Отправляет email-рассылки с помощью сервиса Sendsay
  Все выпуски  

<<Скажем вирусам Net!>>: новые отзывы конкурсантов


Антивирусный "хостинг"

Клуб пользователей антивирусных услуг (Saas, Cloud)

добавить на Яндекс
Антивирусы и безопасность (SaaS, Cloud ...)

«Скажем вирусам Net!»: новые отзывы конкурсантов
2013-04-05 16:12

KMM поделился ссылкой

«Скажем вирусам Net!»: новые отзывы конкурсантов

5 апреля 2013 года

Компания «Доктор Веб» совместно с журналом Windows IT Pro продолжает проведение конкурса «Скажем вирусам Net!», по результатам которого системные администраторы могут выиграть ценные призы для себя и своей компании. Для этого конкурсантам нужно испытать сетевую лечащую утилиту Dr.Web CureNet! в действии и до 30 июня 2013 года прислать нам свой отзыв о тестировании.

Системные администраторы присылают отзывы в виде заполненных анкет, выдержки из которых мы продолжаем публиковать в наших новостях.

«Мне очень понравилось то, что с одного ПК можно просканировать всю локальную сеть, как говорится, не сходя с места. Теперь я могу сказать: «Вирусов нет» (или почти нет)», — делится своими впечатлениями Иван Айзатулин.

Высоко оценивая работу утилиты, участник конкурса Виктор Пеньков высказывает такое пожелание: «Хочется, чтобы можно было по кнопке «Сформировать отчет» задавать вид вывода результатов сканирования. Например, выводить не всю информацию, а только об инфицированных станциях, или только о вылеченных, или только о перемещенных в карантин файлах».

Напоминаем, что участники конкурса могут не только поделиться впечатлениями о тестировании лечащей утилиты Dr.Web CureNet!, прислав нам заполненную анкету, но и предоставить собственный тест, специально составленный для образовательного проекта ВебIQметр, за что также получат призы.

Обращаем ваше внимание, что мы ждем от всех зарегистрированных участников оригинальные анкеты и будем рады услышать критику и пожелания по работе утилиты.

Подробнее о конкурсе читайте на промосайте www.drweb.com/curenet/konkurs.

Подробнее об утилите Dr.Web CureNet!



Beware of fake phone calls!
2013-04-05 21:21

KMM поделился ссылкой

Beware of fake phone calls!

“Good day, I’m calling on behalf of Microsoft to inform you that your computer has been infected.” - This is the start of a phone call more and more people receive all over the world. So far so good… 

“We offer you to check your machine and remove any infection present for free, if only you allow us to remotely access to your computer.” - This usually follow after the initial introduction and should alert you that you’re being scammed. 

Unfortunately we have noticed an increase in reports from computer users who have been tricked into allowing a so-called company representative access. The consequences are unpleasant if the victim discovers too late they’re being scammed. While some users only are asked to pay an extra removal fee, others find themselves locked out of Windows or end up with malware being installed instead of it being removed.

The idea of using a telephone call to contact potential victims is not new. The scammers often call in name of a well-known company, for example Microsoft or Google  Some even create “support” sites as shown in this article where a security expert followed the attempted “fixes” after allowing access to a test system.

In the video below you can see a (random) example of such a phone call:

 

As soon as the scammer has a potential victim on the phone, he needs to convince them that:

  • This is a legitimate call from a trustworthy company. While some reports indicate that the caller had poor language skills, others mention native speakers with good communicative abilities which helps convincing the intended victim the call is indeed authentic.
  • Your computer is infected and needs to be cleaned ASAP. Suspicious victims are told that Microsoft (or whatever company is represented) checks all computers and will contact the owner of any infected computer to offer free malware removal assistance. This requires you to install an application that will allow a remote connection to your computer. TeamViewer is often used and once you give the scammer the access codes required to establish a connection, they have all they need to control your computer.
  • It is important you allow access to your computer until the “cleaning process” is finished. Or more accurately: whoever is connected remotely to your computer needs to be able to finish what they started. This can include stealing personal data, installing malware or locking your system. Sometimes you will be told you need to pay an additional fee, but it is also possible your computer is declared “clean”. After which you may discover your Antivirus software has disappeared, the system is running slow, your browsers are redirecting or unknown applications are all of a sudden running.

 

Malware

Not all scammers will actually do anything noteworthy once remotely connected to a system. Some random applications are started, the task manager is brought up a few times, an antivirus scan is started and the system is declared too infected to be cleaned. Of course for an additional fee this can be taken care of.

In other cases however, users have reported Google redirects and rogue infections popping up afterwards. Even Remote Access Trojans (RATs) are known to be installed. The latter present a serious security and privacy risk; an attacker can use your webcam, access your files, change system settings and steal sensitive data. RATs are also used to have some “fun” (for example by randomly opening the CD/DVD tray or displaying/printing “you’ve been hacked” messages).

 

Password protection

To get more leverage on the victim, some scammers first set a Security Account Manager (SAM) password. By doing this they ensure that the owner of the computer can no longer access it unless the scammer gives them the password. Setting a SAM password doesn’t require any additional tools and can be done using the SysKey utility, or SAM Lock Tool.

2

Change password settings using SysKey utility.

3

Security Account Manager password box.

 

 

 

 

 

 

 

 

Getting around such a password is quite complicated, but some scam victims managed to obtain it by explaining the phone scammer that they needed access to the computer in order to make the requested payment.

 

Prevention

Microsoft Safety and Security Center warns against phone scams and has provided some general information and advice here: Avoid tech support phone scams.

We recommend you always to verify the identity of the caller and in case of doubt to disconnect the call. If you have become the victim of a telephone scam and are having problems afterwards or simply want to make sure your system is clean and secure, our experts in the Help, my PC is infected! Emsisoft Forum are always ready and willing to offer free assistance.



В избранное