Tomaree Mature Age Computer Club

Newsletter

Club Meets 2nd & 4th Wednesday at

Tomaree Neighbourhood Centre, Salamander

10:00 AM

http://tmacc.users.nelsonbay.com/

club wiki at : http://tmacc.pbwiki.com/

Steering Committee

Bob Truscott 49821264

Noel Finch 49822797 Brom Crass 49283630

Next Meetings : 24 April 2019 then 8 May April 2019

XXXXXXXXXXXXXXXXXXXXXXXXXXXXX April 2019 XXXXXXXXXXXXXXXXXXXXXXXXXXX

If you attempt to fix something that isn't broken, it soon will be !

...........................................................................................................................

If you are viewing our newsletters in MS Word, any hyperlink (in bold blue and underlined) can be accessed by placing the cursor on it and holding down the CRTL key. Then left click.

.....................................................................................................................................................

Most Android Antivirus Useless: Report

by John Lister on March, 19 2019

A new report claims most Android "antivirus" apps don't provide enough protection to justify that term. It says two-thirds of the antivirus programs were so ineffective, they were practically useless.

The report comes from AV-Comparatives, a website that tests antivirus and other security software. It says it was inspired to look at Android apps after spotting one that literally did nothing but show a fake progress bar before saying no malicious apps were present (without actually carrying out a scan).

The test involved putting 250 different Android antivirus apps to work on Samsung Galaxy S9 devices

Each ran 2,100 times. In 2,000 of the cases the device was laced with a different variant of the 250 most common malicious apps recorded during 2018. In the remaining 100 cases the device was completely clean of malware. (Source: av-comparatives.org)

Only One In Ten Had Perfect Record

138 of the tested apps failed to meet the very low bar set by the testers: that the app detected at least 30 percent of the malicious apps and that it didn't give any false positives by "detecting malware" when the phone was actually clean. The testers said these apps should be considered ineffective and unsafe.

The tester also notes that only 80 of the apps which did meet this threshold should still be considered effective and safe, including 23 which had a 100 percent detection rate.

Antivirus Apps Label Self as "Risky"

The remaining 32 passed the test but shared a common flaw in the way they worked. The problem was that they used a "whitelist" approach, which meant that any apps with an installation package whose name was on the list were automatically considered safe.

That said, the whitelisting approach has two major flaws: one is that scammers can create a malicious app, then name it with a bogus installation package name to make it look legit. The other is that the approach risks false positives: in some cases the supposed antivirus app even labeled itself as unsafe.

False positive are a big problem as they lead users to become less trusting of security software and potentially ignore warnings about genuine threats. AV-Comparatives said the best bet is to stick to established, reputable antivirus developers. It noted that reviews in Google Play store are often fake, and often users of ineffective antivirus apps will give a good rating, despite not knowing whether the app is really working well. (Source: independent.co.uk)

The list of Apps that Passed and Failed

For a full list of apps which passed and failed, please review the report.

We are purposely not including the list of apps in this article because (a) most apps listed in the report have almost zero reputation and will likely disappear from the list over time anyway; (b) the lists are far too large and would take up too much space in this article, and (c) we have our own opinion on what should be considered as safe (because we know you're going to ask!), listed directly below in the next section "Our Recommendation for Antivirus on Mobile Devices".

Our Recommendation for Antivirus on Mobile Devices

As suggested, the report listed 80 security apps as detecting 30% of malicious programs on devices which had zero false positives. For the full list, please read the report. Of those 80 apps, Infopackets.com considers the following as having a reputable brand, should you decide to install antivirus on your phone or tablet:

MalwareBytes Anti-Malware, Avast Mobile Security, AVIRA Antivirus, Panda Free Antivirus and VPN, Bitdefender Mobile Security & Antivirus, Comodo Mobile Security, Samsung Device Maintenance, Dr.Web Security Space, Sophos Mobile Security, Emsisoft Mobile Security, ESET Mobile Security & Antivirus, F-Secure Internet Security & Mobile Antivirus, Symantec Norton Security, Google Play Protect, Trend Micro Mobile Security & Antivirus, Kaspersky Lab Mobile Antivirus, Webroot Mobile Security & Antivirus, and McAfee Mobile Security.

With that said, Infopackets.com does not generally recommend installing antivirus / antimalware apps on an Android or iOS mobile device simply because the security of the operating system is usually extremely tight, providing the device is up to date.

It is our opinion that antivirus / antimalware apps would only decrease battery usage (requiring too much CPU power to operate to be effective) and should only be installed if and only if the user believes their phone may be infected.

In such cases, our #1 pick is Malwarebytes Antimalware ("MWB") - but, once again - ONLY if you believe you are infected. We then suggest uninstalling MWB after doing a full scan, so that it does not continually occupy resources or drain the battery. We do not feel that MWB (or similar apps for that matter) need to run 24/7 on the phone or tablet (potentially draining resources), nor do you need to pay for a subscription to stay "safe". It is a fact that most "protection" offered by antivirus and antimalware are often overboard and serve only to slow the device down (and drain the battery). This same statement is also true for PCs.

In severe cases, a phone reset should provide the best "protection" should a phone or tablet become compromised, and if MWB or similar programs cannot remove an infection.

This is our professional opinion on the matter - you are welcome to interpret this information however you like.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

These are some of the add-ons coming to Microsoft’s new Chromium-based Edge

By Matt Hanson 16/3/2019

It appears that Microsoft is getting ready to release an early preview build for its Chromium-based Edge web browser soon, as it has just launched the 'Microsoft Edge Insider Addons' website.

This website will allow users to test out add-ons (also known as extensions) for the upcoming release of Edge, which Microsoft has rebuilt to be based on the Chromium engine – like Edge’s biggest competitor, Chrome.

The Microsoft Edge Insider Addons page was spotted by Twitter user WalkingCat, and gives us a hint at what kind of add-ons we can expect to see in the upcoming Chromium Edge.

Add-ons aplentyAdd-ons are installed into web browsers to add extra functionality, such as ad-blocking or password management. Microsoft’s original Edge web browser has been criticized by its lack of add-ons, especially compared to its rivals Firefox and Chrome.

By moving Edge to the same engine as Chrome, many hoped that this would mean that Edge would benefit from Chrome’s large collection of add-ons, and it appears that has indeed happened.

The website lists the add-ons in the following categories:

Adblockers and password managers

Education

Social and entertainment

Shopping

Productivity

For Developers

While it gives us a hint of what add-ons are coming to Chromium-based Edge (as these add-ons don’t work in regular Edge), the existence of the website also gives us a hint that Microsoft could be launching an early version of Chromium Edge soon for us to try out.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Best Linux distributions which look like Windows

- The Windows Club 14/3/2019

Once you have understood the pros and cons while shifting from Windows to Linux and decided in favor of the latter, the tougher part would be adjusting with the new environment. Thankfully, there are a few distributions of Linux which have an interface similar to that of Windows. While no Linux distribution would be like Windows 10, many of them would follow Windows 7 model.

Linux distributions which look like Windows

Here are some Windows look-alike Linux distributions which you may like.

1] Zorin OS

This is perhaps one of the most Windows-like distribution of Linux. It is somewhat a replica of Windows 7, with the Start menu, taskbar, etc. The speed of the OS distribution is appreciable. Zorin comes with a few pre-loaded utility apps that would make your job easier. Zorin can be downloaded from its website here.

2] Chalet OS

Chalet OS is the nearest we have to Windows Vista. Complete with the widgets and menus, the distribution is simple to use, yet efficient. Chalet’s Start menu is similar to that of Windows XP. It is basic and easy to handle. The latest version of the operating system is available here.

3] Kubuntu

While Kubuntu is a Linux distribution, it is a technology somewhere in between Windows and Ubuntu. Rather, the shift from Windows to Ubuntu is quite steep, so you could consider Kubuntu instead. Check more about it on the company’s website here.

4] Robolinux

If you miss Windows applications on your Linux distribution, Robolinux will allow you to install the same without any hassle. You can also copy your whole C: drive from Windows to Robolinux. Cool, isn’t it! The distribution can be downloaded from the company’s website here.

5] Linux Mint

One reason I included Linux Mint in this list is the because it’s versatile. Most Linux distributions are known for their speed and simplicity, while Windows has a lot more options. Linux Mint is pretty versatile. It is the nearest to Windows 10 amongst all Linux distributions. Get it from its website here.

............................................

Is There a Real Alternative to Windows ?

- Ask Leo 13/2/2019

Only Windows is Windows. There are alternatives, but whether they're right for you depends on you.

Is there a real, complete and reliable equivalent to Windows ? Other than that Apple stuff.

That’s a question I received not long ago. Particularly given the publicity around some of the issues with Windows 10 and its updates, I think many frustrated users are wondering if there isn’t something else they could or should be using.

The answer is my most common: it depends.

Summary

There are three major alternatives to Windows: Mac OS X, LinuxLinux is an operating system, just as Microsoft Windows or Apple’s MacOS are operating systems. Operating systems are the software that control the operation of a computer and provide a consistent interface, or API, that programs use to access the features and functionality of the operating system and computer.(Click on the term for full definition.)"Linux, and Chrome.

Whether or not any of them would work for you depends entirely on how you use your computer.

Less common alternatives include the mobile devices you may already be using.

Any alternative demands time and effort spent learning how to use it.

Windows alternatives

There is no exact replacement for Microsoft Windows. Whether any alternative will work for you depends on that alternative’s characteristics as compared to your needs.

The most commonly considered alternatives include Apple’s OS X on Macs, Linux, and the Google Chrome operating system. They each have significant pitfalls, depending on what you expect.

OS X runs (legally) only on Apple hardware, so switching means getting a new computer. It also means learning the nuances of OS X’s interface (just as you learned the nuances of Windows). It also means replacing all the software you use, as OS X does not run Windows applications. You’ll need to get versions of the same software available on the Mac, like Microsoft Office, for example, or alternative applications that serve the same need, such as LibreOffice or Open Office.

Linux is free and runs on almost any PC, even an old one collecting dust in a closet. There are a confusing number of distributions to choose from, with Ubuntu and Mint being the most popular for Windows expats. Like OS X, Linux does not run Windows applications, so you’ll be looking for alternatives. Unfortunately, true Linux versions of Windows applications are very rare. You’ll need to find alternative applications that serve the same needs to your satisfaction.

Google Chrome OS is available only on “Chromebooks” — laptops specifically designed to run the Chrome OS — so you’ll be getting a new machine to go this route. Once again, Chrome OS does not run Windows software, so you’ll be looking for alternatives. The good news here is that many Chromebooks can also run Android applications, where there often are official versions of Windows applications. These versions are often stripped-down equivalents to those you might find on Windows, but again, depending on your needs, they may be enough.

Depending on…

That phrase “depending on your needs” keeps coming up. That’s simply because different people have different needs and expectations, and all of the alternatives have different pros and cons when compared to those needs.

If you need the power of a real, popular, operating system with a corporation standing behind it to update and support it, and with numerous familiar applications that can do just about anything, a Mac might be the only real alternative for you.

If you just need to put something else on your existing hardware, and are willing to take the time to look for and learn about alternatives for the applications you’re used to running on Windows, then Linux could be a choice. Note that online help for Linux runs that gamut from non-existent to somewhat helpful to downright belligerent at times, so be sure to pack a fair amount of patience. Unfortunately, there’s a reason Linux is still considered an OS for geeks (albeit a good one).

If all you do is browse the web and send email, with a few other light tasks occasionally, it’s very possible a Chromebook might be right up your alley. There’s a strong argument for it being more secure than the alternatives above. Just don’t expect to do any heavy tasks like photo or video editing.

And in all cases, be prepared to learn. In fact, be prepared to spend a lot of time learning, and in turn learning a lot. Each of these operating systems is similar-to-yet-different-from Windows. They each have the same concepts — files, menus, apps, browsers, and so on — but the specifics of how you interact with each is often different. It will take some time to get used to a different way of doing things.

Mobile

Interestingly, particularly among the younger crowd, there’s a move to rely solely on mobile devices like your phone, Android or iPhone, or tablet, such as an iPad. I know several folks who’ve switched to devices like these almost exclusively.

Once again, it all depends on how you use your technology and what you want to accomplish with it. Mobile devices are great for many things, but not everything. Depending on your mix of activities, you may find you can go completely mobile only, use a mobile 90% of the time with that old Windows computer in the basement for times when a phone just won’t do, or realize that yes, you really do need a “real” computer to meet your needs.

The devil you know

Finally, I have to add that every alternative could give you a case of exchanging one set of problems for another. I know many people who are Apple- or Google-averse for privacy and control reasons. My experience with Linux is that it’s rare a day goes by without some kind of update to install.

None of the alternatives are frustration-free.

Depending on your reasons for looking, be sure to examine the alternatives you’re considering to make sure you don’t end up with something that frustrates you even more than what you’re trying to escape.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Hackers beat university cyber-defences in two hours

By Sean Coughlan BBC News 4/4/2019

A test of UK university defences against cyber-attacks found that in every case hackers were able to obtain "high-value" data within two hours.

The tests were carried out by "ethical hackers" working for Jisc, the agency providing internet services to the UK's universities and research centres.

They were able to access personal data, finance systems and research networks.

University research projects have been major hacking targets, with more than 1,000 cyber-attacks last year.

The simulated attacks, so-called "penetration testing", were carried out on more than 50 universities in the UK, with some being attacked multiple times.

'Disastrous breach'

A report into their effectiveness, published by Jisc (formerly the Joint Information Systems Committee) and the Higher Education Policy Institute (Hepi), showed a 100% success rate in getting through the cyber-defences.

Within two hours, and in some cases one hour, they were able to reach student and staff personal information, override financial systems and access research databases.

The tests were carried out by Jisc's in-house team of ethical hackers, with one of the most effective approaches being so-called "spear phishing".

This is where an email might appear to be from someone you know or a trusted source but is really a way of concealing an attack, such as downloading "malware".

John Chapman, head of Jisc's security operations centre, warned of the risk of a "disastrous data breach or network outage".

And he said, on the basis of the test results, "we are not confident that all UK universities are equipped with adequate cyber-security knowledge, skills and investment".

"Cyber-attacks are becoming more sophisticated and prevalent and universities can't afford to stand still in the face of this constantly evolving threat," said Mr Chapman.

'Sensitive research'

Universities and research centres have faced repeated attacks from hackers, with more than 200 institutions reporting more than 1,000 attempts last year to steal data or disrupt services.

"Universities hold masses of data on sensitive research," said Nick Hillman, director of Hepi.

A "few unscrupulous foreign governments are keen to access" this research, which was vital to "future UK economic growth", he said.

Universities also held a great deal of personal information about their students, Mr Hillman added, and regulators might need to set minimum requirements for cyber-security.

University of Greenwich vice-chancellor David Maguire, who chairs the Jisc, said universities "accrue huge amount of data" and this "places a burden of responsibility on institutions, which must ensure the safety of online systems".

The National Cyber Security Centre (NCSC), part of the GCHQ intelligence service, said most attacks on UK universities were related to phishing and attempts to gain entry for ransomware and malware.

But overseas states also targeted universities to steal intellectual property and "gain technological advantage".

And last year "criminal actors based in Iran" had been blamed for some of the cyber-attacks against UK universities.

"NCSC experts work closely with the academic sector to improve their security practices and help protect education establishments from cyber-threats," said a spokeswoman for cyber-defence agency.

A Universities UK spokeswoman said university leaders were working with the NCSC to "help improve and strengthen security practices to better protect the sector from cyber threats".

"Data security is an absolute priority," she added.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Microsoft adds 'Tamper Protection' to Windows Defender

by John Lister on April, 3 2019

Microsoft will add a "tamper protection" feature to the built in antivirus tools in an upcoming Windows 10 update. It's designed to stop malware from switching off key security features in Microsoft Defender.

Initially the changes will be available for Microsoft Defender Advanced Threat Protection, which is a subscription service for businesses. However, Microsoft appears to have revealed it will later become available to home users of Windows 10. (Source: zdnet.com)

The idea is to prevent rogue apps from disabling some of the weapons in the Microsoft Defender arsenal, in turn making it far easier for malware to cause damage. Microsoft hasn't revealed exactly how it works, which is likely to avoid giving too much away to hackers.

Key Features Protected

The four main features that tamper protection will prevent apps from switching off are: real-time protection, which actively scans files rather than waiting to be manually run; cloud-delivered protection, which checks suspect files against a central database that's kept totally up-to-date with the latest detected threats; IOAV (IOffice Antivirus), which checks files a computer is trying to download; and behavior monitoring, which looks for suspicious activity by apps even if the app itself hasn't been recognized as a known threat.

Tamper protection will also prevent rogue apps from disabling Microsoft Defender completely and from deleting security updates.

Protection Activated By Default

Once tamper protection rolls out to home users, it can be switched on or off through the Windows Security app, which is the all-in-one settings menu for the security tools on a Windows PC. It will be on by default.

For business networks, the feature will only be controllable through the management console, which is the menu that system administrators use to control security across a network. It won't be accessible from individual computers, which Microsoft says is designed as an added layer of protection. The idea there is to not only protect against malware that has got onto a computer, but also against rogue employees who are intentionally trying to cause harm. (Source: microsoft.com)

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Why use a VPN at home on your Windows PC

- The Windows Club 27/1/2019

A time when we could surf the World Wide Net without any risk is long gone. Today we witness how social networks track our location and data. Our sensitive information will continue to be stolen and shared with third parties even without our knowledge.

In spite of this fact, people can’t refuse from digital devices. We use them almost in all areas of our lives. You can’t but agree that we have become dependent on our smartphones, laptops or other gadgets. The only way out is to make our online activity secure and safe.

VPN technology has become extremely popular today, especially among residents from poor countries or where there is an advanced censorship system. However, if you live in a free country without any restrictions, you should think about your security on the Internet as well. Today we have a very little control over our personal data, and our task is to protect it against snooping eyes.

What is a VPN ?

In a nutshell, a VPN is a “secret tunnel” between your computer and the server you want to connect. All your data passing through this tunnel is encrypted, and your real IP is hidden. It makes you unseen on the Internet, nor your ISP or the government can trace you.

The market today can boast of a wide range of VPN providers. There is also free VPN software that is also popular among netizens, which you can check out on bestvpnrating.com.

Whether a provider free or paid, for a really secure Internet connectivity a VPN should have the following features:

OpenVPN protocol

256-bit encryption

No-logging policy;

A huge amount of servers worldwide

Customer support.

Why use a VPN at home in 2019

1] Hide your information and your IP from third-parties.

Freedom of speech is a current issue today. People from certain Asian countries haven’t got freedom of expression at all. They are sentenced to prison for a careless word or a benign comment. The issue has become urgent for American or European residents as well.

2] While traveling.

Before going on business abroad, make sure you have a secure VPN provider. In some countries like Oman, China or Saudi Arabia social networks and VOIP messengers are blocked. You will have to install VPN software on your laptop to communicate with your family and friends and get access to certain websites which you may need for your work.

3] Access to streaming services.

It is an open secret that cable TV is dying the death. People prefer free or paid streaming services now. American Netflix is one of the most popular libraries today. However, people from other countries do not have access to the whole content. Luckily, it is a cakewalk to unblock all TV shows with a VPN. You just have to choose a provider which can offer a server in the USA.

4] Torrent trackers are popular today along with online streaming services.

Pirating is punishable in certain countries. So, to avoid any problems, let’s take care of safety first.

5] Safe money.

If you are into internet shopping, you may know that some online shops raise prices every time you visit a page but don’t buy a thing. With a VPN, you can change your IP every time you visit a page. The website will “think” that you’re a new customer and the price won’t go up. Moreover, you can buy the cheapest plane ticket with a VPN. Change your IP, and you’ll see how prices for tickets vary from country to country.

To my mind, using a VPN is highly useful nowadays. Even if you’re going to have it on your home PC, you’ll get a lot of benefits. Moreover, almost all VPN software is user-friendly. The installation is simple even for not advanced users.

.......................................................................

Countries that have banned VPN

It doesn’t come across as a surprise to many when the name of the following countries are mentioned in the banned VPN list. The laws and restrictions over the use of the Internet in many such countries are opaque.

Belarus – The country has banned both Tor and VPN services, since 2015. It is also illegal to visit foreign websites in this republic. If ignored, the action has severe repercussions. A fine equal to half the average salary of $120 is liable to be imposed.

China– It is one of the most restrictive countries in the world when it comes to free internet access. As such, only government-approved VPNs can be used. Setting up a VPN or similar connection in local areas can carry a fine of over $2,000.

Egypt – Western nations believe, Egypt has scant regard for online freedom. Its Government led by President Abdel-Fattah el-Sissi has passed an Anti-Cyber and Information Technology Crimes law that authorizes the Government to block websites it deems are a threat to national security. It has also activated Deep Packet inspection after the Egyptian Revolution in 2011 in order to block VPN connections.

Iran – Although there is no complete ban over VPN use, citizens can have access to only government approved VPNs. To prosecute users who are violating state laws or using a VPN that is not compliant with Iranian law, a jail sentence of 91 days or up to 1 year of incarceration can be awarded.

North-Korea – As a tourist, you can have access to VPN software, but it is banned for locals. Although, there’s no punishment known to us for its violation, any attempt to gain unsanctioned access to the Web can cause immense trouble.

Oman – VPN was banned in Oman since the primary use of the service was often used to bypass ISP censorship and the prohibition of the use of VOIP. A few also used it to fake their IP location as the services were available in few regions only. Since 210, personal use of a VPN has been declared illegal and carries a fine of over a thousand dollars. So, it is advisable to keep away from VPNs if you live in Oman, or unfortunately, if you’re planning to visit this sultanate.

Russia – Laws framed in ‘Russian Federation’ are meant to block access only to ‘unlawful content’. The restriction is not intended to impose restrictions on law-abiding citizens. However, there are penalties prescribed for both unauthorized VPN providers and VPN users. 700,000 RUB ($12,000) for the former and up to 300,000 RUB ($5,100) for the latter.

Syria – The government of Syria, has carried out extensive and repeated internet shutdowns since 2011. This makes the country in middle-east one of the worst countries for internet censorship and accessibility. The censorship mainly targets different VPN protocols like OpenVPN, L2TP, and PPTP.

Turkmenistan – The government of Turkmenistan is one of the most repressive in the world. So, it hardly stuns someone if the use of VPN in Turkmenistan is completely banned. It is a subject to total censorship. The country has only one ISP which belongs to its government. The government uses imprisonment, travel bans, and other arbitrary punishments as tools for violators who attempt to use proxy servers and VPN.

Turkey – Turkish government, forces heavy censorship on Internet use. As such, it blocks sites like Tor and some VPN providers.

United Arab Emirates – VPN was banned in UAE since people used free VOIP services like Skype, WhatsApp, leaving their own big Telecom companies, abandoned. UAE has also placed an outright ban on some French TV channels and Netflix. Anyone found guilty of violating the provisions is punishable a sentence to imprisonment or a fine of up to $400,000 depending on the nature of the crime.

Uganda – There currently is no legislation against VPNs in Uganda. However, Uganda Communications Commission has ordered telecommunication companies to block Virtual Private Networks (VPN) applications that are aiding Ugandans to evade social media tax.

Venezuela – The Latin American nation too has ramped up censorship with Tor ban. The country’s largest ISP, state-owned CANTV, banned Tor. It was believed, Venezuelans were using VPN networks to bypass sanctions and get access to national and international news sites.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Scammed by Right PC Experts ? Here's What to Do

by Dennis Faas on March, 29 2019

Infopackets Reader Cindee T. writes:

" Dear Dennis,

The other day I was using my web browser and suddenly received a message that my computer was infected and to call 855-551-7666 to have it fixed. There was no way to close the warning screen - I was scared and didn't know what to do! I called the number and spoke to 'Right PC Experts' (rightpcexperts.com). The person I spoke to had a very thick Indian accent. To fix the virus warning, he remotely logged into my computer and installed a bunch of security programs, by the names of 'Anti hacking', 'Email Security', 'Network Firewall' and 'Network Security Shield'. I paid $399 for having them 'fix' my computer. After reading your article about PC Network Experts (pcnetworkexperts.com), I am quite certain I have been scammed. My biggest worry is that they still have access to my machine and may delete files or lock me out of the computer once I cancel the payment from my credit card company (and report them as fraud). Can you PLEASE help!

I asked Cindee if she would like me to connect with her using my remote support service in order to have a closer look, and she agreed.

Below I will discuss my findings.

Right PC Experts = Fake Tech Support

First and foremost, if you ever receive a "warning" that your computer is "infected" and to call a 1-800 number to "fix it", it's a scam.

I decided to do a 'whois' lookup to see who owns rightpcexperts.com - and low and behold - it is the same scammer that is running pcexperts.com and webnetworkexperts.com that I reported only a few weeks ago. What's interesting is that all 3 of these websites have 3 different 1-800 numbers, yet they are registered by the same person (supposedly, the owner is "Sumit Singh" and is located in New Dehli, India).

You have to ask yourself - if this was a legitimate company why would they be operating under different website / company names and have different 1-800 phone numbers ? The answer is simple - it's a scam!

Fake Security Programs are Actually Malware in Disguise

After examining the "security programs" that Cindee mentioned to me in email, I decided to upload the files to virustotal.com to have them checked against 40+ antivirus programs simultaneously.

Here's what I found:

The "Network Security Shield" (which the tech support scammers claimed is meant to protect the user against hackers) is actually a Trojan known as "FileRepMalware". This type of Trojan (malware) can be used to download and infect the system with other malware, which can then steal personal information (for example).

The "Email Security" the scammers installed was actually a "Win64.Dropper.dt" Trojan Dropper. This Trojan in particular silently stays active in memory, waiting and listening for instruction (by remote) from cyber criminals. Once activated, criminals can install malware by remote onto the machine without the user knowing, including spy tools, key loggers, password sniffers, remote access backdoors, etc.

The "Network Firewall" program they installed came up clean, but it is completely bogus. In other words, it's fake - just like the tech support being offered by rightpcexperts.com.

The "Anti hacking" tool they installed is the scariest by far. Virustotal.com reports that this program is actually a keylogger. That means the scammers can record your keystrokes in order to steal financial information; the data stolen is then relayed to cyber criminals (for example).

Scammed by Right PC Experts? Here's What to Do

Now that you know rightpcexperts.com is a scam - and worse yet - that the programs they install on your computer to "fix" the problems are actually malicious, here is what you need to do:

First, cancel the payment you made to the tech support scammers. Keep in mind that they usually won't transfer the money for a few days because they are busy scamming hundreds of other people daily. The scammers will often ask for your bank account; if not, a credit card.
In either case, call your bank immediately and tell them what is going on and try to cancel the payment. If you paid by check this is extremely problematic because the scammers now have your name, address, bank name, bank address, bank account number, etc - which means they can hit your bank account whenever they want.
As I mentioned already, rightpcexperts.com is the same scam company as webnetworkexperts.com and pcnetworkexperts.com, and they likely operate under other multiple, fake company names (and more to come - I'm sure), which makes it difficult to block transactions by the bank.
Note that if you paid by gift card (iTunes, Amazon, etc) then you have little to no recourse, as those methods of payment are irreversible once you've given them the PIN number.

Second, don't answer the phone when the scammers call you back - and believe me, they will - whether it's days, weeks, or months later. Each time they call, they will claim something else is "wrong" with your machine and try to sell you more fake tech support not covered by your initial fake contract More often than not the cost is higher than the first time because once they smell blood (your money), they will do everything they can to get more.
Based on what I've been told from clients, these scammers will call back with a fake follow up call to make sure you're satisfied with their fake tech support. If you say "no", they will do everything they can to convince you to let them back in your machine. They will even get their fake "manager" on the line, like it's some sort of priority escalation to make sure you're happy receiving their fake support. Don't fall for it!

Finally, hire a REAL professional (such as myself - link here) to look over your system to undo the damage caused by the scammers. Based on my experience, the scammers will leave on average 3 to 5 hidden backdoors (open connections) on your system. That means they can get back into your computer and do whatever they want, whenever they want.
Please note that based on my experience, the scammers will either lock you out of your machine (changing your password), delete all your files remotely, or install ransomware on your machine once they find out that you either didn't make the payment or canceled the payment.
Also worth noting: one of my clients had $18,000 stolen from his account only DAYS after having scammers in his machine. What's very interesting about this case is that he swears he did not give them the account number that the money was taken from. Therefore I suspect the scammers installed a keylogger or password sniffer once they connected to his machine - similar to the malware I've already mentioned in the article - then stole his financial information afterward !
A real PC expert, such as myself, can find these backdoors and threats and eliminate them. Once again - based on my experience - antivirus and antimalware won't find these threats because they are often legitimate software programs used in nefarious ways. You have been warned !

( I think it was Bill Barnum that said that there is one born every minute. Brom )

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Apple Devices Need 51 Important Security Updates

by John Lister on March, 27 2019

Apple has released a patch for mobile devices which covers 51 security flaws. It's sparked debate over Apple's security levels and the way it issues such updates.

The patch is for iOS, taking it up to version 12.2. Apple doesn't issue standalone security updates. Instead, it builds it into the main update for the system, which also includes new features or bug fixes. (Source: apple.com)

The most notable fix is a bug in an API (application program interface), which lets third party software interact with Apple services. In this case, the API bug could allow malware to access an iPhone, iPad or iPod touch's microphone. Not only would the user not need to give permission, but they might be unaware it has happened.

Sites Could Track Device Movement

Another security flaw could allow a website to get data from a device's movement sensors without their knowledge. The big problem here isn't so much the possibility of tracking a user's own movements; instead, it could be possible to detect when the device is completely still, suggesting it's not in use. If a phone was already exploited, it could signal to hackers it's a 'better time' to run malware with a minimal risk of the user being alerted.

There's also a series of fixes for bugs that could allow malware to run code on the device with permission. Another bug could allow such code to activate if a user taps on a link in an SMS message. (Source: theregister.co.uk)

Security Updates Overshadowed

Apple's update system does have some big advantages over the likes of Android. Because it makes both the software and the phones and tablets themselves, it has much more control over updating devices rather than waiting for manufacturers to roll out updates.

A downside is that tying the security updates to the feature updates means some users are reluctant to install updates for fear that older devices may struggle to keep up with the new version of the system and slow performance. That could mean some people choose not to get the security fixes, which means that their devices are now at risk.

The policy also means that security fixes will often come at the same time as Apple is announcing new features, often with high-profile media events. Depending on how you view it, that could be a smart move because it takes attention away from security problems, or an irresponsible one because it reduces the likelihood of users learning about the need to install an update.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Windows 10 will now automatically uninstall problematic Updates

- The Windows Club 13/3/2019

Microsoft has said that Windows 10 will start removing installed Windows Updates that cause problems in starting or running your device at peak efficiency. Windows Updates which fail dues to software incompatibilities will get automatically uninstalled.

After your computer has recovered from a startup failure, you may see this notification in the bottom right corner of your computer screen:

We removed some recently installed updates to recover your device from a startup failure.

When Windows detects that this is happening, it will resolve this issue by attempting to uninstall the problematic update.

Once the update has been uninstalled, Windows 10 will also prevent such problematic updates from re-installing automatically for the next 30 days – after which, it will again try to automatically install the update.

This 30-day period will give Microsoft and its partners the opportunity to investigate the failure and fix the updates, says KB4492307.

Now even after fixing such updates, if your PC is unable to function properly after the reinstallation of these updates, Windows 10 will uninstall them again.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Most Password Managers Not Secure

by John Lister on February, 20 2019

Security researchers say some major password manager tools could be flawed. But they also say it's still sensible to use them, just with a degree of caution.

It's a fact that using the same password for multiple sites is a massive security risk. That's because if one site gets hacked, it could mean that hackers can use the same password on another website to gain access to potentially sensitive information, resulting in identity theft or financial loss.

Password manager tools (such as Roboform and Dashlane) aim to overcome two big dilemmas with online passwords - which is keeping passwords unique, and trying to remember them. Remembering unique passwords becomes incredibly difficult, especially considering most users use around 20 or more websites requiring credentials on a regular basis.

The most common setup for a password manager is to act like a vault that holds all the passwords. The vault is then password protected with a master password, which can be entered by the user or unlocked using biometrics (such as a finger print sensor). Typically, the software company that develops the password manager does not have access to the passwords themselves, and the passwords are usually stored in an encrypted form.

Windows Programs At Risk

An organization known as the Independent Security Evaluators examined several major password manager services to see they followed sensible security practices. They looked at standalone Windows apps, rather than the type of password manager that requires you to login to a website (such as Dashlane).

One thing they looked at was how the computer handled password data when the apps were locked: in other words, when the user wasn't actively retrieving a password to use on a site. They discovered that with five major password managers (including: 1Password, Dashlane, KeePass, Last Pass and RoboForm), passwords were sometimes left in the computer's memory.

In three cases (including: 1Password, Last Pass and Roboform), researchers discovered that the master password could be exposed. (Source: securityevaluators.com)

Each of the password manager companies have given a mixed response to the report, with some saying they will continue to look for ways to tighten up potential security issues. Other claim that the potential security breaches are simply a limitation due to the way that Windows works.

Password Managers Still Worth Using

It's not necessarily a major security disaster. For a hacker to take advantage of this flaw, they'd first need either remote or physical access to a computer.

Tech experts note it's an example of security being about degrees rather than absolutes. The Washington Post uses the analogy of a seatbelt not preventing all damage in auto accidents, but is still worth using. (Source: washingtonpost.com)

It does mean users of password managers should take three steps to boost their protection and mitigate against risks:

Close down password manager apps completely rather than leave them running, even in "locked" mode.

Continue to use adequate security software to protect a computer against remote hacking.

Consider not using the password manager for the most critical login details such as email accounts and online banking.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

How to play AV1 videos on Windows 10

- The Windows Club 17/11/2018

A new video codec has been made available for Video Streaming and Playback services to use over H.264 and H.265 or HEVC. This new codec is being called AV1. It is an open and royalty free video coding format, mainly to be used in video transmissions over the Internet. It is made to succeed VP9 coding format. It is intended to be used along with OPUS in an upcoming update to WebM container format for HTML5 web video and WebRTC technologies. This codec promises the same quality of stream but with a dip in the size of the file. Also, no patent holders will be paid any money for the usage of this codec. Today, we will check how to enable AV1 codec natively on Windows 10.

Play AV1 videos on Windows 10

Enabling a codec natively on Windows 10 means that the addition of the codec will enable the user to play media on apps like Groove Music and Movies & TV apps. This is similar to playing HEVC videos on Windows 10 Movies & TV app or playing OGG, Vorbis and Theora coded media files on Windows 10.

As the AV1 codec is emerging, more and more software is adding a support for it. Microsoft is not much behind though. Microsoft has recently silently released AV1 Codec Pack for Windows 10. This is released on the Microsoft Store just like the Web Media Extension Codec pack and the HEVC Codec pack.

After you install it, you will be able to play AV1 videos on Movies & TV app. However, if you use the Win32 version of software like the VLC Media Player, you might not need it most probably.

The description of this codec on the Microsoft Store reads,

“Play AV1 videos on your Windows 10 device. This extension is an early beta version of the AV1 software decoder that lets you play videos that have been encoded using the AV1 video coding standard developed by the Alliance for Open Media. Since this is an early release, you might see some performance issues when playing AV1 videos. We’re continuing to improve this extension. If you allow apps to be updated automatically, you should get the latest updates and improvements when we release them.”

Though the videos with AV1 codec are really rare at the moment; in case, if you wish, you can find and install this video codec extension from the Microsoft Store here.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX