and networks, the stakes are going up.   ‘A new generation of ‘professional’ virus writers are stealing sensitive information from users across the Internet’, says Steve Trilling, Director of Research, at Symantec.

A ‘Trojan Horse’, a program with a destructive intent, is usually designed to damage only one computer.   This includes anything from deleting a user’s hard drive to e-mailing sensitive information back to its creator.   More recent ‘Trojan Horses’ allow the victim’s PC to be controlled by another PC over the Internet. The victim is tricked into running the illicit program through a means of social engineering; getting you to open a ‘fun game’, see ‘pictures of ??’, a ‘special message for you’, etc.  

Worms travel from one PC to another using your e-mail address book to spread themselves. It needs no interaction from you, which makes it a fast moving threat to an enormous number of computers worldwide.

A virus is similar to a worm, but self-replicates and attaches itself to other documents on the victim’s PC and spreads wherever those documents are sent or stored.  

A virus hoax is perpetrated for a number of reasons.   Generally they are harmless and have no files attached, however, the body of the e-mail might indicate you have been sent a virus and should delete such and so file to prevent it’s spread to others.   Unfortunately, the file you delete is usually one necessary to the operation of your PC.

If you suspect you have received a virus, worm or Trojan Horse, print the e-mail, including the header information.   Forward this to the Statewide Security Officer, then DELETE the e-mail.   Do NOT open, do NOT forward.   Do not send co-workers notification of this incident, as multiple notifications could slow down the system and achieve, if only in part, the writer’s intent.