Sunday, 24 March 2013

If it seems too good to be true...


As the old saying goes, “if it sounds too good to be true, then it usually is.” Nowhere are these words of wisdom more applicable than on Facebook!

Very few words can capture one’s attention more than the word ‘FREE.’ You would think that the constant use and overuse by marketers worldwide would eventually wear the word out, but it's not the case. Just seeing the word on a page, in an online advertisement, or hearing it on the television or the radio is enough to grab the average person's attention.

Facebook scammers and spammers have enjoyed great success with the lure of false promises. At any given moment, you don’t have to look very hard to find Free iPads, iPhones, Computers, etc. -Including iPad Giveway and other ‘Giveaway’ Pages. The pics I've posted here are examples of a couple of these I've seen over the past day alone.

The whole premise that a new Iphone or Ipad can't be sold and has to be given away because the factory seal on the packaging has been broken is, frankly, unbelievable given the high value and desirability of these items.

The Apple name and logo have been used in the title of the Facebook page to make the offer appear legitimate and, perhaps, associated with Apple Inc. However take a look under the surface at the About info for any of these pages and you'll see there's little or no detail of who's behind the offers, and it's certainly not Apple Inc.

99% of the time, the end game encountered by unsuspecting users is either a survey scam or a marketing gimmick where you have to complete several ‘special’, ‘reward’ or ‘bonus’ offers to qualify for the promotion. These offers often cost real money, and we have yet to hear of a case where the participant actually received anything after jumping through all of the hoops.

I clicked on the links in the above pages just to test my theory which took me through to a web site where, before I could even see specific details of the offer, I was challenged to provide my name, email address and "any other relevant information" whatever that might be. So anyone clicking through just to check the details of the free offer doesn't even get the option to choose whether or not to subscribe. Seems like a very hard sell to me which, if the offer was genuine and above board, really wouldn't be necessary.

So my advice to you here is: avoid these like the plague!

Finally... I'm big enough to admit my mistakes. So if I'm wrong about any of these Facebook Ipad/Iphone giveaway offers I'll happily eat humble pie in this blog. However I'll need to see hard evidence from someone I know and trust to convince me.

Saturday, 23 March 2013

A simple fix for most WiFi signal strength problems

I'm often hearing from friends and clients who struggle with WiFi signal strength problems in their home or office. However there's always a solution to it and based on my own experience it's normally a trivial one. Here's some food for thought when approaching the task of deciding on the most appropriate solution.

Most of the time a WiFi repeater will provide an inexpensive solution to the problem. A wireless repeater will take an existing signal from a wireless router or access point and rebroadcast it to create a second network with an apparently seamless connection between the two networks. Those outside of the primary network will be able to connect through the new "repeated" network. Wireless repeaters are commonly used to improve signal range and strength within homes and small offices.

Generally speaking WiFi repeaters work best when positioned in an elevated setting within the room or space their WiFi signal is to be broadcast. That's because an elevated setting typically has fewer physical obstructions. However that elevated setting's not always easy to achieve in a home/office unless there's a high shelf or storage unit upon which the repeater can be placed. Furthermore this can also give rise to a problem of having an unsightly trailing power lead which is often undesirable in a home setting.


There's a popular preference for the wall-mounted type WiFi repeater. And it's understandable because they're compact and less obtrusive. Bear in mind though that they're often handicapped because they're likely do be plugged into a wall socket way down at shin level, and possibly obscured behind furniture and therefore not ideally situated to deliver optimum performance. For this reason they can deliver disappointing results.









The alternative to the plug-in adapter type repeater is the free standing type device such as the one pictured here. It'll have an external power adapter and most of these free-standing repeaters come with a wall-mounting kit. The device's external antennas are adjustable and help improve its WiFi signal strength.











In most situations either of the above products will do what's needed and I'm happy to recommend either. However I'd say the free-standing one is most likely to give the best/strongest signal, hence would be my first choice. Mine is sat on top of a book case and is out of sight but gives out a strong signal from up there.

Saturday, 16 February 2013

How to check that a web site is safe to visit

Links to web sites present themselves to us in a myriad different ways. That link in a Facebook post that'll show us a funny video; an email from an acquaintance containing a link to an amazing special offer; a message posted in a newsgroup or forum containing a link to a valuable piece of information; the list is endless. Most of the time these links do exactly what is expected. However there are folks out there hoping to trick us into visiting some web page or launch a piece of code that'll attempt to perform some unexpected and probably harmful action. But, hey, I've got internet security software so I'm protected against this kind of thing, right? Not necessarily. It's not guaranteed that your internet security app, even when fully up-to-date, will 'know' about that new piece of malware and, therefore, may not be able to block it. So the best advice is  if you really want to proceed then do so with caution. Thankfully there are some resources out there that'll help. Here are a couple of sites the purpose of which is to check the safety of a web site when given the site's address.

McAfee's Site Advisor - It's not necessary to install the free download in order to use this resource. Instead I suggest you go ahead and enter the site's URL into the  text box in the right sidebar under the heading of View a Site Report (see image on right) and you'll see either a green (safe) or red (unsafe) at the beginning of the report. If you're interested to know more SiteAdvisor goes on to provide a lot more detail.

Norton’s SafeWeb (see screenshot below) works in a similar way to the McAfee site. When displaying a site’s threat report it contains user community input in the form of reviews and ratings in the right sidebar. The actual Norton review starts with the green (safe), orange (caution advised), red (unsafe) or grey (unknown) icon, followed by the threat report, that includes the results of 17 different malware tests. For certain sites, Norton’s SafeWeb also reports information of e-commerce safety (whether the site encrypts transactions and has a privacy policy).







In summary it makes perfect sense to use one or other of these sites to check out a web site if you're at all unsure about its safety.

Tuesday, 12 February 2013

Problems downloading attachments in hotmail? I’ve seen this and have fixed it. Read on to find out how I did it.


I was invited to assist a client who was struggling to overcome a newly evolved problem on her Windows 7 laptop. The issue is understood to have appeared following the removal of Google Chrome from the system. Specifically the user was no longer able to download email attachments from her hotmail account. All attempts to do so resulted in the appearance of the following pop-up message along the lower edge of the Internet Explorer 9 browser window. The wording in the dialog box reads… Do you want to save  Get attachment_aspx?file= xxxxxxxxxxxx with a dropdown menu giving options to save or save as. Clicking on either button or the ‘x’ resulted in no response. Yup… zombified!
getattachment
One suggested solution I discovered involved either enabling or disabling the browser’s Silverlight add-on. Alas that step did nothing to help. Another suggestion I came across was to make sure that the program and file associations were set back to refer to IE rather than Chrome. This revealed that some associations were set incorrectly but updating them didn’t help. In the end updating the browser to IE10 nailed it for me. However I also updated the old style hotmail interface to the Outlook one at the same time; it may have played a part.
My hope is that one or more of these suggested solutions helps others searching for a fix to the same or a similar issue.

Wednesday, 30 January 2013

Old school fraud masquerading as something official


2012-12-27 12.09.20
If you're here looking for a solution to the Your Computer Has Been Locked banner screen then this article should give some general pointers and info. Please comment if you have something constructive to add or found this article to be helpful.

This is a new twist in the type of malware infection that’s on the loose at the moment. Everything about this rogue app is designed to intimidate its unsuspecting victims (there have been many) into believing that there’s something official about the basis for his or her pc being locked. However it’s nothing more than theft, fraud, crime or whatever seems most appropriate to describe this kind of low-life activity.
In this example the computer has been well and truly hijacked and with no apparent way of getting rid of the on-screen message or regaining control of the infected pc. Furthermore the victim is being asked to send a payment of 100GBP to buy the release. Alas the needed solution will not be found by making the payment. Instead it’ll result in the criminals behind this fraud getting credit card and, most likely, other valuable personal information with which to attempt to commit further crimes.
The solution here is to find the most appropriate way to clear the infection from the pc without having to completely wipe the system with a reinstall of Windows. So we turn to using one or possibly more anti-malware apps.
The above pc, running Windows Vista, had to be restarted into safe mode to enable the necessary control to be regained. Having got this far it was then possible to use SurfRight’s HitMan Pro to perform a scan of the infected pc. Multiple infected files in various locations on the hard drive were discovered and cleaned. Further infected files were detected during a subsequent scan using MalwareBytes Antimalware scanner.
Perhaps not all of those infected files were associated with the ransomware but, of course, all needed to be removed for obvious reasons.
Following this disinfection the pc could be restarted normally with no apparent damage to the Windows operating system, user data or the installed apps. A lucky escape? Not so easy to discover is what information may have been harvested from the infected pc. So follow-up actions include resetting passwords on all important accounts. e.g. online banking and shopping. The other priority follow-up was to invest in better internet security software. Kaspersky and BitDefender are the vendors of what is considered to be the best currently available.
It’s priggish to say this, I know, but prevention is always better than cure!

Friday, 18 January 2013

A few words on recovery media

Most, if not all, new PCs that come with a pre-installed Windows OS normally provide a facility to create what is known as recovery media. Recovery media is normally a set of DVDs or perhaps a flash drive containing a default installation of the Windows OS and optionally any apps that came pre-installed on the system. The recovery media is very useful if the PC is affected by a hard drive failure or severe virus or malware infection and there's no other form of disc image backup from which to restore. Recovery media is also useful for quickly wiping all personal data from a PC if it's to be given or sold to a new owner. It could also be used to reinstate a known good working OS if the system becomes unusable for some other reason.So if you've not already got a set of recovery media for your PC do go ahead and create a set as soon as possible because other methods of recovery are likely to be time-consuming and/or more expensive.


Instructions for how to create the recovery media are typically provided and, based on my experience, there's a wizard-driven process for the creation of a set of recovery media. This page on the HP site describes the creation process using either DVDs or a flash drive.


If you've acquired a system from a previous owner and the recovery media isn't included you may find that you're blocked from creating the recovery media because a set has already previously been created. A restriction is in place - certainly on HP PCs - which limits the number of times recovery media can be created to just one. If you're in that situation and need to overcome the block then completing the following steps will work...


1. Delete the hidden file named RMCStatus.bin from the following two places:


  • c:\Program Files(x86)\Hewlett-Packard\Recovery Manager\
  • - the root of a drive d:\ (or whatever drive letter is assigned to the RECOVERY partition)

2. Remove the hidden file Rebecca.dat from C:\Windows\System32\

Note. I've tested the above on a Windows 7 HP laptop and it worked just fine.

I also understand that it's possible  use a product like Partition Magic which has, amongst its other capabilities, a recovery media creation tool which could be your get-out-of-jail card in the absence of all other options.

And finally please bear in mind that the above guide must be used in conjunction with - not in place of - whatever process you already have in place for backup of your data.

Thursday, 17 January 2013

The Microsoft phone scam continues to plague us in 2013


If you receive an unsolicited phone call from a security 'expert' from Microsoft (and possibly other vendors) offering to fix your PC - it's a scam. It's been doing the rounds for several years now and is obviously deceiving some into parting with money. Otherwise it would have gone away by now. Here's how to avoid the 'Microsoft phone scam', and what to do if you fear you have fallen victim to it.


Here's how the scam works...

The scammer calls you and asks for you by name. He/she will say they are a computer security expert from Microsoft (or another legitimate tech company). The 'security expert' is direct and polite, but quite forceful. They'll say that your PC or laptop has been infected with malware, and that they can help you solve the problem. What happens now depends on the particular strain of scam with which you have been targeted.

Some scammers will request that you to give them remote access to your PC or laptop, and then use the access to harness your personal data. Others will instruct you to download some piece of software which contains malware that will automate the task of harvesting your personal data. Another variant of the scam involves the scammer simply asking for a payment in return for a lifetime of 'protection' from the malware they allege is on your machine.

The bottom line: no bona fide IT security specialist is ever going to call you in this way. For one thing, they can't tell that your PC is infected. The scammer is calling you simply because they've harvested your name and number from a phone book, or some other marketing list to which your details have been added at some point in the past. The scammer knows nothing about you or whether you've even got a home computer - it's nothing more than a trawler trip. However the scammer fully expects to catch the unsuspecting and unsure off-guard which is the only reason he/she is doing it. It's not personal, but, like any crime, it makes you the victim and is ultimately harmful to you on many levels.

The Microsoft phone scam: my advice if you're called by one of these scammers...

1. Just put the phone down. Don't react to the call. In fact your best response is to say nothing at all.

2. If they do manage to engage you in conversation, don't provide any personal information. This is a good advice for any unsolicited call. And certainly never reveal credit card or bank details.

3. Don't allow any unknown caller to guide you to a webpage, or instruct you to change a setting on your PC or download software.

4. If you feel motivated to report the call to the police (yes it is a crime after all) you can attempt to get the caller's details. Having some information can only help the police track the criminal.

5. If you have revealed any information to the scammer e.g. username/password info change those passwords and, if possible, the revealed usernames. It's also worth running a scan with up-to-date security software. Also ensure that your firewall is active 

The Microsoft phone scam: what to do if you have been caught out by this

1. Don't give yourself a hard time over this. It's a successful scam and has been - and continues to be - used to successfully trick many. 

2. As already mentioned change all the personal data that you can change. There's lots of data you simply can't change because it's fixed e.g. date of birth. But you can usually change your passwords and usernames. It can cause a lot of grief to change but you can create a new email and then start using that separate email account for linking to your online accounts for banking, shopping, etc. 

3. Contact your bank to explain what happened and ask them what they can do to help.

4. Ensure you use up-to-date security software to scan and, if necessary, cleanse your PC of any virus or malware. And if the scammer did get you to do something to your PC using Windows' built-in System Restore facility to roll back the settings is a good step to take. Here's an article that describes how to use system restore in Windows 7.

5. Do tell the police, especially if you've lost money. It's worth checking whether your credit card company or contents insurance will cover the loss.