Recovering from a virus attack

Computer viruses are small programs that are specifically written to alter the way a computer operates, without the permission or knowledge of the user. To classify as a virus, it must meet 2 criteria:

1) it must execute itself, and it will often place its own code in the path of execution of another program; and
2) it must replicate itself. For example, it may replace other executable files with a copy of the virus infected file. If your business has suffred a virus attack & your network has been compromised, you'll need to act fast in order to prevent the virus from spreading to other computers on your network. Here are some recommendations on how to quickly get your business backp up & running again:

- Disconnect & isolate

If you suspect one of your computers has suffered a virus attack, immediately quarantine the computer by physically disconnecting it, as infected machines pose a danger to all of the other computers connected to the network. If you suspect other computers may be infected as well, even if they aren't displaying any symptoms, still treat them like they are, as it's counter-productive to clean one machine while an infected computer is still connected to the network.

- Focus on the clean up

Once you have physically disconnected the computer, you'll need to then focus on removing the malicious code. Use virus removal tools that are written for the specific virus that's causing the damage. Many of these tools can be found on the Internet. In addition, your anti-virus software should have updates or patches available for the specific security threat.

- Reinstall your operating system

After a virus attack, damages may range from changed filenames to obliterated files to permanently disabled software applications. the extent of damage depends on the particular virus. If your operating system (OS) is completely destroyed, you'll need to reinstall your OS by using the quick restore CD that came with your computer. This will restore your computer to its original configuration, meaning that you'll lose any applications you may have installed or data files you may have saved. So, before you begin the reinstallation process, make sure you have all the necessary information handy (for example, the original software, licences, registration, & serial numbers).

- Restore your data

This is assuming that you have been diligent about backing up your files. If you haven't been doing a regular backup of all of the data & files on our computer's hard drive, your files will most likely be permanently lost. If this is the case, learn from your mistake and make sure to back up on a regular, ongoing basis from now on. And keep in mind not all viruses target data files. Some attack only applications.


- Scan for viruses

After restoring & reinstalling, subject your network to a thorough virus scan. Use the most recent virus definitions available for your anti-virus software. Be careful not to overlook anything; scan all files & documents on all computers and servers on your network.

- Prevent future attacks

Run anti-virus software & keep virus definitions current. Make sure your security patches are up-to-date. And if you haven't been running anti-virus software, begin to immediately in order to prevent future attacks. Also, if you lost data files in the recent attack, create & enforce a regular backup schedule.

Moreover, change all of your passwords, including Internet service provider access password, file transfer protocol, e-mail, & Web site passwords. Some viruses can capture or crack passwords, leading to future vulnerabilities.

Above all, learn from your mistakes. If a virus penetrated your defences, consider changing or enhancing your current security patches. Ask yourself why your previous security measures weren't effective. Did you need a firewall? Were you lax about updating virus definitions & security patches? Did you download files without scanning first? Comb through, edit & reinforce your IT security policy, as you'll need to shore up the holes in your security practices. Prevention is always the best security policy.