The Wonderful World of Botnets - Part II

Posted by: Vereor [ITS Security] under Informative

Things you need to know about botnets, but are afraid to ask.
Part Two

In part two of the botnet series I will discuss how to tell if your computer has been compromised and is a member of a botnet. I will also go over steps to take to clean your system if it has been compromised, and measures to help prevent getting compromised.

1. How can you tell if your computer is part of a botnet?
It can be difficult to tell if you have been infected with malware but there are some warning signs.
• You may receive E-Mails informing you that you are sending spam.
• You may find E-Mails in your outbox or sent items folder that you didn’t send.
• Your computer may suddenly operate more slowly.
• Programs that worked on your computer no longer function.
• Your computer seems to continually run loud, even when not in use.

2. What should you do if you think your computer has been botnetted?
• Take action immediately. Don’t wait and hope it goes away.
• Disconnect your computer from the Internet.
• Have your entire computer scanned by a knowledgeable computer professional. If malware is found it could require that your computer be restored to the state it was when it came from the factory. (Always make sure you have back ups of important files!)
• Notify your ISP of any verified tampering with your computer. (This would be confirmed by your Tech.)
• Change your passwords immediately. Very important, always remember: neither Iowa Telecom nor any reputable company will ever ask you for your username and password via e-mail. If you receive an E-Mail asking for this or any personal information please report it to your ISP. (For Iowa Telecom users send them to abuse@iowatelecom.net, or use our Contact Page.)

3. How do you prevent from getting botnetted?
Botnets are not inevitable. You can reduce your chances of becoming part of a botnet by following a few simple suggestions.
• Use anti-virus software and anti-spyware software and keep them up to date.
• Make sure your security patches are updated.
• Use a firewall to protect your computer from crackers.
• If possible, disconnect your computer from the Internet when you are away from it.
• Check you outbox or sent items for messages you did not intend to send.

More information: http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt132.shtm

Until next time, be safe.
Vereor