Triona's Tech Tips

In my column in today’s Northwest Herald I talk about the risks of using older systems like Windows XP:

Now, think about poor Windows XP. Itʼs 10 years old, so the criminals have had ample opportunity to discover and exploit its weaknesses. Antivirus programs arenʼt as effective as their counterparts for Windows Vista and 7 because Windows XP canʼt run the newer features.

Vital new versions of programs such as Internet Explorer arenʼt available for Windows XP, and to make matters worse, just having the old version of the program on your computer renders you even more vulnerable to viruses.

Yet weʼre using this ancient, bug-riddled system to share all sorts of personal information. Itʼs like leaving your brand-new iPhone on the seat of a beat-up car with broken locks. The forced upgrade cycle is true for any computer system, including Macs, tablets, smart phones and other devices. Technological advances result in new security risks, which in turn result in eventual obsolescence.

When you don’t plan your computer expenses, you end up buying whatever’s on the shelf and paying more than you might have otherwise. Usually it’s because your existing computer has crashed and you’re in a crisis, which is not the best time to be making decisions about big expenditures. What if you watched the sales, waiting for the right computer at the right price? What if you planned your computer upgrade instead of having it forced on you when you least expect it? We all get into firefighting mode when it comes to our computers and sometimes it doesn’t occur to us that there might be an easier, less stressful way.

I think the best time to do an upgrade is during your least busy season. If it’s a big upgrade you might even want to consider telling your customers your office is closed for a short time. It’s far easier to focus on your computer infrastructure if you’re not fielding calls, and the time saved in reduced computer problems will more than make up for any lost productivity.

If you’re a consumer, the most important message to take home is this: An old computer is a dangerous computer. Don’t let cybercriminals ruin your life by stealing your identity, and make it harder for them to hurt others by keeping your own computer protections in place.

The words “Mac” and “virus” in the same sentence? Yes, folks, Macs get viruses. In fact, Mac malware attacks are escalating to a level I haven’t seen in over a decade. Let’s talk about what you can do to protect yourself.

First, don’t assume that you can’t get a virus just because you have a Mac. All computers can get viruses, and threats like phishing scams and password harvesting affect everyone regardless of the type of computer they use. Pay attention to the advice Windows users receive on how to deal with viruses and Internet threats, because much of the same information applies to you.

Every Mac should be running antivirus software. My personal favorite is Intego VirusBarrier, but a good free alternative is ClamX AV. You also need to make sure your Mac has the latest software patches. Use Software Updates under the Apple menu, but don’t neglect to update your other software, especially Acrobat, Flash, and Microsoft Office.

Be aware that fake antivirus software has infiltrated the Mac universe just as it has the world of Windows. If your Mac displays a message saying that you are infected and need to buy some super-special software, assume it’s snakeoil. Run a bona fide tool like the ones mentioned above, and never, ever click on anything you are not certain is legitimate. When in doubt, use Force-Quit (option-command-escape) instead of the red X to quit.

The world of Internet threats is ever-evolving, so stay tuned to Tech Tips for the latest Mac security help.

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews, plus notice of upcoming seminars and other events. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.

Last month thousands of Droid smartphone users discovered they’d gotten an information-stealing virus alongside programs from the official Droid Market. This generated speculation in the IT world: Just how safe are our smartphones? Gone are the days when a phone was just a phone. Today your phone has valuable information on it and precious little protection.

Antivirus for smartphones is where antivirus for personal computers was back in the mid-1990s: most offerings are rudimentary and most people don’t worry about it. I predict mobile security is going to become more and more of a headache for small businesses and consumers.

What can you do? If you think your phone may be infected, the surest way to deal with it is to wipe your phone and restore from backup. But viruses are very fast at swiping your information and sending it who knows where, so the damage may have already been done.

It’s better to secure your phone so it’s harder for viruses to get in. Follow manufacturer’s instructions to lock down your phone’s security. Firms like Symantec, Kaspersky and Eset have smartphone security programs available. You should also make sure you are running the latest version of your phone’s software.

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.

Microsoft provides free antivirus by way of its Security Essentials program (MSE). But MSE is no substitute for a third-party security software suite.

MSE includes basic antivirus and antispyware tools plus a firewall. It was originally designed for consumer use in the USA and as a way to cut down on rampant virus problems overseas. As such, while it’s better than nothing, it doesn’t provide the features or functionality of a genuine security suite.

One of the problems with MSE is that too many fake security programs try to emulate it. Just because something looks vaguely Microsoft-y doesn’t necessarily mean it’s genuine. Also, Microsoft is primarily an operating system and productivity software company that does not specialize in security. They may have inadvertent blinders on when it comes to securing their own products, whereas the third party vendors may have more innovation in that area because they are thinking outside the Redmond box.

There is also the danger of homogeneity. When everything on your network uses the same software, you are more susceptible to viruses and malware that exploit the vulnerabilities of that software. In other words, if you live in an XYZ Brand world protected by XYZ Brand tools and along comes a virus that exploits XYZ Brand weaknesses, you’re a sitting duck. That’s true whether XYZ Brand is Microsoft, Apple, or anyone else. Diversifying affords you more protection.

Therefore, I’m sticking with my usual recommendations: AVG, Trend Micro, Avast, Kapersky, and many of the other great security programs out there.

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.

While social media can be beneficial for businesses, some companies have chosen to ban their employees from using it at work. But company computers aren’t the only way to access social media. If you ban your employees from using Facebook, aren’t they just going to whip out their smart phones? Is there a way to balance employee social media use with the needs of your business?

Years ago people asked this same question about computer games, specifically Windows Solitaire. Some businesses found that access to the game actually helped employee performance by allowing them to blow off steam or entertain themselves while on break. Others made it standard policy to remove all games from corporate computers.

In the case of social media, there are other dangers besides lost productivity. Sites like Facebook and Twitter are some of the hottest entryways for viruses and malware. And, as a business, you want to make sure that those who speak for you online are presenting a consistent marketing message and refraining from inappropriate comments.

However, you may be stifling your business if you don’t permit your employees to interact with customers and business contacts via social media. A presence on LinkedIn, Facebook and/or Twitter is becoming as necessary for businesses as a Web site or an email address.

There really is no one right answer. Whether you permit social media sites at work depends on whether the business use outweighs the risks, and whether you consider reasonable personal usage a benefit you want to extend. If you do choose to allow it, make sure you educate your employees on how to use it in a safe, secure, and effective fashion.

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.

My column in today’s Northwest Herald talks about the four steps you need to take to minimize computer security risks: a security software suite, a hardware firewall, strong and unique passwords, and a method for keeping your software updated.

Here are some recommendations on security software suites.

• Triona’s Tech Tips: New AVG 2011 And How To Choose Security Software

You’ll notice I didn’t mention Norton. While Norton is adequate, it doesn’t have the best detection rates, and it takes up a significant amount of memory especially on older computers. I wrote several years ago about the reasons why I started recommending alternatives to Norton. Although recent versions of Norton have fixed some of these issues, I still prefer the alternatives.

Here’s my guide to creating secure passwords:

• Triona’s Tech Tips: How To Create Secure Passwords

Plus, an article on what to do if your account is hijacked.

• Triona’s Tech Tips: What To Do If Your Email Account Is Hijacked

I mentioned several utilities that can help you keep your software up to date. For Windows, try Secunia’s Personal Software Inspector. Two possibilities for Mac users are AppFresh and Mac Informer.

If you’re interested I have a number of upcoming seminars including Blogs For Business, Leveraging LinkedIn, Social Networking, Expanding Your Online Presence and more. You can find my upcoming events schedule on my web site, or watch examples of my previous seminars.

I frequently hear about computers that seem excessively slow. What can you do to keep your computer running at peak performance?

1. Make sure it’s free of viruses. Infection is the number one reason computers slow down. Use a good security suite, scan often for viruses, and follow best security practices to keep your computer clean.
2. Reboot regularly. Restarting your computer forces it to refresh its memory, which will often speed things up. Turning your computer off and on is more effective than simply using the Restart command.
3. Use bona fide computer cleaning software. This can be trickier than it sounds, because just as there are fake antivirus programs, there are also fake computer cleaners. I recommend CCleaner for Windows and Snow Leopard Cache Cleaner for Mac.
4. Remove files and folders from your desktop. Aliases (aka shortcuts) are fine, because they are merely links. But if you are storing the majority of your documents on your desktop, your computer will be correspondingly slower.
5. Remove unnecessary startup programs. In Windows, go to Run under the Start menu (or Start, Search Programs And Files in Vista and Windows 7), then type the command MSCONFIG. The Startup tab will show you what’s running, and you can remove anything you no longer use. On a Mac, go to the Apple Menu, System Preferences, Accounts, Login Options and select the Login Items tab for your account.

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.

How can you keep your new computer running as smoothly as it did when you took it out of the box?

The very first thing you should do is install a good security program. As I’ve mentioned, the freebies are no longer enough. You need a robust software suite that includes antivirus, anti-spyware and a firewall. See here for my antivirus recommendations for Windows and Mac.

Next, make sure your computer software is updated to the latest version. Even out of the box, there may be new updates available. For Windows computers, visit update.microsoft.com. Mac users should run Software Updates under the Apple menu.

Windows users should strongly consider installing a browser other than Internet Explorer, such as Mozilla Firefox. You can still use Internet Explorer if you have to, but the alternate should be your default. This will help keep you safe from viruses and spyware.

While you’re setting up your new computer, configure backups at the same time. You can use an external hard drive (most come with automatic backup software) or choose an online option. See here for more information on backups.

Don’t forget to fill out the warranty card for your new computer. Should you buy the extended warranty? That’s up to you. Personally I don’t think it makes sense to spend a lot of money on a warranty for a computer that cost less than $500, but I’d want to protect a more expensive investment.

And, finally, have fun with your new computer!

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.

I’ve seen a number of people lately whose Windows computers were infected with a particularly nasty fake antivirus scam called ThinkPoint. Please take precautions to protect yourself against this scam and others like it.

Fake antivirus software is the latest arrow in the cybercriminal’s quiver of scams. These rogue security programs mimic real antivirus programs but are actually viruses in and of themselves. They will do anything and everything to get you to buy them. I’ve written about them here, here, here and here.

What makes ThinkPoint so obnoxious is that it embeds itself by changing your Windows settings so that the ONLY thing that can run on your computer is ThinkPoint. It does this by making itself the shell, or the interface that lets you communicate with your computer’s operating system. In other words, it wraps itself around Windows like a giant eel and won’t let you in unless you buy it.  Of course, you’re not so much buying the software as paying a ransom (which is why such programs are sometimes called ransomware).

Thinkpoint spreads through a variety of means. To gain a toehold, it displays fake Microsoft Security Essentials alerts. Microsoft Security Essentials is a real program, but these alerts are generated by the ThinkPoint virus to trick you into letting it deeper into your computer.

ThinkPoint: Fake Microsoft Security Essentials window

From then on, ThinkPoint displays the following window whenever you try to start your computer.

ThinkPoint hijacking your Windows desktop

If you click the only available option, “Safe Startup,” the software will pretend to scan, pretend to find infections and then start pestering you to pay money to remove them. But the real infection is ThinkPoint itself, and any virus buddies it may invite along for the ride.

ThinkPoint pretends to scan and find viruses

There are ways to remove ThinkPoint, but it can be tricky, especially if there are other infections present on your computer. Malwarebytes is one of my favorite removal tools, but in this case you may have a hard time getting the computer to a point where you can run it. Your best protection against ThinkPoint and other fake security software is prevention. Use a reliable, bona fide security program, use secure passwords, and follow the advice I offered about what to do if your email account is hijacked.

If you’ve been infected by ThinkPoint or other viruses or malware (and are in my service area, Chicago’s north and west suburbs), I would be happy to help you remove them. You can contact me here

Subscribe free to Tech Tips and receive bonus tips, tricks and product reviews. Click here to subscribe or send email to techtips-request-at-guidryconsulting-dot-com, subject “subscribe”.