Written by HAURI Virus Lab.

Last July 7 in 2009, there was a DDoS massive attack on target to US main webpages such as yahoo, the White House, and even security service company pages, etc.

According to analysis result of malicious code from the DDoS attack, the attacker hacked some web-HDD service pages, then replaced the normal file upload program to malicious code so that the malicious code is installed automatically whenever the file upload program is executed.

At that time, many web-HDD service users got infection by malicious code, and the infected zombie PC was used for DDoS attack regardless of user agreement.

Due to the last DDoS attack, not only many public agencies and web service companies got damages commercially, but also general users had to experience inconvenience. By massive damages, this kind of attack is also regarded as a cyber terror, but for the better prevention, still the international cooperation is required at each government level.

As a personal user, then what can we do to protect our PC from this kind of cyber terror?
The 7 commandments for protecting PC from DDoS attack are introduced here.

1. Apply the latest security patch for Windows and applications

2. Install HAURI ViRobot products, and block the malicious codes in Real-Time by updating the latest engine

3. Use an original license for the softwares and keep attention while using Web HDD or P2P services

4. Change user ID and password regularly, and particularly combine alphabet characters, numbers and special characters in a password for its high security level

5. Delete emails from unknown person, or have suspicious attachment

6. While using Messenger or SNS, do not click attached URL carelessly

7. Unshare default folder in Windows and set shared folder option to read only

Until now we haven't been reported any variant attacks like last DDoS case, but still we need specially attention to effective protection. For protecting your PC from being a zombie PC, all users must use authorized Anti-Virus product like ViRobot, and always maintain the latest security definition by regular engine update.