Scareware a big business, but fake virus 'protection' can be removed

Viruses and spyware are a real concern when you spend any time on the Internet, and some people are feeding on your fears for big bucks.

But while there are quite a few legitimate anti-virus programs out there, there are more that not only do not get rid of your viruses and malware, but install more of the same on your hard drive.

Symantec, which owns Norton, says more than 40 million people have fallen victim to the "scareware" scam in the past 12 months. According to the BBC, "online criminals make millions of pounds by convincing computer users to download fake anti-virus software." Which translates into an awful lot of dollars, not to mentioned the number of computers that are trashed by this cottage industry.

Over my years of surfing on the Internet, I've seen plenty of this. An ad shows up on a Web page I'm browsing, offering to scan my hard drive for free. Or flashing a message that would make even the most savvy Web surfer sweat -- that viruses have been detected.

The idea is that you click on the ad and it will scan your disk, or install a virus-protection device. That's what you think, anyway.

In reality, the scan or program is useless at best. At best.

At worst, the program or scan will install its own spyware, or its own virus, and really make hash of your hard drive -- and maybe even bill your credit card in the bargain.

Welcome to the rogue security software. They either are disguised viruses, trojans or are nothing but a sales pitch, trying to push another product to the user.

Call it scareware, because it's designed to frighten you into buying its product or download its own viruses, Trojan horses, or spyware.

Most of my Internet work is with this netbook, using Windows. But even while using Linux I've even seen these ads come up. I'm talking about the ads saying that viruses have been detected on my computer.

Which told me right away the claim was a bunch of horsesqueeze. For several reasons, Linux is not prone to viruses or spyware. Nor is MacIntosh, really.

OK. Time to check your computer. See what kind of virus protection you have. If it's from this list, you're in a bunch of trouble:

Cyber Security
Alpha Antivirus
Braviax
Windows Police Pro
Antivirus Pro 2010
PC Antispyware 2010
FraudTool.MalwareProtector.d
Winshield2009.com
Green AV
Windows Protection Suite
Total Security 2009
Windows System Suite
Antivirus BEST
System Security
Personal Antivirus
System Security 2009
Malware Doctor
Antivirus System Pro
WinPC Defender
Anti-Virus-1
Spyware Guard 2008
System Guard 2009
Antivirus 2009
Antivirus 2010
Antivirus Pro 2009
Antivirus 360
MS Antispyware 2009

These are rogue programs, according to ghacks. And if you have one of these, you'd better get rid of it awful fast. You probably clicked on something, downloaded what you thought was virus protection, and you may have noticed your computer running like crap.

So what do you do?

There's an article in ghacks which mentions "Remove Fake Antivirus," a portable software program for the Windows operating system that has been designed to uninstall 27 different rogue antivirus software programs from the computer system. You can download Remove Fake Antivirus here, and it's free.

I downloaded and ran it, though for me the on-the-workbench test was inconclusive. This is probably because I know the likelihood of me actually downloading and installing some of this scareware is really slim. The dialogue box showed, though, that it was removing each of these antivirus programs. My assumption was that this is the "default" dialog box. After running the program, you will be asked to reboot.

In truth, I'm a little chary of installing a virus-protection program from a non-company website (this is from a blog, how sketchy is that?) but sites like Download Squad (which gave it really lukewarm reviews), Softpedia, TechForums, and CNet (which rated it two-and-a-half stars out of five; not that great, and none of the readers reviewed it) carry links and product descriptions. Plus, I've never found reason to fault the information I get from ghacks.

A caveat: Here's one of the Download Squad reviews:

Well, I ran it, and it killed my main windows service and forced a restart. When the PC came back up, I had no internet connection. Warnings should be posted.

With that in mind, I checked things out when I rebooted. The Windows security service flashed a warning saying I had no virus protection, but I see ClamWin had loaded itself in the system, per normal. A glitch, perhaps? The good news was that my wireless Internet ran just fine. But be careful!

Menawhile, there are several good virus-removal programs out there. Some -- Norton and McAfee -- are the kind you pay for, while others -- AVG, ClamWin, and Avast! -- are free. The for-pay ones are probably a bit better than the free ones, but any of these are good for the computer and your peace of mind. That is, if you update them every so often -- there's always some idiot thinking that if he builds a better virus, the world will beat a path to his door. These viruses seem to be coming down the pike faster and faster. A virus protection program is only as good as its updates, and it's also useless if you don't run it regularly.

For spyware removal programs, only two are worth downloading -- AdAware by Lavasoft, and Spybot Search And Destroy. And neither one is perfect. But, unlike antivirus programs, you can have both installed and running on your computer. I highly recommend you run both, one after the other, as part of your regular security regimen. What spyware program one doesn't catch, the other one probably will.

Gmail account note probably work of fools

I've had Gmail accounts for several years now, and just today I received a most disturbing message:

Dear Account User,

This Email is from Gmail customer care and we are sending it to every Gmail accounts owner for safety. We are having congestion due to the anonymous registration of Gmail accounts so we are shutting down some Gmail accounts and your account was among those to be deleted. We are sending this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below.Your User name, password, date of birth and your country information would be needed to verify your account.

Due to the congestion in all Gmail users and removal of all unused Gmail Accounts. Gmail would be shutting down all unused Accounts, you will have to confirm your E-mail by filling out your Login Information below after clicking the reply button or your account will be suspended within 24 hours for security reasons.

* User name: ............................

* Password: ................................

* Date of Birth: ............................

* Country Or Territory: ....................

Warning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.

Thank you for using Gmail !

The Gmail Team

G MAI L BETA

Anyway, that's the message.

So far as I know, it's all crap.

Just swallow down that bile rising in the throat for a moment, OK?

A couple of things:

Why anyone would want my account name and password is beyond me, unless it's for nefarious purposes.

Check it:

If it was from Gmail, they'd already have all that.

Got it?

I had a partial answer here, which if nothing else confirmed what I'd already figured.

So if you have gmail and received that message, ignore it. Keep in mind, that's what happens when we have idiots on the Internet.

(Posted simultaneously in The Column, Reloaded and The Workbench, Reloaded)

Battery life: The ABC's of YMMV

Wonder why your laptop batteries don't seem to last as advertised?

Here's an article in Newsweek on how battery life is figured, which illustrates exactly what "your mileage may vary" means.

False advertising? You figure it out, but first tell me if there's any other kind.

(For the record, my Aspire One gets about two hours per battery charge.)

It's like carrying a computer in your pocket

In recent days my wireless Internet connection has been extremely troublesome, more down than up. Borderline worthless, in fact. I guess you sometimes get what you pay for.

So I'm using library computers to post blogs and check my email. A pain, yes, especially in taking the time to get to the library, but other than that it's not that big a problem.

I'm not a fan of the software set you find on most public computers. I seldom use word processors when I write, and I'd rather take a nitric acid enema than surf with Internet Explorer. Plus, I don't necessarily want the next person on the computer to know where I've been.

No worries. I carry my own software in my pocket. Plug in a USB thumb drive, and it's like I'm using my own computer without lugging the hardware around. For sheer portability, this even beats a laptop and it's a lot cheaper.

For the price of a USB stick and a quick download, you can get a suite of software that you can run on just about any Windows-based computer, privately. Browser history, cookies, bookmarks, and preferences stay on the thumb drive. Called Portable Apps, the programs fit nicely on one of the older 256-megabyte drives. Default programs in the smaller version include Firefox, Abiword, ClamWin, and a couple of games.

While I've added a couple of other programs to my Portable Apps suite, just having Firefox makes it a worthy download. I have several must-have extensions to Firefox, including ScribeFire, my blogging workhorse. All of this is set to my specifications, saving me a lot of hassle when I'm working in one-hour sessions with different computers.

So when I'm using a public unit, I plug in two thumb drives: A 256-meg oldie that has my Portable Apps, and a 1-gig drive which carries my files. And even that step is probably unnecessary; I can just as easily use one thumb drive for everything. But no matter; I'm still carrying my own computer in my pocket.

Here's an unexpected bonus when running Portable Apps: Many public computers are set so you can't download. Which makes sense; a real good way to trash a computer system is to allow random people to download whatever they want. What with all the viruses and malware around, that's the quickest way to spread the love.

But using the portable Firefox, I've been able to download all sorts of goodies, up to entire operating systems, on public computers.

I haven't tested this part out, but theoretically you can surf sites that are blocked, such as your myspace page, from a work computer while using an outside browser. My supervisor's work computer allows you to only surf the company web site, and I suggested (we obviously get along very well on the job) that she can surf whatever she wants using the portable browser. However, she's afraid to try, and I'm not going to attempt it on her computer, so this idea remains theoretical in my book. Maybe one of my readers is willing to try it for me, and I'd welcome any input.

If this theory proves correct, Portable Apps may well be a screw-off's best friend on the job.

AbiWord is the word processor that comes with Portable Apps, and on those rare occasions I use such a program (give me a plain-vanilla text editor any time), AbiWord is what I'll run. It's a lot lighter than Microsoft Word, has many of the same functions, plays well with .doc files, and is free and open-source.

ClamWin is a virus protection program, and in truth I've never experimented with that. But I can see the usefulness here. You'll find a couple of other Mozilla-based programs, too: Sunbird, a calendar. Thunderbird, a mail reader. And a Sudoku game, if you have a little time to burn off or are totally addicted to that !!#$&!! game.

The folks at Portable Apps have been developing several other programs that you can plug in to your suite, and I snagged a few of them. There's Audacity, a sound editor that I've used for recording my band's music, and Notepad+, a text editor. And a whole bunch of others, allowing you to carry a whole set of software on your key chain.

Unless you can get a whole operating system on a USB drive (which is doable, and this is something I may write about in a future entry), you can't get much more portable than that.

 

Google promises privacy fixes in Chrome

Google is taking steps to mask the identities of those who use the new Chrome browser, the Washington Post reported.

According to Jane Horvath of Google, the company -- which dominates the Internet search world (when people do a Web search they're more likely to say they're "googling" it, making the company name into a verb) -- will anonymize IP addresses and cookies in the interest of privacy.

The privacy issue has been a major one on the Internet, and intensified as Google released the browser last week.

"My main concern is the ability to collect users' Web addresses, and
therefore your complete surfing on the Web could be tracked," Germany's
data protection commissioner, Peter Schaar, said of Chrome. "The Web
is, in fact, a second life. A virtual mirror of one's real life, with
information about one's interests, activities, perhaps sexual
orientation."


All of which is true. If you want to stay totally private, forget the Internet. The question, though, is whether the browser will make that much difference.

=========

Meanwhile, columnist Gary Cutlack of Tech Digest suggested there's little difference between Google Chrome and the Firefox browser -- some of the Chrome features that turned his head were already in Firefox, except he had to hunt for them.

"All Google's effort has done is left me appreciating Firefox even
more, and extra-extra confused about why Google has gone to so much
effort to put out a product so incredibly similar to its rivals," he wrote. "So
thanks very much, Google. You've made me bring my browsing habits bang
up to date. I'll remember to click on a few of your adverts some time
as a thank you."

OK. Bottom line here. Am I going to try Chrome when the Linux version comes out? Of course. If for no other reason than to satisfy my own curiosity, I must give it a shot.

Am I going to like Chrome? Hard to tell, though probably not. For me, the selling point will be its speed. Firefox occasionally blows up real big in memory, especially when I have a lot of browser tabs open. That, and whether the privacy issues and license agreement are ironed out.

License agreement for Chrome has ugly aspects

With all the publicity of Google's new Chrome browser, there are a few issues that are turning up.

There seems to be a security vulnerability with it, as outlined in Infoworld. It can be serious especially if you're not all that computer savvy.

"... serious vulnerability could result in Chrome users downloading malicious code. The problem is due, in part, to the fact that Google uses an older version of WebKit, the open-source browser technology also used in Apple's Safari browser, that includes the vulnerability."

OK. Chrome is in beta, meaning it's still being fixed. Allegedly.

But there's something even more serious. The End User License Agreement (EULA), which is all that fine print you usually ignore when you download something, has some really ugly problems.

An example is with the rights to anything you pass through that browser: "By submitting, posting or displaying the content you give Google a
perpetual, irrevocable, worldwide, royalty-free, and non-exclusive
license to reproduce, adapt, modify, translate, publish, publicly
perform, publicly display and distribute any content which you submit,
post or display on or through, the services."

Also, Google has the right to update Chrome automatically, whether you want it done or not. Shades of America Online, and more recently Windows.

From the EULA: "You agree to receive such updates (and permit Google to deliver these to you) as part of your use of the services."

Ugh.

If this EULA is a problem with you, then you just may want to stick with Firefox. Or Opera. Or Konqueror. Or Lynx. Maybe even (I must be kidding here) Internet Explorer.

I'll still check it out when it's available in Linux, but the EULA makes me nervous.

(My sources here: Slashdot and CNet.

(There probably will be more to come on this matter.)

Poll: Is "About You" freaky, or what?

OK. I did kind of put the issue of Internet security in your face here. It's a little hard to miss, those "About You" graphics at the top of this blog.

What do you think? Did they freak you out, or what? Why or why not?

Let me know by answering the poll on this site. Hey, I might even make a blog entry out of that.

OK. I'll start it off ...

These tools better than a tinfoil beanie

(Disclaimer: I just love these mailbag requests. It indicates
someone's reading, paying attention, and maybe doing something. Or
making suggestions. This one came from Kelly Sonora, who has a tech
blog, "All Things Internet/Web World Wide." The article she sent me was
interesting -- especially 'cause I'm interested in Internet security
and I like free stuff. I ran this a few days ago in The Column, Reloaded, but it really belongs here -- but you really won't see a lot of cross-posting.)

In the past I'd written about how public the Internet really is. In cop-show parlance, every time you surf, your business is hung out on the street.

This is indeed true. To illustrate, check out the box called "About You." (For those who are reading this in RSS-land, hop over to the blog site, read it, and flip out.) You'll probably see your approximate location,your IP address, and your operating system and browser staring right at you.

Us oldsters remember when things were a lot more private. Plus, the world has
changed since 9/11, Homeland Security, and all these other events that changed our world. Civil liberties just ain't what they used to be. Even if you're a normal Joe, not any more paranoia than the next fella, one quick dip through the news may make you think a tinfoil beanie is a pretty good idea.

Paranoia or not, it's just good sense to surf defensively when you go on line. A lot of valuable information -- such as credit card and bank account numbers floats around in cyberspace all the time. Weirdos lurk all over the place, and that nice fella on myspace could well be a 55-year-old Michael Moore lookalike, sitting buck naked at his terminal (for the visually minded, "buck naked" means he's not wearing any socks, either). People work overtime to put together worms, viruses, Trojan horses, and spyware to either cripple your computer,
mine it for information, or just scare the spit out of you. Every time you surf, you leave little bits of code on the hard drive telling exactly where you've been, and those pieces of code are as good as a fingerprint.

But you get the point. It's a jungle out there. But there are tools to hide you, to cover your tracks, and to protect your information. And if you're feeling paranoid without reason, there are tools and sites guaranteed to give you something to be paranoid about. Whether you're normal (whatever that is) or a screaming nut job, there's probably a tool for you, too.

Here are some of my favorites from "50 Free Internet Tools for Tin-Foil Hat Wearers", written by Alisa Miller:

Portable Firefox: I love this one. I used it quite a bit when reduced to library
computers, which ordinarily means being stuck with the porous Internet Explorer. Portable Firefox comes with a suite of open-source applications which I use a lot anyway -- the AbiWord word processor, Audacity sound editor, and a handful of others. I carry them on a thumb drive with some of the documents I'm working on, which basically gives me a computer in my pocket. And I leave no trace on the host computer. My bookmarks and cookies -- those little bits of code that can tell you where I've been -- also stay on the thumb drive. And surprisingly, I've been able to download stuff using a library computer. Good luck doing that with the as-is system. I highly recommend this one.

Bugmenot.com: Of course I resent the idea of having to register (and get on a mailing list) just to read a few news articles, so of course I swear by this one. I use it via a Firefox extension, and I can't think of the last time I've registered for anything.

GrandCentral: It's by Google, and supposedly it consolidates all of your phone numbers into one that's untraceable. Sounds intriguing, but it is by Google, so take that any way you want.

Clusty and Scroogle: Search engines. Clusty is supposedly highly secure. To my experience it's also slow. Scroogle is a front-end for Google, which uses encryption and a few other things that supposedly mask your existence while you use Google.

ShieldsUp! and Junkbusters: Both will let you know how secure your computer really is. The more information your computer puts out, the more vulnerable you are to attacks and attempts by nefarious types to sip into your information.
ShieldsUp! tells me my computer is practically invisible.

AVG Anti-Virus: It's virus protection. They update regularly -- more often when some real baddie comes down the pike. And it's free. That was my guardian
during my Windows days (viruses are not an issue with Linux). The on-the-fly virus protection is, last I looked, somewhat lacking, but the program picks 'em off the hard drive with ease. Virus protection is big business, and it's a cash cow for some large software companies that play on people's fears, so if a free one does the job for you, go for it. I understand they've added spyware protection since I last used it; a good thing.

Avast! Another free virus protection program. I tried it years ago, and found
it to be slow but thorough. For ease of operation -- based on my tests then -- I'd give the nod to AVG. But unlike spyware programs, you can only run one virus checker at a time.

Ad-Aware: By Lavasoft. One of only about two spyware-sniffing programs that is
worth anything. The other one, which is not mentioned in the article, is Spybot Search & Destroy. And unlike virus scanners, you can have several spyware checkers on your system. In fact it's recommended, because each of these two will occasionally miss something. Whatever you do, DON'T order spyware protection from any Internet source that hawks its product through a pop-up box on your browser. Not only will those not work, they're probably not free and they're usually spyware themselves. I told you it's a jungle out there.

SiteAdvisor: Haven't used this, but heard good things about it. Supposedly lets you know that you're going to a site that is loaded with spyware or harvests your information. Worth a look.

This isn't on the list, but if you really want to play it stealthy, you can try one of the small Linux systems loaded via QEMU, an emulator. I have one (with the ultra-small Puppy Linux) on a USB thumb drive. Plug it in to a USB port, click on the icon, and you're running Linux on top of Windows. it's so secret even the host computer doesn't know what you're doing. There are some real drawbacks -- it's extremely slow, and you really need to be fluent in Linux to use it well. And it can't print or play music, but I can surf on a library computer and leave absolutely no traces.

===============

Anyway, that's my own list. Some things worth checking out there.

In fact, I recommend the whole blog. It's full of good security information.