The Archives

Posts Tagged ‘PC’

Security Alert: ThinkPoint or MSE FakeAV infection

This virus is contracted in a method similar to other FakeAV infections, and runs a “scan” alerting you to several “security threats” on your PC.  These threats are fake; the only real infection on the PC is the FakeAV itself. 

This virus is typically contracted in the following manner: While browsing websites, you suddenly see a pop-up alerting you to an infection on your computer.  The pop-up offers the ability to scan the computer for you with one simple click.  At this point your PC is not infected; however, when you click the ‘scan’ link on the pop-up, it downloads and installs a worm on the PC. 

The worm then begins the process of installing the FakeAV and running a basic ‘scan’.  It hijacks several main system files the next time your PC is rebooted, allowing it core access to the system.  This allows the infection to run in an elevated mode, overriding the user when they try to stop the processes associated with the infection.  The ThinkPoint or MSE variant is of special concern because it is able to operate in Safe Mode also, providing a special challenge to even tech-savvy users who can typically clean their own PCs.

Tell Me More  Because these infections rely on the user allowing the pop-up to run the scan, it can by-pass most virus protection software.  These pop-ups almost exclusively come from a website but can sometimes look like a very convincing Windows or Microsoft Security alert.  If you see the pop-up, you can avoid the infection by pressing Alt+F4 to close the browser window, preventing the installation of the worm.  Immediately after closing the window, run a full virus scan on your computer.

Should I Be Worried?  While this infection is common online, with some basic best-practices you can avoid contracting the infection.  If you do receive an alert from a virus program that is not one you installed on your system; be suspicious.  Typically these infections profit by convincing people to ‘purchase’ the software; when in reality they are stealing your credit card information.  If you are browsing the web and receive a pop-up that tells you you’re infected; you probably aren’t yet.  Be sure to close the window immediately, ignoring any pop-ups that may warn you your system is infected.

What Do I Need to Do?  As always, ensure your virus protection is up to date and running scans on a regular basis.  Keeping an eye out for suspicious alerts will go a long way with this infection, as it requires you to install it.  If the alert isn’t from your virus protection software; it is fake and should be ignored.

Geek Squad Final Word  As FakeAV rapidly becomes the most popular way of infecting computers for profit, they have almost exclusively relied on the end-user to install the software themselves.  Be suspicious of any strange alerts you see on your computer; no matter how much they look like they may have come from Windows itself or legitimate virus protection software.  As always; if you have any concerns you can consult with us 24 hours a day, 7 days a week, 365 days a year. 

Virtual Agent Patrick B.

Geek Squad Agents Become Free WiFi Hotspots this Holiday Season

With WiFi hotspots popping up in all kinds of places, Geek Squad returned to the lab for a “next-gen” holiday gift. Now “Secret Agent Santas” will take WiFi technology to the next level, releasing WiFi hotspots from the electrical outlet through the use of high-speed USB modems and battery-powered routers.

Beginning today, select Agents in Atlanta, Chicago, Los Angeles, New York, and San Francisco will become “Secret Agent Santas,” providing free Internet access wherever they are. “Secret Agent Santas” will help people stay connected on the final leg of this holiday season on trains, in parks and at a multitude of other locations. WiFi’d Agents will be easily recognizable by their non-uniform holiday headgear – a light-up red and white Santa hat with LEDs around the brim.

Civilians are encouraged to take advantage of the free internet service and speak with the Agents about any technology problems or questions they might have. Select Geekmobile® vehicles in Atlanta and San Francisco also will be set up to provide service.

“Free WiFi has made staying connected easier and increased the usefulness of laptops, smartphones and other hand-held devices,” said Geek Squad Agent Ismael Matos. “By creating these roving hotspots, we’re providing an even greater level of service. Need WiFi on an ‘L’ train in Chicago? We can help. Want us to park six Geekmobiles at an Atlanta football game so you can tailgate and stay connected? We can do that too.

“To serve the greatest number of people, these hotspots will not be password protected,” continued Matos. “We recommend that civilians not conduct any particularly sensitive work as a result. Check sports scores but not bank accounts.”

WiFi’d Agents are a gift that keeps on giving; rolling out this holiday season, the service will continue indefinitely. Keep an eye out for specially marked Geek Squad Agents and open hotspots named “Geek Squad.” And if you have any WiFi location requests, please visit Geek Squad Intelligence (http://www.geeksquad.com/intelligence/) and leave us a comment.

What Exactly is Geek Squad Computer Optimization?

Geek Squad to Make Windows 7 Upgrade 7th Heaven

The day we’ve all been waiting for – October 22 – is almost here, and Geek Squad has a great offer to make it even better. Geek Squad Agents have pledged to deliver full upgrade service for customers  moving to Windows 7 from Windows Vista or Windows XP for a mere $39.99, heavily discounted from the standard Geek Squad Operating System Install price of $129.99, and designed to make the upgrade faster and easier.

New “Scareware” Malware Computer Infections on the Rise

For the past few weeks, there has been a marked increase of scareware-malware (virus and spyware) infections. After speaking with multiple clients recently infected, it seems the latest infection is quite easy to fall for.

Here’s how it works: an ad for a Web site pops up as a window on a user’s computer, falsely indicating the PC is infected with a “virus.” The user clicks on the ad that links to the Web site. This downloads and installs a program. Depending on your security settings or software this can even happen automatically!

Once the program is on your computer, it automatically downloads other infections and also changes some inner Windows-workings that regulate how your PC browses the Internet. 

Here’s the real kicker. If after the infection is on your computer and you attempt to visit legitimate software review sites, you are redirected to fake Web sites set up to look exactly like the originals. For example, you might try to look up “antivirus” on a Web site. But instead of going to the actual site, you will go to a mirror image that will ask you to download the software: “Antivirus1,” “Antivirus 2010,” “Antivirus XP” or “Antivirus360/AV-360.”

DON’T DO IT!! These programs, as legitimate as they may look, are viruses set up to get your credit card info out of you.

Of the last 10 virus removals I performed where one of these viruses were involved, 7 people indicated they thought it was some sort of Windows Update, clicked the ad and installed the software. 6 of those people had been using computers for 5+ years.

To protect yourself keep a few things in mind:

• Stick with name-brand software. If you are unsure if it is a real product, try searching for it on a name-brand brick-and-mortar store’s Web site for the name. If you don’t get an exact match of name and picture, be wary.
• If your computer has directed you to a Web site that says “Antivirus 1,” “AntivirusXP,” “Antivirus 2010,” or “Antivirus 360” is an awesome product, you may have already been infected with the original redirecting program. This program is what directed you to the false Web site in the first place. 
• If your computer is suddenly “Blue Screening” and looking like it is rebooting, giving you a warning about some sort of unregistered program during the boot screen, you are infected. Shut off your PC and get it fixed immediately. Change PIN numbers and passwords AFTER the repair is complete if you bank/buy things online.
• If you have already given your credit card number to one of those software programs above, alert your credit card company immediately.
• Make sure your computer is up to date and has antivirus AND anti-spyware protection.
• Be extra cautious of ”adult” Web sites.

The “Big 3” things to remember that I always make sure to tell my clients:

1. The goal of “scareware” is to scare you into thinking something is horribly wrong. Once you are convinced, you will probably download the bad software. This usually ends with providing financial information to a bad third-party. All the protection in the world may not help if all users of the computer don’t know that what is “popping up” is fake.
2. Microsoft currently does not advertise anything “non-Microsoft” to fix problems with your computer. For instance, Microsoft does not recommend via pop-up to install “Joe’s Antivirus” program because you have a problem. Currently the viruses do not use the phrase “Microsoft” in their advertising. They do use the phrase “XP” however. 
3. Finally, if you suspect at all that anything is wrong, turn off the PC and get it looked at. Viruses cannot spread if the computer is turned off. They can spread if the computer is on and connected to broadband (even if you do not open your web browser).

If you have any questions, or think you may have been infected, give us a call or stop in to one of our local Geek Squad precinct at any Best Buy store.

Off Duty: The HTPC Project

Previously, I modded an original Nintendo system to include a wireless card and hard drive, essentially making it a computer.  Recently, while I was playing with my Frankensteined Nintendo PC, I came up with a new idea. I found I had gotten so into trying to beat super Mario, that I had forgotten to watch my favorite TV shows.

Now you might be thinking, why not get a DVR or TiVo? Those are both perfectly fine solutions, but I thought, “this could be a fun, challenging experiment.” So, I went to my case modding lab and began work on my own personal DVR (with no monthly fees).

The project began by searching online for a small, desktop PC-like case. I found a great one that looked like a stereo receiver I currently have in my house. When the case arrived, I installed a 320GB hard drive (for video storage) and 1.5GB (for memory).

Next, I had to choose a special graphics card. I needed one that would be powerful enough to display my picture on my 40’ Samsung LCD TV. I went with the ATI graphics card, the X1650 Pro.

Finally, I installed Windows XP Professional so I could control everything.

Upon my initial test drive, I was impressed. I quickly I realized this machine is far more capable than just recording and playing back TV. So I decided to install a Blu-Ray drive I had bought recently, as well as an HD card and digital reader. This means I can watch high definition content from my moded DVR.

I also installed a wireless adapter, so I could use the DVR to play my iTunes library and have access to the World Wide Web on my TV.

The final touch, installing a program called Snapstream Media so I can use my phone to tell my DVR what to record – just in case I forget to manually set it, or decide last minute I need to record something. 

All in all, I am really happy with my moded DVR. It was fun building, and really lets me enjoy my technology to the max. Next up, a Sega Saturn mod. Stay tuned…