Vol
4 No 1
Welborne Associates Newsletter
![](3D"VOL4NO1_files/image002.jpg")
![](3D"VOL4NO1_files/image003.gif")
Welborne Associates is both a CA Channel Partner and a
Certified Sales Specialist. Call us for your security needs
at 219-879-3584.
<= o:p>
<= o:p>
1. Spyware, Adware, Viruses =
and Desktops (Part 1
of 6 parts)
Addendum:
6 Common Fallacies about Spyware
2. Tips and=
Tricks:
Free Small Business Newsletter
=
; =
Wireless Mouse Caution
Free Computer Associates Ant=
i-Spyware Assessment
3. The Four=
Fab eTrust Features <=
span
style=3D'mso-spacerun:yes'>
4. WIFI and=
local
users (Part 1 of 4 part WIFI series)&nb=
sp; =
Spyware=
, Adware, Viruses=
and
Desktop Security
A=
lmost
everyone is familiar with computer viruses and the need for anti-virus
protection but many people are ignoring the threat of =
spyware.
Spyware is a menace to any personal or business
desktop user and it is driven by commercial, corporate, interests who are
sponsoring the use of adware as an advertising
option, e.g. banner ads and pop-up messages.
<= o:p>
Any desktop that is protecte=
d with
anti-virus software should also have anti-spyware
software because spyware can damage or interfer=
e with
the function of the operating system just like a virus. Thus, spyware and adware does m=
ore than
annoy the desktop user.
<= o:p>
B=
eginning
in December, 2004, desktops began to be infected with this malicious and
totally unsolicited form of adware that could n=
ot be removed
easily, e.g. using add/remove in the Control Panel. Known as spyware, it can infect the web browser and registry s=
uch
that multiple infestations by different spyware=
or by
the same spyware are impossible to delete manua=
lly
and it can cause damage to the operating system.
<= o:p>
If your desktop is infected =
with spyware and adware it may=
: run
slow, crash frequently, display annoying pop-up adds, and, eventually it may
become so infected that it will not be able to open files such as those in =
My DocumentsTM.
<= o:p>
Adware
problems are often considered to be the consequence of inappropriate or
non-judicious web surfing, e.g. people sharing music or clicking
“yes” to anything in order to play on-line poker. Adware usually comes from ignoring End User License A=
greements
(EULA), and with it, the implication that someone was getting something for
free (almost free). Or, it was the consequence of “foolishly”
clicking “OK” or “YES” to a banner add or replying =
to
an unsolicited e-mail. All of this is true, but spywar=
e
can spread itself like a virus. And, who hasn’t opened an e-mail or
attachment only to realize that it was suspect!
<= o:p>
Adware<=
span
style=3D'font-size:10.0pt;font-family:Verdana'> is a money maker and spyware makes it profitable.
<= o:p>
R=
eportedly
hackers, a.k.a. entrepreneurs, can legally be paid, by one report, 6 cents =
for
every desktop that is infected and begins displaying pop-up ads controlled =
by
an ad vendor. The ad vendor sells this “ad space” to advertisers
who represent companies who want their products and services promoted over =
the
internet. Microsoft’s
Internet ExplorerTM is the most comm=
on web
browser and thus it has been targeted as the primary objective of spyware attacks, so far. Other browsers are not inher=
ently
immune to attack, there are just too few of them.
<= o:p>
There is no defense against =
spyware except to purchase a quality product from a c=
ompany
that has the resources to fight both the spyware
hackers and the corporate interests pushing adware.
<= o:p>
T=
he
display of banner ads, pop-up ads, and other unsolicited information is
considered to be some form of “free speech”; kind of like
billboards that are positioned along our roads and along interstate highway=
s.
Corporate interests are behind the display of their products and services o=
n your
desktop. They use the threat of lawsuits and seek injunctions to attack ant=
i-spyware products that also delete their
“legitimate” or “1st amendment protected”=
; adware. (Personally, any software that I purchase<=
/u>
should be able to delete any software, even if I have “agreed” =
to
install it.)
<= o:p>
Effective anti-spyware
installation requires active or continuous protection which is not usually
provided by free download versions.
<= o:p>
O=
nce spyware has installed itself it cannot be removed eas=
ily.
E.g. using add/remove in the Control Panel. Spyware
infests the MS Internet ExplorerTM c=
ode
itself, ActiveX, C++, and registry entries so that it cannot be easily remo=
ved.
Also, real-time protection is necessary in order to keep the same spyware from re-infecting the computer because spyware is much more tenacious than viruses ever were.
Finally, there are several free versions of anti-spywa=
re
which are actually spyware! <=
o:p> Spyware is not just a nuisance and it wastes more than “bandwith” to the Internet. It is a security thr=
eat and
timewaster for everyone, not just employees or the IT staff that have to fix
the damage.=
<=
o:p> A=
nti-spyware protection costs about $30.00 to purchase for=
one
business desktop, e.g. eTrust PestPatrolTM
from Computer Associates. Cor=
porate
editions or volume purchases could cost less per protected business desktop.
Consider this as a subscription and expect to pay close to the same amount,=
as
a renewal, each year, just like anti-virus software. Desktops, at home or at
work, will not be protected by a firewall or by applying critical updates to
the operating system. <=
o:p> “So, what’s in y=
our
desktop” may be more important than what type of credit card is in yo=
ur
wallet. Or, to borrow from another, older, TV commercial, when it comes to =
spyware, “you can pay me now or pay me later=
221;. <=
o:p> F=
inally,
my family’s desktop has a dial-up connection and we would hear it con=
nect
to the internet, on its own, if left on.&n=
bsp;
This was adware or =
spyware
“phoning home” in order to get credit (6 cents) for its maker, =
or
to get advertising information from an adware v=
endor.
Also, one of our family member logons would display a blue screen and then
re-boot. Other logons were ok. Both of these behaviors went away when the f=
ree adware scanner was replaced with eTrust
PestPatrolTM anti-spyware
<=
o:p> For more information about <=
span
class=3DSpellE>spyware or anti-spyware p=
roducts
please call Jim or Keith at Welborne Associates
<= o:p>
<= o:p>
6 =
Common
Fallacies about Spyware:
<= o:p>
1. My business desktop or my
company’s server does not have any information that is worth
“spying for”. At 6 cents per desktop, one million infected desktops are worth
$60,000.00. Just being “infected” can disable a computer. Also,=
spyware can record and identify any website that is
visited, including that of your online bank and the username and password t=
hat
is used.
<= o:p>
2. Web surfing is limited or=
done
“carefully”. The 2o7.net spybot was recently remov=
ed by eTrust PestPatrolTM
from a new laptop on which the 60-day free anti-virus was installed and upd=
ated
immediately. Then windows update installed 20 critical updates. PestPatrol was the third program installed and update=
d.
i.e. the spyware was in the pre-loaded software=
, on
the usb drive used to install PestPatrol,
or on one of the two websites.
<= o:p>
3. We don’t use MS Int=
ernet ExplorerTM as our web browser.<=
span
style=3D'font-size:10.0pt;font-family:Verdana'> Other browsers are not inhe=
rently
immune from spyware, they haven’t been wi=
dely
targeted, yet.
<= o:p>
4. We have purchased an appl=
iance
that scans for viruses and spyware on the
“perimeter”. If it doesn’t “retro” scan local business deskt=
ops
with new, revised, spyware definitions then the
desktops will remain infected and may infect other computers on the network=
.
<= o:p>
5. We use firewalls and apply
critical updates.
This will help to protect from un-solicited infections over the internet; b=
ut,
it does not stop someone from agreeing to install software, or from merely
clicking “YES” to a message that says “Your system is run=
ning
slow, click here to scan for spyware”.
<= o:p>
6. Two anti-spyware
products are better than one. Is anyone using two anti-virus products? Probably not,
because one will interfere with the other. The logic of this seems to be a
justification to use two free products (one of which is probably a spyware product).&nb=
sp;
Tips and Tricks
Tips and Tricks #1
I=
f you
use Microsoft products such as Word, Excel, Publisher and Small Business To=
ols,
you might look at a new helpful resource:
<= o:p>
M=
icrosoft
is offering the Small Business
Newsletter to help you take your business to the next level. This free
monthly online newsletter is designed to provide you with valuable informat=
ion
relevant to your business. You’ll get exclusive offers; tips and advi=
ce
from experts on the software you use; advance notice on the free Microsoft
business and technology events in your area; and information about Microsoft
online services. Sign up online or if you’re curious but cautious, fi=
rst
view a sample of the newsletter in which a Security Guide for Small Busines=
s id
featured.
<= o:p>
http://www.micros=
oft.com/smallbusinessnewsletter
<= o:p>
<= o:p>
A=
nd if
you are looking for Office templates, clip art, training and assistance, vi=
sit
Office Online at:
<= o:p>
<= o:p>
Tips and Tricks #2
M=
icrosoft’s
Getting Started booklet for wireless products warns that before boar=
ding
any aircraft, remove the batteries of the mouse. A wireless mouse can emit
radio frequency energy (similar to a cell phone) whenever the batteries are
installed and the mouse activated, either by touch or pressing the button a=
nd
therefore removal is recommended
Tips and Tricks #3
O=
n its
website CA is offering a free anti-sypware scan=
. At
the bottom of the webpage there is an article entitled “Found Out
Who’s Spying on You with eTrusttm Pest Scan=
tm”. Find it at:
<= o:p>
<= o:p>
<= o:p>
The Fab Four
A=
s you
think about the global threat to your machines and business, take the time =
to
check out these four centers of security information. Click on:
http://= www3.CA.com/securityadvisor
![](3D"VOL4NO1_files/image005.jpg")
Wireless Usage in the Office and on the Road
Introduction:
Whenever you communicate over the Internet using a wired or wireless
connection, you need to ensure that your communications and files are priva=
te
and protected. If your transmissions are not secure, you take the risk of
others intercepting your business e-mails, examining your corporate files, =
and
using your network and Internet connection to distribute their own messages=
and
communications.
This series of articles will compare wired and wireless networks, define so=
me
common terms used in networking and network security, and provide some guid=
ance
on using wireless technology at home and at work.
Wired versus Wirel=
ess:
A wired network uses a variety of methods to
interconnect computers. These=
can
range from coaxial cables strung from computer to computer; using the exist=
ing
electrical wiring; or most commonly using twisted pair wiring and switches.=
A typical wireless network uses radio transmissions between computers (ad-h=
oc)
or between computers and wireless access points (infrastructure).
If you are using mostly desktop computers, a wired network may work fine.
However, for mobility, modifications and growth (especially if you are runn=
ing
a small business), wireless networking provides the best answer because it
enables you to move the computers anywhere in the building where they can
connect to the wireless network. If your company moves to a new location, y=
ou
don't need to leave your cables, cable drops and other network investments
behind. The entire wireless network comes with you and takes only moments to
set up in a new location.
If you already have a functioning wired network, it's easy to just keep it =
in
place and add wireless components to extend your network's reach and give u=
sers
more flexibility and convenience.
Companies frequently extend their wired networks with wireless networks. Th=
ey
connect wireless access points to their network backbone to provide Internet
and network access in meeting rooms, lobbies, cafeterias and other common
areas.
Companies also add wireless access points in their general office space to =
make
it easy for staff to meet informally. For example, someone from accounting =
can
carry his or her laptop to the Controllers office and, via the wireless net=
work
there, make a presentation on the spot using their laptop. When employees a=
re
mobile, as in a multiple location organization, wireless networks can easily
cover all offices: staff can operate anywhere, not just at predetermined
locations.
What is Wi-Fi?
Wi-Fi is an acronym for Wireless Fidelity which is a set of rules that
hardware and software vendors follow to provide the wireless network infras=
tructure.
An organization called the Wi-Fi alliance overs=
ees
the vendor’s compliance with the rules and awards Wi-Fi
Certification to the hardware and software that follow the rules.
Overview of Wi-Fi Security
WEP
Wired Equivalent Privacy or WEP is an encryption
technology defined by LinkSys and D-Link (compa=
nies
that at the time provided only home based networking products) for securing
wireless networks.
Designed for home use, WEP uses simple techniques to encrypt wireless
transmissions and is built into most wireless hardware. In order to keep wireless networki=
ng
installation simple WEP is not turned on by default and must be configured
manually when implementing a wireless network.
The biggest problem with WEP is that it transmits the encryption key, which=
is
used by the software to encrypt and decrypt the data, in the
“clear” about every 5 minutes.=
This makes it very easy to break into a WEP protected network.
WPA
WPA stands for Wi-Fi
Protected Access and is an interim step in providing better security in
wireless networking. The final
standard being defined by the Institute of Electrical & Electronics
Engineers (IEEE) is labeled 802.11i and specifies improvements to wireless
local area networking (LAN) security.
When setting up a WPA protected network you will need to specify the follow=
ing
data encryption options.
TKIP or Temporal Key Integrity Protocol:
TKIP replaces WEP with a new encryption algorithm
that is stronger than the WEP algorithm but that uses the calculation facil=
ities
present on existing wireless devices to perform encryption operations
TKIP uses a unique key for each 802.11 frame. This avoids the same key stay=
ing
in use for weeks or months as they do with WEP. This is similar to changing=
the
locks on a house each time you leave, making it impossible for someone who
happened to make a copy of your key to get in.
Next month we’ll discu=
ss
802.x, the next level of security.
<=
/a>Special Offer
For a limited time only=
Welborne
Associates is able to offer Computer Associates’ eTrustTM PestPatrol® Anti-=
Spyware
product in a 5 user pack for only $115.00.=
That’s only $23.60 per computer! Call us to order at 800-299-3584.<=
span
style=3D'mso-bidi-font-style:italic'>
eTrustTM PestPatrol®
Anti-Spyware detects and removes non-viral mali=
cious
code to help protect consumer and business PCs from unauthorized access,
information theft and diminished system performance. Non-viral threats are
rapidly proliferating and represent a major security and privacy risk. eTrust PestPatrol =
reduces
this risk and provides an added layer of protection for safe Internet
connectivity.
<= o:p>
eTrust
PestPatrol delivers comprehensive spyware
protection via a centralized management console that allows for easy
installation, deployment and administration across any sized business. From
this console, administrators can enforce scanning and update policies, revi=
ew
logs, create reports and deploy new users for streamlined security manageme=
nt.
When spyware is found, eTr=
ust
PestPatrol generates an alert, logs the event a=
nd
enables you to remove the programs from your computer in real time.
<= o:p>
eTrust
PestPatrol is backed by the industry’s la=
rgest
research team, the CA Security Advisory team, which provides computer users
with free advice on how to delete spyware and p=
revent
infection.
= ãWelborne Associates 2005. All Rights Reserved. Product names, service and trademarks= and symbols are the property of their respective owners. Computer Associates material is used according to their legal statement at http://www.cai.com/c= alegal.htm. Customary partner privileges.
Vol
4 No 1
Welborne Associates Newsletter