The post New Malware Affecting WordPress Themes appeared first on Tervo Systems.

Since we build and host websites at Tervo Systems and our coming soon dedicated hosting division, Securihost.com, we have been paying close attention to this issue.  If your site is hosted with Tervo Systems or Securihost, you can rest assured that our servers have been patched in order to eliminate the vulnerability and they are not at risk from this threat.

If you are not hosted with us, you should consider testing your website with the online Heartbleed Testing Tool at: http://filippo.io/Heartbleed/

If you would like to learn more about the security vulnerability, check out the site dedicated to the Heartbleed Bug.

The post Heartbleed Vulnerability appeared first on Tervo Systems.

Do Some Cleanup

Your PCs and servers could use some cleanup, both virtually and physically.  Apps, files and old emails can clog your system over time.  Take a few steps to clean out the unneeded files and folders by :

1. Clean out your inbox by archiving old emails.  This is also a good time to review your policy for auto-archiving old emails.  If a policy is not in place, create one now so that your system archives old emails automatically.
2. Analyze and clean your computer for temp files and cookies.  Use a desktop cleaner tool to remove temp files, old downloads and cookies from a year of browsing the internet.  We recommend CCleaner by Piriform.  It’s free to use, but we also recommend upgrading to the paid version to support the project and to keep your system clean going forward.

Get rid of the dust and cable clutter.  A can of compressed air can do wonders for that PC that’s been sitting under your desk collecting dirt and dust.  While you’re under the desk, organize some of the cable clutter that has accumulated over the years.  Computers need a decent amount of airflow to keep their components cool.  If they do not get the airflow they need, the internal fans will run more than they need to that will create noise and shorten the life of your components.

Plan Out Your IT Projects for the Year

Now is a good time to think about what processes could be improved in the coming year and get them on a to-do or wish list.  Review your existing warranties and software licensing agreements to determine what will need to be renewed or replaced this year.  Waiting until the last minute to renew these agreements will often lead you to make quick and uninformed decisions.

If your company is still using Windows XP, have a plan in place to upgrade or replace affected systems by April 8, 2014.  Microsoft has announced that they will discontinue support and stop issuing security updates and patches to their operating system leaving it vulnerable to hackers and malware.

Protect Your Data

If you’ve been putting off implementing a backup solution, plan for protecting what is arguably your company’s most valuable asset; it’s data.  If you have a solution in place, schedule a time to test the recovery process.  Too often, businesses will setup a backup plan and following it closely every month, but never perform a test restore.  Tapes and external hard drives fail, data can be corrupted and some data may be missed in a backup plan.  Do test restores regularly to ensure that you backups actually work.

Consider performing a Network Security Audit to ensure that your systems are reasonably secure from outside threats.  A security audit by a qualified professional will identify areas where a hacker or malware can get into your network and do damage or steal resources.

Review Your Communications Systems

Advancements in telecommunications systems have improved the functionality and affordability of cloud and on-premise PBX systems.  If your company is still paying major telephone companies for its telephone service, you may be paying too much for too little service.  This is also a good time to review your auto-attendant systems to make sure they are directing callers to the right people.

Update Your Online Presence

Add some new content to your website and update anything that is stale or out-of-date including pictures, graphics, product descriptions, etc.  Review and update your Privacy Policy, Terms of Use, Payment Policy and Shipping Policy.  If you’re missing any of those items and they apply to your company, make sure they are added.

While you’re looking at your web page, change the copyright date in the footer of your site.  If visitors see “Copyright 2008” in your footer, they have to wonder how up-to-date the rest of the information is on your site.

Check Computers for Updates

Review all your desktops, laptops and servers to make sure Windows and Applications (including Office, Anti-Virus and Accounting software) are up-to-date and scheduled patches are being applied.  Not only will you lose out on new and improved functionality in some cases, but not having these updates can open your company to external threats.

Review Internet and Technology Usage Policies

Policies should be in place in order to inform your employees that certain activity when using the internet or technology is not allowed.  There should also be a policy for how technology equipment is to be used when away from the office.  These policies should be communicated to and acknowledged by employees at least annually and upon hire.

Clean Your Contacts List

Archive old contacts and update active ones.  Send emails out from your CRM system wishing your clients a happy new year and to verify their contact information.  Solicit feedback from your customers to identify process or service improvements to implement in 2014.

Update Your Passwords

Your passwords should be changed regularly.  If you have been using the same one for years, change it now.  Consider moving to passphrases.  See my article Stop Using Passwords about passphrases.

Learn Something New in Technology

Learn to code, update your skills in Excel or find some new technology that may help your business.  Free courses are available on the internet for thousands of subjects, so spend a couple hours learning something new.  Then pay it forward by supporting programs to encourage computer learning in schools and your community.  Check out code.org to see how you can help.

The post Technology Resolutions appeared first on Tervo Systems.

1. People will finally begin taking active steps to keep their information private.
2. Scammers, data collectors and cybercriminals will not ignore any social network, no matter how “niche” or obscure.
3. The “Internet of Things” becomes the “Internet of Vulnerabilities.”
4. Mobile apps will prove that you can like yourself too much.

I agree that with all the security breaches in 2013 (NSA snooping, Target’s records getting stolen, etc.), there will a much increased awareness of privacy and security from consumers and end-users in 2014.

See the full article here: Symantec’s Security Predictions for 2014

The post Symantec’s Security Predictions for 2014 appeared first on Tervo Systems.

For some reason, my theme files became corrupted.  I’m not sure what happened, but it wasn’t from anything I was doing.  It just happened.  The result was that the site was unreadable and WordPress gave me an error that the theme files did not exist or were corrupted.

Luckily, all of my sites are backed up regularly, so in a matter of minutes, I was able to download a recent backup from my remote server and restore the entire theme folder.  Once I re-applied the theme to the site, the problem was fixed.

I couldn’t help but think what would have happened if I didn’t have that backup.  A problem that only took a few minutes to fix would have turned into a whole day project.  I would have had to identify what was corrupted and rebuild the file or the entire theme from scratch.  I would have wasted a whole day doing something that the backup fixed for me in a matter of minutes.

Do you have a backup of your website?  Do you know what you would do if your site became corrupted and it had to be rebuilt?  If your site isn’t being backed up or if you don’t have a plan for restoring your internet presence back to normal in case of a crash, contact us and we will put together a plan that will reduce downtime and unexpected costs.

The post Is Your Website Safe from Downtime? appeared first on Tervo Systems.

But allowing customers and non-employees into your business network puts your data and systems at risk.  It can also get you in trouble with regulating bodies such as the PCI Security Standards Council if you store credit card data.

If you decide to implement and manage a wireless network for your business, below are a few tips to get you started.

Use WPA2 Encryption

WPA2 is the current standard for securing Wi-Fi access and offers advanced encryption of data passing between the router and the connected device.  Older wireless routers may use a security method called Wired Equivalent Privacy (WEP), but WEP security is relatively easy to crack and is not recommended for business use.  Some wireless routers allow you to broadcast a mix of WPA and WPA2, which will allow older devices that may not support WPA2 to connect.   Using the best available encryption for wireless connections is the first step in securing your network.

Create Separate Wireless Access for your Customers

Your customers and others visiting your location should not be connecting to the same network your employees are using for managing the business.  Business-class wireless routers allow you to create guest networks that prohibit unauthorized users from accessing internal network assets, while allowing them to connect to the internet.  Called a Virtual Local Area Network (VLAN) this allows guests and employees to have separate access and helps protect your network from prying eyes.

Enable MAC Authentication for Internal Users

If your employees are using a wireless access point to access network resources, consider enabling MAC authentication.  This extra security measure allows only pre-registered devices to access the network, while preventing all others.  Each wireless card has what’s called a MAC address.  Like a serial number, it is unique to that particular device.  MAC authentication only allows access to the MAC addresses you assign.  This prevents any unauthorized devices from connecting to your internal network.

Update Your Wireless Router Password

Too often, we see wireless routers with the default password unchanged.  The more popular routers’ usernames and passwords are widely known, and leaving the default username and password unchanged opens your network and your customer’s computers open to attack.  Use a strong password or passphrase that is not easily guessed.

Enable Wireless Isolation for Guest Networks

Wireless Isolation prevents one wireless client from accessing another.  With wireless isolation enabled, laptops and mobile devices are prevented from seeing any other devices on the network.  This helps protect your customers from malicious attacks and other users’ attempts to access data on their devices.  Only enable this for external users, however, since it will also prevent devices from accessing important network assets such as printers, file servers, etc.

Add Content Filtering

It’s always a good idea to block sites with objectionable and illegal content in the workplace.  It’s especially important when you open your internet access to the public.  Implementing a reliable content filtering solution that automatically updates lists of blocked sites will help prevent inappropriate and possibly illegal situations in your store or office.

As always, Tervo Systems can help you with setting up and configuring a secure, reliable business Wi-Fi.  Each situation is different and we will help you build a customized solution to fit your business needs.  Avoid the headaches and time-consuming task of configuring your wireless network by calling us at (352) 432-8324.

The post Tech Tip–Secure Your Business Wi-Fi appeared first on Tervo Systems.

Some advantages to moving your Disaster Recovery plan to the cloud

Speed

Tape backups can be slow and cumbersome to backup and restore.  They are also typically stored offsite, so they may not be immediately available in the event of a disaster.  With cloud backup, critical data can be accessed almost immediately.  When recovering from a disaster, it’s important to prioritize what data is needed first.  Cloud backup solutions can deliver information to the appropriate personnel when they need it and where they need it fast.

Security

Cloud backup solutions store your sensitive data in highly secure data centers with advanced systems that are tested by independent parties several times a year.  Redundant safeguards protect your data and ensure that no unauthorized electronic or physical access is allowed.  Contrast that to the tape drive or external hard drive sitting in the closet at your business location.  How safe is your data from theft or damage?

Low Capital Expenditure

Cloud solutions remove the need for expensive hardware implementation and maintenance costs.  It also eliminates the hidden costs of owning sophisticated equipment such as maintenance contracts, warranties, finance charges, end-of-life disposal costs, etc.  The cost of DRaaS transfers from a high up-front capital expenditure to an operating expense by utilizing predictable subscription plans with no long term commitments.

Flexibility

Cloud systems allow you to fine tune your processes to ensure critical data is backed up differently than non-critical data.  Multiple schedules also allow you to manage the timing of the backups.  Remember the days when a tape backup was running and it brought your entire network to a crawl?  Are you still experiencing that level of performance?

Capacity

With traditional storage solutions, you are required to purchase enough excess capacity to anticipate growth.  That extra capacity typically sits unused until needed and once more capacity is needed, additional hardware needs to be purchased.  With cloud solutions, you only pay for what you use and as more space is needed, additional storage can be allocated immediately.

Mobility

New virtualization technologies allow you to host entire systems in the cloud even if your primary location is down or unreachable.  As long as your employees have access to an internet connection, they can get access to the data they need in order to keep the business running.

If your business has an outdated or inefficient backup and disaster recovery solution, cloud alternatives offer secure and affordable solutions for modern businesses.  Call us at (352) 432-8324 for a free analysis of your disaster recovery plan.

The post Reasons to Move Disaster Recovery to the Cloud appeared first on Tervo Systems.

Too Many Temp Files

Windows accumulates temporary files from the internet and during program installs in order to speed up processing while visiting sites or using certain programs.  Windows is notorious for leaving these temp files behind and as they accumulate on your hard drive, they tend to slow down performance.

Fix – There are several PC cleaners available on the internet for a wide range of fees.  A rule of thumb for picking one is if they are heavily advertising the program, stay away from it.  It will probably do more harm than good.

My pick is the free CCleaner from Piriform.  The free version does a great job cleaning out temporary and and other necessary files, but the premium business version adds additional features.  Simply run the program, analyze your system and run the cleaner.  There are other tools available in CCleaner such as the registry cleaner, but the performance improvements gained by modifying the registry do not outweigh the risks of changing the registry settings, so it should be avoided.

Unnecessary Programs Loading During Windows Startup

If your computer takes a long time to startup, there’s a good chance that there are a large number of programs loading during startup.  Some are necessary, but others just load into memory and can slow you down.  Some examples are:

• iTunes Helper
• Adobe Acrobat Assistant
• HP, Canon and other printer settings and monitors
• Various updaters that check the internet for program updates

Windows 8 Task Manager

Fix – CCleaner has a startup manager tool that allows you to disable or delete programs that load with Windows.  Windows also has a built-in application to manage startup programs.

In Windows XP through Windows 7, select Start, Run, msconfig.exe.  Windows 8 built the Startup Manager inside Task Manager.  Open Task Manager by beginning to type “Task Manager” in the Start Screen and select the Startup tab.   Right-click applications you wish to disable.

Unnecessary Programs Loaded by Your Computer Manufacturer.

These programs are sometimes included with new PCs and are generally referred to as crapware or bloatware.  They can include applications that try to sell you toner, additional services from the PC maker or other computer (or non-computer) related items.  They also may include trials of bloated anti-virus programs, games or other applications that will ask for a payment to use the full version.

Fix – Uninstall any programs that you don’t need, but be careful not to remove necessary applications that control, sound, video, network, etc.

Virus or Other Malware Infections

Viruses, trojans and spyware are often hard at work in the background taking up valuable resources on your PC.  They can either be looking for ways to spread, trying to access your files or sending information over the internet without you knowing.  Keeping your PC clear of viruses and spyware can increase performance dramatically.

Fix – Remove any old, unlicensed antivirus programs and install modern software that has a reputation for a low memory footprint.  We’ve had good luck with Symantec Endpoint Protection, AVG CloudCare and Kaspersky Internet Security.

Not enough RAM

If after all the previous fixes don’t increase the speed of your computer, it may be time for a RAM upgrade.  RAM is an inexpensive upgrade for most computers and is worth the cost in increased productivity.  Anything less than 4GB of RAM should be upgraded to the maximum the computer will recognize.  Consult with your local computer repair shop if you’re uncomfortable opening the computer case.

Fix – If you are unaware of how much RAM your computer has and how much it can handle, browse over to Crucial.com, download their System Scanner and let it scan your computer to determine how much RAM is installed and recommend an upgrade.

To keep all your computers running smoothly, consider subscribing to our Managed Technology Services plan.   This plan will keep all your computers updated, virus free and protected from data loss.  Contact us for a free consultation.

The post Tech Tip–Keep Your Computer Running Smoothly appeared first on Tervo Systems.

Tax season also marks a significant increase in email scams, phishing schemes and other online frauds.  Below are a few tips on how to protect yourself from online theft:

1. The IRS does not  initiate communications with taxpayers through email.  Ever.  Any unsolicited email purporting to be from the IRS should be reported by forwarding it to phishing@irs.gov.
2. Beware of emails sent to you claiming to be from your bank or other financial institution with attachments such as .pdf, .vbs, .scr or any other file extension.  Verify the sender of the email first (see my article, How to Recognize a Phishing Email for how to identify fraudulent emails) before opening any attachments and even then, only open them if you requested it or were expecting it.  Unsolicited emails from financial institutions should always be viewed with suspicion.
3. Beware of fake tax preparation companies that promise free returns or tax advice, but require you to immediately enter sensitive information such as social security or credit card numbers into online web forms.  If you are preparing your tax return yourself, stay with reputable tax preparation companies such as TurboTax, TaxAct (this is the one I use), H&R Block or others. Check for reviews online before using a new tax preparation service.
4. Phishing schemes are not limited to email and online sites.  Beware of faxes or paper mail claiming to be from the IRS requesting sensitive information.  If you were not expecting a notice, contact the IRS to verify its validity.
5. Protect your computer by installing and updating anti-virus, anti-spyware and firewall protection.

The IRS and federal government have many resources for learning about online fraud and phishing schemes.  For more information, check out some of their links:

Report Phishing Schemes to the IRS

Avoiding Identity Theft

Tax Scams – How to Identify and Report Them

The Truth About Frivolous Tax Arguments

The post Tech Tip–It’s Tax (Fraud) Season! appeared first on Tervo Systems.

To access the menu, hover in the bottom left-hand corner to bring up the Start Screen icon

Right-click the Start Menu screen to bring up the hidden menu.

The post Tech Tip–Windows 8 Hidden Menu appeared first on Tervo Systems.