How A Virus Infects Your Computer
Posted by ryan on September 22, 2009 | Filed under Tech
For the past 10 years I have worked in various fields centered around computers. Even today TechStudio offers certain tech support level services to assist our clients. My friends and family also call me quite often to gripe about problems with their computers, and my tech associates and I oblige these requests gladly. Without working computers the world would fall apart, right? I was never saw the pre-computer era but I am assuming it was very unproductive. Anyway…
Throughout these endeavors we see all too often: massive virus infection. People often ask me what the cause is. Spouses suspect that their mates have been browsing web content that they shouldn’t have. Parents wonder if their children have been illegally downloading music and software on LimeWire. Conspiracy theorists think the virus software itself is spreading numerous viruses to keep the need up for yearly maintenance fees. Since we are asked this question so often, here is the most common way our ill-fated computers are being infected with unwanted, malicious software.
Malicious Internet Advertising
Just because Facebook is reputable and does not intentionally allow advertisements that seek to hijack your computer doesn’t mean they could not be fooled. This article from CNET describes a rogue ad which ended up on the New York Times web site. The paper was duped into posting the ad by someone posing to be a legitimate business. This is not an isolated incident, it happens all the time. Popular sites that sell large amount of advertising are constantly battling to keep the ads clean. Sometimes a malignant ad gets posted for a while, and one click can hijack your machine.
The lesson to learn from the New York Times example is simple. If an ad you find on a web site intrigues you, Google the subject matter first. If the advertisement in question is legitimate, it won’t be hard to relocate the company or product through a safer means… just Google it.
The PPC advertisers won’t like that I am advising this. Don’t blame me. Blame the spammers that are ruining Internet advertising for the rest of us.
Ads Posing As System Messages
A common trick up the villain’s sleeve to watch out for commonly used in advertising fraud is creating the ad itself to look like a system message (see image below). In the case of the New York Times’ infected ad, the post warned the user that their computer had an infection and clicking this link would direct them to some anti-virus software installation that would cure the problem. The jerks that create this malware actually post as the solution to the problem that they are creating.

The lesson is to learn what your anti-virus software is and stick to it. Be very wary of installing anything, or clicking a link on any web site unless you are completely sure what you are clicking on.
Posing As A Virus Scanner
Another common trick is to pose as a virus scanner. So often the worst virus infections we see are malware programs like Anti-Virus 2009. Programs that by general definition, are a virus themselves, that are wolves in sheep’s clothing.
The lesson here is to know the name of the virus scanner you are using. Make sure you are familiar with its pop-ups and functions, so when any alerts or dialogs pop up on your screen you can quickly and clearly identify them as genuine.
There Are Many More Ways
This is not to say that advertisements are the only way a virus can find its way to you. I do assert that it is the most common. Virus scanner technology now actively scans your e-mail and discs you put in your computer. I use AVG on most of my PCs that I manage, and even when someone downloads a virus on LimeWire or sharing software, AVG’s active scanner usually catches it.
AVG has taken steps towards curing this epidemic but integrating a system that shows web browser’s if a site is verified before they visit. The advancements however, have not stopped malicious ads from doing their job.
By being vigilant about what you click on, keeping a mainstream virus scanner up-to-date, and using a filtered e-mail service like Google or properly hosted Exchange, you will find yourself wasting less time with your computer on the fritz.
Sources
http://news.cnet.com/8301-1009_3-10351460-83.html
http://news.cnet.com/8301-13860_3-10356174-56.html
http://news.cnet.com/8301-27080_3-10353402-245.html
http://www.theregister.co.uk/2009/05/30/mass_web_infection/
http://www.theregister.co.uk/2009/06/02/beladen_mass_website_infection/
1 Response
RSS feed for comments on this post. TrackBack URL

September 22, 2009 8:00 am
Very interesting and informative. Thank you for writing in a way that I can understand. I wonder if you could add an example of a virus scanner pop-up that is legitimate and/or one that is not? I’d like to understand that better. Thanks!