The types of infectious programs are so numerous that it seems impossible to keep up. Fortunately there are some decent human beings out there that use their time to undo the chaos that others attempt to create. These outstanding individuals are the unsung heroes in a war against cyber anarchy, but their efforts are definitely appreciated in the technical support realm.

So what is the difference? Why all these different names for things that just seems to cause problems for technology. The answer is as complicated as the removal process, but can be simplified by categorizing what they are designed to do.

Please pass the milk. It’s time for Cookies…

A “Cookie” is a term often heard in the technology world, but what they do is a mystery to most users. The name by itself sounds harmless. Who doesn’t like to eat them, or love the furry blue monster that can’t get enough of them? The good news is that for the most part they are harmless, and were designed to make things easier for you during your adventures on the web.

A Cookie is a file that is written to your hard drive that contains information about your visit to a particular web site. The purpose is so that when you visit the same website later, some prefilled information about who you are and your preferred activities can be used by the site. It also will contain information of how the site itself should be viewed. An example of how a Cookie works is when you revisit a site and notice advertisements that refer to the same types of products you’ve looked at or purchased on previous visits. That happens because a Cookie captured your activity and stored it for the site to use on your next visit.

The Cookie is not malicious in nature but unfortunately there are plenty of issues with it. There are times when a user will visit a site and the site takes an exceptionally long time to load. This typically is because the Cookie (file) has become corrupted. Cookie corruption can also be responsible for login issues with online accounts. Most of the time, the issue can be quickly resolved by clearing the computers temporary internet files. I wish I could tell you those problems are the worst part about Cookies but no such luck, but you’ll find out more about that as you read.

Malware

Malware is the short name for Malicious Software, and is the overall category for all software that will affect your computer in a malicious manner. It consists of all types of computer viruses, worms, Trojan horses, spyware, adware, and rootkits.

Computer Virus

A Computer Virus is a program that can replicate itself to multiple computers. It is malicious in nature and it is used to wreak havoc on your computer by modifying its programing, even to the point of disabling it.

Worms

A Worm is Virus that is typically is used to take over resources of unsuspecting victim computer by exploiting the security vulnerabilities of an operating system. It then uses system resources for its own agenda.  A good example is a “Mailing Worm.” This Worm sends out email spam across the web and is extremely difficult to track back to the creator.  But the Worm is very intelligent because it is an independent application, and replicates itself as much as it can throughout a network. It has been known to chew up valuable network bandwidth (speed) as it goes along. It has also been known to eat (delete) files as it wiggles its way through the network going from one computer to the next.

Trojan Horses

A Trojan Horse, just like in Greek mythology, uses something that appears to be harmless in order for the end user to allow it access to resources. This usually happens when the user downloads a program that they believe is useful and the Trojan is attached. Using “Social Engineering” the Trojan attempts to manipulate the end user in believing that everything is safe, but in reality the user is opening the gates for a silent attack from hackers.  Once the Trojan is installed the hacker is able to use the victims computer as an internet filter (Proxy) to hide their true location. The Trojan is also used for remote screen viewing, electronic money and data theft.  The Horse also needs to be fed, so it eats some of those Cookies we talked about earlier. It takes the Cookies and sends them back to the Hackers that created them.

Spyware

Originally designed for espionage it is currently being used to gather information about people’s habits and other personal information. It spends most of it time collecting the users information and utilizing resources on the computer on which it resides with tools like keyloggers. Detection usually only takes place when it causes overall performance issues with the computer.  Oh, and Spyware loves to eat Cookies too.

Adware

Adware is the short term for Advertisement Software. It commonly comes in the form of browser redirects. Basically you try to go to one site and a different one come up. Also a Cookie eating fanatic, it uses this information to push the end user to a specific site to entice purchasing of products.

RootKit

A Rootkit is a Virus that takes over your computer with administrative privileges. It is extremely malicious in nature, and is very stealthy. Similar to spyware it gathers sensitive information about the user, but can also be used for sabotage – by allowing backdoor access to an unsuspecting victim’s computer. Detection of a Rootkit is very difficult because it can disguise itself as important system resources, or other significant files within an operating system.  Since a Rootkit has administrative privileges it can modify any program on the computer, including the antivirus software used to detect it.

Now that you have a better understanding of all of this stuff, you probably wish that you didn’t. Just remember, knowledge is power. By understanding the types of infection your computer may get, you can be more alert to the symptoms of infection and act more quickly to minimize the damage.

Plus, try to remember those unsung heroes of the web. You can also find some comfort in knowing that you have an IT Specialist on your side that has already fought this battle several times, won, and is ready for another round.

At other times the overwhelming list of issues and projects that need attention prevents proper documentation and implementation of procedures. The type of environment is a breeding ground for mistakes and improper configuration which leads to continuing issues that can result in additional man hours to resolve. These misconfigurations not only impact the already taxed Administrator, but it can be very frustrating to the end user as well.

In both scenarios we find ourselves wondering if there is an easier way. The answer often is “Yes.”  A proactive approach to automation can not only ensure the completion of some redundant tasks, but also prevent the possibility of human error. Let’s take a look at some simple automation concepts and products that are currently available and are often underutilized.

Login Scripts
Login Scripts are often used for mapping network drives for users. These scripts control what network drives are to be added and or removed for specific user, or even a group of users. This script is configured within Active Directory Users and Computers on the infrastructures Domain Controller. The benefit of using this function is consistency of user setup, and ease of management of network mapped shares on end user profiles.

Group Policy
Group Policy is a function created by Microsoft that gives an Administrator the ability to control and manage their network environment. There are configurable policies and rules that control everything from how a workstation or server would respond to a specific user, to what a standard user profile would look like across the domain. Domain wide changes to profiles that would normally require hours to complete can easily be done by modifying a policy that would replicate to all users within the domain within minutes.  An example of a favorite policy used by Domain Administrators would be the “Folder Redirect” policy. This policy takes a user’s “My Documents” folder and redirects it to their network drive on a server. The benefit is that the network drive usually has some type of backup solution in place.

Startup Scripts
Startup scripts are used to issue commands when a user logs onto their profile on a workstations or server. These commands can range from simple executions for program behavior, to complicated diagnostic queries. The Startup Script gives the Administrator the ability to be certain a command is issued to a group of users without having to logon individually and executing them manually.  Although there are several ways to run a Startup Script, the best practice would be to configure it through Group Policy Manager within Active Directory Users and Computers.

Scheduled Tasks
Scheduled Tasks is a function found within most Microsoft products. It allows an Administrator or a third party program to execute a command at a specified time, or date. This ability can be used for diagnostics, but is mostly used for third party execution of programs such as backup utilities.

Third Party Automation
Most third party enterprise applications have some type of rule configuration or policy manager for the client workstations. Sometimes it is not enough settle for the default configuration for every environment, instead some customization is needed.

These are just a few examples of how automation can be used to safeguard your environment and ensure that repetitious tasks are consistently and efficiently completed.

Simply stated it means you can access and utilize your data from any device, anywhere, anytime.  And what it could mean for your business is a cost-saving, productivity-increasing, game-changer.

7 Easy Steps for moving to The Cloud:

1. Determine objective
Why do you want to move to the Cloud? Will it increase your productivity? Will it save your money? Does your staff need remote access from multiple locations?

2. Assess your workflow
Working in the Cloud can be a little different. It is important to evaluate your workflow and make adjustments to your process to utilize web applications to their fullest potential.

3. Choose the right technology
There are different cloud technologies.  Choose the type of cloud that fits your business and know ahead of time the benefits and limitations.

4. Pick the right provider
When choosing your provider, look for one that has a good track record and is willing to work with you.  The best fit could be a national provider like Google or Amazon, but sometimes a smaller, more hands-on provider like AtNetPlus may be more appropriate for your business. Also, factor in your provider’s usage policies, Service Level Agreements, etc.

5. Evaluate your Internet connection
The speed and reliability of your Internet connection is a big factor in the performance of your cloud.  Make sure your test the speed of your connection, understand your bandwidth requirements. If you’re moving mission critical applications to the Cloud you may need to consider a redundant connection.

6. Consider a Phased Approach
Once you’ve thought through everything in steps 1 – 5, consider migrating to the Cloud in steps. Phasing it in allows you to educate your employees, work out connectivity issues, and tweak your workflow without affecting the entire company at once.

7. Make the move

As with most strategic business decisions, planning and preparation are key to your success.

In the piece, Mr. Casey describes 4 key areas where SMBs should focus their attention to head off some of the security concerns that arise from switching to employees supplied devices from company owned equipment. According to the article these include:

1. Technology Use Policy
2. Employee Education
3. Data Segregation
4. The Social Factor, Redux.

We’d also suggest that you consider having clear agreements about
• What, if any reimbursement, the company will provide the employee
• Who is responsible for the maintenance of the equipment and associated warranty requirements
• Who owns the data (i.e. – Ability to remotely wipe their device when they leave the company)

These questions are sure to come up at some point.  Clearly defining and signing an agreement between the business and the employee about these issues will head off a lot of future headaches.

Finally, we also recommend taking a phased approach to implementing the switch to employee owned devices. Start with a few key employees and work out the bugs. Then, push the plan out to the rest of the staff.

BYOD is here – small business owners just need to set reasonable expectations for employees and decide what the program will look like for their business.

Things like –
1. Responsibility
2. Compatibility
3. Security
4. Accessibility
5. Repairs and maintenance

Join us on April 3 for the latest Talk it over Tuesday where we will discuss the BYOD trend and things to think about before you take the plunge. It’s free and a continental breakfast will be served.

Register at http://aprtalk.eventbrite.com/

We are looking for someone able to juggle the daily responsibilities that keep our marketing efforts running smoothly. It’s a combination of marketing, PR, communications, and creative design. For this job you will need to be willing to adapt and learn new things. The technology AtNetPlus supports and provides to our clients constantly evolves – which means our marketing materials and plan does too.

Exceptional oral and written communication skills are a must. Proficiency on the main Social Media platforms, as well as with basic HTML, Adobe Indesign, Adobe Photoshop, and Microsoft Office is required. Quickly mastering other tools that you may have never used before is also essential for the job. Familiarity with video editing is a plus. Being detailed, organized and able to meet deadlines is critical for success.

If working in a friendly office where organization and creativity are equally valued interests you; send your resume and a short (2 -3 paragraph) sample of your writing to hr@atnetplus.com.