As of November 24, 2005  2:34  AM (Pacific Standard Time, GMT -8:00), TrendLabs has declared a Medium Risk Virus Alert to control the spread of WORM_MYTOB.MX. TrendLabs has received several infection reports indicating that this malware is spreading in Eastern Europe, Japan, India, China, Sweden, France, Spain, Austria, and Germany.

This memory-resident worm spreads copies of itself as an attachment to email messages, which it sends to target addresses, using its own Simple Mail Transfer Protocol (SMTP) engine. Through this SMTP engine, it is able to easily send the said email message even without using other mailing applications, such as Microsoft Outlook.

The email message that it sends has the following details:

From: (Spoofed)

Subject: (any of the following) 
? DETECTED Online User Violation 
? Important Notification 
? MEMBERS SUPPORT 
? Notice Account limitation 
? Security Measures 
? WARNING MESSAGE YOUR SERVICES NEAR TO BE CLOSED 
? You have successfully updated your password 
? Your Account is Suspended 
? Your Account is Suspended For Security Reasons 
? Your password has been successfully updated 
? Your Password has been updated 

Message Body: (any of the following) 
Dear {User Profile} Member, 

Your e-mail account was used to send a huge amount of unsolicited spam messages during the recent week. If you could please take 5-10 minutes out of your online experience and confirm the attached document so you will not run into any future problems with the online service. 

If you choose to ignore our request, you leave us no choice but to cancel your membership. 

Virtually yours, 
The {User Profile}, Support Team 

===========

Dear user {User Profile}, 

It has come to our attention that your {User Profile}, ( x ) records are out of date. For further details see the attached document. 

Thank you for using {User Profile}! 
The {User Profile} Support Team 
+++ Attachment: No Virus (Clean) 
+++ "Name" Antivirus - www.{User Profile}.com 

===========

Dear user {User Profile}, 

You have successfully updated the password of your {User Profile} account. 

If you did not authorize this change or if you need assistance with your account, please contact customer service at: register@{User Profile}.com 

Thank you for using {User Profile}! 
The {User Profile} Support Team 
+++ Attachment: No Virus (Clean) 
+++ "Name" Antivirus - www. {User Profile}.com 

===========

Dear {User Profile} Member, 

We have temporarily suspended your email account {User Profile}. 
This might be due to either of the following reasons: 
1. A recent change in your personal information (i.e. change of address). 
2. Submiting invalid information during the initial sign up process. 
3. An innability to accurately verify your selected option of subscription due to an internal error within our processors. 
See the details to reactivate your {User Profile} account. 
Sincerely,The Support Team 
+++ Attachment: No Virus (Clean) 
+++ {User Profile}Antivirus www.{User Profile} 

NOTE: {User Profile}, is equal to the computer's Domain User Name 

Attachment: (any of the following file names) 
? accepted-password 
? account-details 
? account-info 
? account-password 
? account-report 
? approved-password 
? documeng 
? email-details 
? email-password 
? important-details 
? new-password 
? password 
? readme 
? updated-password 

This worm also propagates via network shares. It searches for available shared folders within the network and attempts to drop copies of itself into these shares. It also generates random IP addresses and attempts to drop copies of itself into the said addresses' default shares. It uses the account details of the currently logged user to gain access to password-protected shares. 

It has backdoor capabilities, which enable a remote malicious user to perform commands on the affected system, thus compromising system security.

It runs on Windows NT, 2000, and XP.

In this article, I'll tell you all the maintenance steps I take on a daily, weekly, monthly, semiannual, and annual basis.
You may not need all the steps I take, and that's perfectly fine. You can "cherry-pick" the ideas, techniques, and tools that best fit your own preferences, to create your own PC maintenance checklist. Or, if you rely heavily on your PC, you may wish to adapt my full task list to your own unique situation -- or even expand upon it!. 

The Foundation Steps
Because this article is about maintaining a PC rather than repairing one, we'll assume that your PC is in reasonable shape to begin with, and not suffering from major malfunctions, hangs, slow operations, and so on.

Once your PC is basically OK, you can then keep it that way with the routine maintenance we'll discuss in a moment.
In the same vein, because this article is about keeping your PC running right rather than fixing major, pre-existing problems, we'll further assume your PC isn't infected with viruses, worms, or other malware; and is well-protected by defensive software.

If you need to beef up your PC security and resolve any existing infections, you can do so with tools such as a desktop firewall (Sygate or ZoneAlarm, etc.) and an antivirus tool (Symantec/Norton, NOD32, or AVG); and one or more anti-malware tool, as long as the tools don't "fight" each other for control (MS Antispyware, SpywareBlaster, StartUpMonitor, WinPatrol, AdAware, or Spybot S&D. 

Daily Maintenance
Most of the following daily maintenance tasks can be fully automated, or nearly so: Once they're set up, they'll run on their own at night or during the PC's idle times, so little or no human intervention is required. That means your PC can mostly take care of itself!

1) Clean and compact the local mailboxes, throwing out junk mail, and keeping the rest of the mail files densely packed. (This helps to speed searches and to avoid filing problems.) Some mail clients, such as Eudora, let you automate this clean/compact process.  Others, such as Outlook Express, require a few manual clicks. But either way, it's worth doing on a regular basis: Check the help file for your mail client for information on how to do this on your system.

2) Deep-clean the "Temporary Files" areas. Windows automatically creates several scratchpad spaces and holding areas for temporary files based on a percentage of disk space. With today's huge hard drives, you can end up with literally gigabytes of junk files because these areas are normally not cleaned out until they overflow; and even then, will only be cleared to make enough space for whatever new files are arriving there. But "temporary" files, by definition, shouldn't have to be kept around, so almost all this space (minus a little essential housekeeping data that's regenerated with each restart of Windows) can be reclaimed. Windows has some built-in tools like the "Disk Cleanup" utility that can get you started, but you can do much better: The Disk Cleanup utility, for example, has extra, hidden settings you can access if you know how that will do a much better job with much finer control over just what gets kept and what gets thrown out. And some simple, free additions to the built-in tools can get most everything else. You also can automate the entire process so your PC stays lean and clean, with hundreds to thousands of megabytes less of junk files than otherwise. See this for full details.

3) Back up all user files. There are many tools to do this automatically; my preferred method automatically creates a nightly backup and then zip-compresses, encrypts, password protects, and stores the backup on an otherwise unused partition on my hard drive. See this for step-by-step info.

4) Set your antivirus, anti-spyware, and firewall to check automatically for updates at least once a day. (This is usually found in an "Options," "Settings," "Update" or "Schedule" menu item.) Likewise, let Windows Update grab any and all "critical" updates as they become available. If you wish, you can have them auto-install as well. If you prefer an extra, cautionary step, have Windows Update download, but not install the updates, until you give your approval.

5) Defrag at least the C: drive or partition; and any other frequently accessed drives or partitions. On my heavily used system, a daily defrag helps keep my files in contiguous spaces on the hard drive, which speeds access to the files' contents. It also would make any data-recovery --in the event of a catastrophic disk failure -- much simpler and surer. Plus, with only one day's fragmentation to overcome, each nightly defrag proceeds swiftly. But I admit: Daily defrags would be overkill on a lightly used PC; in that case, defrags could be done weekly or monthly; it's up to you. In any case, you can automate the process and allow for unattended defrags by using Defrag's command line options in a script, batch file, or scheduled task.

6) The one manual element in my daily maintenance rituals is to burn the previous night's backup file to CD for long-term offsite storage. I usually do this first thing in the morning while the day's first batch of E-mail is downloading; it takes one blank CD (cost: about 20 cents) and about four minute's time. With these daily CD backups stored away from my PC, my data's safe, even if something horrendous should happen to the PC itself. 

Weekly Tasks
The weekly tasks build on the daily tasks, above.

1) Manually verify that all automated daily antivirus, anti-spyware, firewall, and Windows Updates have worked and that all files are current: I do this by "making the rounds" once a week, opening Windows Update and my firewall, antivirus and anti-spyware tools each in turn and manually clicking on each tool's Update option. If the tools have been doing their automated jobs all week, there'll be nothing new to download. But if I find new updates to download, I can grab them, and then recheck the settings of whichever tool I'm in to see why the automated update process failed. This way, I can ensure that all my essential security tools are up to date, and stay that way.

2) Manually update the security tools that don't auto-update: Some of the tools I use, like Spybot Search&Destroy, have no auto-update option. I open tools like this once a week and trigger a manual update, making sure I have the latest versions available.

3) Run a whole-disk, "grand mal" scan with your AV and anti-spyware tools, including tools that don't run automatically on a daily basis. If your security tools were working properly all week, no malware should have made it onto your PC. But it doesn't hurt to check. Some AV and other tools let you schedule a full automatic scan of your files, which is great if it's available -- a full scan can take quite a while. I automate what I can, and then manually trigger the rest, letting each tool search my drive in its own specialized way. The scans almost always come up clean, except for a few harmless, so-called "tracking cookies". In this way, I know that the daily-level protections are doing their job. But if a manual scan finds new problems, I'd be able to fix them on the spot, and then could dig deeper to see which of my security tools failed.

4) Check and process (usually, that means: discard) any files quarantined by AV, antispyware, firewall, etc.: Some security tools set aside problematic files in special quarantine folders. These might be E-mail attachments that contain hostile payloads; or any kind of file thought to be infected or dangerous. Over time, the quarantine folders can grow quite large if you don't check them. You may be able to add some quarantine folders to your daily automated cleanups (step 2 in "Daily Maintenance"); but in any case, it's a good idea to see what, if anything, your security tools are sequestering, and to delete any quarantined files you don't need.

5) Clean the Registry: This only takes a couple minutes, so it's something I do manually, using the tools recommended in "Testing 10 Windows Registry Cleaning Software Packs."

6) Run Chkdsk to verify the basic health of your hard drives: After steps 1-5, above, I like to reboot my system, and that's a perfect opportunity to run Chkdsk. (In XP and Win2K, Chkdsk runs best at reboot, before Windows fully loads.) In earlier version of Windows, Scandisk performs a similar function.

Once A Month
As before, these tasks are additive, building on what has gone before:

1) Check for updates of office-suite tools (word processor, spreadsheet, etc.) via a vendor site like Office Update or equivalent: Non-security-related updates are rarely of critical importance, so I only check for those once a month or so, updating when it makes sense. (Not all updates are equally important; if an update doesn't improve your security, fix a bug, or add a feature that's important to you, feel free to skip it.)

2) Check for new versions/updates/bugfixes of all other major or frequently used software tools: Similar to #1, above, it's a good idea to check periodically for security updates, bug fixes, and new features in all your most-commonly used software utilities and applications.

3) Create a fresh disk image of the entire C: partition, plus any other partitions that have had significant activity in the last month. Store one copy of each image on another partition; also burn a copy of that image to CD or DVD for safe long-term storage off-site: This is the larger version of step #3 in Daily Maintenance; it creates a restorable image of the entire contents of the C: partition. Should I ever need to rebuild my system from scratch, I'd restore the most-recent image of the C: partition, and then restore the most-recent daily backup of the user files (again, from step #3 in Daily Maintenance ). Storing both the images and daily backups on CDs and DVDs also means I can roll my system back to any arbitrary date, and have the system be exactly as it was on that date. On the other hand, if all I need is one file from the backups, I can restore just that one file, too. Thus, I have total restore flexibility, and can recover anything from the past, ranging from a single file to a total setup.

4) Check for an adequate on-hand supply of "consumables;" blank CDRs, DVDs, ink, paper, etc: You may need to do this more or less frequently than I do, but I find a once-a-month inventory of consumables helps prevent those "I'm out of ink and the stores are closed!" panics.

Semi-Annual Steps
With all the foregoing, there's not a lot left to do at longer intervals. But one exception is to look at the PC not so much as an electronic device, but as a mechanical one: Its fans are constantly whirring, drawing dust, fibers, and all manner of airborne debris inside the case. Every six months or so, it can be smart to open the PC and take a look inside: Verify that all the fans are working; clean the vents, the fan blades, the heat exchangers, etc. Full details: "Getting The Grunge Out Of Your PC."

Twice a year or so also is about right for checking your PC's OEM/vendor site for BIOS and driver updates. If you've installed third-party parts, you can separately check those sites, too (e.g., checking for new video drivers).

Annual Clean Ups
If you've been performing the smaller maintenance tasks all along, there's really no need for a huge, year-end blowout. On the other hand, if you've missed steps along the way, then a once-a-year tune-up makes sense, and we've covered that in "Year-End PC Tasks."

About the only other long-term maintenance item you might want to add to the list is to check the batteries in your UPSes, which typically last about one to three years. Replace any worn-out batteries, or the entire UPS, as needed.

Adjusting For Your Needs
Once again, it's worth repeating that the above is probably more thorough than most people need. But the steps are there for you to choose from, adapt, and modify as you wish until you have a maintenance schedule that fits your needs perfectly. 

Organize Your Documents  This one from Worldstart.
Do you dump every file you create into your My Documents folder? Is it the digital equivalent to a messy 7-year-old's room? Well, never fear, the computer cleaner is here! (And I can't believe I just said that, much less going to publish it.)
Anyhow, the best way to keep things organized is not to create any documents in the first place. Think about it. No docs, no mess. After all, you only got a computer so you could read this newsletter right? Right??
OK since that probably won't work for ya, let's go with the second best way. Try setting up sub-folders inside the My Documents folder. Make one for each "category" of document that you have.
For example, you could have a folder for letters, one for invoices, another for sales letters, and so on. It makes keeping track of stuff much easier. Here's how to set it up:
1. Click the Start button, Documents, My Documents (XP users, hit the Start button, My Documents). This should open your My Documents folder.
2. Create a new folder with an appropriate name (right-click any blank area and select New, Folder from the resulting menu).

3. Finally, drag any documents that belong in that folder to it. That's it. You can create as many of these little sub-folders under the My Documents folder as you need.
Oh, one final suggestion: you may want to make yearly folders, too. For example, at the end of this year, make a folder called 2005 Docs. Then move everything you've made, folders and all, into that folder. Gives you a fresh start for the new year. OK, it's the Windows equivalent of shoving toys under the bed, but who cares? It works!