NeoKnute's Computer Help

Three free tips to better protect your iPhone

2011-07-26T09:05:00.000-04:00

Smartphone security expert Graham Lee offers some simple advice on how better to protect your iPhone or iPad.
The iPhone - along with the rest of Apple's iOS product family - seems to me to be the TARDIS of the computing world.
There's a full-featured UNIX computer with almost permanent network access, and it fits in my pocket: surely it must be bigger on the inside. Apparently you can even use them to make phone calls, too.
It certainly puts my first portable to shame.
Of course, such a powerful computer must be protected, particularly when you use it for sensitive tasks like email and editing work documents on the move. So here's a short list of iOS tips to help you stay secure using your iPhones and iPads.

1. Set the passcode

All of Apple's products that run iOS allow the user to configure a passcode. The passcode controls access to the apps and data installed on the device. No passcode, no data - and there's no way to get around that, because content including saved passwords and mail attachments is encrypted so that without the passcode, iOS can't read the content at all.
To enable the passcode, first launch the Settings app. In the "General" section, look for the "Passcode Lock" setting. Tap that, and you'll see a screen that allows you to turn the passcode on, and to define when it's required and whether to use a "simple passcode" (a four-digit PIN) or a longer password.
Even though iOS is designed to slow down "brute force" attacks (where the attacker enters multiple guesses at the passcode until he finds the correct value), guessing one of the 10,000 simple combinations is very quick.
Particularly if you use one of the most common PINs.
It's best to turn simple passcode off and use a stronger password, following Graham Cluley's advice.

2. Don't jailbreak

By default, Apple limit the software that will run on your iPhone or iPad to their own apps, and anything that you download through their app store. They do this to restrict the chance that malware gets onto the devices, and so far it seems to work: iOS has not seen the same malware problems that have plagued Android.
Google are more permissive about the software allowed in their marketplace, and allow installation of non-marketplace apps: both good avenues for getting malware onto a mobile phone or tablet.
Of course, some people (including regular Naked Security contributor Duck, who discussed the issue in a recent Chet Chat podcast) see this as an unwelcome limitation on what they can do with the phones that they paid for.
Such people may turn to jailbreaking to remove Apple's limitations, so that they can install unapproved software or reconfigure the operating system.
Down that path lies iPhone malware and an easy route for attackers to install remote access tools, keyloggers (well, taploggers I suppose...) and other nasty things.
"Grange Hill" stalwart Zammo would probably agree with me here: when it comes to jailbreaking, just say no.

3. Be careful of where you surf

Phishing, and other scams like the recent iTunes giftcard ruse, do not depend on your technology choices: they're designed to fool you, not your computer.
With that said, it's perhaps easier to be taken in when surfing with Mobile Safari: user interface hints including the location bar and the SSL padlock are smaller, and in scrolling to read a page's content you'll push them off the top of the page and perhaps forget to check that you're on the correct site.
Especially if you've just snuck your phone out during that boring meeting, and are still half-listening to the Q3 sales projections.
Personally, I reserve sensitive tasks including online shopping and banking for either native apps released by the banks and stores, or for the desktop browser where it's easier to see whether I'm on the right website.
I hope you found those tips useful. For more chat about mobile security and privacy, please follow me on Twitter.

Virus Hid your Files?

2011-07-19T12:59:00.005-04:00

Open command prompt by clcking START > RUN. Type CMD and hit enter. Go to the drive, for example your flashdisk is on drive E. Type “e:” and enter.
The command we use to restore files is ATTRIB. Type this command :
attrib –s –h *.* /S /D and hit enter.

Google+ invite scam spreads on Facebook via rogue application

2011-07-19T08:43:00.000-04:00

by Graham Cluley on July 13, 2011

A rogue application is spreading via Facebook, claiming to offer easy invitations to Facebook's new rival in the social network market, ">Google+.
Many Facebook users have had messages like the following appear on their newsfeed:

Google+ - Get Invite
Unoffical Fan Page
Page: ‎XX,XXX people like this.

If you visit the page, you are invited to allow a third-party application to access your Facebook account.

You should also exercise great caution about what third party apps you allow to access your Facebook records, especially when they are demanding the ability to post to your wall and grab personal information such as your date of birth and current location.
Nevertheless, if you are hungry to get a Google+ Invite or to find an easier way to encourage your Facebook friends to join you on Google+ then you might (unwisely) carry on regardless.
The next thing which happens is you are encouraged to "Like" the page. Remember, you haven't seen anything yet which impresses you at this point - so why are you recommending the page to your online friends?

Just in case the "Like" wasn't enough - you are now encouraged to invite as many of your friends as possible to also sign-up for the scheme.

Of course, if you do send a direct invitation to your friends to sign-up for the Google+ Invite application then they may very well believe that you have checked it out for yourself, and trust your invitation. A sneaky piece of social engineering by the folks behind this third party application.
What we end up with is many thousands of people who have given a third party application, written by persons unknown, complete access to their Facebook page. That means they can later use your Facebook account to post spam messages, distribute other money-making scams, steal your personal information, and post in your name.
If you have been hit by scams like this on Facebook, and are struggling to clean-up your profile, here's a YouTube video I made which describes what steps you need to take:

(Enjoy this video? You can check out more on the SophosLabs YouTube channel and subscribe if you like)
Make sure that you keep informed about the latest scams spreading fast across Facebook and other internet attacks. Join the Sophos page on Facebook, where over 100,000 people regularly share information on threats and discuss the latest security news.
And if you are on Google Plus, feel free to add me to your Google+ circle so you can learn about the latest security threats.
You could also do a lot worse than check out our best practices for better privacy and security on Facebook guide.

Top 10 keyboard shortcuts everyone should know

2011-07-18T15:02:00.000-04:00

Using keyboard shortcuts can greatly increase your productivity, reduce repetitive strain, and help keep you focused. For example, highlighting text with the keyboard and pressing Ctrl + C is much faster than taking your hand from the keyboard, highlighting the text using the mouse, clicking copy from the file menu, and then putting your hand back in place on the keyboard. Below are our top 10 keyboard shortcuts we recommend everyone memorize and use.
Ctrl + C or Ctrl + Insert

Copy the highlighted text or selected item.

Ctrl + V or Shift + Insert

Paste the text or object that's in the clipboard.

Ctrl + Z and Ctrl + Y

Undo any change. For example, if you cut text, pressing this will undo it. This can also often be pressed multiple times to undo multiple changes. Pressing Ctrl + Y would redo the undo.

Ctrl + F

Open the Find in any program. This includes your Internet browser to find text on the current page.

Alt + Tab or Alt + Esc

Quickly switch between open programs moving forward.

Press Ctrl + Tab to switch between tabs in a program.

Adding the Shift key to Alt + Tab or Ctrl + Tab will move backwards. For example, if you are pressing Alt + Tab and pass the program you want to switch to, press Alt + Shift + Tab to move backwards to that program.

Windows Vista and 7 users can also press the Windows Key + Tab to switch through open programs in a full screenshot of the Window.

Ctrl + Back space

Pressing Ctrl + Backspace will delete a full word at a time instead of a single character.

Ctrl + Left arrow / Right arrow

Move the cursor one word at a time instead of one character at a time. If you wanted to highlight one word at a time you can hold down Ctrl + Shift and then press the left or right arrow key to move one word at a time in that direction while highlighting each word.

Ctrl + Home / End

Move the cursor to the beginning or end of a document.

Ctrl + P

Print the page being viewed. For example, the document in Microsoft Word or the web page in your Internet browser.

Page Up / Space bar and Page Down

Pressing either the page up or page down key will move that page one page at a time in that direction. When browsing the Internet pressing the space bar will also move the page down one page at a time. If you press Shift and the Space bar the page will go up a page at a time.

Full listing of keyboard shortcuts

How To: Remove Windows 7 Repair Virus / Malware ( Removal Guide )

2011-07-18T14:58:00.000-04:00

Windows 7 Repair is a malware that acts as a computer analysis and optimization program. Windows 7 Repair malware usually gets installed via a Trojan that once it infects your computer it will start displaying fake messages suggesting that your computer is at risk and, in order to get rid of these threats, you need to download and install Windows 7 Repair.
Clicking OK on these messages will automatically start the download / install process for the Windows 7 Repair. Once installed on your computer, Windows 7 Repair will start a fake scan and it will display numerous threats and infections on your computer. However, these threats are a forgery in order for Windows 7 Repair to scare you into buying the full version of the program. Do NOT give away your personal information as the so called full version of the program is nothing more than another fake tool.

How To: Remove Windows 7 Repair Virus / Malware ( Removal Guide )

The way Windows 7 Repair behaves in order to give you the impression that your system is compromised, is preventing you to run most of the programs whilst displaying fake error messages, not allowing you to access the internet and making some of your files hidden. Follow this guide and you will be able to get rid of these problems.
Windows 7 Repair Removal Guide
First of all, you will need to download RKill.exe, Malwarebytes’ Anti-Malware (MBAM) and Unhide.exe. In case Windows 7 Repair will prevent you from accessing the internet then you will need to download these programs on another computer and transfer them on the infected machine via any portable means. Now, let’s get on with the disinfection.

You will need to kill all the Windows 7 Repair related applications and processes. In order to do so you will need to run RKill. After doing so, let RKill fully scan your system and ignore any warning messages from Windows 7 Repair. After the scanning is complete do NOT reboot your computer.

*Note that if Windows 7 Repair will prevent you from successfully running RKill then you will need to download and run another renamed version of RKill from the same download link above.

Now, let’s solve that internet access problem. You will need internet access during the disinfection process due to the fact that you will need to update MBAM once it comes to that. Windows 7 Repair might prevent you from accessing the internet due to the fact that it has the TDSS rootkit infection attached to itself as well. In order to get rid of TDSS follow this guide. In case you will still be unable to update MBAM then follow this other guide.

Run MBAM and start the installation process. While you are at it, make sure to check the buttons labeled Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware. Once the installation process is complete, click the Finish button and reboot your computer if MBAM will ask you to do so.

MBAM should now automatically start after the system reboot, thus presenting you with a message box and the mail window. Press OK on the message box and then on the main window, navigate to the tab labeled Scanner and then select Perform Full Scan below. Last step, press the Scan button.

It might take some time for MBAM to finish scanning your computer so please be patient. After the scan will be complete you will be presented with the full list of threats found on your machine. Check all of them and then press the Remove Selected button. Reboot your computer once MBAM prompts you to do so.

Now, your system should be free of Windows 7 Repair but you will still need to be able to see the hidden files that borrowed the hidden attribute from Windows 7 Repair. In order to be able to see your files again either follow this guide or run Unhide.exe.

Your computer should now be clean but there’s another thing to consider as a security measure. As Windows 7 Repair and other of these malware infections make their way on your system via vulnerable programs that are already on your system, you should read this Secunia PSI guide in order to get rid of any vulnerability in the future.