Virus Control Policy and Procedure

Computer Viruses

Awareness, Prevention and Control

If there's one word that can strike fear in the heart of any computer user, especially one who accesses the Internet or exchanges diskettes, that word is " virus. " Viruses can generate so much fear in the cyber world that news of a new virus often spreads faster than the virus itself. Just as important as knowing what a virus can do is knowing what it cannot do.

This document is intended to provide guidelines for protecting your computer and data against virus infection here at Isothermal Community College and to provide some information about what to do if you think you have a virus. Lastly, we will share some links to more information.

Awareness

What is a virus (Trojan Horse, worm, macro virus)?

Prevention

How can I avoid infection?

Control

I have a virus, what do I do?

Virus Alerts

For more information...

Awareness

What is a virus (Trojan Horse, worm, Macro virus)?

A virus is a program (a block of executable code) which attaches itself to, overwrites or otherwise replaces another
program in order to reproduce itself without the knowledge of the PC user.

Most viruses are comparatively harmless, and may be present for years with no noticeable effect: some, however, may cause
random damage to data files (sometimes insidiously, over a long period) or attempt to destroy files and disks. Others cause
unintended damage. Even benign viruses (apparently non-destructive viruses) cause significant damage by occupying disk space and/or main memory, by using up CPU processing time, and by the time and expense wasted in detecting and removing them.

A Trojan Horse is a program intended to perform some covert and usually malicious act which the victim did not expect or want. It usually does not reproduce.

A worm is a program which spreads (usually) over network connections. Unlike a virus, it does not attach itself to a host program.

A macro virus is a type of computer virus that is encoded as a macro embedded in a document. Many applications, such as Microsoft Word and Excel, support powerful macro languages. These applications allow you to embed a macro in a document, and have the macro execute each time the document is opened.

According to some estimates, 75% of all viruses today are macro viruses. Once a macro virus gets onto your machine, it can embed itself in all future documents you create with the application.

Prevention

How can I avoid infection?

Isothermal Community College has a site license for Command Software Systems' Anti-Virus software (CAV). The Information Systems department has installed CAV on most of the computers at ICC and will continue until installation is complete on all machines.

New viruses arise every day, and the CAV software on your computer should be updated on a regular basis with the latest virus definition files (deffiles). The Information Services Department will issue notification emails whenever a new deffile is available. Every time you receive a notification email from the Information Services Department regarding a virus file update, please follow the Virus Definition File Update Procedure as soon as possible.

Here are more ways you can help us keep the network, your files and your floppy disk virus free:

Scan all floppies for a virus prior to each use.

Ensure the disk is not write-protected (move the write protection tab to where no light shows through the hole in the corner of the floppy)

Place the disk in the floppy drive.

Double click on the "Yellow C" in the System Tray at the bottom right of the screen.

Select task " Scan Drive A " and wait until the scan is complete.

Do not download any unnecessary files/software off the Internet.

Many of these programs are very poorly written and may cause harm to your computer and the network. It is an easy way for a person to spread a macro virus.

Disable macros in the Microsoft Office applications (Word, Excel, etc.). If you open a document that contains macros, scan the document with CAV before enabling macros.

We strongly encourage you to scan any disk before you use it.

Back to Top
Control

I have a virus, what do I do?

First of all, do not panic ! If you think you may have a virus infection, stay calm . Once detected, a virus will rarely cause (further) damage, but a panic action might. Bear in mind that not every one who thinks s/he has a virus actually does.
1. Run Command AntiVirus to disinfect your floppy (A drive) or hard drive(s).
If the CAV scan job completes successfully without finding a virus, but you still think your machine is still infected, contact the Information Services Department immediately. Until the situation is resolved, do not attempt to continue to work with an infected system, or let other people do so.

Generally, it's considered preferable to switch an infected system off until a competent person can deal with it: don't allow
other people to use it in the meantime. If possible, close down applications, Windows, etc. properly and allow any
caches/buffers to flush, rather than just hit the power switch.

Virus Alerts

If the Information Services Department receives a virus notice or threat, we will follow these procedures:

Determine the impact of the virus on the Isothermal Community College network and files.
Determine the action needed to eliminate the threat.
Determine if CAV can delete the new virus.

The following actions will be taken as necessary if CAV can not delete the new virus:

Alert students, staff, and faculty of the threat.
Place a Virus Alert on the Isothermal Community College Information Services Department home page to advise all personnel of the virus and any available information.
The GroupWise e-mail server may be removed from the network. This will stop the spread of the virus via campus e-mail.
The access to the Internet may be halted until the threat can be analyzed. The will also stop the spread of the virus via Hot Mail and other online e-mail accounts.

It is the goal of the college to keep our network available for use by students, staff and faculty. We reserve the right to take any action we feel necessary to ensure the network is available and virus free. We maintain computers in most labs that allow you to quickly scan any floppy disk for a virus.

Isothermal Community College cannot accept any responsibility for any virus that you may have on your home computer.

For more information...

Command Software Systems Virus Info

Hoax Busters : Tracking down and dispelling virus hoaxes can be as expensive as the real thing...

McAfee AntiVirus Center

Symantec AntiVirus Research Center