Business mentor: Four steps to keep sneaks out of your system

Recently your column focused on security threats including the dangers of phishing scams. You touched on malware - what is that and how do I safeguard my business?

Small business sector specialist Sarah Trotman spoke to Brett Roberts, chief technology officer for Microsoft New Zealand, for some answers:

Malware is software designed to run on a computer without the user's knowledge or permission and it can be categorised in a number of ways. Spyware tracks where users are going on the internet, keyloggers monitor what a user is typing in the hope of stealing information such as passwords, while hijackers take users to websites they didn't intend on visiting.

Then there are diallers which use the PC's modem to call expensive overseas phone numbers, popups which display advertising or objectionable material on-screen and spambots which utilise compromised PCs to send out large volumes of spam email.

Malware can be installed on a user's PC in a variety of ways, including Trojan horses which are programs that claim to be legitimate but aren't, and worms which take advantage of software vulnerabilities. Malware can also be installed as part of other programs - file-sharing programs are major culprits.

The magnitude of the malware problem becomes apparent in a 2005 Symantec and EMA survey where every one of the 365 businesses surveyed had been affected by at least one security issue. The cause-and-effect nature of this situation is highlighted by research conducted locally by Netsafe late last year, which showed that 70 per cent of respondents did not have basic internet security measures in place.

The best way to stop malware is to adopt a simple, four-step, security process.

Firstly, use an internet firewall. Secondly, keep your PC software up-to-date by installing patches when they're released. The Microsoft Update site is a great way to automate this. Thirdly, use up-to-date anti-virus software and, lastly, install an anti-spyware tool such as Windows Defender on your PC.

If a user suspects that their PC is already infected with malware they should download and run Microsoft's free Malicious Software Removal Tool (MSRT) which will detect and remove a wide variety of malicious software.

When it comes to computer security, the best defence is knowledge and Microsoft has developed a huge amount of security-related information for every type of user and this can be accessed by visiting: www.protectmypc.co.nz