Email Viruses In The Morning

by FrankWright 10. February 2012 14:21

 

A new study out is showing that you are far more likely to get a virus emailed to you in the morning hours than any other time of day. Many users around the world login to their computers first thing in the morning and review any emails they may have missed during the evening as well as those just coming in. 

According to a study by “Trustware” the time frame from 8 AM EST to 9 AM EST is the most likely time to come across an infection in your email.  According to Trustware, the amount of viruses being sent to users also begins to rise in August and peaks in September. 

The study also finds that Franchises are also one of the more likely targets due to the fact that if they are able to break into one location it is likely that multiple locations use similar IT configurations.

If you’re interested in reading more about the study click here.

 

Symantec Endpoint Protection Compromised

by FrankWright 9. January 2012 11:38

This past week a group of hackers from India indicated that they had found source code from Symantec’s Endpoint Protection software. Endpoint Protection is enterprise level antivirus software that is designed to be ran in a client/server environment. 

The hackers claimed to have source code from two older versions of Endpoint Protection, version 11.0 and version 10.2. While Symantec is currently on version 12.0 version 11.0 is still supported even though it is four years old. Symantec claims that even though the hackers have access to the source code they have no way (yet) of breaching their software. 

There are a lot of companies out there that try to hold on to everything as long as they can to try to avoid the various costs involved with replacing a product with a newer product. In the case of your antivirus software however, this is a dangerous practice. The longer a product is in existence the higher the chance is of someone finding a way to hack into it. In the case of Endpoint Protection this is particularly dangerous since it operates in a client server setup. Imagine if your server’s side antivirus agent was compromised. This could mean that your workstations are no longer receiving updates, and could potentially mean your entire network is vulnerable. 

We sell a better solution to client server antivirus solutions. Through Tech Experts Businesses are able to purchase our Managed Vipre Antivirus which does not have to operate on a client server setup, but can if you need it to function that way due to your networks bandwidth.

At any rate, if you have old antivirus software, I recommend updating it to something current so you are properly protecting your valuable assets.

If you would like to read more click here.

Scan Your Downloaded Files

by FrankWright 2. January 2012 10:42

Many people know that whenever a file is downloaded to your computer it should be scanned with an antivirus program to ensure it is safe before opening it. The fact is, if the file you just downloaded and scanned has a virus that is new, your antivirus may not catch it before it’s too late.

So what’s a better way of going about scanning files that you’ve downloaded? Well one thing you could do is to use multiple antivirus products to scan your files. The main problem with this method is that for you to do this you would need to install and uninstall every antivirus software you wish to scan with since you can only have one antivirus software installed on your computer at a time. The reason for this is that having multiple antivirus products on your computer can conflict with each other and cause a lot of problems.

The best way to scan your downloaded file (provided it is under 20 MB) is to use this handy website: http://www.virustotal.com/ this website gives you the ability to upload your file and scan it against a list of major antivirus companies.

Wanting to test this out, I hunted down a virus on the internet (Not to terribly difficult) and once I found out where it installed itself on my computer, moved it to my flash drive and used it to test their website. After uploading I was able to see what antivirus programs were currently able to detect this particular virus. Only 5 of the 42 it looks at were currently able to detect the virus.

Needless to say, always be very cautious about what you open (even if it appears someone you know sent it to you). As this website shows, just because you have an Antivirus installed, doesn’t mean that yours is able to detect everything.

If you are interested in reading more click here.

If you would like to check out the “Virus Total” website, click here.

Malware Distributors Increasingly Relying on IP Spoofing

by JeffSchleif 19. August 2011 15:44

It seems like we are seeing more and more instances of computers being infected with malware or spyware each day.  As the Anti-Virus companies release updates and patches to their software, it seems as though the people who code these malicious programs are keeping up and releasing new ways of getting around that. 

The number one question I hear when dealing with a computer infected with a Virus is “How did my Computer get infected?” and the number two question I hear are “I have Anti-Virus software, why didn’t it block it?” Well to answer the first question.   Your Computer can be infected by a number of ways.  Someone sends you an E-mail message with the Virus attached, downloading a file you’ve found online that claims to be a program or document you are looking for, (when in fact it is not actually what it claims to be.) and from drive-by attacks.

Drive-by attacks are becoming more and more popular.  Malware distributors rely on exploiting vulnerabilities in a browser or a plug-in to install malware on users’ systems.  With the growing of technology and features which help to make our lives easier, (or online browsing experiences faster) come new ways for the people who create the malware to get them on your Computers.  These malware authors are increasingly using what is known as IP spoofing to avoid being detected.  Malware distributors try to detect connections from Google’s Safe Browsing survey (and services like it) and serve perfectly safe, innocuous Web pages to those services…saving its nasty payload for visitors they believe to be real users.

Google has published an analysis (PDF) of more than 160 million Web pages on more than 8 million sites to look for trends in how malware is distributed.  If you are interested in knowing more on drive-by attacks or how malware is spread I urge you to check it out.

FBI Coordinated Raids Take Down Scareware Scammers

by JeffSchleif 6. July 2011 10:41

 

The United States Federal Bureau of Investigation has been working with the authorities in eleven other countries to take down scareware scammers.  The effort dubbed ‘Operation Trident Tribunal’ has seized more than 40 computers being used to host Web pages and fake scans designed to scare people into believing they needed to purchase bogus security software to clean their systems. 

“Today’s operation targets cyber crime rings that stole millions of dollars from unsuspecting computer users,” said the FBI Criminal Division’s Assistant Attorney General Lanny A. Breuer, in a statement. “These criminal enterprises infected the computers of innocent victims with malicious scareware, and then duped them into purchasing fake anti-virus software. Cyber crime is profitable, and can prey upon American consumers and companies from nearly any corner of the globe. We will continue to be aggressive and innovative in our approach to combating this international threat.”

More than $72 million have been collected by these scareware scam artists from its victims of innocent Computer users.  You should avoid putting in any personal information into any program or website that asks you for sensitive data if you are unsure of the form you are filling out.  It is likely you may be the next victim of this type of cyber-crime.  If you suspect your Computers have been infected with a fake Anti-Virus program it is best to shut off the machine and have the Computer inspected by a PC technician or a friend or family member who have experience in removing Computer Virus.