Where we are…

We have been living through interesting times at Scam Stop Education and Awareness of late.

Scam Stop Education and Awareness is a private, non profit initiative, driven by Lynne Thackeray and myself utilising our own (somewhat meagre) resources and time combined with the generous support of our Founder Board Members like Steve Peters of GingerRhino web design and i-direct a London City based firm of Investigators operating Nationwide in the UK, South Africa and across the globe who are very generously hosting our web site and email services.

Until recently (mid July) I had been dedicating my full time efforts to Scam Stop. This had great benefits for Scam Stop but was not so good for me! In July I was fortunate in getting a full time position with Professional Risk and Asset Management where I handle risk consultancy and coordination.

This obviously had an effect on the time I had available for Scam Stop and Lynne has gamely been shouldering the burden since then. It is very likely that Lynne will also be taking up a full time position in the very near future (a person of her talents is always in huge demand).

The changes in our personal circumstances will impact on Scam Stop but we have no plans to to give up on our dream of making a difference through our work at Scam Stop.

We also made some mistakes in our publishing and education efforts by trying to combine all our efforts into one site (http://scamstop.info).

Here is a newsflash; a blog is a blog and a web site is a web site and the two combine rather badly (well at least they did in our case but that may be because we are rather doff sometimes)

We have gone back to using our blog as a blog and our web site as a web site (cutting edge stuff I know but try and keep up)

We will maintain the web site where you can get detailed information on what we do at Scam Stop, our programmes, our experts, our long  term plans, in fact, you can find anything that you want to know about us on the site (http://scamstop,info)

Our daily news, views and educational articles will be published on our blog (no address, if you are reading this you have found it)

We are very excited to be partnering with other scam sites (details on the sidebar) who will also be contributing quality content for our blog.

We plan to publish new content as often as we are able and we are looking for contributors who would like to join us in the fight against scams by sharing their experiences, knowledge and advice with our readers.

If you want to write for us (free of charge of course but we will give you a link) please email me at david@scamstop.info.

We will also maintain our activities on Twitter (follow us at http://twitter.com/scamstopper for up to the minute news on scams and anything scam related) and on Posterous (we maintain a news feed of articles of interest at http://scamstop.posterous.com/)

Our groups on Facebook, LinkedIn and Ecademy are flourishing and we will be giving them much more attention over the next few weeks to make sure that they add real value to the members of these groups. Please feel free to join us on whichever groups suits your needs.

Scam Stop Education and Awareness runs two Ning networks for those members who prefer a more interactive experience. These are Fraud and Economic Crime Experts for those “in the business” and Web Security Watch for those with a particular interest in cyber crime and Internet security.

These groups are still very much a work in progress and we would love to hear how you would like to see them develop.

Above all, we are here for our members, to serve our members and communities as best we can. The fight against scams, fraud and abuse is not a job for the chosen few, it is a battle that must be fought by all for our mutual safety.

Please feel free to tell us exactly what you think, tell us where we are going wrong, what you would like to see, how we can serve you better.

A GHOST in the machine…

We South Africans LOVE a great ghost story being of nature quite a superstitious bunch under the best of circumstances.

Our popular culture is full of various boogie men, creatures from the dark and things that WILL go bump in the night if you are not careful…..

But what if this fixation with the supernatural starts overflowing into your online life, eating up bandwidth, exposing your contacts to spam and possible malware?

Time then to call a halt I would think.

Have a look at this one sent in by a member who is exasperated with this type of nonsense:

This photo was taken in a hospital after the patient in the bed was in an accident where he was responsible for a young woman’s death.

It is said that when you receive this image and do not send it to at least five people, the woman will look for you during the night to collect your soul.

A couple in a western suburbs area of Sydney received the message and deleted the picture without sending it to at least five people. This couple was murdered by their 15 year old neighbour who claims to have been possessed by the woman.

A 28 year old woman in Whittlesay Road, Cambridgeshire , England , was run down by a car driven by a another female that fitted the description of the woman in the photograph, the police investigation revealed that the murdered lady had received this picture only 4 hours before her untimely death

This was accompanied by a comment from the person who forwarded the mail to our member (and excuse the language but it is a quote!):

Fuck that I want no woman taking my soul.

The truth is, of course, that this is total rubbish.

Read what Snopes has to say about this story here.

How gullible can you be?

Well judging from the comment, very gullible indeed, this verges on criminal stupidity.

STOP FORWARDING THE RUBBISH!

You will not only alienate your contacts but you expose yourself to the danger of spam and malware infections.

If you continue to forward this type of stuff, ghost will be the least of your worries!

Worried about ghost?

Call us, we will set you straight.

RICA and Identity Theft

We now have RICA in South Africa and we can all sleep a bit better knowing that crime using mobile phones equipped with pre paid SIM cards is now a lot more difficult for criminals.

Right?

Well maybe but then again, maybe not.

I am on record as supporting the aims of RICA in making crime more difficult on the basis that ANYTHING that makes crime more difficult is a good thing.

The questions is if RICA actually DOES make it more difficult for criminals or is it just a major pain in the backside for all of us, including the SAPS, the service providers and you and me.

I have now done a bit more research and I now believe that RICA will in fact present greater opportunities to criminals and cause more problems than it solves.

Take identity theft as one example.

We advise consistently to guard your identity document and only to ever give it to those who have a legitimate need of it and who can adequately safeguard it from abuse.

One consequence of RICA is when buying a SIM card you MUST provide a certified copy of your identity document to the merchant.

Very dangerous to say the very least.

Do I know this guy except as the one who sells me a pie and chips?

Can I trust him with my identity?

Who knows.

This excerpt from a story on Moneyweb today illustrates the problem

What is the process when you buy a starter pack?

Are there people ready to register you? What about the subscriber who buys a SIM starter pack from a spaza shop in Thaba Chitja near the Lesotho border in the rural Eastern Cape? One would assume that this shopkeeper will be in a position to "retain" a certified photocopy of this user’s identification document "on which his or her photo, full names and identity number … appear". Even if this shopkeeper does manage to keep this legal, certified copy, how does the network operator get hold of it, as they are legally obligated to have this record?

More questions…

How will he store my documents?

Do regulations or even guidelines exist for the storage of these documents?

What are the penalties (if any) should the shopkeeper “lose” my documents?

Do I have any recourse and if so against who should the certified copy of my identity document be used in some criminal scheme or should it be used to defraud me?

I have many other questions but suffice it to say that RICA is fraught with unanswered questions AND huge difficulties for all.

I highly recommend that you read Hilton Tarrant’s excellent article on RICA on Moneyweb today for an overview of the challenges of RICA.

Then tell us what you think about RICA.

Let’s get a debate going, ask some questions and we will see if we can get some answers for you.

Trust, Fraud and Scams

I was recently doing some research and came across some startling facts from KPMG contained in The 2007 KPMG Fraud Report for Europe, Middle East and Africa.

I thought that only crooks committed fraud.

I was in the “business”, I committed major fraud myself and I met a large number of fraudsters who operated in a number of different ways while in prison.

But I always thought that we (the fraudsters) were the exception, the scrapings at the bottom of the barrel of society if you will, those whose moral confusion and adaptable personal integrity allowed them to commit fraud.

But I was wrong.

Facts from the report establish that in 86% of the cases investigated the fraud was perpetrated by management. Of this figure 11% were board members, 49% were senior management and 26% were management.

If you relate this to the general figures that estimate that 85% of companies will fall victim to fraud, losing up to 6% of turnover a horrific picture of corporate integrity starts to emerge.

Relate this further to the fact that fully one third of bankruptcies are as a direct result of fraud and theft.

And it is estimated that only 48% of fraud is discovered (or reported) and of that 48% only 40% of the perpetrators are sentenced.

The report also highlighted the fact that trust was always the major risk factor in fraud.

Those in a position of trust were committing fraud almost at will, having the ability to cover it up.

What do these figures say about business?

Remember these figures are from 2007 when times were good, who knows what they are now that times are tough.

We are good at explaining these things away, of making excuses.

The report highlights rationalisation as the major factor in fraud.

This is borne out by one of my experiences in jail with a fellow sentenced for fraud. He was horrified with the label of fraudster and maintained that he was only a businessman who operated in “the gray area of business”.

You try and figure that rationalisation out, I never could.

His attitude is, I would imagine, quite common in business.

Anyone in business who studies this report can no longer say that “they” are committing fraud.

It is us; it seems that we are rotten to the core.

On a personal note at least I feel better after reading the report.

I have no reason to feel isolated. I was one of the majority, one of the “boys”, those prepared to abuse the norms of business, society and own integrity.

I am not alone.

The people committing fraud in South Africa are just like you and me; in fact they are you and me.

We should never forget that our major businesses and organisations are made up of people just like you and me no matter what their elevated positions may be.

The executives, shareholders and other stakeholders of businesses are subject to the same temptations, opportunities, threats and pressures as the rest of us.

And a business reflects the approach and attitudes of its people.

So the attitude of business must change to reflect a more moral and ethical approach. Our businesses should be above reproach.

Why is corporate fraud such a problem?

I believe that it is not only the general moral confusion that most of us suffer from (80% of people will commit fraud if the motive and opportunity is right) it is also the demands placed upon people in business by the markets, shareholder expectations or the demands of superiors to meet targets.

This is further exacerbated by our natural greed, maybe not for money per se but for recognition, promotion or bonuses.

Remember that 86% of the corporate fraud is committed by management and board members.

What could explain this? Are they just bad people, crooks?

No I don’t believe so.

I quote from Managing the Businesses Risk of Fraud: A Practical Guide, sponsored by the Institute of Internal Auditors, The American Institute of Certified Public Accountants and the Association of Certified Fraud Examiners.

“A 2007 Oversight Systems study5 discovered that the primary reasons why fraud occurs are “pressures to do ‘whatever it takes’ to meet goals” (81 percent of respondents) and “to seek personal gain” (72 percent). Additionally, many respondents indicated that “they do not consider their actions fraudulent” (40 percent) as a reason for wrongful behavior.”

Are the pressures exerted on boards and executives by market conditions, shareholder expectations or performance pressures from superiors forcing people into fraud and unethical behaviour?

Or are they just greedy crooks?

They cannot be, not 86% of them.

Our corporate society needs to take a careful, brutally honest look at corporate governance issues, the expectations they create in the markets and the performance pressures that flow from those expectations and the pressures they place on their people.

They need to manage expectations so that people don’t feel obliged to “do whatever it takes”.

Above all they must have an acceptable moral and ethical code in the organisation and a professional Fraud Management Program in place that applies from the top of the company right to the bottom.

They must have regular training and education for all management and staff on fraud awareness, prevention and management.

And they must communicate their Fraud Management Program to the investing public, other stakeholders and staff.

The commitment to effective and rigorous Fraud Management starts from the top of the organisation and filters down.

A more stringent code of conduct reflecting the fact that those at the top will be held to a higher standard and stricter code of conduct must be composed and must be communicated to all.

Set the example from the top.

The board and senior management must be morally impeccable if they expect to eradicate fraud in the company.

The situation is not beyond our grasp but we must act now, structure a Fraud Management Program, invest in staff education and communicate your commitment to the eradication of fraud in your organisation.

Apart from all the other benefits just think what you could do with 6% of TURNOVER on your bottom line.

That may relieve some of the pressure and silence your critics.

Act today, tomorrow may be too late.

“Foot in Mouth” ID Document FICA and RICA update

It appears that both myself and the Ombudsman for Banking put our feet in our mouths.

I advised members on the 9th July to:

”My very simple advice is to refuse to give ANY person a copy of your identity document for any reason whatsoever.”

Bad advice it seems. Well, great advice, but just not possible in terms of the current law.

This was based on a statement from the Ombudsman for Banking Services who said:

“"The Financial Intelligence Centre Act obliges banks to establish and verify the identity of every client before they can enter into a business relationship. But there is no obligation in the act to actually copying ID books.

It now appears that the TRUE situation is (from IOL Online today):

Banks are being prudent about IDs – experts

But the joint statement released yesterday said money laundering control measures under Fica obliged banks, life insurers, investment managers, attorneys, estate agents and licensed gambling institutions, referred to in the act as "accountable institutions", to establish and verify the identities of their customers.

"The underlying principle is that institutions must know who they are doing business with," said the statement.

They were also obliged to keep records of customers’ identities and their transaction activities.

"The purpose is to ensure that a transaction, or a series of transactions, can be reconstructed during an investigation clearly indicating not only what had transpired, but also who was involved."

Prescribed steps to establish and verify an individual’s identity included getting the full name, date of birth and identity number and verifying this information by comparing it with the person’s identity document.

Accountable institutions had to keep records of the identity of the customer, including a record or copy of the documents the institution had used to verify the person’s identity.

"When the record-keeping requirement is read in conjunction with the requirement to establish and verify the identity of a customer, it is clear that the use of an identity document forms part of the procedure of identifying a customer and therefore forms part of the record of the customer’s identity which must be kept," said the statement.

"As much as the act does not clearly state that a copy of the identity document must be made by an accountable institution, the most prudent and practical manner to comply with this obligation would indeed be to make and keep a copy of the identity of the client, in the form of an identity document."

All accountable institutions were therefore "reminded and encouraged" to continue meeting their obligations set out in the act. In other words, it was prudent and practical to keep copying ID books.

I must apologise for misleading you, I thought that the Ombudsman for Banking Services would actually know what he is talking about.

Just goes to show, always do your own independent research…..

RICA, FICA and Identity Theft: How safe are you?

We in South Africa have some of the best legislation in the world in the area of restricting criminal activities.

The most recent piece of legislation to come into effect is the so called RICA Act (The Regulation of Interception of Communications and Provision of Communication-Related Information Act) which now makes it compulsory for cellular service providers to verify your identity before selling you a SIM card.

The same legislation compels the cellular service providers to verify the identity of all existing customers (both contract and prepaid) within 18 months of July 1st 2009.

I am on record as a supporter of one of the aims of this legislation, that is the fact that having to prove your identity when buying a new pre paid SIM card WILL make it more difficult for scammers to operate the myriad of schemes that these cards are used for.

One of the aspects that does bother me about this legislation (and there are other which we will address in due course) is the question of HOW your identity will be verified.

I would guess that in most cases this will be done by way of the retailer or whoever sells you the card retaining a copy of your identity document.

This opens up the question of identity theft and others abuses.

I am sure that very few people know that NO LEGISLATION in South Africa compels ANY company or institution to retain a copy of your identity document.

None, not even your bank, can force you to leave them with a copy of your identity document.

Here is what the Ombudsman for Banking Services, Advocate Charles Pillay, had to say on the subject in a recent interview in the Cape Argus:

Consumers are not obliged to let banks copy their ID documents, and should refuse outright if any retailer wants to make a copy, says advocate Charles Pillay, the Ombudsman for Banking Services.

He was responding to reports that certain stores were insisting on copying ID books of customers paying for purchases with a cheque or credit card.

Two Capetonians and a Somerset West resident complained to Argus Action that Musica at NI City, Pick ‘n Pay Family Store in Camps Bay, and Benbel at Somerset Mall had each insisted on copying the IDs they had willingly shown when paying for their purchases.

The customers said store staff had dismissed their objections, and they feared that the existence of copies of their IDs in the hands of unauthorised individuals put them at greater risk of identity theft.

"They are right to be worried. I would refuse because the potential for a copy of my ID to be used to my detriment is just too great," said Pillay.

He said recent reports of a Department of Home Affairs syndicate creating duplicates of valid ID documents and replacing the photographs demonstrated the importance of keeping personal ID documents safe.

Asked why banks required customers to submit their IDs for copying, Pillay replied: "There is no obligation for them to do so.

"The Financial Intelligence Centre Act obliges banks to establish and verify the identity of every client before they can enter into a business relationship. But there is no obligation in the act to actually copying ID books.

"You can tell the bank you do not want your ID book copied. The bank can verify your identity by simply looking at you and at your photo and record on the file that it is satisfied that you are the person that appears in the ID book."

Regarding the apparent willingness of bank customers to hand their IDs over for copying, Pillay said most people probably did not object when banks copied their IDs because the documents were comparatively safe with a bank and there is no potential for them to be used for ID theft.

However, he said, "with a retailer, I would be concerned that ID theft is a real danger".

My very simple advice is to refuse to give ANY person a copy of your identity document for any reason whatsoever.

The risks are just to great.

I hope that the authorities and all involved think this through before going over to mass implementation.

If they don’t they could just create a bigger problem than the one that they hope to solve with the RICA legislation.

“Michael Jackson Charity” Scam

Quick off the mark these Nigerian 419 Advance Fee fraudsters!

This is the first 419 scam mail I have received featuring the late Michael Jackson as primary draw card.

Total rubbish off course, just a variation on the theme, I know that our members are far to smart to fall for anything like this.

And before any of our readers gets offended I can say Nigerian 419 scam in this instance because the scam is based in?

Yes, Nigeria!

Though, a lot of criticisms has been raised against "THE KING OF POP STAR" , but he remains greatest forever. Even after his death, everywhere around the world people are devastated and nobody can believe that this sudden death happened.
Many reports has been published about his death, many rumor has been carried on air with different analysis.
But the only fact that we believe is that Michael is dead which bring a big sorrow to us the MICHAEL JACKSON ORGANIZATION AND CHARITY. And we say……….. "MICHAEL YOU WILL LIVE IN OUR HEARTS FOREVER !!"
Michael Jackson was a true humanitarian, an example to us all. He has devoted much time and money to a wide range of charities. He loves children and takes time out when touring secretly visiting sick children. He also has special rooms at his home Never land for sick and terminally ill children to stay over. He was listed in the 2000 edition of the Guinness Book Of World Records for breaking the world record for the "Most Charities Supported By a Pop Star".
We therefore use these medium to seek the support and donations from everyone and all fans of MICHAEL JACKSON to assist the sick, motherless and the orphans in the Michael Jackson’s organization. We do this, because this is the way Michael would have wanted and to keep his good work moving.
We will publish this in face book group the amounts collected, and also we will publish this officially in local newspapers.
So no amount is too small for Michael who has changed a lot of life’s during his life time.
You can send your donations to us via money gram/western union to our information below;
WEST AFRICA MICHAEL  JACKSON ORGANIZATION AND CHARITY
Receiver Name : Mrs Joan Adun
Adress: 6 zulos close Abuja
Country: Nigeria
pinket.aderson@gmail.com
Receipt of your donation will be mail to you as soon as we receive your donation confirmation, you are to reply us with your contact information’s and the reference number of your donation from the money gram/western union.
YOUR NAME:
ADDRESS:
CITY:
STATE:
OCCUPATIONS:
Money gram/Western Union MTCN#:
test question :
Reply With All The details To pinket.aderson@gmail.com R.I.P Michael, we love you !!

What do you think of these scams abusing the good name of the dead to scam people?

Let us know…

And remember if we can help in any way, just drop us an email to info@scamstop.info

What would make you “DO CRIME”?

A question I have often reflected on bearing in mind that I did step over that thin, invisible line between right and wrong in the past.

So what would make YOU cross that line?

Reflect on this email that I received this morning from Candice, one of our members in Cape Town:

I am not often at a loss for words….

Monday mornings by us garbage day. 

We are a small block – 15 apartments.  Usually 5 bins on average.  For some reason this week they have placed the bins (maybe a car was parked where they usually leave the bins on the street) where I can see the activity around the bins from my window where I sit and work. 

For the past two hours the traffic of local bin people been something else.  And it made me realise that we have loads to be thankful for.

What amazes me most though is their “self-built collection vehicles”.  Mostly the base of course a shopping trolley but modified so innovatively to make the most of the space they have for what they collect.  It’s a recycling miracle to watch.  Little bins for glass, tins, clothing, edible, paper and carton.

Amazing! 

And most of them have a dog! And the dog gets fed titbits from the bins.  BEFORE they eat. 

But for the grace of God….

I sit here now thinking about having to rummage through the garbage to stay alive.

Would I do that?

Would you?

Or would you be tempted to find another way out, perhaps a “harmless” little scam like asking people on the Internet for R150 for useless “training material”?

Would your pride allow you to rummage through the garbage to survive?

Or would your pride, ethics and morals force you to rummage through the garbage rather than resort to a scam?

It is the decisions that we take at the worst of times that define who we are, not the decisions we take when everything is rosy.

Garbage or crime?

What kind of a person are YOU?

“SCAMMY” Job Offers: A scam by the dregs of the earth!

This really, really gets my blood pressure through the roof.

What you do is find some desperate, innocent people by advertising on the free advertising sites, then you scam them out of what little money they have.

You tell them that you have the ideal position for them, all that they must do is pay you an “administration fee” for a "One-Time Non-Refundable fee of R100.00 for the Step by Step guide to get Started “

The reality is that this is NOT a fraud (they make no misrepresentation) but it is a misleading scam because it implies an “inside track” to your ideal job.

Fraudulent?

No.

Unethical?

Very definitely.

Misleading?

Off course, that is how they operate by trying to convince you that they have special, insider knowledge that will help you get a job.

They don’t.

Here are the details, supplied by one of our members who, fortunately, asked us for advice before forking over her hard earned cash.

First the hook:

Recruitment Agencies Looking for Unemployed or Part Time Employe Ad ID: xxxxxx  Visits: 12
Location: Johannesburg
Date Listed: 26/06/2009

For job seekers on the part time or full time basis, we are offering a list of all A-List Recruitment agencies, where you can apply and successful be placed within a job that meets your relevant experience and educational qualifications.

Are you attending interviews but not getting the job, do you need the background knowledge of why you are not successfully getting hired?

We are able to provide you with a detailed list of recruitment companies that work  hard and fast in placing candidates, list contains agencies for all job specifications, Are you a IT person, Project Administrator, Admin positions, Reception positions, Management, Freight etc

Now you would be able to present the right agency with all your needs and experience for free, you do not have to pay the agencies any fees, all you have to do is apply to the right department/agency which I would provide you with.

Placements would be made almost instantly after the interviews are conducted, as they would have your correct details for the correct job for you.

Reply by return mail if you are interested in the above.

Then the pitch:

From: <sxxxxxxxxx@webmail.co.za>
Date: Fri, Jun 26, 2009 at 11:43 AM
Subject: Re: Reply to your "Recruitment Agencies Looking for Unemployed or Part Time Employe" Ad on xxxxxx

To: axxxxxx@gmail.com

Good Day,

In order to obtain the list of A- List Recruitment agencies for job Seekers, you would need internet access, email and either MS Word Or Notepad.

Basic Internet knowledge is vital. Printers are not at all required  but can be helpful.

As you will be dealing with people, you must also be able to conduct yourself in a professional manner. This includes having excellent grammar and spelling. You must be able to follow instructions closely and completely! You will be contacted through your email, so you will not be required to call anyone at anytime. This allows you to work whichever hours are most convenient for you (days, nights or weekends).

You would be contacted almost instantly from the top agencies for placements They are the most reputable agencies and never fail in making placements.

I have been working with them and always gained a positive result.

You would be provided with a list of A-List Recruitment agencies and the vacancies that they currently have, you would go through all the details and can apply for positions for send your cv to the agency free of charge for placements. You would be interviewed and placed in the most respective company to suit your experience and qualifications.

You would receive the training material with all details of how to go about the process and the list of agencies that would accept you and find you the job.

There is a "One-Time Non-Refundable fee of R100.00 for the Step by Step guide to get Started which also contains the list of agencies and there will be no other charges to you.

We must accept this fee to cover the processing  as well as to ensure that only serious applicants apply. This is a non-refundable fee, and will not be waived for anyone and cannot be deducted from your first income, so be sure that you understand what you are doing before sending in your payment for the information.

However, the fee must be received before you can gain access to the Material and Employee Guide.

Once your payment is received, and reflects in our bank account, you will be given immediate access to your  Material. You will receive your  Material through your email. The Material gives you the step-by-step instructions on how YOU get started. When you receive it  you may begin the very same day.

You may contact us via email at anytime to assist and help you get started. We offer professional on line support for as long as you may need us and to answer any questions that you may have after you have received your Material.

If you are serious about this opportunity, meet all the requirements, and are responsible  then please contact us ASAP via email and we will forward you the payment details.

Sincerely,

Stephanie
Simply Vacancies

So what to you get for your R100?

A list of vacancies and recruitment agencies that you can get for free from ANY newspaper, job site and in any one of a THOUSAND other places completely free of charge.

The unfortunate reality is that there are many unethical people out there, particularly in times like these, that have no compunction in taking your last money.

Use common sense, don’t fall for these scams.

If you are in any doubt at all, contact us and we will check it out for you, free of charge.

Understanding antivirus software from US-CERT

Both the National Cyber Security Alliance and US-CERT have identified this

topic as one of the top tips for home users.

Authors: Mindi McDowell, Allen Householder

Cyber Security Tip ST04-005

Understanding Anti-Virus Software

Anti-virus software can identify and block many viruses before they can infect your computer. Once you install anti-virus software, it is important to keep it up to date.

What does anti-virus software do?

Although details may vary between packages, anti-virus software scans files or your computer’s memory for certain patterns that may indicate an infection.

The patterns it looks for are based on the signatures, or definitions, of known viruses. Virus authors are continually releasing new and updated viruses, so it is important that you have the latest definitions installed on your computer.

Once you have installed an anti-virus package, you should scan your entire computer periodically.

* Automatic scans – Depending what software you choose, you may be able to configure it to automatically scan specific files or directories and prompt you at set intervals to perform complete scans.

* Manual scans – It is also a good idea to manually scan files you receive from an outside source before opening them. This includes

* saving and scanning email attachments or web downloads rather than selecting the option to open them directly from the source

* scanning media, including CDs and DVDs, for viruses before opening any of the files

What happens if the software finds a virus?

Each package has its own method of response when it locates a virus, and the response may differ according to whether the software locates the virus during an automatic or a manual scan. Sometimes the software will produce a dialog box alerting you that it has found a virus and asking whether you want it to "clean" the file (to remove the virus). In other cases, the software may attempt to remove the virus without asking you first. When you select an anti-virus package, familiarize yourself with its features so you know what to expect.

Which software should you use?

There are many vendors who produce anti-virus software, and deciding which one to choose can be confusing. All anti-virus software performs the same function, so your decision may be driven by recommendations, particular features, availability, or price.

Installing any anti-virus software, regardless of which package you choose, increases your level of protection. Be careful, though, of email messages claiming to include anti-virus software. These messages, supposedly from your ISP’s technical support department, contain an attachment that claims to be anti-virus software. However, the attachment itself is in fact a virus, so you could become infected by opening it (see Using Caution with Email Attachments for more information).

How do you get the current virus information?

This process may differ depending what product you choose, so find out what your anti-virus software requires. Many anti-virus packages include an option to automatically receive updated virus definitions. Because new information is added frequently, it is a good idea to take advantage of this option. Resist believing email chain letters that claim that a well-known anti-virus vendor has recently detected the "worst virus in history" that will destroy your computer’s hard drive. These emails are usually hoaxes (see Identifying Hoaxes and Urban Legends for more information). You can confirm virus information through your anti-virus vendor or through resources offered by other anti-virus vendors.

While installing anti-virus software is one of the easiest and most effective ways to protect your computer, it has its limitations. Because it relies on signatures, anti-virus software can only detect viruses that have signatures installed on your computer, so it is important to keep these signatures up to date. You will still be susceptible to viruses that circulate before the anti-virus vendors add their signatures, so continue to take other safety precautions as well.