Byte by Bite

Effort required in fight against viruses

by Marv Dealy

Published April 16, 2004

Off to the mailbag today with questions from long-time-reader #18 Dan Buckman. Note the numbers are arbitrarily assigned; I didn't even go to the bother of asking PriceWaterhouseCoopers to certify the results.

From Dan, who found a Linux powered system online from Sun Microsystems and Wal*Mart and wonders if using that for Internet stuff would help keep his XP computer virus free. Good question, Dan.

First, can Linux powered systems become infected with a virus or whatever? At the Symantec website, I note that the most recent addition to the hall of bad guys is the W32.Maddis.B worm. Symantec says it does not affect the following operating systems: DOS, Linux, Macintosh, Microsoft IIS, OS/2, UNIX, Windows 3.x (http://securityresponse.symantec.com/avcenter/venc/data/w32.maddis.b.html).

Which might lead us all back to Windows 3.1. Only kidding. But it does lead us back to Dan's most excellent question.

Non-Windows computer
The computer he found is a collaboration between Wal*Mart and Sun, and retails for about $400. This direct challenge to Microsoft's stranglehold on consumer PCs is welcome news to the "Libertarian-leaning, worldwide Linux community" (Seth Jayson, The Motley Fool, http://www.fool.com/News/mft/2004/mft04040208.htm).

Jayson notes that the computers -- available only online -- come with a Linux based operating system from Sun called the Java Desktop System. Also bundled with the machines is StarOffice, a group of programs that include word processing, spreadsheets and other stuff.

Of course, once you buy your new Wal*Mart PC you might want to take advantage of the hundred or even thousands of free Linux-based programs available for download from all around the world.

You can find out more about the non-Windows computers at Wal*Mart's website (http://www.walmart.com/catalog/search-ng.gsp?search_constraint=3944&search_query=java+desktop+system). You'll find they include goodies like 2.6 GHz Intel Celeron processors, 128 MB DDR memory, 40 GB hard drive, and all for under 400 bucks.

For a little more dough, Wal*Mart will send you a machine equipped with a Hyper-Threading 3.0 GHz Pentium 4, 256 MB DDR memory, 80 GB hard drive and CD-RW/DVD combo -- try under 700 bucks.

Yes and no
But we've strayed from Dan's original question -- are Linux powered computers safer than a Windows based unit?

The answer is yes and no. First, we know there are tens of thousands of viruses that have been created for the amusement of all you Windows users. Less well known are the 40 or so created for Macintosh users, and apparently less than a half dozen for the Linux community.

According to Scott Granneman in an article at The Register (http://www.theregister.co.uk/2003/10/06/linux_vs_windows_viruses/) "To mess up a Linux box, you need to work at it; to mess up your Windows box, you just need to work on it."

Granneman says "even if Linux becomes the dominant desktop computing platform, and Mac OS X continues its growth in businesses and homes, these Unix-based OS's will never experience all of the problems we're seeing now with email-borne viruses and worms in the Microsoft world."

Available tools
He goes on to explain that social engineering -- the ability to convince you to open an attachment -- combined with the fact that most Windows systems are run in Administrator mode and most use the ubitiquous e-mail programs that a fellow we'll call Bill sends gives the virus writers all the tools they need.

The bad guys know exactly how Outlook and Outlook Express work, and that makes it much easier to target millions of computers. In contrast, there are numerous e-mail programs used in the Macintosh environment, and probably more in the Linux arena.

Granneman notes that because Microsoft is constantly linking programs together -- not for technical but for marketing reasons -- the tasks of the virus writers are made even easier. And, in opposition to that, because of the depth and breadth of variety of email and other programs used in the Macintosh and Linux environments, it is much more difficult to write a virus that would affect more than one little pocket of users here, another little pocket over there, and so on.

So, Dan, as to your question -- will using the Wal*Mart Linux/Sun computer for email (and presumably Internet browsing) prevent your XP Billbox from getting infected? Yes. Is that a lot of work to go to when there are steps you can take to prevent your XP Billbox from becoming infected. Yes.

I hasten to add that if you need my blessing to go out and get another new computer, hey, you've got it big guy. But if you've also had your eye on a new welding rig, you might just want to hold onto the money and take steps to make sure your XP Billbox is as secure as it can be made.

First, don't run it in Administrator mode. Set up an account with limited privileges (prevents loading of many but not all executable files and programs).

Second, make sure your computer has all the current Windows Updates. Believe me, when the boys in Redmond clear their throats and admit to a gaping hole in the side of the barn that used to hold their programs, you'd best get something to patch it with, quick.

Third, install what I call "not just anti-virus, but anti-Bill software," or Norton System Works 2004. I don't use Norton Internet Security as I've observed too many problems that appear to be associated with its installation. Set the permissions to run in the background so Norton doesn't nag you every time it finds an infected email. Of course, keep your Norton programs up to date with weekly downloads.

Use your head
Fourth, some common sense things. From my older brother -- don't give your email to anyone you wouldn't let in your house. Set up a free email that you use just for filling out forms and when someone insists you give them an email address. From many sources -- don't open an attachment to an email just because it looks like it can from your aunt.

Her computer could well be infected, and she wouldn't have any involvement with sending along an infected email to everyone -- including you -- in her email address book.

If you have computer or Internet questions, or if you just like to see your name in the newspaper, send me an email.

Marv Dealy is a lifelong computer enthusiast and businessman in Tuolumne County. Reach him by e-mail at marv.dealy@throck.com