Watch for computer attacks

A word from our sponsor:

Printer-friendly version

Author: 

I typically have at least one of three 1 TB usb drives plugged into my computer, and at night I generally just put it to sleep. This morning when I got up, I had no internet connection according to the message on my screen. My IP provider was able to help me badger my computer to work again but all IP addresses had to be re-entered manually.

This evening as I am watching a movie on youtube, I noticed file explorer open, but was able to shut that activity down. This after running malware bites this afternoon. Malware bites uncovered nothing.

I've unplugged the external hard drives and when I go to bed, I will shut the computer OFF.

I've asked around and none of the technicians in this area are recommending any virus software except malwarbites, and most say just rely on MS file defender on Win10.

This is just a friendly warning to those who need it. I know that most people on this site are much more knowledgeable than I am and have their own solutions.

It could be anyone trying to do who knows what? I've been very active politically in opposition to Drump and his minions, and very supportive to immigrants, so it could be anyone from Isis to a greedy Romanian hacker to the US government trying to get in.

I may have to actually learn to use Linux and live without the big name software folk, but that seems really extreme to me right now.

Comments

Well done Gwen

Well done for being observant and ... well on the ball.
Who knows what is happening to the files on your computer these days? Most (99% at least) of users won't have a clue about what is going on let alone being able to do things like re-enter their IP address. For them the Internet is 'Internet Explorer'.

If you do go with Linux, may I make the humble suggestion to install Virtual Box on Windows and then download the 'Mint' Linux distro and run it in a Virtual Machine. That way you can get used to the new OS and gradually move to using it more and more.
Tools like Libre Office, Firefox and Thunderbird can replace much of what you use on Windows.
give it a go.
If you need and help, you know where I am. I started using Linux in 1995 (When it came on floppy disk, remember them?) and Unix in 1985.

Samantha

security

mountaindrake's picture

on windows 10 MS defender and malwarbites are good. I run mil spec security soft ware but that would cost the average user about 10,000 a year. Unix and Linux are open to old school hackers as in old military computer personal. Apple is even worse ! I would suggest that you do full wipe of your primary drive and reformat it the install win 10 ms defender, malwarbites, and use firefox by mozzila. then being as you seem to be aware watch your system and good luck best security is just be aware of the little add ons for things like VLC and other programs.

Have a good day and enjoy life.

Oh no...

The security models in Unix/Linux and MacOS are totally different from Windows.
Apple is not worse than Unix/Linux and those are certainly not worse than Windows 10.
I was forever updating AV and other software when I ran Windows. It was my job to develop software for systems running Windows. There are many software packages that want Admin rights when there is no way in hell that I'd ever design them that way in the first place. Anything with Admin rights is a security hole.
Even replacing a file that does not need Admin rights also seems to demand a reboot.
The whole model in Windows is borked. 45years of coding has taught me a lot about programming and very few deveopers have ever heard of defensive programming let alone practice it.
Since moving my personal use to OSX/MacOS, my stress levels have been considerably reduced.
I ditched Windows for good when I retired last September. I still do some development on Linux.
There is no way that for the majority of users that MacOS is worse than Windows 10.
No spyware sending what you do back to MS, no forced updates for most users (who can't set the system up to block them), nanny MS knowing what's best all the time, even down to replacing perfectly good Video Drivers with the borked ones from their store....

There is a saying in the english countryside when someone asks a local for directions.
The reply goes 'Well, I wouldn't start from here'. The same goes for Windows 10. It is a mess that MS Should have never released. Many of my friends (photographers) have given up with Windows and moved to MacOS and to a man/woman they have not looked back and these are not IT people

Sorry for the rant but I spent 6 hours yesterday sorting out a PC (with Windows 10) that got borked after an update and would not boot. Thankfully, a USB Stick with Linux was able to rescue the user data. A clean re-install and they are working again but... that is six hours of my life that I won't get back..
Samantha.

Mac OS?

Would you suggest that I go to Mac OS? I do pretty well with Hardware, but do not know a single lick of Software. How can Mac OS run on a PC?

Have a nice day.

Gwen

I'm afraid not

unless you are into a bit of 'hackery' and want to run what is known as a Hackintosh. It is not for the inexperienced so I'd suggest that you avoid it.
So to run MacOS, you'd need an Apple supplied computer.

With your HP 'all-in-1' setup I think that you should try the VM route and see if you can get on with Linux.
The advantage is that you can wipe the VM and re-create it if you mess it up.

VLC

VLC is my 'goto' media player espaically for Movies that I've recorded from TV. Not had any issues with it.
A lot more people seem to be using it now that MS has removed the media centre components from W10.

Get an anti-virus program.

Gwen the best suggested is using an website explore that allowed privacy add-ons. Also, buy and install a decent anti-virus program. Look around and a decent anti-virus program to buy.

Sometimes you have to spend money on a something.

The privacy add-ons will help prevent anything from being loaded onto you computer.

The anti-virus program will prevent anything that slips through the add-ons to load onto your computer.

Another level protection is to get an VPN (virtual privacy network) though the good ones have a monthly subscription on them.

There are several antivirus programs...

...
I would recommend to try "Dr Web" CureIt util usually available from drweb.ru or drweb.com
It does not need to be installed and usually is free for personal use. Several companies have Web based antivirus that does not leave resident agent in your computer memory, like kaspersky...
Avira and AdAware have free antiviruses.
Bad thing is thatmfor all of those utils they are useless against many viruses. But, often, different viruses, so you need to use several of the different tools to scan your computer.

I had a couple of similar

I had a couple of similar problems after going to the site that was pirating stories. Right past Windows defender,+ MacAfee. I loaded "SpyHumter 4,which seems to have done the trick ! SP4 is $30

Karen

antimalware

Go to Emsisoft...

Download the FREE emergency scanner.

Run it.
This can take up to 90 minutes per terabyte.

Clear the computer first then plug in your external drives and clear them.

First run the malware scan, then when everything is attached, run the custom scan.
Be certain to specify each of the external drives in the list of drives to check.

Once that has been completed, install Emsisoft anti-malware program.
It is valid for 30 days ( FREE ) and is the full program for which a license can be purchased.

In the European tests, Emsisoft antimalware has beaten 98% of the others.

I have used Emsisoft for over seven years.

Harvey

VLC

mountaindrake's picture

VLC and other apps like Divx and Adobe are good i ment the additional programs they want to install with them like i said reformat your primary drive do a clean install of win 10 pro ms defender malwarebites. your problems are you already have bugs that can hide from antivirus programs that is why a reformat is a must.

Have a good day and enjoy life.

That extra mile...

The best bet, is to assume anything you do online can be read by anyone.

If the US Government actually cares enough about what you do, to want to monitor your activity it won't be by "hacking" into your computer, the NSA has the capability to intercept anything you send from a known IP address, in real time. If they actually thought you were interesting enough to invest the effort. Baring that, the normal keyword scanning of emails and social media posts we all endure is probably enough for them :(

Most likely you were hit by a "drive-by" Malware attack. A compromised web page can serve up attacks just by visiting it.

Best defense, is to use a Virtual Machine, or VM for visiting the more dangerous parts of the net, it's a computer within a computer that has no ability to interact with your physical hardware, and prevents any attacks from infecting your system as its software only and goes away when your done with it. It's how antivirus groups safely study the nasty stuff like Ransomware.

If you are worried about your online activism endangering yourself or your computer look into using The TOR project software, and encrypt your emails using PGP or something similar. TOR is how many people anonymously use the internet in parts of the world where being found, can mean prison or worse.

and it gets worse

At the risk of being a bit political but it has relevance to the thread.

The US Government has voted to allow your ISP (Comcast etc) to sell your browing history and you can't stop them.
If you are in the 'closet' then it could be rather embarrasing to your family if they get adverts for say 'breast enhancements' or worse.
I'd invest in a VPN (google it or goto wikipedia for a good explanation) to hide your browsing of for example, this site.
A sad sign of the times I'm afraid.
Samantha

Most of the remote access

Most of the remote access attacks I'm seeing on computers are of three types.

1) Drive by malware ads. These either take advantage of flash or java holes, rather than holes in windows, and load programs into your computer.
2) Email trojans and worms. These are the non stop zip files and other various encapsulations that tell you to open them and review them because they're bills/invoices/enormously important files. Some are actual programs, others take advantage of scripting in microsoft word. Why Microsoft EVER thought that active scripting was a good idea in a _letter_ or an email is beyond me. I can see scripting in Excel and Access, because they're totally different usages.
3) Direct attacks on the system, using remote desktop or similar programs. Turn -off- your TeamViewer, GoToMeeting, GoToMyPC and other programs when you aren't using them.

There's a fourth, and that's the social engineering method, where they call you from India, saying that they work for Microsoft, and your computer is sending out viruses, then they want you to let them in via one of the remote programs.

Keep in mind that there have been almost NO viruses in the last ten years. They're all Trojans and Worms. Hack tools, rather than actual self-perpetuating infecting programs.

Macs are harder to infect, but once they're infected, they are an absolute SHIT to deal with. I have to go for a second round to get rid of an infection in Safari on a customer machine. I cleared everything out, and a week later, I just got a call that they're seeing even MORE popups, ads, pushy 'call us or your machine is toast' warnings, etc. I'm going to have to manually wipe out the Safari profile.

There is NO computer safe from cross platform attacks (Browser plug-in assaults), and the best defense for anyone is to pay attention to where you go, what you do, and use a good script blocker.


I'll get a life when it's proven and substantiated to be better than what I'm currently experiencing.

Turn on Enhanced Protected Mode in Internet Explorer

One thing you can do in Internet Explorer on Windows 10 is to turn on Enhanced Protected Mode. Just click on the gear and select Internet Options. Then scroll down to the Security section and check the boxes for Enhanced Protected Mode and Enable 64 Bit Processes for Enhanced Protected Mode. This allows Internet Explorer to use the hardware security features of the PC. Be warned though it will break a lot of plugins but it is well worth it for additional security. Or you can use Microsoft Edge which has this turned on by default but again does not have many plugins that will work with it.

IE == Internet Exploder

IE has a very poor reputation with the people who are concerned with Internet Security. There are so many holes in it that is patched all the time.

I use Firefox ESR (Extended Service Release) plus a number of addons.
Ublock Origin
NoScript
Lightbeam
Flashblock
Disconnect

It takes a while to get your favourite sites to work properly but NoScript shows you how many other sites are referenced on a web page. Some have more than 30 other sites. Many are trackers or ad slingers. The list can be endless. Just stop them tracking you. All it takes is a couple of clicks per site.

The lighbeam add-on shows you who is tracking you on a site that you visit. It is very educational.

Also remember that when you use IE or Edge with Windows 10 what you are doing is collected and sent back to MS. For what? No one really knows but like Google it pays to not feed their insatiable appetite for data on you. If you google for my real name, you don't find me and that is how I want to keep it.

Samantha