Written by HAURI Virus Lab.

UCC stands for User Created Content. Users create contents without commercial intention and upload them online. Thesedays, many users participate to create various kinds of contents just for showing themself off, so a lot of fresh ideas come out everyday and many people visit UCC service page such as Youtube.

However, ironically due to this reason, the UCC has been targeted by malicious code maker and distributor. As a typical example, inserting malicious script to QuickTime format is available using by its editor and even to flash format. It means, hacker can insert the malicious code to UCC and execute the code by remote access. In the past time, hackers usually inserted malicious code to BBS(Bulletin Board System) for downloading unwanted ActiveX, but now most of portal sites block this kind of malicious attack, then hackers seem to be created another method to insert malicious code to UCC.

For minimizing this kind of threat using by UCC, we introduce three simple ways like following:

(1) Security Settings of Media Player
From the Media Player menu, go to [Tools->Options->Security], then check an option which is [Do not run script commands and rich media streams if the Player is running inside a Web page]. By setting like this, you can prevent the automatic installation of malicious code by movie inserted script.


(2) Internet Security Option Settings
From the Internet Explorer menu, go to [Tools->Internet Options->Security->Customer Level], then check "Prompt" option for [Download signed ActiveX controls]. By setting like this, you can prevent the malicious code installation through BBS tag without user agreement.


(3) Automatic Update Settings for AntiVirus and Security Patches
Due to vulnerability of Internet Explorer or Media Player's lack of security settings, if your PC is already infected by malicious code, you must run AntiVirus software and repair your PC. Therefore, the automatic update settings for AntiVirus is always required, moreover automatic update settings for Windows security patches is very important to keep your PC secured.

If you are a ViRobot user, you can set automatic daily engine update from its update configuration.