Go Back   Work From Home Forum -- Work At Home -- Working From Home > TalkHomeBusiness Community > Home Business Talk

Reply
 
LinkBack Thread Tools Display Modes
  #1  
Old 02-15-2006, 05:37 AM
Just starting out
 
Join Date: Oct 2005
Posts: 36
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
Stephen is an unknown quantity at this point
Default Data Loss, Are You Safe From The Threats?

I am writing this for small business owners but it can also be usefull to the regular user who is concerned of loosing their data due to any number of natural and un-natural causes.

I am sure by now we all have heard of the virus that attacked on febuary 3rd. It was intended to go off sequentially on the 3rd of every month thereafter, so it is quite possible it is sitting dormant on some of your powered down systems just waiting to strike.


Quote:
A computer worm is set to damage computer systems, starting midnight local time on Feb. 3.

There has been a lot of confusion surrounding this worm, especially because media organizations and antivirus vendors haven't decided on a common name. CNET has settled upon Kama Sutra. Its other aliases include CME-24 (US-CERT), MyWife (McAfee), Tearec (Panda), Nyxem (Sophos), Blackmal (Symantec, Computer Associates, Vet), and Grew (Trend Micro).

Why should I be worried?
Kama Sutra contains a dangerous payload. On the third day of the month, it will overwrite certain files with an error message: "DATA Error [47 0F 94 93 F4 K5]." It is programmed to affect all files with the extensions .doc, .xls, .mde, .mdb, .ppt, .pps, .rar, .pdf, .psd, .dmp and .zip. These files--which include the default file formats for Microsoft Office and Adobe Acrobat applications--cannot be restored once they are damaged.

Has it spread worldwide?
Security vendor Lurhq has metrics on the spread of Kama Sutra in specific countries through Jan. 26. The data suggests that India, Peru, Italy and Turkey are the most vulnerable to Kama Sutra. On Thursday, however, antivirus vendor F-Secure posted data suggesting that the United States and Europe may be equally vulnerable.

Who's at risk?
Kama Sutra affects all versions of Microsoft Windows. It does not affect users of Mac OS, Linux or Unix.

How does it infect?
Windows users who receive sexually suggestive e-mail and proceed to open the attached file may find their systems infected with Kama Sutra. Unlike some e-mail worms, Kama Sutra will not automatically spawn; people must open the file first.

CNET Virus Threat Meter
Despite the danger presented by Kama Sutra, infection rates remain relatively low worldwide. Therefore, we are keeping the Threat Meter on "low" for the time being.

Prevention and cure
Read CNET Reviews' prevention and cure alert for links to specific antivirus vendors. For a more comprehensive analysis, see the page posted at Sans.org.
Some people might feel over confident that their anti-virus programs will always be there to protect them. This is a common mis-conception that has produced a number of problems with some of my clients in the past.

I personally quit using anti-virus programs a while ago, just because they seem to cause more problems than they do good, I am in no way recommending this to you; but there is valid reasoning and method of protection that I will get into later.

There is always going to be new viruses (also known as virii). They will continue to spread and many will remain un-detected. How important is your data to you? Are you willing to count on some company that most likely is producing most of these virii just to keep themselves in business? What happens when they do not find a signature for a wide spreading virus in time to prevent it's distruction of your important files?

The entire point to my little rant, is anti-virus technology cannot be trusted, I have had several machines that were infected but Norton, Mcafee they fail to detect it.


There are many more reasons besides virii, that make us concerned with data retention and loss prevention: Recent troubles throughout the world, Earthquakes, Harsh winter storms, Midwest Flooding, Hurricane's Andrew, Jorge, and others that have stricken the US Coast, Other natural occurrences, worldwide that cause shutdowns because of data inaccessibility, Power outage in your area, Disk crash, Lost laptop.

The truth is, disaster or emergency can strike at anytime. It can take the form of natural occurrences, or in the form of theft, sabotage, hardware failure, or user error. Any of these occurrences of data loss can severely threaten a company's business process.

Industry analysts report that 50% of businesses that lose their data never open their doors again. Of those businesses that do stay open 90% end up failing completely within two years. It is easy to see how important it is for you to have the best business continuity plan available. Part of your plan should be reliable, simple, and scheduled back up of your data!



Now that we have covered the importance of data loss prevention; I want to get into what we can do to protect ourselves and the pros / cons of each method.

Earlier I had expressed that I personally do not use antivirus anymore but I am not recommending that method to you. What I do recommend is dropping the use of Norton, Mcafee and all the bloated expensive AV systems that only detect a small portion of what is actively infecting the internet attached world.

First line of defense:

Goto the microsoft website and download all the security patches.

With your computer disconnected from the internet install a 20 gig hard drive for your OS and applications and a secondary hard drive (size of your choosing) for all your files.

Install a fresh copy of windows ( keeping the system disconnected from the lan or internet)

Install all the windows updates

Install AVG Free - it is a free, light weight anti-virus utility that does not hinder your computers resources. http://free.grisoft.com/doc/1 (Some restrictions apply for commercial use)

Install all your applications.

On your secondary hard drive create a folder called "Documents and Settings"
Inside that folder create a folder with your login name for example a windows user name of "Jake" I would create a folder called Jake

then inside that folder create one called "Desktop" and example: "Jake's Documents"

inside the Jake's Documents folder you would now create the following folders:
"My Music" "My Pictures" "My Videos"


Now from the microsoft website download the power toy: TweakUI
After installing it run the application and expand the "My Computer" menu.

Select the "Special Folders" at this menu you want to go to each folder and map it to the ones you just created on the secondary hard drive.

There are many other folders you can map, but I only recommend the ones I have mentioned here: Desktop, My Documents, My Music, My Pictures, My Videos

You need to repeat these steps for every user account.


Now reboot the system, verify that all the folders were mapped correctly.

Using a disk imaging program such as Norton Ghost. Create a snapshot of the 20Gig OS drive and save it to your secondary hard drive.

Now once a week or once a month you can restore the snapshot, and any malware, virii, spyware etc. will be instantly overwritten and you are no longer at the mercy of waiting for the anti-virus world to play catch-up.


Okay so now we have the system in a semi-protected setup what about all those files we just mapped to a secondary hard drive?

There are a number of things that can be done. First would be tape backups, which is most common. or even a Raid 1 mirror for that second hard drive in case of drive failure.

The bad thing about tapes especially from a small business prospective, is first the initial costs are pretty bad, then you have to have an employee who spends hours performing the backups which equals more expense.

You could always have another server inside the building that performs all the backups from these computers (Highly Recommended). But problems still ocur from this, user error, server failure, building fire, etc.

You could get a dedicated server in a secure datacenter somewhere, but then you would have to pay for the man hours required to manage the server and to do the rsync setup. (This is a very bad idea especially if you have important information like client records and other critical information)

There is a very cost effective solution, that allows you to flip through your files upto 30 days back in history, so even if you delete a file by accident or it becomes corrupt, you will be able to go back and recover it.

This solution is the best I have come across, and so I started offering it as a service to my clients.

It not only does the action of:
(You could always have another server inside the building that performs all the backups from these computers (Highly Recommended). But problems still ocur from this, user error, server failure, building fire, etc.)

as mentioned before but it also does a remote backup to a secure datacenter. But the difference between you having a dedicated and using this system is before it sends the data off to the datacenter it encrypts it with your 128bit ecryption key which is safely kept on your person and not stored on our servers. So only you are able to view your data.


This system also works for users with only a single computer that do not have the luxury of a local server designated for backups.


As the person responsible for the computer systems and network technical operations of your company, Business Continuity rests on your shoulders. Essentially you are responsible to make sure, that regardless of what happens, that your company or business continues to do business with little or no interruption.


For more information on the remote backup solutions we provide please visit us at http://www.quantumns.com/?pg=backupfeatures
Reply With Quote
  #2  
Old 03-15-2006, 03:54 AM
Member
 
Join Date: Mar 2006
Location: Amman
Posts: 58
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 41
Omar is an unknown quantity at this point
Send a message via MSN to Omar
Thumbs up

GREAT post
Reply With Quote
  #3  
Old 04-28-2006, 01:30 PM
Just starting out
 
Join Date: Oct 2005
Posts: 36
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
Stephen is an unknown quantity at this point
Default

Thank you, at least one person thinks so.
Reply With Quote
  #4  
Old 05-05-2006, 09:51 PM
Member
 
Join Date: May 2006
Location: http://www.allseocontest.com/dir/
Posts: 100
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 41
mann3r is an unknown quantity at this point
Default

Nice post and advice!!! keep it going!!! furthermore, use linux rather than that of $M Gates soft.
Reply With Quote
  #5  
Old 05-14-2006, 10:28 AM
Just starting out
 
Join Date: May 2006
Posts: 20
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
Bryan is an unknown quantity at this point
Default

This was a very informational post. Thanks for it. I've run all my scanners and such, and though it isn't picked anything up, I will be running it often just to double check.

Thanks again!
Reply With Quote
  #6  
Old 05-15-2006, 11:50 AM
Just starting out
 
Join Date: May 2006
Posts: 20
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
wahpah is an unknown quantity at this point
Default

Yes. Thank you for that post. Very informative. I will definitely be doing the same thing and double checking.
Reply With Quote
  #7  
Old 05-21-2006, 07:55 PM
Just starting out
 
Join Date: May 2006
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
e2thehu is an unknown quantity at this point
Default

Wow. See, it's things like this that keep me coming back. Thanks for the post! Very good.
Reply With Quote
Reply
Work From Home Forum -- Work At Home -- Working From Home > TalkHomeBusiness Community > Home Business Talk


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Electronic Data Interchange k00lit_gurl Work From Home Tools 0 11-30-2006 12:23 AM
Data Entry sites Milly The Blacklist - Scams & Rip-Offs 13 11-16-2006 10:44 AM


All times are GMT -6. The time now is 01:20 AM.


Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.3.0 RC2
Talk Home Business

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28