What browser do you use ? Firefox will display the address if you hover over the link, and there is an addon called FlagFox that displaying the flag for the country hosting the website, if the flag suddenly changes to one from a dodgy part of the world you may be in the wrong place - again, hovering over the flag will give you the IP address.

 

It also has other tools included that allow you to check out the website stats and reputation.

 

If they are sites you visit often, store them as bookmarks and dont follow links sent in emails, search for the website using Google.

Internet Explorer.?

I think I may have an issue. Being very careful what I click on at the moment.

I tried using the Eset scan yesterday, but only got a blank Eset pop up. I have unticked activex filtering? but nothing happened and no request for admin login.

As said 64bit, but the faq section said it should still work.

The only other thing I could see was something about a killbit.

 

I tried logging on to outlook mail this morning and just got a blank page.

Restarted my computer and got logged in, but the certificate alert came on immediately.

                                   Certificate Issued to - a248.e.akamai.net

                                                   Issued by - Verizon Akamai Sureserver CA G14 SHA2

And valid from 27/08/15 to 27/08/16. The issue is as in the Original post. Does this make sense and tell any tales?

Your AV program doesnt like certs issued by the same company as the website - akamai cert issued by akamia sureserver.

 

Try downloading and installing Firefox, it may be IE has been damaged by a failed update, then use Firefox to access the ESET scan.

 

if that doesnt work, it might be worth visiting bleepingcomputer.com, and asking for help; they will talk you through downloading and using other malware scanners, and then go through the results to look for anything suspicious.

Your AV program doesnt like certs issued by the same company as the website - akamai cert issued by akamia sureserver.

 

Try downloading and installing Firefox, it may be IE has been damaged by a failed update, then use Firefox to access the ESET scan.

 

if that doesnt work, it might be worth visiting bleepingcomputer.com, and asking for help; they will talk you through downloading and using other malware scanners, and then go through the results to look for anything suspicious.

 

Yes it needs Internet connection the whole timetime.

Make sure your computer isn't set to automatically sleep after a certain period otherwise you'll need to restart the test.

Your machine should also not be used whilst being tested, so best starting tonight and should be finished in the morning.

I have access to Eset now. Via eset.co.uk/Antivirus-Utilities/Online-Scanner.

 

What should I check / uncheck? P u apps and in the advanced settings please. Anything else I need to know before commencing?

This is only step 1 of 4 and I do not know what is next, either. A heads up would be great

I can manage without my computer for a while and want to get on with the scan asap.

Should I disable M s essentials???

 

Cheers guys.

Edited 26 October, 201510 yr by Tilt

Also, if I send an email with a pdf file (work invoice to largish agency) how would the virus??? (if any) travel.

What I'm asking is what would be the risk to the recipient, Opening the email itself, or just the attached pdf file (as I say, if my computer is infected).

I guess they would scan it automatically anyway ???, but good for me to understand.

 

I have not had an issue with security / viruses before until I turned off Automatic Updates.

MSE possibly gets updated through the same update system, so turning it off MAY be stopping it from updating. (I dont know - never used it).

 

.pdf files can be infected, that is why most pdf readers now offer a "Safe Mode" where active elements are disabled, so yes there is a risk, however if they have up to date AV and have safe mode enabled on their pdf reader, they should be alerted if the file is infected.

 

I havent used the ESET online scanner myself, is there someone on here who has used it and can advice on settings?? Does it have a default scan option??

 

Have you installed Malwarebytes and Spybot S&D ?? These are my first port of call if I suspect an infection, both offer advanced controls, but have good default scanning options.

 

If MSE is causing issues, try Avast!! It does push paid for updates a lot, but the free scanner is pretty good.

You just run eset and tick quarantine files option. Let it does its thing and note the name of anything found as you'll need that to fix any infections.

MSE needs windows update enabled otherwise it won't update itself.

I used to take the time out to make sure I had the latest "best" security software spybot ect, but I haven't bothered for a while now. All I do is install browser plugins like ad blocker plus, no script and WOT.

 

Touch wood I don't get viruses never had sensitive info stolen and generally just use a bit of common sense. That's not to say that I won't get anything but the same stands for people the latest and greatest.

I used to take the time out to make sure I had the latest "best" security software spybot ect, but I haven't bothered for a while now. All I do is install browser plugins like ad blocker plus, no script and WOT.

 

Touch wood I don't get viruses never had sensitive info stolen and generally just use a bit of common sense. That's not to say that I won't get anything but the same stands for people the latest and greatest.

 

Being careful and using common sense might stop you getting infected for a while, but sadly nothing will stop malware getting on at some point - unless you never connect to the internet and never insert a CD, DVD or USB drive. I keep hearing people witter on that they are safe because they never visit a dodgy website, that is complete rubbish, ANY website can be hacked and made to pass on malware; Apple got pwned a few months ago, the BBC have had poisoned ads on the overseas version of BBC News, my local council website was hacked and they didnt notice for SIX MONTHS - until Private Eye noted the issue and a reader notified them.

 

And of course I wouldnt go neat Talk Talk, if they arent encrypting sensitive data, what else arent they doing security-wise??

 

You do the best you can with what you can afford - and keep secure off-line back-ups of all important data and files., including a hidden, off-site copy (or 2, or 3), in case you ever get accused of something, and the rozzers take everything (keeping it for a year and returning it trashed - if at all) (Been there)

What you are saying is of course right but to be honest I can't be bothered with the cat and mouse game everyone who uses a computer runs the risk (protected or not) I just choose not to waste time worrying about it.

Have you installed Malwarebytes and Spybot S&D ?? These are my first port of call if I suspect an infection, both offer advanced controls, but have good default scanning options.

 

If MSE is causing issues, try Avast!! It does push paid for updates a lot, but the free scanner is pretty good.

Hi Ian

 

I use Malwarebytes (free version / guess you are talking the paid version with advanced controls) (is it any good IYO) and run a scan every now and again. (my laptop is usually switched off when finished with).

 

I will look into Spybot S&D. Not heard of it though. I used to use Avast, but was recommended MSE by the same person that recommended  Avast. I had a few issues with Avast, but none with MSE so far, but this computer is better set up than my last one.

 

Nat West offers me Rappaport, but as I have had no previous issues with security, I am worried that Rappaport may interfere with MSE, or vice versa.

 

Please see Eset scan info in next post.

 

Cheers.

Edited 27 October, 201510 yr by Tilt

Ok, Firstly, Thanks to Gadgetman for the link, and excuse my insecurities. I'm sure you understand.

 

Eset scan settings I used (ie ticked) - Scan archives

                                                            Scan for potentially unsafe applications

                                                            Enable anti stealth.

Also enabled detection of potentially unwanted applications.

 

It offered 'use custom proxy settings'. I did not understand what came up when clicked and I assumed I did not need this.

 

Scanned files - 250482                 1hr 58minutes scan time. (used neighbours Sky Broadband, with permission of course  )

It took a similar time as my MSE full scan takes.

 

:peek: 1 item infected.  . Win32/MyPCBackup. A potentially unwanted application. IN C:\users\tilt\AppData\Local\Microsoft\Windows.......

 

Hopefully  . (I think).

 

Question - Anything to concern about and if so?????, what is best action / recommendations.

 

Thanks Guys.

 

ps I did not see a 'quarantine files option' though.

Edited 27 October, 201510 yr by Tilt

The quarantine option was on the page with the start scan button.

As all your precious software missed it, assume your machine is compromised.

You'll need to Google removal instructions to clean your machine

Different programs have different ideas of what a PUP is, I actually HAVE a PUP that I consider a useful program, but MWB used to flag it until I set it to ignore the program.

 

I dont know mypcbackup, but a few minutes searching the interwebs for it should tell you if it has a bad reputation, and why.

 

(Quick search, only ESET detects this has a problem, 47 other AV programs say it is clean)  https://www.virustotal.com/en/file/444c1f79c542557eba48ed2dd67f96df272c88a6309de5db33e516499fc58fae/analysis/1388230040/

http://www.getcloudstorage.net/mypcbackup-review/

 

The questions with all these types of programs (PUPs, foistware) are

 

1 - Did you install it?

2 - Do you want it?

 

If you didn't want it then and don't want it now remove it.

 

I also run Firefox with adblockers and script block and I've not seen a virus or malware for years. But I also run an AV (McAfee because it was free from my ISP) and I very rarely download and install anything without checking it our thoroughly.

 

I also check certificates on shopping sites and use strong passwords. I've only recently taken my own advice and started using a password manager. So now most of my accounts have really nasty long passwords and I have no idea what they are. I only know one nasty password for the manager.

 

 

TalkTalk aren't the only company not encrypting data. Most of them don't encrypt data at rest. They only encrypt in transit. That nice padlock you see on your screen only shows that your connection to and from the shop is secure, either side of that connection there may be no encryption.

Companies get most indignant when you ask them to encrypt at rest because it costs them money (processing overheads and harder to administer).

But that's a whole other subject.

Edited 28 October, 201510 yr by Aspman

Different programs have different ideas of what a PUP is, I actually HAVE a PUP that I consider a useful program, but MWB used to flag it until I set it to ignore the program.

 

I dont know mypcbackup, but a few minutes searching the interwebs for it should tell you if it has a bad reputation, and why.

 

(Quick search, only ESET detects this has a problem, 47 other AV programs say it is clean)  https://www.virustotal.com/en/file/444c1f79c542557eba48ed2dd67f96df272c88a6309de5db33e516499fc58fae/analysis/1388230040/

Is a PUP (potentially unwanted program) the same as a Potentially unwanted application??? (As was detected).

This is how pc illiterate I am. I do not know.

 

Is it not what backs up my computer??? This is what my ignorance would have assumed.

The quarantine option was on the page with the start scan button.

As all your precious software missed it, assume your machine is compromised.

You'll need to Google removal instructions to clean your machine

There was a remove threats option, which I un ticked, as I am not sure how much this would cost? and if it would then do it automatically?.

 

Not sure what you mean by 'all my precious software'?.

 

I will google as you advise. and see what I can find.

 

Cheers.

http://www.getcloudstorage.net/mypcbackup-review/

 

The questions with all these types of programs (PUPs, foistware) are

 

1 - Did you install it?

2 - Do you want it?

 

If you didn't want it then and don't want it now remove it.

 

I also run Firefox with adblockers and script block and I've not seen a virus or malware for years. But I also run an AV (McAfee because it was free from my ISP) and I very rarely download and install anything without checking it our thoroughly.

 

I also check certificates on shopping sites and use strong passwords. I've only recently taken my own advice and started using a password manager. So now most of my accounts have really nasty long passwords and I have no idea what they are. I only know one nasty password for the manager.

 

 

TalkTalk aren't the only company not encrypting data. Most of them don't encrypt data at rest. They only encrypt in transit. That nice padlock you see on your screen only shows that your connection to and from the shop is secure, either side of that connection there may be no encryption.

Companies get most indignant when you ask them to encrypt at rest because it costs them money (processing overheads and harder to administer).

But that's a whole other subject.

I do not think I installed it intentionally, at least.

Honestly unsure if I want (or need) it ??? see #41.

Could it have been provided with the laptop package? ie from purchase when new.

Or possibly with Adobe Reader x1 ???

I do have good passwords now, but most of the rest of what you mention is too technical for me to fully understand.

 

I will check your link when I get a moment.

 

Cheers.

Edited 28 October, 201510 yr by Tilt

It could well have been installed from new. Some companies bundle a load of crapware with their new PCs. Even MS does it with Win10 now.

 

If you've never used it then I would guess you don't need it. The link is an assessment of the program.

It seems to be a bit ****ty in that it doesn't like to leave when you have it.

The service it sells also isn't free so again if you're not paying it seems unlikely you intentionally installed this.

 

If you want an online backup service better to investigate and buy one you choose for yourself. Or get a cheap USB drive and backup to that. It all depends how paranoid you are.

 

Password managers are a great idea. Nice wee article and video from Sophos - https://nakedsecurity.sophos.com/2014/12/16/5-minute-fix-how-to-use-a-password-manager/

 

Password manager are good but they do have all your eggs in one basket to you need to backup the manager to something like Dropbox or Onedrive. The backup can go there because it's encrypted before it's uploaded.

Hi Aspman. I do not want an online backup service, if this is what it is?

 

It has never asked me for any monies though, NO POP UPS or anything. ????????

 

My pc backs itself up, I think. Symbol at bottom right saying backup in progress in the action centre.

 

At the moment I am looking at 'how to remove mypcbackup on Malware Tips site. It says virus removal guide.

 

I cannot see anything in my control panel, and no desktop icon either.

 

Cheers

Edited 28 October, 201510 yr by Tilt

It's not really a virus just unwanted software.

 

Have a look at this - https://support.norton.com/sp/en/uk/home/current/solutions/v102308804_EndUserProfile_en_us

 

I know Norton aren't the most well regarded company but at least they're straight.

 

You do have to be careful download removal tools since some of them are dodgy themselves.

 

Sounds like your PC is doing a local backup to a restore point. that's lets you fix it if windows goes wonky. A proper backup helps you out even if your house goes on fire since the files are elsewhere.

 

again depends how paranoid you are.

?????? Is it possible it was installed alongside Malwarebytes (and I missed the untick) as this latest one was a version update rather than just a definitions update.

This was performed on the 19/10/15.

 

The only other recent programs (which I think, *must have been updates as I have not knowingly downloaded any programs) are

           Adobe flash player active x 18/10/15

           Adobe reader x1 14/10/15 - I do use this.

           Google toolbar for internet explorer. 25/09/15 - I do not use this so* (I use bing)

The only other stuff within this year are from Tomtom - I have updated my map, Microsoft, and HP / Hewlett-Packard / Hewlett-Packard company.

 

Please advise, especially re the malwarebytes bit.

Am I right in thinking to remove and reinstall this (checking what is included this time, obviously. But why would I have no Pop ups from mypcbackup?????

Edited 28 October, 201510 yr by Tilt

It's not really a virus just unwanted software.*

 

Sounds like your PC is doing a local backup (Yes, now you mention it) to a restore point.

*So no threat to my personal data, Logging into Banking, using Paypal etc ?????????

 

Cheers.

Doesn't appear to be particularly nasty, just irritating.

 

It might well have been an add on with another bit of software but no way to tell really what it piggy backed on with.

 

I'd probably put Avast on and let that run if you've no other antivirus. If that and Malwarebytes aren't picking up anything then you're probably clean.

 

If you want to be double sure start changing all your passwords (good time to start using a password manager no?).

 

Nothing is ever 100% safe in IT or the internet. So I'd never state categorically that you're totally clean.

Edited 28 October, 201510 yr by Aspman

I'd probably put Avast on and let that run if you've no other antivirus. If that and Malwarebytes aren't picking up anything then you're probably clean.

 

I use Microsoft security essentials.

 

Do you mean other than Mse ????

 

Neither Mse or Malwarebytes are picking this item up.