Staying Connected

Tips to Speed Up Your Computer - Maintenance

Computers must be maintained regularly or users will notice a decrease in performance.  Below are some routine tips that can help speed up your computer and increase performance.

1.) Use Disk Cleanup to free up disk space

The hard disk can become bloated with unnecessary files which slow down the computer. Disk Cleanup is a good tool to free up disk space and help increase performance.  Use Disk Cleanup to empty the Recycle Bin, remove temporary Internet files and other unnecessary files.  For average users, Disk Cleanup should be performed once a week.

To launch Disk Cleanup:

Windows XP:  Click Start, point to All Programs, point to Accessories, point to System Tools, and then click Disk Cleanup. 

Windows Vista/Windows 7:  Click Start, click All Programs, click Accessories, click System Tools, and then click Disk Cleanup.

 

2.) Check the hard drive to see if Disk Defrag is needed

Microsoft analyzes over 1 Million PC crashes and crushes some common perceptions

 

With over 1 million crash reports uploaded to Redmond since 2008, Microsoft has recently released an analysis of their findings; and you might be surprised what the statistics show (I know I
was).

Google is Identifying Infections

"Google has begun notifying its users that a particular piece of malware is installed on their computers by showing a big yellow notification above their search results. The warning begun popping up yesterday, and does so only for users whose computers have been infected by a particular strain of malware that hijacks search results in order to drive users towards websites that use pay-per-click schemes." (HelpNet Security, 2011).

 

We noticed this article and thought that it was important enough to share.  Full Article.

One Deadly Brew, Search Engine Optimization Poisoning

 

Malware infected PC's are rapidly becoming the most common support issue for many IT vendors.  Client's PC's that become infected with Malware are all but unusable, not to mention key logging of critical information, becoming an unwilling member of a zombie bot-network or being subjugated to random pornographic advertisements.  Needless to say, people are not happy once their PC’s become infected, nor is the IT cost of malware removal particularly pleasing.  Clients always want to know, how did I get malware?

My answer to them is, “from using the Internet.”  Cybercriminals have utilized search engine optimization poisoning techniques with astounding effectiveness.  On today’s Internet performing a web search using common search sites, such as Google, can yield a significant number of results which direct users to unsafe malware-laden URL links.  A recent study has shown that some 22.4% of Google searches performed since June 2010 produced malicious URLs within the first 100 results (Websense 2010 Threat Report).  Compare this number to just 13.7% during the first half of 2009.

Recent trending shows that searching the Internet for adult material and other more scandalous topics is actually less risky than searching for news items, entertainment and other common subject matter material.  Commonly recognized news sites such as CNN and Fox News are not sources for malicious links, but search results can yield links designed as malware traps to fool people.  This is particularly evident during major events or crisis situations, where web searches for a particular topic are accelerated (World Series, Haiti Earthquake and Brett Favre).

Victims doing the search that end up clicking the bad URL, find themselves at “rogue anti-virus” sites where someone is attempting to sell fake software.  This is where exploits in browser and operating system technology are utilized to bypass security measures and gain a foot hold, infecting the user’s PC.  Websense’s 2010 Threat Report states that the number of web links to malicious content is up 111% in 2010 from 2009.  Malicious sites themselves have seen growth of around 1 million per month in April 2009 to 2 million today and some 80% of legit websites have at one time been compromised in some manner.

It is also worth noting that social-networking sites (Fakebook, Tweeter, etc.) are now the most common carriers for malware and spam.

DROID DOESN'T

 
 

As a Hosted Exchange provider and IT service organization, ConnectWise fields many support calls and questions regarding smartphones.  Modern businesses lean heavily on a mobile workforce that requires on demand access to email, documents and other data; smartphones are quickly becoming the new medium for this access to data and a variety of other mobile communications.  One of the most important and utilized functions of a business oriented Smart Phone is email, and email in today’s business world means Microsoft Exchange. All of the major smartphone players on the market support some form of Microsoft Exchange sync (Windows Mobile, BlackBerry and iPhone), but the new kid on the block may have some hard lessons to learn before it is ready for secure and reliable Enterprise Email usage, welcome Droid.

Since Droid’s release last fall, users have been reporting issues with the smartphone’s Exchange support, most notably; virtually no support for many of Exchange’s enhanced security features.  A couple key security features Droid devices lack are: the ability to perform a remote wipe of the device in the event of loss or theft or the option for user specific PIN codes prior to accessing Exchange email.  The following lists some of the most notable user complaints regarding Exchange ActiveSync on Android devices:

1.    Inconsistent  and untimely syncing to Exchange

2.    Won’t sync to Exchange on Wi-Fi

3.    Default mail app won’t allow users to accept/decline calendar invites

4.    No option to create an email signature

5.    Unable to file/sort email to folders

6.    Inability to change alert settings for the notification bar on the device

7.    Difficulty with the initial setup and settings

8.    Messages in folders do not load

9.    Doesn’t search for contacts on the Exchange Server, only local contacts

* These complaints have not been verified, based on a forum thread on http://forum.androidcentral.com

ConnectWise engineers have found that some of these Exchange compatibility (or lack thereof) problems can be solved using a third-party mail app such as TouchDown by NitroDesk. This can help fill the gap for enterprise users until Google provides a much needed update to the Android’s base mail application.

Looking at the future for Android based phones; many are starting to realize that a variety of smartphone manufactures are quickly flooding the market with differing versions of the Android OS.  This non-standardization shows no clear upgrade path for either the operating system or applications and a wildly inconsistent deployment of core features on devices.  This is a problem desktop Linux has battled for years; becoming merely a starting point for a variety of incompatible devices offering consumers little cohesion between platforms.

In my opinion, corporate users shopping for a smartphone device should consider their short and long term smartphone needs before choosing to embrace this new OS; Android still has a long road to adulthood.

"I don't know how my computer got infected"....we do!

Most end-users are confused when their PC's become infected with Mal-ware/Spy-ware/Virus software, and they were only browsing the web for work and doing nothing out of the ordinary. Unfortunately on today's Internet, being cautious does not always equate to being secure.  There are many areas of the web which contain mal-ware and spam.  Even the common, or well-known sites are being used to distribute malicious software and phishing attacks.

In the second half of 2009 the web saw a 225% increase in malicious websites; more frightening is that 71% of the sites that were found to contain malicious code were legitimate sites which had been compromised.  Hackers are now using Search Engineer Optimization (SEO) to boost the ranking of their mal-ware sites in your search results, making it easier to believe they are legit sites.  Botnets are utilized to inflate search rankings.  As soon as a trend towards the latest hot topic is discovered (i.e. Super Bowl, Tiger Woods, etc.), botnets are instructed to artificially boost the malicious site's ranking for that search topic.

Worse yet, hackers are increasingly injecting malicious code in websites that already appear in the top 100 search results and are often considered safe or trusted by end-users.  Often "bad-links" are being injected via user-submitted content such as news items, posts, and comments. 

Email traffic still consists of mostly Spam (85%), but 81% of that now contains links to malware.  With increased social trending being used against us, how does your average user avoid becoming a victim? Some simple rules still apply:

1. Have a corporate firewall (such as a Sonicwall) that blocks mal-ware/viruses.  Ensure this hardware is configured properly and up to date.

2. Run and maintain local virus protection software (such as Mcafee ASP).  Though at best these products are only ~70% effective, they are a vital layer in protecting your PC.

3. Keep Windows, Office, and Internet Explorer up to date with any patches that are released and approved by your IT provider. This applies to any 3rd party software as well

4. If possible, do not have local administrative rights on your PC.  Use a dedicated admin account for installations as needed.

5. Advanced users may also want to try web browsing with a 3rd party browser such as Google Chrome, Firefox or Opera.  Often Internet Explorer is necessary for web applications, but not for day-to-day browsing.

References: http://www.websense.com/content/State-of-Internet-Security-Q3-Q4-2009.aspx?cmpid=prblog

Apple iPad is Not Actually a Tablet

After all this fanfare about Apple coming out with a Tablet, we now find out that they didn’t.  The iPad is an appropriate name, but to call it a tablet is inaccurate.  What makes a Tablet is not just a touch screen, but the ability to do handwriting recognition.  One should be able to write on the screen with a stylus.  However, the Apple iPad does not have any handwriting recognition.  None, Zip, Zero, Zilch, Nada.  What this means is that the iPad is actually a netbook without the keyboard.  How very disappointing. 

It is true that the iPad does have multi-touch, but that is not the same thing.  Okay, so you can tap on the screen to open files, navigate, and resize pictures.  But the majority of people anticipating the release of the iPad have been looking forward to taking the iPad into a conference room and writing notes on it and saving it as a file.  Students have envisioned taking it to class and keeping all their notes from their classes on one device instead of having different spiral bound notebooks for each different class.  Business owners and Managers have been waiting to open a contract on it, write notes in the margins, save it, then forward it to the other decision makers that need to see it.  Travelers have been anticipating being able to receive a form or agreement that they have been waiting on via email, open it, sign it on the screen, save it, then email it back to the sender.

Now none of this is possible.  There have been a couple rumors that people will develop an app for that.  But seriously?  C’mon Apple.  That’s like making a smartphone that doesn’t make phone calls and telling the user base that someone will make an app for that. 

This is a serious faux pas on Apple’s part.  They could have taken the Tablet market by storm.  Instead they will take the netbook market by a little windy.  A major letdown for many would-be customers.  I personally own a Tablet PC.  It’s the convertible kind (the screen swivels and folds down), and yes…it does handwriting recognition.  However, I had just about convinced myself to get an iPad to replace my Tablet PC which is a few years old.  But now, I’m asking myself, “Why?”  The iPad is cool, it’s new, it’s shiny, but it doesn’t do what a Tablet does.  So it would really be like a netbook without a keyboard, and with a touchscreen.

One group of consumers that will enjoy it are those who have been trying to decide on an e-reader.  The iPad will support e-books, and the one advantage that it has over current e-readers is that it does it in color.  That’s nice.  But at a price tag of $500 to $829, depending on features and storage space, it becomes a pretty expensive e-reader. 

Don’t get me wrong, it has some nice functionality like automatic re-orientation, but not putting in the handwriting recognition is a huge market mistake.  The blogosphere already has many people saying that they will not buy it until they see the handwriting app.

Johnny Depp is Dead. Wait, Maybe Not.

Every once in a while a rash of bad choices will remind us to remind our clients and our readers to be security aware when surfing the web. The most recent example took place this past weekend when someone posted a fake death notice for Johnny Depp stating that the actor had befallen an untimely demise by crashing his car in Bordeaux, France. It was intended as a prank and had no malicious motives.

However, the site that was posting the information was designed in a very realistic CNN theme. This became too much temptation for virtual sewer-dwelling scum, and it wasn’t long before the bad guys had capitalized on the opportunity.

WHAT THEY DID: The aforementioned sewer scum copied the site and page delivering the prank news and they turned it into a video graphic…not an actual video, but a graphic that made it look like a clickable video. When a user clicked the video, they were prompted to install an ActiveX control. Unfortunately though, it wasn’t an ActiveX control, it was a Trojan Horse designed to harvest identity information of the computer’s owner.

So once again, because it can never be said enough, be careful when you are surfing. Do your best to uncover the true identity of the website. Just because it looks like CNN doesn’t mean it is CNN. If the website name is www.CNN.not-really.hackers-for-hire.com, then guess what. And always take a second look before clicking anything.

There is a good primer on how to determine the true identity of a website in a newsletter article we had sent out previously. You can read it here. If you enjoy the article and would like to read more, you can browse all of our newsletter archives. Or you can subscribe to the newsletter.

Surf Safe!

P.S. If you have come across any virus traps out in the wild, tells us about your experience by posting your story in the comments section below.

IBM Files Location-Based Security Patent

On Thursday, 01-21-10, IBM filed for a patent regarding location-based authorization.  The patent claims that access to a device can be limited to certain geographic areas.  In other words, if a company wants an employee to be able to use their laptop at work or at home, then they could, but not anywhere else.

This can also be useful for preventing data loss after the theft of computer equipment.  Keep in mind, this is only a patent filing; it’s not on the market yet, but keep your eyes open.  It is certainly worth watching.  This is the kind of technology that even if IBM beats everyone else to the market, others will follow suit with.

For those who want to read a little more about it, you can find the patent filing at the U.S. Patent Office’s Website here

ConnectWise and USF Welcome Skip Holtz!

ConnectWise has been a long time sponsor of USF and its athletic programs, and now ConnectWise joins the Tampa Bay community in congratulating Skip Holtz for being selected as the new Head Coach of the Bulls’ football team.

Holtz previously coached at East Carolina and accrued 38 wins in 5 seasons. He is excited to be coaching in Tampa, FL.

ConnectWise regularly has a presence at home games and frequently offers a raffle for students in which they have a chance to win a cash prize that is awarded to the student on the football field between quarters. With Skip Holtz and next year’s team, ConnectWise is looking forward to a great new season. Go Bulls!