According to the report, the ads promote applications called “Browser Defense” and “Broxu.” What’s scary is that the actual graphic used in these ads contain malicious code buried within the parameters of their alpha channel, which is used to define the transparency of each pixel in images. By way of explanation, an alpha channel is what makes the background color of an image transparent so that the focused object can reside as an overlay against any backdrop image or color.

Adding the malicious script to an image’s alpha channel is only a minor modification. The resulting image has a slightly different tone than the original, but if web surfers have no idea what the originating image looks like, then they have no clue the altered, malicious version is on their screen. The sample provided by the ESET researchers is barely indistinguishable from the “clean” original.

Once the advertisement is displayed on the visitor’s screen, the embedded code uses the CVE-2016-0162 vulnerability in Internet Explorer to scan the target PC to see if it’s running on a malware analyst’s machine. If the coast is clear, it will then load a landing page that includes a Flash file built for exploiting three vulnerabilities in Flash Player: CVE-2015-8651, CVE-2016-1019, and CVE-2016-4117.

“Upon successful exploitation, the executed shell code collects information on installed security products and performs — [in a manner] as paranoid as the cybercriminals behind this attack — yet another check to verify that it is not being monitored,” the antivirus firm reports. “If results are favorable, it will attempt to download the encrypted payload from the same server again, disguised as a GIF image.”

When the encrypted payload is downloaded to the target PC, it is then decrypted and launched through regsvr32.exe or rundll32.exe in Microsoft Windows. The payloads detected thus far have included various trojan downloaders, banking trojans, backdoors, spyware, and “file stealers.”

The attack is based on the Stegano exploit kit, which uses steganography to hide malware out in plain sight. The term is typically used when hiding messages or information within public text and data. However, in this case, the method throws a malicious script within the alpha channel information of an image. The kit was first used in 2014 to target Dutch customers, and moved on to residents in the Czech Republic. New attacks are targeting web surfers in Australia, Britain, Canada, Italy, and Spain.

ESET senior malware researcher Robert Lipovsky pointed out in an interview that web surfers aren’t required to do anything to trigger the malicious script: all they have to do is visit a website displaying the infected ad. The payloads aren’t random either: attackers choose what to download to the target PCs.

Lipovsky added that the firm didn’t release a list of websites affected by the malicious ads because the information didn’t add any value to the warning. Even more, the firm didn’t want to inflict reputational harm to the websites given that they had no clue or control over displaying the ads. Naturally, web surfers can stay safe by keeping their browser, Flash Player, and security software updated regularly.

http://www.digitaltrends.com/computing/eset-malware-images-alpha-channel-browser-defense-broxu-stegano/

The post Millions Exposed To Ads That Use Infected Images appeared first on A1 Computer Repair.

The stack overflow vulnerabilities affect more than 120 D-Link products, from Wi-Fi cameras to routers and modems, and allow remote attackers to completely hijack the administer account of the devices to install backdoors and intercept traffic.

D-Link has been contacted for comment.

It takes only one command to exploit the flaw, according to Senrio researchers who published a proof-of-concept that changed administrator passwords.

“… the Senrio research team discovered and exploited a remote code execution vulnerability in the latest firmware of the D-Link DCS-930L Network Cloud Camera,” the researchers say.

“While the thought of strangers watching your sleeping baby is disturbing, the implications for enterprise and infrastructure environments are downright scary.”

Almost 140,000 of the devices are located in the US, with 23,442 in Canada, and 20,982 in Sweden.

Founder Stephen Ridley told Security Week attacking the 120-odd D-Link device models requires to exploit tweaking to suit different firmware.

“An attacker would practically account for this difference in versions [and] devices by fingerprinting a device, and then changing the exploit payload based on the target,” Ridley says.

http://www.theregister.co.uk/2016/07/08/414949_dlink_cameras_iot_devices_can_be_hijacked_over_the_net/

The post 414,949 D-Link cameras, IoT devices can be hijacked appeared first on A1 Computer Repair.

This is for two reasons.

First, Apple is deprecating QuickTime for Microsoft Windows. They will no longer be issuing security updates for the product on the Windows Platform and recommend users uninstall it. Note that this does not apply to QuickTime on Mac OSX.

Second, our Zero Day Initiative has just released two advisories ZDI-16-241 and ZDI-16-242 detailing two new, critical vulnerabilities affecting QuickTime for Windows. These advisories are being released in accordance with the Zero Day Initiative’s Disclosure Policy for when a vendor does not issue a security patch for a disclosed vulnerability. And because Apple is no longer providing security updates for QuickTime on Windows, these vulnerabilities are never going to be patched.

We’re not aware of any active attacks against these vulnerabilities currently. But the only way to protect your Windows systems from potential attacks against these or other vulnerabilities in Apple QuickTime now is to uninstall it. In this regard, QuickTime for Windows now joins Microsoft Windows XP and Oracle Java 6 as software that is no longer being updated to fix vulnerabilities and is subject to ever-increasing risk as more and more unpatched vulnerabilities are found affecting it.

You can find information on how to uninstall Apple QuickTime for Windows from the Apple website here:https://support.apple.com/HT205771

Continue for Full Article

The post Uninstall QuickTime for Windows Today appeared first on A1 Computer Repair.

Backing up your files is the best way to protect your files and data. Once you have a great backup system installed, you’ve already taken the most important step in protecting your computer – but there are threats beyond data loss that you can prepare for.

Malware (short for malicious software) is software that is developed to disrupt or damage a computer system. It can appear in a number of ways and can be used to gather private information, delete data or even lock people out of their own files. According to Kaspersky Labs, there are more than 200,000 new malware threats per day!

One such malware, Cryptolocker, has been making the internet rounds over the past several weeks. The software is called “ransomware”, as it encrypts the files on infected computers so users can’t access them. When someone tries to open a file on a computer infected with this malware, they are alerted that they must pay $300 for their files to be unencrypted so they can access them. Deleting the malware or refusing to pay the ransom will leave their files encrypted.

As a trusted partner in data protection, Carbonite Backup wants to ensure that our customers are aware of these threats and know how to prevent them from infecting their computers and servers. Here are some tips that can help you avoid malware and other types of viruses to protect your files:

• Be an email skeptic: Malware is often spread through email links or attachments. Don’t open attachments or click on links from people or companies you’re not familiar with.
• Free software – too good to be true?: Downloading free software is tempting, but it may include spyware and other malicious content. Only download software from trusted vendors.
• Down with the pop-ups: Block pop-up windows and don’t click on links or buttons within them.
• Bump up your browser security: Go into your web browser settings and make sure your security settings are set to medium or higher.
• Beware of illegal downloads: While it’s tempting to watch a movie that’s still in theatres on your computer, many files shared on illegal file-sharing sites have pieces of malware attached to them.

These are just a few tips that can help you avoid the headaches to protect your files and other negative effects of malware. Need more information on backup software? Contact Us or Open a Support Ticket, we are here to help.

Reprinted from an article

The post How To Protect Your Files From Malware appeared first on A1 Computer Repair.

Affected users were warned not to reboot their machines

An antivirus program labeled itself as malware, causing some computers it was running on to stop working.

After an update, essential components in two Panda Security antivirus programs became corrupted, leading them to be mistakenly identified as malign and quarantined.

Panda said a fix had been released and warned that rebooting affected systems could exacerbate the issue.

Steps to Fix You Computer: http://www.pandasecurity.com/uk/homeusers/support/card?id=100045

It asked those affected to get in touch so it could help fix their machines.

One security expert noted the irony. “People’s first response is to turn [their computer] off and back on again, but in this case, it seems like the wrong thing to do,” said Prof Alan Woodward, of Surrey University.

The “last thing” people would expect to cause their computers to break down was its security software, he said.

Corrupted files

Panda Security said that the signature file in both its PCOP and its Retail 2015 packages became corrupted.

Read the Full Story at: http://www.bbc.com/news/technology-31851125

The post Panda antivirus problems appeared first on A1 Computer Repair.

This covers all versions of Windows 7, Mary Jo Foley points out.

The end of support generally means no more updated features or performance improvements, unless you are covered by extra “extended support.”

UPDATED: Microsoft has promised to provide security patches even after it ends mainstream support, through 2020. What is ending is design changes, warranty claims, and no-charge incident support.

This move will mostly affect consumers. Businesses that pay for extended support for Windows 7, as most of them do, will get all updates for another five years, until January 14, 2020.

That’s important because many businesses are right now in the process of upgrading their old Windows XP PCs, but they’re moving to Windows 7, not Windows 8.

There’s some speculation that, given the popularity of Windows 7, Microsoft might change its mind as the date nears and continue to support it a bit longer as it did for Windows XP. All told, Microsoft supported XP for about 13 years.

That kind of extension doesn’t seem likely at this point. Remember, Windows 8 basically includes a full version of Windows 7, called Desktop mode. With Windows 8.1, it’s possible to run a Windows 8 machine in Desktop mode and almost avoid the new-and-confusing Windows 8 part of the OS.

And Microsoft really needs to nudge consumers into buying Windows 8 machines. More Windows 8 machines mean more developers will want to write software for Windows 8, which will make more people want to buy it.

By the way, Microsoft also set the end-of-life of mainstream support for Windows 8 (including the latest version, Windows 8.1), for January 9, 2018.

This is another hint that Microsoft should have its next version of Windows ready in 2015, code-named “Threshold” (sometimes referred to as Windows 9).

If Microsoft plays its cards right, Windows 9 will be to the unloved Windows 8 what Windows 7 was to Vista, which InfoWorld ranked No. 2 on its list of the 25 biggest tech flops (also PCWorld’s “Biggest Tech Disappointment” of 2007.)

Here’s the chart from Microsoft’s Lifecycle Support page.

The post End Of Free Windows 7 Support Coming Soon appeared first on A1 Computer Repair.

There’s no shortage of competition in this area, of course, but Live Creator has one or two useful touches that you might appreciate.

This starts with the download itself. There’s no bulky ISO here, just a single 8.8MB executable that is ready to run whenever you like.

The program opens with a simple wizard, asking if you’d like to create a bootable CD or USB key. Conveniently, there’s also an option to use a previously downloaded ISO image. (We wondered if this could work with any ISO, as a general way to create bootable USB’s, but sadly not. It’s strictly ESET-only.)

ESET SysRescue Live Creator then downloads its bootable image (a 324MB ISO), and prepares your CD or USB immediately afterward. In another thoughtful touch, you’re given an option to create another CD/ USB or save the ISO for reuse later.

Booting ESET’s rescue environment reveals more welcome extras in tools to check your RAM and system drive for defects. Hardware issues can cause odd malware-like problems, so it’s worth trying these if you can’t find anything else.

The ESET SysRescue tool is the real star here, of course, and it has more options than some similar tools. You’re able to download the latest virus signatures and check your system with various scan types. The core antivirus engine gets mixed results with the independent labs — AVTEST’s April results found it had an above-average 100 percent detection rate for known threats, a below-par 93 percent for zero-day attacks — but there’s more than enough power here to be useful.

When it’s all done, you can keep the USB key around for reuse later. But if you need it for something else, ESET SysRescue Live Creator is also able to wipe the drive in seconds. Just connect the drive, start the program again and click “Erase existing SysRescue USB”: another useful feature that you won’t always find elsewhere.

Article Originally from: http://betanews.com

The post Eset Tool to Create a Bootable Antivirus Rescue key appeared first on A1 Computer Repair.

I am just about to upgrade from XP Home to Windows 7 Professional and have been thinking about ways of making and keeping the system faster. Putting the operating system on an SSD would be one thing, but how about also having a separate drive for all non-OS installed programs, downloads, and files? Would you recommend this or, indeed, one for programs and related files, and one for other data, such as photographs, audio files, text documents, etc. If so, how should I go about it? Alan

When you’re moving to a new PC, or even installing a new operating system, it’s important to think about where you are going to store data. This won’t necessarily make your PC run any faster. However, it will make it easier for you to keep track of irreplaceable data, and make backup copies.

One of the problems with the DOS-based versions of Windows (95, 98, 98SE, Me) and, to a lesser extent, Windows XP was a tendency to slow down over time, under the weight of accumulated cruft. I used to do a clean re-installation every 18-24 months. The good news is that Windows 7 doesn’t suffer from this problem, or at least, not to a significant extent. I’m running Windows 7 on a laptop and Windows 7 Pro on a desktop, and have not yet needed to reinstall either operating system. (Windows 7 has a Resource Monitor and a Performance Monitor so you can track how it’s doing.)

This also means there’s not such a big advantage to having your hard drive divided into two partitions, or having two separate drives. In the old days, it was useful to have the operating system and programs on drive C: and all your data on D: because if you wanted to reinstall the OS, you could reformat C: without worrying about losing data. That’s still the case, of course, but it’s not as important if you don’t expect to have to reinstall the OS.

Another advantage of having two drives was that it made backups simpler. Basically, almost everything on C: could be replaced either by reloading programs from disc or by downloading new versions from the net. Almost everything on D: couldn’t easily be replaced, such as personal documents and photos, and music files ripped from audio CDs.

I say “almost everything on C:” because Microsoft and various software houses don’t make it easy. Microsoft stores things on the C: drive under different user account names (C:\users\jack etc), while some programs like to store data in their own directories. This makes sense because the vast majority of PC users don’t pay any attention to where and how things are stored, so developers try to organize their data for them. But it means that if you do care, then you have to change each program’s default settings to point to the folders you want it to use.

Note that there are privacy implications to moving data. People who have limited or guest accounts on Windows – including children – only have access to their own programs and data on C:, and to common programs. But they can probably access anything on the D: drive unless you block them.

Partitions, drives and folders

From a software point of view, it doesn’t usually matter if you have (a) two separate hard drives, (b) one large hard drive split into two or more partitions, or (c) a separate folder that you use in the same way as a hard drive. From a hardware point of view, having two separate drives provides more resilience: it’s unlikely that both the C: and D: drives will fail at the same time. But remember, having one drive with two partitions – also called C: and D: and working as separate drives — doesn’t provide the same resilience. If the physical hard drive fails, then both drives fail. You can copy files from C: to a partition called D: but you still don’t have a backup. You only have a backup if you copy the files to one or more external hard drives, and/or an online cloud-based service such as CrashPlan, Backblaze, Carbonite, or Mozy.

My current desktop PC has one large (1TB) hard drive. Instead of partitioning it, I created a folder called MAIN, which I use almost exactly like the D: partition pre-installed on my laptop’s hard drive. (I have no idea why I picked that name, but the caps make it stand out.) I put all my irreplaceable data in that folder. Obviously, it has a large number of subfolders such as Audio files (for interviews, etc), Documents, Movies, Music, Photographs, Work, etc. Each folder has numerous sub-folders, to make things easier to find. For example, my Work folder contains a Guardian folder, which has folders for Ask Jack, Netbytes, Obituaries, Technophile, and so on.

The main point of MAIN is that I can quickly make a backup of this one 132MB folder, or use FreeFileSync to update the current backup on an external hard drive. It’s manageable, so I’m more likely to do it. But what you do will depend on how much data you have, and how often it changes. If you have a large collection of music or video files, you might want to have these in separate folders, outside MAIN (or whatever). This is a particularly good idea if you share these media folders over your home network.

I said “it doesn’t usually matter if you have two separate hard drives”, but sometimes it does. For example, as you suggest, you can put the operating system on an SSD (solid-state drive) and large data files on a traditional hard drive, to take advantage of the SSD’s extra speed. However, this is only because SSDs are so expensive. If you could afford a 500GB or 1TB SSD, then you could use that for everything.

Another case is when applications use such large data files that disk throughput makes a difference to performance. For example, professional photo and video editing programs such as those in Adobe Creative Suite have their own “scratch files” (temporary disk storage areas) where they store vast amounts of transitory data. Operating systems also have scratch files or “page files” such as pagefile.sys in Windows. In this case, you can get better performance if the two scratch files are on different physical hard drives because that provides up to twice as much throughput to disk.

When rendering high-definition video, you may want to use one hard drive for reading operations and caching but use a separate (preferably clean) hard drive for writing the rendered file.

Original Article: How should I organize my hard drives and data when upgrading Windows? | Technology | theguardian.com.

The post Organizing hard drives and data when upgrading Windows? appeared first on A1 Computer Repair.

A malicious new worm has been detected in more than 1,000 Linksys home and small-office routers, according to researchers at the SANS Institute of Bethesda, Md.

Nicknamed “TheMoon” because its code includes HTML pages referring to the 2009 science-fiction movie “Moon,” the worm seems to do little more than spread from router to router. However, it does appear to be able to connect to a command-and-control server, from which an attacker could manipulate the compromised systems.

“We do not know for sure if there is a command-and-control channel yet,” wrote security researcher Johannes Ullrich in a blog post on the SANS Institute’s website. “But the worm appears to include strings that point to a command-and-control channel.”

The good news is that a simple router reboot will get rid of the worm, and turning off any remote-administration feature in your router’s settings will prevent the worm from being able to attack in the first place. Many routers have remote administration activated by default.

So far, only Linksys’ “E” product line, which includes the E900, E2000, E3200, and E4200 models, has been shown to be affected. Devices that have upgraded to the latest firmware, 2.0.06, should be safe, but some earlier models whose support has expired, such as the E1000, can’t get that upgrade.

Click Here for More on Linksys Worm

The post Linksys Router Users Malware (worm) Warning appeared first on A1 Computer Repair.

Guarding and backing up your business’s computer data is a vital task that you never overlook. A cloud service is a way of storing data safely on the internet. Big companies like Amazon and IBM keep their data on an internet cloud, and other small businesses can also gain the same security of these services when it comes to matters concerning their computer data. Whilst most businesses are familiar with the sensitivity of these tasks, they may not understand the benefits of a secure computer backup system.

Cloud computing isn’t all a new technology, though for a number of people it will be a fully new concept and sometimes it can be a bit more confusing as they try to understand and attain the idea in general. Using cloud services to store your data doesn’t at all means that your data will float over the clouds, it puts forward that they will store your data safely inside a cloud server in a data center located in a safe location. This is accessible and you can modify them based on your needs anytime you want to do so with a high-speed connection to the internet.

The cloud database was made with the main purpose being online data management via various distributed services. Cloud dwells on a system of virtual servers that modify records and update any database content online. The internet acts as the principal medium via which such information and data are managed. Web servers are basically simply used in hosting the domain of any website. The real data is stored in another server that keeps a log of all the data entered and accessed online. The capability of working anywhere and at all times makes cloud backup a distinct entity when compared to other server systems.

There are specific advantages that come with hiring data managing services for your organization. A virtual database is more valuable than a centralized database server, which is common in most organizations nowadays. Similar to cloud content management systems, a virtual database system enables your employee to easily access and share information with no respect to their present accessibility or location. This will reduce the time and energy in maintain a real server. The data that the organization needs access to can be shifted easily or located at a more convenient and securer location where they can be accessed and may also be used as a backup.

There are 3 main benefits of using cloud services for securing your data; savings in both costs and time related to performing local regimes for backup and raised security of data.

1) Time Savings

Look at the time your staff members take to burn a backup file of all the data regularly. Expectantly, you will be storing your data once a week, mostly depending on your industry. Backing up your data through cloud services can be automatically integrated, almost abolishing the additional time needed to copy files to many size-restricted storage services. By a few mouse clicks, complete backup files can be uploaded to the cloud, and the procedure is finished.

2) Cost Savings

In case you lose some data critical to your organization it can be very expensive to reinstall critical application software and restore previous files. If you backed up this data you will be in a position to restore everything and go on with operations. Though, re-installing application software first, and then installing your most recent backup for every application consumes time and costs you cash – as you cannot operate your business till everything is functional.

The time you would take to perform these emergency tasks would’ve been more useful if spent in your business operations, making finances that make you stay in business. Cloud computing companies help in restoring data immediately, therefore saving you outlay in the long run by giving you time to concentrate on operating your business.

3) Increased Security

On-site backup systems have the possible risk of having unauthorized access, stolen during break-ins, or corrupt or broken down. Security protocols are laid into an organized way of backing up data in the cloud. Cloud storage companies embrace an encrypted network infrastructure in their storage engine, mostly redundant backups in multiple servers spread over different locations. Companies highly reputed in cloud services have policies for security and lockout to make sure that only authorized persons can gain access to your data.

Both business owners and home computer users will be at peace when they decide to hire cloud services to protect and store their digital data. They can direct their efforts when they’re required, in operating their business. Relying on cloud services saves your money, and time, and raises your security level, increasing overall organization development.

A1 Computer can assist you in setting up cloud computing for your home or business computers – Contact A1 Computer

The post The Benefits Of Using Cloud Services appeared first on A1 Computer Repair.