Bots Get Personal

Bot is short for web robot; a type of malicious software that is used to take control of your computer. After it has control of your computer, it can send spam from your email address, infect other computers, or even steal your personal identity.

To steal your identity, a bot installs a discrete keystroke logging program on your computer that records every keystroke you make on the keyboard and sends that information back to the criminal responsible for the bot. Every user name and password you type could end up in the hands of someone else.

The use of bots is not new, but is gaining in popularity among the criminal underground of the Internet. Newer attacks are designed to target information that is more personal to the everyday user of computers and the Internet. Bots can hide on computers and often have similar names to files that are used to run the computer, so detecting them can be challenging. After a bot takes control, the computer is basically being operated by the source of the infection; usually a criminal getting paid to send spam, host phishing sites, or infect other computers.

Even though bots can hide, there are some telltale signs that can alert you to their presence.

• Bots will frequently use your email account to send spam from your computer, which hides the identity of the criminal. Spam sent to invalid email addresses will result in delivery failure notifications in your email inbox. Look at the addresses in the failure notices. If they are not addresses you recognize, your computer is most likely infected.
• When logged into your email, take note of unusual or constant activity of the outbox folder. An outbox that is constantly busy indicates the computer is being commanded to send email.
• Often bots will create multiple email addresses on your account and use those accounts to send spam. Several new email addresses appearing under your account could indicate your computer is infected with a bot.
• Bots will install multiple toolbars to help collect search information from your internet browser. If new toolbars suddenly start to appear in your browser, chances are good your computer is infected.
• Modem activity will be noticeable over long periods of time, even if you are not using the computer. Constant activity or frequent flashing of the data light on the modem may indicate a bot is present and working on the computer.
• Error messages suggesting certain applications are trying to access the Internet or can't run could indicate the computer is infected. These could include messages about certain drives not being accessible and should be closed using the X. Clicking directly on these messages could infect your computer.

The good news is you can protect your personal information and your computer from becoming infected with a bot. Comcast offers the latest technology and education at no additional cost to combat bots and other forms of malware.

• Download the McAfee Security Suite included with your Comcast High-Speed Internet service. Set the anti-virus to update automatically, followed by weekly scans.
• Avoid downloading software from web sites with an unknown or falsified brand. The Comcast Toolbar Anti-Phishing feature can help you determine if a web site is trustworthy.
• Ensure your computer is set to receive auto updated for the Windows Operating System.
• Periodically change your email password and use strong password practices when doing so. Strong passwords are at least eight characters, contain at least one number, one uppercase letter and one special character (i.e. ()*&^%$#@!).
• Check your account activity often and delete unknown email addresses.
• Remove unwanted toolbars from your internet browser.
• Do not click through or open suspicious emails or email attachments.
• Avoid Social Networking Scams - never provide your personal information (i.e. social security number or credit card number) to emails soliciting this information, even if the email looks to be from a company or brand you recognize. A legitimate company will not request this information through email.

There are several things you can do if you suspect your computer is infected. Download the latest anti-virus updates, and then run a scan. If you don't have anti-virus software installed, install it! Run a scan and let the software help remove the infection. Download the latest Windows updates. Check your programs list and remove any programs you suspect were installed by a bot. Consult with a computer specialist if you are unable to fully recover the computer on your own.
Remember, prevention is the key to successfully protecting your identity when online.