Firstly, I'm using laptop, mobile connection (My3 MiFi). Microsoft security essentials and Malwarebytes anti malware and my computers own firewall.

I had to turn off auto updates last month (because of windows 10 trying to download, I think), so I install important updates myself every now and again. Probably weekly ish.

The first thing I noticed today was a problem trying to connect to my WiFi. Connected ok after turning MiFi dongle off then on again.

I think the connection is ok now. Just a glitch???

Mainly though, upon connecting to my Outlook Mail (via shortcut, that I have always used), I started deleting a few messages and then noticed some of my older (read) messages were missing from the bottom of the list.

Then a security alert came up saying - The id of this site or the integrity of this connection cannot be verified.

         The security certificate is from a trusted certifying authority.

         The security certificate date is valid

         ! the name on the certificate is invalid or does not match the name of this site.

 

I did not click on any messages other than the dustbin delete symbol, I disconnected my internet and ran a full Mse scan and a malware scan. Nothing shows up, and I do scan most weeks and nearly always before I log into my bank.

I logged in again after the scans and the old messages were there, but after deleting two more messages the same security alert showed up.

 

Question is should I be concerned, are there any other checks I should make, and is there a way of checking my Malwarebytes is genuine as it was recently updated, and how do you check that the page matches the address (or whatever it is).

Should I be considering using a previous back-up?

 

Any sensible advice much appreciated, but please bear in mind I am a kitchen fitter and not an 'it' guy.

Cheers.

Edited 23 October, 201510 yr by Tilt

Probably nothing to worry about.

 

Certificates are tricky things and some browsers can be very (in  agood way) picky about them.

 

i.e. if www.microsoft.co.uk uses a certificate for www.microsoft.com it'll throw up a warning.

 

I'd advise you to leave the updates on if you can.

 

 

Are you using outlook.com or Outlook the program?

 

If you're scanning and not finding anything them again probably nothing to worry about.

 

If in any doubt change your email password. Make it a hard one. Write it down if you have to and stick it in your wallet but don't write your email address next to it. Good idea to miss out one letter or number that you'll remember.

Try a scan with http://www.eset.co.uk/Antivirus-Utilities/Online-Scanner

If a system is ever infected, any anti virus software loaded on it can no longer be trusted.

Did Microsoft security essentials. It's really not very good, but better than nothing. Definitely do not use AVG as that's worse.

As for Windows 10,its easy to disable those messages if you don't want to update yet.

I have turned automatic updates back on now.

Outlook ?, Whichever took over from Hotmail.

Am more concerned about my computer security than email, but I would assume one could infect the other so equally important.

Most passwords are stored on my computer (not my bank or paypal though) with no physical access from other people.

Ebay etc, I always use a shortcut to log in.

I have found Mse pretty good for me, at least whilst auto updating. No issues before with my banking, or paypal and I thought I would never bank online as very cautious by nature.

Only one issue before, years ago, with my email being hacked, and was fairly easily sorted iirc.

Used to use Avast (free) antivirus.

If anything, main concern would be my latest update of (free) Malwarebytes. I think it was a version (is that right?) update, rather than just a database update.

 

Cheers guys.

 

Gadgetman - Funny that AVG is advertised at the top of this post, "recommended by experts" Lol.

Edited 23 October, 201510 yr by Tilt

Despite the above advice, I would turn it off again, over half this months "updates" were Win10 files and/or spyware.

 

Better to get the list of updates and check them out before installing; I usually wait a week to see if anyone flags up a problem before installing.

You won't get win10 files unless you are running win10.

I missed that info - Running genuine windows 7, with option to upgrade to windows 10. Notification Get Windows 10 in bottom right.

3's customer service / tech advisor advised me to turn off automatic updates last month after 3gb of my 5gb monthly allowance was used in the first three days.

I do not use 3gb most months.

They gave me £5 refund, and guessed it was something to do with windows 10 trying to auto install? I was going to ask advice what my Win10 status is now.  would / might it be on my laptop awaiting installation?

I will look into this later as my priority is to check that my machine is clean.

 

Anyone else agree probably nothing to worry about???? What about the link, kindly supplied by Gadgetman?

 

Cheers again.

 

I forgot, I did not turn updates back on yet as it required my Administrator password, and am obviously cautious at the moment.

Edited 24 October, 201510 yr by Tilt

The link I've supplied will do a full scan of your pc and highlight any viruses etc.

It will take 6-12 hours to do, and you really need to be in a Wifi/broadband connection whilst it runs instead of mobile Internet.

Once it's run, it'll tell you what if anything has infected you and you can deal with that.

Until you've done that I wouldn't do any banking etc just in case

You won't get win10 files unless you are running win10.

 

YES YOU WILL.

 

There have been plenty of reports on the Tech sites of Win7 machines updating to Win10 without permission after allowing the auto-update feature, not only that, but the installs disabled dual booting, and on motherboards with UFEI BIOS chips, overwrote the bios to stop non Win10 operating systems from booting.

 

M$ keep saying these are errors and that they have withdrawn the offending update, but this has happened several times over the past few Patch Tuesdays; they also keep re-issuing Win10 files under new KB numbers, so blocking them once isnt enough.

 

If you dont believe me, go look at the list for the last Patch Tuesday and read up on what each non-security patch does, every single one was Win10 related, despite the headline blurb claiming it was to improve system performance or "user experience"

Link because everything I've seen either covers all versions INCLUDING win10 or would only install IF you have windows 10

Just had a quick look at the auto update to Windows 10 and this only seems to be affecting those who manually run Windows update.

It is being automatically ticked to download. If you automatically receive windows/Microsoft updates windows 10 won't automatically update.

The link I've supplied will do a full scan of your pc and highlight any viruses etc.

It will take 6-12 hours to do, and you really need to be in a Wifi/broadband connection whilst it runs instead of mobile Internet.

Once it's run, it'll tell you what if anything has infected you and you can deal with that.

Until you've done that I wouldn't do any banking etc just in case

Thanks Gadgetman.

Is my connection not 'mobile broadband' ??? I get mixed up with all the different terms in use.

 

I assume by what you are saying, that my computer would need to remain connected during the scan in your link. Is this correct?

 

Roughly how many Mb/Gb would this scan use / require?

If you're on a 3 dongle you're on mobile broadband.

I'd assume it'll need several gb to perform, I've never counted as I'm on Sky unlimited Internet

Cheers bud.

I have looked at ESET's FAQ's and it seems reasonably straightforward. Mine is (fairly sure) 64bit, but seems this should work.

 

I would expect large usage too. I will see if I can use my neighbours connection as he has Sky unlimited.

 

My connection and email seem fine now, but realise this may be the case even if infected.

 

Does it need to remain connected for the duration of the scan though, or is it a download, and can be disconnected from the internet before running the scan?

 

Cheers again.

Yes it needs Internet connection the whole timetime.

Make sure your computer isn't set to automatically sleep after a certain period otherwise you'll need to restart the test.

Your machine should also not be used whilst being tested, so best starting tonight and should be finished in the morning.

Try a scan with http://www.eset.co.uk/Antivirus-Utilities/Online-Scanner

If a system is ever infected, any anti virus software loaded on it can no longer be trusted.

Did Microsoft security essentials. It's really not very good, but better than nothing. Definitely do not use AVG as that's worse.

As for Windows 10,its easy to disable those messages if you don't want to update yet.

Just wanted to check this is a free scan. I see it says enjoy ESET's easy to use free scanner, but in the License and service agreement (after clicking the scan now button), it mentions paying a license fee.

Article 4 - Provided that you have agreed to this agreement and you pay the license fee under article 17.......................????

 

Basically, do I just click agree, and click 'start scan', and it will be free so long as I do not sign up for anything else????

 

Excuse my ignorance, and thanks again.

Edited 24 October, 201510 yr by Tilt

You need to pay to have it fix your system. The scan is free

One thing that's come to light about W10 is that auto updates will try and update /look for updates on a regular basis, reducing the BB speed and eating into any BB allowance. Personally, I still use W7 for internet ,so I can look for any updates I need, and only have one OS downloading virus updates.

Also ,be aware that a lot of the suspect intrusions are not so much virus ,but malware. I've found Roguekiller (from Adlice.com) worthwhile. it can throw up a lot of false positives, but IMHO,it lets me decide/investigate if these problems are problems or something to ignore.

For e mail-up to XP, MS used to install Outlook/outlook express ,but on W7 & above hey stopped .I (and possibly all that use W7/10) download Windows Live mail from MS site . I like it that much that I've ditched Outlook/express on XP and have installed live mail on XP,for times when /if I get problems on 7 &10 . Adding an e mail address is simple .

For someone on a limited BB allowance, something like https://security.symantec.com/nss/getnss.aspx?langid=ie&venid=sym might be worthwhile. I can't find the Norton/Symantec thing I was looking for, which tested your PC for suspect areas in security.

Bit sceptical about ESET then at the moment.

 

It's a bit like being offered a free mot for your motor. You know they are going to fail something. They would have to, to make their business profitable.

 

I will look for some reviews tomorrow though and consider the scan.

 

Cheers again.

ESET have a good rep, they offer this free service in the hope you will buy their paid-for service afterwards, same as MalwareBytes, Avast and others offer free and paid for software versions.

ESET have a good rep, they offer this free service in the hope you will buy their paid-for service afterwards, same as MalwareBytes, Avast and others offer free and paid for software versions.

Thanks Ian. This is what I want.

A few more people confirming this as at the moment I am relying on information from someone of whom I do not know. No offence Gadgetman.

 

Are you recommending the scan too, or do you agree with aspman (apart from auto updates) as probably nothing to worry about. Everything seems fine now, although I have not clicked on any messages yet apart from deleting and the security alert has not appeared since.

 

I do scan weekly(ish) as mentioned using Mse and Malwarebytes, but have noticed Malwarebytes goes from circa 4000 objects scanned in startup files, skips through scan registry to circa 60000 objects scanned in scan file system. Is this likely / normal because it's the free version?

 

Are there any other abnormalities on my laptop I should be looking out for? I have only basic knowledge of computing.

Things that bug me are like my power symbol disappearing and the on/off option not being clickable either. It reappears the next day. Normal computer glitch I suppose?????

 

Cheers.

Edited 25 October, 201510 yr by Tilt

I think you are probably fine, but it never hurts to run extra scans.

 

Ré missing emails, have you checked to make sure the system isnt set to automatically delete old emails after "x" number of days? Most email clients do this by default, unless you save the mail to a storage folder.

 

The files MWB scans vary in size, registry entries are very small - only a few bytes in size, so it can scan through thousands of them very quickly, quicker than the screen can update or you can see.

 

The power symbol is probably a simple configuration corruption, sometimes this happens during an update that affects that part of the system; go to the control panel power options and untick "show power when running on batteries", power down the machine for 30 seconds, reboot and retick the option and do the same shut down and restart as before. This usually fixes it if it is a software glitch.

 

HOWEVER, it could be a sign that there is a problem with the voltage sensing circuitry on your motherboard, and it is not correctly detecting when you switch from mains power to battery.

 

As for the security alerts, I wouldnt worry too much, I get this regularly with Gmail; it is usually because your anti-virus program hasnt been correctly updated to show a change in the security certificate, or that the certificate handling is a bit sloppy, as Aspman posted; different companies consider different certificate methods to be good/bad, so things like this happen.

 

if you are still worried, keep a copy of the email setting you use, and check to see if the server name/address has changed when you get an alert. For example the IMAP server settings for Gmail are    imap.googlemail.com   and   smtp.googlemail.com is the address for sending mail.

 

Personally, I dont use Outlook, I think it is a POS and havent used it in more than 10 years, either the mail program or the webmail program formally known as Hotmail..

Thanks all.

Ian, thanks for that last post, as it backs up what I was (shall I say) hoping. All makes sense.

 

I'm not too tech savvy, but possess a lot of common sense and have managed to keep my machine clean for years, with only one time my email being hacked.

A recovery code and a change of password (originally my sister's dog's name which happened to be the name of the dog that found the world cup) and all was sorted.

Key thing I want to do now is check any webpage addresses match (as you are saying, I believe) To check the web pages are genuine before I click anything. Is this a good extra security measure? and if so please enlighten me how to do it. Simplest terms possible please. . 

 

Thanks again.

pets names, friends names, favourite films etc are bad ideas for a password. Things that can easily be requested and mentioned in a conversation without giving it a second thought.

 

Have a look here to create a strong, secure password http://www.howtogeek.com/195430/how-to-create-a-strong-password-and-remember-it/

Haven't used Outlook for yonks, but seem to remember that like Livemail, there's an option to delete received mail on the server when deleted on PC/LAPTOP, another to delete after a certain period of time etc. it's in ADVANCED in Livemail, but possibly in something similar on outlook.