Thursday, July 28, 2016

Fake Chrome "Urgent Updates"

A hacker(s) is trying to put nasty stuff on your computer by displaying what looks like a legitimate "Urgent Chrome Update" page on your screen.  The browser window looks like this (I cut of the rest of the Google icon):


Note the address:  definitely not Google.  

Fortunately, Google Chrome also shows a message at the bottom of the browser window:  


The web site from which this originates is detailed below.


This appears to have released in the last couple of days, though you never know.  Malwarebytes didn't detect anything.

Tuesday, July 26, 2016

Bothered by spam phone calls. Get a phone system with a Call Block button

How many spam phone calls do you get a day.  I think in a 16 hour day we get about 32.  But we have a phone that can block any calls that we designate as spam.  We designate the call as spam by pushing a button called Call Block on our phone (land line).  You can answer the call the first time to determine whether or not it is spam.  If it is, then you push the Call Block button.  After that, any call from that number will ring once and then a message "Call Blocked" flashes on the phone.

The phone system is the Panasonic KX-TGF370.  We got it at Costco.

For your cellphone you can get an app to blacklist and/or whitelist calls.  The one I use is for Android and is called Calls Blacklist.

Have you moved to Windows 10 and do you miss the free games that came with Windows 7?

I've been asked about games like Hearts that came with Windows 7.  The games have been removed from Windows 10 and you have to go to the Store and maybe pay for the game.  But there is a web site that show you how to get the Windows 7 games back.  The link is :  http://winaero.com/blog/get-windows-7-games-for-windows-10/  My safety checker says the site is safe.  You download something.  Just Download  it and then go to your Downloads directory.  Right click on the download and run a virus check on the download, just for safety's sake.  Then you can left double click to install the games. Then run Malwarebytes to make sure that some Adware is not hidden in the installs.

Wednesday, July 20, 2016

A very important security problem with Google Chrome

I've titled this a problem with Google Chrome, but it is really a problem with how you might be assigning passwords to web sites that require user ids and passwords.  If you tend to use any of the several hundred million passwords that are commonly used and sold on the "black net." you've got a problem.  You can understand the depth and breadth of the problem by reading this article:  https://techcrunch.com/2016/05/18/117-million-linkedin-emails-and-passwords-from-a-2012-hack-just-got-posted-online/.

Here's the problem with Google and Chrome.  There are some "Ifs"

If:

  • You use any of the several hundred million passwords being sold on the "black net" for your Google login (ie, log in to Chrome to access all the Google apps and features from Chrome).
  • You use Chrome to save passwords to web sites, 
Then:  All those user ids and passwords that Chrome has saved are available to any person that can hack your google account.  It is done by going to http://passwords.google.com/.  Log in there and you will see all your passwords.

There are some caveats that will save you from this hack, but, for this blog entry, my advice to you is to never use Google Chrome to save your web site userids and passwords.   You have to turn that feature off and you have to delete all the user ids and passwords that have been saved.

Here is the Google help on this feature:  https://support.google.com/chrome/answer/95606?hl=en

Reminder: Free Version of Windows 10 Ends July 29

If:

  • You have a Windows 7 operating system or later, but not Windows 10, and
  • You plan to keep your computer for more than the end of 2016
Then

You need to convert your operating system to Windows 10.  Yes, I strongly recommend that you do this.
The methodology you should use is to create a USB or DVD copy of the entire system using the following methodology.  The web page that provides the installation details is https://www.microsoft.com/en-us/software-download/windows10.  You will want to download an image to your computer and then create a Flash Drive (Use a 4GB empty flash drive) or a DVD.  That way, you will automatically have a recovery device in case your computer crashes and the computer needs to be booted from an external source.  On the above web page, start at the "Before you begin" Click on the + icon and read through the preparation instructions.  Then, click on the "Download the Tool" blue button.  Then click on the + icon in front of the "Using the Media Creation Tool".  This will reveal two additional + icons.  Click on the one associated with "Upgrading to Windows 10 using the tool."  You could do a clean installation, but you would have to back up everything, which is not something an average user should do.

There are some tricks that you must use as you do an install.  Basically, you'll want to do a custom install and usually say NO to all the presented options.  If you need help, contact me.

The other issue may be that a favorite program will not run on Windows 10.  Again, contact me if you have a problem.  I can usually get it to work.


Tuesday, June 21, 2016

New Phishing eMail- Don't Fall For eMails from Chase to Confirm "Credentials"

This is the look of the email, below.  The trace of the actual link at MyCredentialsNewPolicy is:

Registry Registrant ID: 
Registrant Name: Himanshu Sahu
Registrant Organization: N/A
Registrant Street: B 5/316, Sector 3, Rohini   
Registrant City: Delhi
Registrant State/Province: Other
Registrant Postal Code: 110085
Registrant Country: IN
Registrant Phone: +91.9312659807
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: himanshusahu1994@gmail.com
Registry Admin ID: 
Admin Name: Himanshu Sahu
Admin Organization: N/A
Admin Street: B 5/316, Sector 3, Rohini  
Admin City: Delhi
Admin State/Province: Other
Admin Postal Code: 110085
Admin Country: IN
Admin Phone: +91.9312659807
Admin Phone Ext: 
Admin Fax: 
Admin Fax Ext: 
Admin Email: himanshusahu1994@gmail.com
Registry Tech ID: 
Tech Name: Himanshu Sahu
Tech Organization: N/A
Tech Street: B 5/316, Sector 3, Rohini  
Tech City: Delhi
Tech State/Province: Other
Tech Postal Code: 110085
Tech Country: IN
Tech Phone: +91.9312659807
Tech Phone Ext: 
Tech Fax: 
Tech Fax Ext: 
Tech Email: himanshusahu1994@gmail.com
Name Server: ns1.lewebexy.com
Name Server: ns2.lewebexy.com
The link, then, goes to Delhi, India.  
You can see the name of the responsible person in the trace.  


Warning. The following is an example of hijacking a blog entry. After I published the email, the crooks behind it changed a link back to their web site that was in the email so that the entire email was changed to what you see here. Nasty, Nasty!

Credentials Confirmation ( New Policy )


Inbox
x
4 Finance/chase
x

Chase Online © 2016 service@mychaseonline.com via yahoo.com 

12:00 PM (0 minutes ago)
This message was not sent to Spam because of a filter you created. Edit Filters
A mom and son on a bicyle
Dear Member

We do not want you to experience any problem with our renew customer policy so we advice persons with account(s) who's details are not verified automatically to please kindly help us not to loose your details by verifying your credentials with us are intact thank you for trusting chase with your financial activitiesMyCredentialsNewPolicy .

       
  • Member FDIC   
  •  
  • Equal Housing Lender
© 2016 JPMorgan Chase & Co.

Friday, May 27, 2016

Windows 10 is installing "without your permission." Free version ends July 29

It has been a while since I've made a contribution to this blog.  Chalk it up to lots of outside spring yard work and a bad back.  This blog entry is a warning that

  1. If you haven't upgraded to Windows 10 and have been clicking on the x on the window that suggests that you upgrade, you are now consenting to the upgrade, and you get a surprise:  Window 10 installed on your computer.  I've seen this 3 times in the last 3 days.  In some cases it is no big problem, but it can be a big problem if you are using an application that is not compatible with Windows 10.  There are quite a few.
  2. If you haven't upgraded, you have until July 29 to do it for free.  After that, there is the usual cost for a Windows product, about $100. 
For more information copy the following into your address bar and go to the web page:

http://www.extremetech.com/extreme/229040-microsofts-latest-trick-clicking-x-to-dismiss-windows-10-upgrade-doesnt-stop-upgrade-process.


Printfriendly

Print Friendly and PDF