Archive for the ‘Computer Virus’ Category

What free anti-virus software do you recommend?

Posted by

Microsoft Windows Defender Anti-Virus SoftwareOften we are asked what anti virus software to use? While it is totally preference at this point since most anti-virus software’s do the task of scanning and monitoring your computer for suspicious programs, viruses and malware, not all anti virus softwares are free. We usually recommend a free anti-virus software since subscription renewals can be easily ignored, and it is better to have current anti-virus definitions than to have none at all.

Miscrosoft Security Essentials

Microsoft Security Essentials is anti-malware and anti-virus program put out by Microsoft for Windows XP, Windows Vista and Windows 7, but not for the Windows 8 operating system.

The software provides real-time protection and scans new files as they are downloaded or created, and disables detected threats. The software scans the computer routinely and updates the virus definitions database automatically. The software integrates seamlessly into the Windows operating system.

Microsoft Security Essentials license agreement allows home users to download, install and use it on an unlimited number of computers in their households free of charge, so long as each computer has a legitimately licensed copy of Microsoft Windows.

Unfortunately due to its popularity a few malware programs try to impersonate or resemble it to fool users into installing them instead of Microsoft Security Essentials. A few virus/trojan programs disguised as Microsoft Security Essentials called “Security Essentials 2010” and “Microsoft Security Essentials 2011” have appeared on the Internet and closely resembles Microsoft Security Essentials. The virus uses sophisticated social engineering to deceive users into infecting their systems, under the guise of five different fictional anti-malware products. It also terminates and prevents the launch of many popular programs, including Registry Editor, Windows Command Prompt, Internet Explorer, Mozilla Firefox, Opera, Safari and Google Chrome.

If you think you may have a rouge anti-virus software that is trying to mimic Microsoft Security Essentials, take your computer to South City Computer or a local computer repair shop to be scanned for malware.

Windows Defender

Windows Defender is released by Microsoft and started out as an anti-spyware program for Windows XP, Vista and 7, however the most recent releases has expanded to an anti-virus, anti-spyware and anti-malware software and comes as the standard anti-virus on Windows 8.

Windows Defender provides real-time protection and integrates with Internet Explorer enables files to be scanned as they are downloaded to try to avoid accidentally downloaded malicious software. Microsoft Windows Defender does not scan files downloaded with other web browsers like Firefox or Chrome.

Windows Defender greatly resembles Microsoft Security Essentials and uses the same virus definition updates. As a result, Microsoft Security Essentials is not compatible with Windows 8.

There are seemingly new computer viruses created everyday, and while no anti-virus software can protect you 100% of the time, luckily, there are a few free anti-virus programs available that to attempt to make your computer safer.

Alert: Android Trojans and Viruses

Posted by

Android Viruses and Trojans Oh MYDo you think your Android device is safe from virus and trojans? Think again. Here are a few new viruses and Trojans that were discovered in June 2014 to watch out for:

Android.Generisk is a generic detection for Android applications that may pose a privacy, security, or stability risk to the user or user’s Android device.

Android.Uupay is a Trojan horse for Android devices that steals information from the compromised device. It may also download additional malware.

Android.Rusms is a Trojan horse for Android devices that sends SMS messages and steals information from the compromised device.

Android.Pletora is a is a Trojan horse and Ransomware for Android devices that may lock the compromised device. It then asks the user to pay in order to unlock the device.

Android.Simplocker is a Trojan horse and Ransomware for Android devices that may encrypt files on the compromised device. It then asks the user to pay in order to decrypt these files.

Heartbleed Bug still a threat

Posted by

The “Heartbleed Bug,” officially know as CVE-2014-0160, is one of the most far reaching  vulnerabilities ever discovered. It allows a hacker to break the encryption on webpages, and steal personal information such as credit card numbers, but more importantly passwords.

When you connect to a secure website, the website uses something know as SSL to encrypt your connection. By doing this, all the data that’s sent between you and the website is meaningless to anyone except those who have the decryption key, i.e., you and the website. One of the features of SSL is that it uses a “heartbeat signal” that is repetitively sent between you and the website to confirm that you are still connected to the real thing. Your computer sends the website a special packet of data, and the website responds with another special packet. Heartbleed exploits a vulnerability in the OpenSSL brand of SSL that allows a hacker to create an abnormal heartbeat packet, which, when sent to the server, will get it to respond with the decryption key. Once the hacker has this key, he can use it to decode all your communications with the website and get more information, like your password.

Not all websites were vulnerable to Heartbleed, but most were. These include Gmail, Twitter, Facebook, Instagram and many more. Even though all major websites, and most small ones, have patched the bug by now, any information that you sent before it was patched could have been stolen.

This is why it’s extremely important that you change your password for all of the online services that you use. A hacker could have stolen your password before the bug was fixed, and has just not used it yet. Keep in mind that this must be done after the site you’re using has fixed the bug. If they haven’t fixed it, then you make your new password vulnerable too. All major websites (Facebook, Twitter, Google, etc.) have fixed it, but when working with a smaller website, like a corporate intranet for example, you should check with the administrator to make sure first.

How to Avoid Yahoo Malware and Other Types of Malware

Posted by

Image for google warning about malware.In the beginning of 2014 Yahoo’s ads contained malicious software (malware) which infected an estimated 2 million users computers. It was estimated that almost 27,000 computers using Yahoo were infected an hour. The computers that were infected through Yahoo, were using up a massive chunk of the computers resources as bit coin slaves, where without the users knowledge the computers were mining bit coins thus harboring a lot of the computers capability. Although malware today is very common especially through email and the Internet; there are still ways to defend your computer.

What is malware?

Malware is a term that is short for “malicious software” which is meant to harm your computer. Malware includes: spyware, trojan horses, and computer viruses. malware can be downloaded or installed unintentionally or unknowingly by the user through the Internet or via email.

What does malware do?

Malware infects the computer and can lead to the attacker accessing content on the computer, leaving the user susceptible to Identity Theft and other financial and personal information being seen. With malware undetected the computer can have certain operations disrupted along with being used to store unidentified data. Certain malware like spyware can be used to spy on the user’s action for marketing.

How to defend from malware:

  • Keep your computer up to date.  Make sure your computer is automatically updating itself.  Make sure  check for updates is set to run when you have the computer turned on, not at 3am like the default setting.
  • Make sure you have antivirus/anti-malware installed.  Microsoft provides free of charge antivirus and malware built in if you download and activate it.  The issue with commercial subscriptions is that you forget to pay and they expire, putting you at risk.
  • Be careful of spam emails. Emails that seems sketchy or are otherwise unexpected may contain malware. View header of email, also clicking to check who the sender of the email is can help you decide whether to open it or not.
  • Heed computer warnings. Often if entering a dangerous website your computer may already be letting you know. Computers may also display a message saying that certain files may be harmful to your computer if opened.
  • Bring computer to local computer shop. Bringing your computer to South City Computer or another local computer repair shop to be scanned for malware. You could schedule a Tech Desk visit in order to have your computer scanned while you wait.  Call or Send us a message through our website.

Malware is becoming very common now which now there are many anti-virus and anti-malware softwares available for download. Also bringing your computer into South City Computer or another local computer repair shop to be scanned for malware can see if you already have malware and can be removed.

Call:  314-400-7918

Sources: http://www.businessinsider.com/yahoo-malware-turned-european-computers-into-bitcoin-slaves-2014-1

 

5 Tech Scams That Will Ruin Your Holiday

Posted by

It’s the most wonderful time of the year.  The holidays are a time for celebration and cheer and unfortunatly some folks in the holiday spirit will let their guard down and become victims to holiday tech scams and hidden holiday virus and malware. Don’t let any of these 5 tech scams ruin your holiday season.

Fake Holiday E-Greeting Cards

Many people like to share holiday wishes and greetings over email. E-Cards are an inexpensive alternative to traditional greeting cards. These emails usually urge a computer user to click a link to receive their electronic greeting card from a friend. However watch-out, this link could be to a malicious website meant to phish your personal information or to get you to download a virus or other malicious software onto your computer. If you think you may have been duped into clicking a fake e-card links it is probably time to get your computer checked for virus and malware at South City Computer or a local computer repair store.

Charity Donation Scams

The season of giving is upon us, and many people will be making generous donations to causes and charities in hopes to make the holiday a little brighter for those who are less fortunate. However, watch out for fake charity emails going around the Internet and Facebook trying to silicate donations to phony veterans’ charities, children’s causes and relief funds. Make sure to look into a charity before making a donation to be sure it is a legitimate 501c3 organization and not just a scam to take your generosity for granted.

Gift Card Scams

Finding the right gift for some people can be a real challenge. Gift cards are the perfect gift option for those on your list who are hard to shop for. However, watch-out for fake gift card offers on social media websites like Facebook and Twitter that are actually scams to phish consumer information and/or credit card details. A recent Facebook scam offered a free $1000 Best Buy gift card to the first 20,000 people who sign up on an identity phishing website.

Holiday Themed Screensavers and Games

Holiday themed computer games and screensavers are a fun way to decorate your computer for the holiday. But many of these screensavers and games are actually computer viruses or malware meant to infect havoc on your computer. Be very cautious when downloading and installing holiday games and screensavers, try to only use software put out by reputable software makers. If you think you may have downloaded and installed a fake screensaver or holiday game program onto your computer, bring it into South City Computer for a virus/malware scan and removal.

Holiday Deals Too Good to be True

Many people will scour the Internet for websites where they can save a few bucks when buying gifts online. However watchout for holiday deals that are probably too good to be true on craigslist and phony e-commerce stores that are only meant to phish personal information and credit card data from unsuspecting consumers that believe they are purchasing gifts. Every holiday season the BBB hears from irritated holiday shoppers who paid for a supposedly great deal online, but received nothing in return. Try not to purchase from websites that do not use trusted 3rd party checkout payment processing such as Paypal, Amazon, Google Checkout, or Stripe.

Nobody wants to be a victim of online scams and using a little caution this holiday season just might keep you from getting scammed and becoming a “Scrooge”. If you think you may have been victim to one of these scams bring your computer into South City Computer or a local computer store for a virus/malware checkup, and please have a happy and safe holiday season this year!

FAKE EMAIL & VIRUS ALERT: Important – New Outlook Settings

Posted by

I received a rather official looking company email today informing me of “New Outlook Settings” from the “Administrator”.

Further inspecting this email I open it and found the following message with an attachment (Outlook.zip):

"Please carefully read the attached instructions before updating settings.

This file either contains encrypted master password, used to encrypt other files. Key archival has been implemented, in order to decrypt the file please use the following password: PaSdIaoQ

This e-mail and / or any attachment(s) is intended solely for the above-mentioned recipient(s) and it may contain confidential or privileged information. If you have received it in error, please notify us immediately at helpdesk@******.com and delete the e-mail. You must not copy it, distribute it, disclose it or take any action in reliance on it. "

This sounds very technical right!? It must be a real email right? Unfortunately this is a fake email intended for an unsuspecting computer user to open the Outlook.zip attachment to install a virus or backdoor onto their computer. Many emails circulate the Internet claiming to be something that they are not, and in fact are computer viruses waiting for an unsuspecting victim to open the attachment and install the virus onto the vicitims computers.

I looked at the actual email header file and noticed the first line Return-Path was set to fraud@a**p.com and the email originated from an Indian broadband company that provides “Prepaid Postpaid Mobile Services”. That is definately not the company email server at all.

Here is the email header:

"Return-Path: 
X-Original-To: myuser@*******.com
Delivered-To: myuser@*******.com
Received: from ABTS-North-Dynamic-***.***.***.***.a**********d.in (unknown [*.*.*.*])
	by mail.********.com (Postfix) with ESMTP id 93E0CDCB4D4
	for ; Tue, 12 Nov 2013 10:20:37 -0600 (CST)
Received: from outlook530.*******.com (*.*.*.*) by *******.com (*.*.*.*) with Microsoft SMTP Server (TLS) id 9GGUFI93; Tue, 12 Nov 2013 21:15:39 +0530
Received: from outlook5199.*******.com (*.*.*.*) by smtp.*******.com (*.*.*.*) with Microsoft SMTP Server id ******; Tue, 12 Nov 2013 21:15:39 +0530
Date: Tue, 12 Nov 2013 21:15:39 +0530
From: "Administrator 
Message-ID: 
To: 
Subject: Important - New Outlook Settings
MIME-Version: 1.0
Content-Type: multipart/mixed;
Content-Type: application/zip; name="Outlook.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Outlook.zip""

This email appears to look very important, technical, and official and could be easily mistaken as an important company email or important email service providor email, however is SPAM with a virus attachment and should NOT be opened.

If you receive this email or a similiar email, do not download or open the attachment.

If you opened this email by accident, you should bring your computer into South City Computer, or to a local computer repair store near you today for a full computer virus scan and removal or computer restore services.

ALERT: Craigslist In-Home Computer Repair Scam

Posted by

Watch out for a new computer repair scam going around on Craigslist. The scammer posts a basic ad on craigslist; “In-Home PC Repair for ONLY $20.00 cash! Call today XXX-XXX-XXXX”. Most folks would jump at a deal so good! The number is usually a Google number. When the PC tech shows up to the victims house, after spending a few minutes on the computer, recommends that the computer goes in for service, and that the victim’s computer will need to come with them. The customer will pay the initial fee, and the computer is taken out of the victims home. It is hard to say what happens after that to the victims computer, but basically the victim never sees their computer, or the PC repair tech ever again.

The computer is most likely pawned off, and the scammer has made off with the profits from the stolen computer and also $20.00 in cash. Now the scammer may be able to aquire passwords to bank accounts, email accounts, and has an idea of the layout of the victims house and possibly knowledge of other expensive electronics the victim owns, and could possibly come back when the victim is not around to do even more damage.

Don’t be foolish when it comes to your computer repair needs. Don’t fall for the “In-Home Computer Repair Guy” scam. Beware of “Computer Repair Businesses” that can only offer in-home services, that cannot offer a real commercial location in which to take the computer in for repair. Next time bring your computer into South City Computer or a local computer repair store in your area.

FBI Virus now infects MAC OS

Posted by

Mac FBI VirusMost Mac users will gloat to their Windows using friends that they use MAC because there are no viruses, malware, or in this case ransomware for MAC. Well those days are long gone! The FBI virus has found its way onto the MAC platform. Now NO Operating System is safe (::cough:: except Linux ::cough::), not even the blessed Mac OS.

The ransomware gets pushed onto unsuspecting users by browsing high-trafficed sites. The FBI virus locks down the Safari browser accusing the user of illegally viewing disturbing pornography, and that the user must pay a fine of $300 to regain use of their computer. The message will not go away by leaving the page or closing the browser. The user is unable to even “force quit” the browser. The ransomware uses the browsers “restore from crash” feature to reload the ransomware page each time the browser is restored.

You should NEVER pay the ransom, and should to bring your Mac to South City Computer today to get this virus correctly removed.

US agency discovers new way to get rid of viruses

Posted by

In December of 2011 the Department of Homeland Security alerted the Economic Development Agency (EDA) and the National Oceanic and Atmospheric Administration (NOAA) that their networks may be infected with malware.

The NOAA had isolated the infection and cleaned itself up in a few weeks. The EDA on the other hand decided to pioneer the malware destruction field and gave us a few new ways to rid ourselves of viruses.

To start off with, the EDA shut off their e-mailing system which devastatingly crippled its regional offices since they could not access centrally located databases.

It the enlisted the help of an outside security contractor to scan their network for malware and give them assurances that their network was impregnable to further malware infections. The contractor initially found a few small problems but concluded that the system was largely uncompromised.

However, that was not enough for the CIO of the EDA.

The CIO insisted that the EDA was under attack from a foreign entity and, having a PHD in great ways to remove viruses, ordered all mice, keyboards, printers, and cameras destroyed, leaving that malware no place to hide.

The total cost of this incident in taxpayer money was $2,700,000: $823,000 went to the security contractor for its investigation and advice, $1,061,000 for the acquisition of temporary infrastructure (requisitioned from the Census Bureau), $4,300 to destroy $170,500 in IT equipment, and $688,000 paid to contractors to assist in development a long-term response. This entire process took a little more than one year.

The malware that was found was common stuff. There were no signs of persistent, novel infections, nor any indications that the perpetrators were nation-state attackers. The audit does, however, note that the EDA’s IT infrastructure was so badly managed and insecure that no attacker would need sophisticated attacks to compromise the agency’s systems.

Is Your Phone Safe From Malware?

Posted by

Everyone has an anti-virus on their computer. Afterall, you can get a virus from opening emails, visiting websites, downloading programs, and even just viewing pictures.

So why don’t you have an antivirus on your phone? You open emails on your phone, you browse the web, and you download apps. All of these are ways that malware can infect your phone and send costly $10 premium text messages or erase all of your contacts. Remember that along with all of your contacts, you also have logon information to websites and you may even have your credit card information saved on your phone.

When downloading an app you should always look at what permission it is requesting to use. An app for playing games shouldn’t be asking for permission to send text messages or make calls. Never download from third-party marketplaces. For the most part GooglePlay is safe, but everyone once in a while they do allow an app to be uploaded with malware.

As always, if you suspect your phone could be compromised, you should bring it in to South City Computer and we can scan it and remove any malware that is on it.

// //
//