FAKE ANTIVIRUS OUTRAGE!

For over a year we’ve been aware of an emerging security threat that targets (primarily) home PCs. But we’ve seen this security problem jump to corporate PCs as well. This threat is a serious problem as we’ve seen it show up in the field many times.

This threat shows up in the form of ‘Fake’ antivirus software – it’s usually inadvertently downloaded by someone casually browsing the web with Microsoft Internet Explorer – and alerts the user that “Your computer is infected” or “Your computer is not protected with antivirus software.” The graphics are very realistic and are designed to look like legitimate security software. The “software” (it’s actually spyware) can be called ‘Antivirus 2008,’ ‘Antivirus 2010,’ or ‘Antivirus Pro’ or some variant of those names.

(Click the pictures to see a detailed view of some actual examples of what this threat can look like.)

Recently, we’ve seen the software become more convincing, and harder to remove. One variant of it literally locks up your operating system -  holding it ransom (claiming that the entire OS is infected with viruses or spyware) until you pay to upgrade to a “Premium” version of the software. This “Premium” version “removes” these non-existant viruses.

“Fake Antivirus” software is somewhat difficult to remove, but it can be done — though it’s far easier to prevent it. While we’re finding that many popular antivirus packages won’t block it (because it uses many tricks to get around them) you can do a few things to keep it at bay:

  • Know what your Antivirus software looks like! It may look similar to — but not exactly like — the fake stuff.
  • Be very cautious of any pop-up message coming in while you’re browsing the web, even if it claims your computer has been infected by a virus.
    Close your browser and manually scan your computer with your legitimate antivirus software if you are concerned about this.
  • Don’t use Microsoft Internet Explorer to browse the web.
    There are some websites which require Internet Explorer, however 99% of all websites these days will render fine in Mozilla Firefox.
    Firefox is a free browser that is structurally very different from Internet Explorer and is thus more resistant to these types of tricks.

If your computer is behaving very strangely or trying to scare you into thinking it’s loaded with viruses, CALL US ASAP — we know how to get rid of “Fake Antivirus” safely.

Our service plans at BDPNetworks employ a multi-pronged approach to computer & network security. While there’s no such thing as perfect security our tools & methods can prevent your corporate data & employee productivity from being compromised by security threats such as “Fake Antivirus” spyware.

Do you have questions or comments on  this article?  Or do you just want to vent your frustrations about this problem?  Please leave feedback below.

-Brian

AT&T 3G MicroCell – “our network sucks; can we use yours instead?”

AT&T in conjunction with Cisco has just announced the “MicroCell” – a miniature cell phone tower for your home or office.  If you suffer from poor reception (and what AT&T customer hasn’t had problems with service?) you can stick this on your Internet connection and use it instead of AT&Ts service for your phone calls.  Your cell phones will see it just like a regular AT&T cell tower.

Here’s my fundamental problem with this: it is well known that AT&T has had major problems with their network over the past few years, especially with the proliferation of Apple’s iPhone.  It appears that they’re saying, “Look, we know you have trouble with our network, so why not use your Internet connection instead?”  Then they have the audacity to charge you an additional $20/mo for the privilege of not using their network to make your calls. They’re saving tons of bandwidth by piggybacking on your other connection.

AT&T has been very quick to blame iPhones over the past year for their poor service, but I tend to think it’s a very simple case of AT&T not putting enough money in their infrastructure.  In the absence of any real regulation, companies like AT&T are going to spend as little as possible to extract as much money out of their customers as possible.  Most customers will gripe and complain about it but won’t be moved to act on it. So the cycle continues.

We’ve used AT&T for years at BDPNetworks (and I have an iPhone myself) – but at this point I would jump at the chance to switch to Verizon, and our new employees will likely end up with Verizon phones as well.

-Brian

75 percent of enterprises have been hit by multi-million dollar cyber attacks

Here’s an item about a new study which shows that seventy-five percent of all businesses suffered losses due to cyber attacks last year, resulting in an average loss of $2 million per incident!

http://www.daniweb.com/news/story262199.html#

It may not immediately sound like this applies to small business, but small businesses are often far less protected from these threats unless they work with a Managed Service Provider (like BDPNetworks!) who can institute a comprehensive IT security program.  Internal IT staff, independent consultants and traditional “break/fix” IT service companies are simply ill-equipped to handle current and emerging security threats for companies of any size.  A structured management program which includes regular updates, maintenance, agressive security management and training is the only good solution.

Has your company been hit by a cyber attack?  Tell us about it below!

article: “Chuck Norris” infects routers

Here’s an interesting article about a new type of malware that infects poorly-configured or unpatched consumer-grade DSL modems, routers and firewalls.  This one’s called ‘Chuck Norris” and is an interesting example of a “botnet” which spreads through network equipment, not PCs.  This is yet another example of how regular maintenance, security management & patching is essential to keep the “bad guys” out – even at home:

http://www.pcworld.idg.com.au/article/33693

article: Using Outlook from Orbit

This is a great article that explains exactly how astronauts at the International Space Station use E-mail.  Although they use Microsoft Outlook 2003 to read their e-mail, It’s a lot trickier than you might think!

http://news.office-watch.com/t/n.aspx?articleid=1329&zoneid=12

March 2010 Operational Updates and Support Recap

I want to bring you up to date on a few things happening over on this end, then recap the best ways to reach us when you need IT support.

OPERATIONAL UPDATES


NEW TEAM MEMBERS

We’ve added two new members to the BDPNetworks Support Team: Ken LaForce and Nathan Finch.  Both bring unique experience and talents to the team and are extremely pleasant to work with.  Say “Hi!” the next time you see them around your office!

NEW SERVICE MANAGER

Christopher Shaw has accepted the position of Service Manager.  This means he is now directly responsible for allocating resources to handle support requests.  He meets regularly with the support team to ensure issues are being resolved quickly and correctly.  If you have questions or comments about our service, please contact him at cshaw@bdpnetworks.com.

INVOICING DELAYS

We have had some delays in invoicing over the past few months.  You should start to see activity on this front in the next couple of weeks.

2009: THE YEAR OF VIRTUALIZATION

Our big technology push in 2009 was virtualization: an inexpensive way to extend the ability and life of your server hardware.  This worked out better than expected — every server we installed in 2009 has a virtualization layer on it which will lead to reduced hardware & energy costs over the next several years, even for the smallest organizations.  We’re going to continue developing this strategy in 2010.

2010: THE YEAR OF BUSINESS CONTINUITY

Our big technology push in 2010 is Business Continuity.  Our new Business Continuity and Data Recovery service plans combine the best of on-site data protection with off-site replication.  They eliminate the need for backup tapes and give us the ability to restore a “virtual” copy of a failed server–either on-site or off-site–in under an hour.  We’re pretty excited about this as it goes far beyond rudimentary online backup schemes.  I’ll be discussing this in-depth at a later date, but if you have questions about it in the interim feel free to ask!

HOW TO REQUEST SUPPORT


We work very hard to make it easy to reach us, so here’s a quick recap on how to get help when you need it:

URGENT REQUESTS

If your request is URGENT – such as any issue that severely impacts your ability to do your work or severely impacts the entire organization (such as an e-mail outage) and there are no obvious workarounds,

CALL US at 206-329-6600 and select option 1 during business hours.

We are sometimes all on other calls, so if you don’t get through to a human right away don’t panic.  Our goal is to return your call as soon as humanly possible — usually in well under fifteen minutes.

Please note that your organization may have a policy which requires you to submit all of your IT support requests through an internal designated IT liaison or IT administrator.

ALL OTHER REQUESTS

If your request is NOT urgent we strongly recommend you use our e-mail-based support ticketing system:

Send a message to support@bdpnetworks.com and include a short description of the problem in the Subject line of your e-mail.

You will receive a ticket ID number from our system within about five minutes of your submission.  Hold on to this ticket ID e-mail because you can add information to the case simply by replying to the e-mail.  Our goal by the end of April 2010 is to respond to all e-mail-based support requests within one business hour.

Please note that your organization may have a policy which requires you to submit all of your IT support requests through an internal designated IT liaison or IT administrator.

ASSISTANCE OUTSIDE OF BUSINESS HOURS

If you know you will need assistance outside of our normal business hours (8am-6pm Monday through Friday except holidays), contact us ahead of time through support@bdpnetworks.com and we’ll make sure the on-call engineer knows about your needs.  If you think you might unexpectedly need assistance outside of our normal business hours on a semi-regular basis, contact me directly and I’ll go over some options we have which will extend your service plan with additional off-hours coverage.

CUSTOMER PORTAL

You may not be aware that we offer a web-based customer portal with which you can login and look at the status of all of your open tickets at any time.  If you are not already taking advantage of this incredibly useful FREE service, please e-mail me and I’ll set up your account.

WHAT’S NEXT?


We are happy and thankful that we’ve been extremely busy lately and I hope your team is busy, as well.  I’ve got a lot more to cover over the next few months in these updates – with topics related to security, spyware, and Windows 7 upgrades – so keep your eyes open.  In the interim check out our blog at http://bdpnetworks.com/blog

If you have any questions at all about anything, please don’t hesitate to ask!   My e-mail is bdp@bdpnetworks.com

Thank you for your time,

-Brian (Principal)

That mysterious ‘J’ in Outlook…

Ever wondered why some messages (mainly from me) seem to be signed with the letter ‘J’ every few sentences?  Wonder no more – Microsoft has the answer.  It’s a smiley face which is mistranslated across systems.  I’ve been known to use more than a few smiley faces in my e-mails (it’s a habit I picked up over 20 years ago) so if you’ve seen a whole bunch of Js in my e-mails you’ll know why.

(You probably won’t see the ‘J’ if both your and the recipients systems are recent versions of Micorosft Exchange and Outlook.

Here’s more information on the issue:

http://blogs.msdn.com/oldnewthing/archive/2006/05/23/604741.aspx

Program Notes

We’ve just completed a necessary round of infrastructure work on our monitoring & management systems.

We’ve moved everything to a much faster, more reliable connection which will improve our management capabilities, speed up your access to the customer portal, and even improve the quality of phone calls.

If you have any questions or notice any issues with any services, please don’t hesitate to let one of us know.

Thank you!

-Brian

iPhone 3G [S] = Ready for business?

Unless you’ve been living in a cave you have probably heard by now that Apple will release their newest iPhone – the 3G [S] (S is for Speed!) – on Friday, June 19th, 2009.  With the 3G [S] Apple has whittled down the list of annoyances that has prevented some from jumping on the bandwagon.  Cut & Paste, MMS, full-phone Search, a wide-screen keyboard, a Compass, twice the speed, an autofocus camera, a smudge-resistant screen and better battery life are all certainly impressive advancements.  (The only remaining “annoyances” with the iPhone are the non-user-replaceable battery, the AT&T contract lock-in, and the lack of a physical keyboard.)

But is this enough to push the remaining holdouts over the edge?

I’ve had my Blackberry for several years, and it has been a very good phone.  Combined with Blackberry Enterprise Server it is an extremely reliable phone and “just works.”  But it’s also EXTREMELY BORING.  So I’m going to make a startling statement here (you heard it here first:)

Apple has WON the Smartphone Wars with the iPhone.

Yes, Microsoft will continue to push their Windows Mobile phones towards larger enterprises.  Yes, Google will continue to toy around with their Android platform with T-Mobile.  And yes, of course, Palm will continue to barely hang in there by a thread with their (very impressive) Pre.  But by and large, Apple has an excellent product, has already sold tens of millions of them, and most importantly has the most vibrant and active development community of all smartphone platforms–with over ONE BILLION applications already downloaded from the iTunes ‘App Store.’

BlackBerry will continue to play an important role in enterprises who need secure, reliable access to data from many different internal sources.  But by and large the iPhone is turning into the Kleenex/Jell-O/Band-Aid of mobile phones – I wouldn’t be surprised if the lexicon changes in a few years and we’re talking about “BlackBerry iPhones” and “Palm iPhones.”  “Oh, it’s not an original iPhone?  It’s just some knockoff?”

So what does this mean for business?  Expect widespread adoption of the iPhone by employees who have been holding out.  It won’t be a matter of whether or not you allow iPhones to access corporate data–you’ll be forced into offering iPhone friendly services.  With a license from Microsoft for ActiveSync this shouldn’t be too difficult, though it is not always as foolproof as Blackberry Enterprise Server (but I fully expect Microsoft and Apple to continue ironing out the remaining kinks.)

My first iPhone should show up this weekend at my doorstep – I’ll have a full review in a few weeks on how well it’s integrating with our systems at the office.

By the way, here’s a great review (with pictures!) from Gizmodo:

http://gizmodo.com/5293388/iphone-3gs-review

Swine Flu Preparations & Internet Explorer 8

Greetings – I hope everyone is enjoying the weather!

A couple of quick notes:

Swine Flu imminent
The World Health Organization has just raised their pandemic alert level to 5, meaning widespread Swine Flu is imminent.  The jury is still out on how serious of an illness this is, but there’s a very good chance many people will not be going to work next week.

If you think you might be stuck at home next week, it is important that you try out your remote access methods as soon as possible (like tonight!). Just because you connected to work because you were stranded in the snow in December/January doesn’t mean it still works the exact same way!  If you have questions or problems getting into your corporate network, please let us know.

Internet Explorer 8 – DO NOT INSTALL!
On a completely different frustrating note, Microsoft recently marked Internet Explorer 8 as an “Important” update when visiting their Windows Update or Microsoft Update websites.  Nothing could be further from the truth–while Internet Explorer 8 has some nice new features it specifically breaks a lot of business software.

Worse, it’s extremely difficult to remove Internet Explorer 8 from a machine once it has been installed (the Add/Remove programs route does not work!)  So even though we constantly remind people to keep up to date with their Windows Updates, this is one update we think you should pass on – for now, at least.  Here’s hoping Microsoft and independent software developers come to a consensus on how Internet Explorer 8 is supposed to work with their applications soon so we can enjoy the new browser’s features.

Regardless of what happens next week, we will be available to help with remote access requests.  Please call 206-329-6600 and select option 1 for support, or e-mail support@bdpnetworks.com.

Thanks for your time as always,

-Brian