I post this not in response to ikarasu because he already "won and closed" the discussion, but for others so they can think about the security of their
computer systems in a more knowledgeable and not naive way. I have a CCNP certification which is NOT a CCNE which is the most basic cert you can get. I also have a diploma in network security, so I know SOMETHING about what I'm talking about and hope no one follows ikarasu's way of thinking because it is complete garbage. Comparing
computer problems to parts failing on a car is DUMB. People usually don't "bug" cars and hack them or do malicious things to them to gain information and use it in a criminal way. It's pretty simple, part goes bad so fix it. Or maybe something is causing parts to go bad but 99% of the time someone is not actively sabotaging the customer's car.
To think most
computer "issues" are not security related is naive. Most calls have roots in security problems whether you know it or not. Common software call we'd get is "My
computer won't connect to the internet". This was almost a daily call. I'd get to a machine and do some testing to find out say DNS info was changed or static IP address was changed. Now, you can Google these "symptoms" and get an answer and a fix pretty quickly. The user is back up and running and they love you, problem solved right? Well, to "Mr. Google It" and the end user, Yes! But what caused that symptom? Is what caused it still in the
computer? Did what cause it do other damage? Is what caused it being transferred to other PCs on the network? Good infections DO NOT want to be easily detected. Malware makers know how "simple" people will try to fix the infection and are thinking 10 steps ahead. You don't always have the option to "re-image" a machine which still isn't a 100% cure-all.
Think of the internet being broken this way. Your
computer can't get to the internet? Compare it to your in your
sign shop and you can't get out the front door so you call joe-blow handyman. He comes and Googles "Door won't unlock" and Google suggests replace the deadbolt. He replaces the dead bolt and you can get out and your happy, he's happy, you pay him for Googling it and you go on your merry way. But wait, did he notice the dead bolt was drilled? Why was it drilled? Are there things missing or damaged in your shop? Is there an intruder hiding in there? Are the phones tapped?
Computer keystrokes being recorded to get your banking info?
See the broken internet or whatever the person is calling about is a "symptom". You can Google and fix the symptom but what is the underlying problem that caused that symptom and are there other symptom's I'm not seeing or haven't found yet?
NOT every call is about a security issue, good amount is hardware problems, other is simple software issues, but I would say 30-50% of the help-desk calls have a security aspect to them.
Maybe someone wants to point out they have more Certifications and experience then I do and think there are simpler answers and that they are right and I am wrong. It's not really 50% its more like 20% or blah blah blah, but the point is if your trying to fix something on your
computer think of it in a deeper sense. If something goes wrong with your PC and you have to call an IT Pro, YOU ask him these questions rather then accept "It's fixed, that will be $300"