macOS Ransomware – May Permanently Encrypt Files

Security researcher ESET has found a new mac operating system ransomware. This ransomware is downloadable via bit torrent websites. This software is called "Patcher" and is used to pirate popular software.

These torrents found in wild included a zip file. However, this zip file is not really pirated software. This software is actually ransomware.

Once a "Start" button is clicked your files are then encrypted. A random twenty five character encryption key is generated. Your original files are deleted and replaced with these encrypted ones.

All files under a "Users" and "Volumes" directory are encrypted. A email address and bitcoin address are included in a README file. This file warns a user that all data is encrypted and can be unlocked with a payment.

However, ESET points out that there is no way for these files to get their encryption reversed. ESET recommends that you not pay a ransom fee, if you are a victim of this ransomware.

Malwarebytes 3.0 – Instructions so Free Version Never Expires

MalwareBytes 3.0 was released in December of two thousand sixteen. As a computer repair technician, I thought I would download and install this newer version. I have been using version 2.x.x for years.

This free software is compatible with Windows XP, Vista, 7, 8 and 10. I am going to show you how to deactivate a free fourteen day trial, and activate a free version that never expires. If you already have an older version of MalwareBytes, you might want to remove that version first, which may require a reboot.

Once your computer is rebooted, you can run a program similar to Ccleaner to make sure files and registry entries from older version of MalwareBytes are removed. This is an optional step. First, you want to download MalwareBytes 3.0.

Once download to your computer, you double click this executable. At open file security popup, click on "Run". Click "Continue" in "User Account Control" window.

Click "OK" at select setup language to accept default English language. Click "Next" at "Welcome to Malwarbytes setup wizard". Select "I accept the agreement" and choose "Next".

Click "Next" at an information screen. Click "Next" at select destination folder. Select "Next" at select start menu folder.

You can uncheck "Create a desktop shortcut" box, if you don't want a Malwarebytes desktop shortcut created and click on "Next". Click on "Install". A Malwarebytes install will now proceed.

Click on "Finish" to complete this installation. By default MalwareBytes 3.0 might install a free trial version that expires after fourteen days. In MalwareBytes Dashboard, click on "Settings".

Click on a "My Account" tab and towards bottom right hand side you will see "Deactivate Premium Trial". Once this is selected, your copy of MalwareBytes 3.0 will revert to a free version that does not expire. Another popup in your task bar might open up.

Click on "Stay downgraded I don't need real time protection and then click "OK".

SuperAntiSpyware – Instructions so This Software Does Not Expire

SuperAntiSpyware is my second malware spyware removal tool of choice behind MalwareBytes. Sometimes this software will find items that MalwareBytes does not detect. Today, I am going to show you how to install SuperAntiSpyware so that this free software does not expire.

Towards end of installation of this software there is a prompt asking you to enable a trial version. You don't want to enable a free trial version because this enables a professional trial version that expires. Download a most recent version of SuperAntiSpyware free edition.

Save to your computer and double click this program to begin an installation. Select "Run" at a security warning prompt. Click "Next" on an installation wizard.

Click on "I agree" to agree to a license agreement. You can either select to install this software for "Anyone who uses this computer, all users" or "Only for me, current user". Click "Next" at installation folder unless you need to change this.

SuperAntiSpyware setup will now begin. You can click "Next" at prompt where it asks you to "Check for recent definition database updates" and "Submit a system diagnostic...". You do NOT need to enter an email address where it asks you to, so that important product updates can be emailed to you.

Click "Finished" to exit SuperAntiSpyware installation. A SuperAntiSpyware Professional Trial window will pop up. You want to select "Decline".

If you select start trial, then this will enable a thirty day trial of their professional version that expires. You would then need to remove this software and install again. Also, there is no guarantee that you could remove and reinstall this software so that you can use a free version that does not expire.

By clicking on "Decline" you are now enabling SuperAntiSpyware free edition that does not expire. Finally, you want to update this programs definition database before you run a spyware scan.

Barnes and Noble’s – Nook 7 Shipping With ADUPS Spyware Program

Barnes and Noble have been selling Nook 7 tablet computers with a spyware program. This program is called ADUPS which is actually a third party company. This company gathers data off this tablet computer quietly.

ADUPS was pre-installed on these devices. These Barnes and Noble Nook 7's are not manufactured by Samsung, but actually a third party. Chief Barnes and Noble digital officer Fred Argir is aware of this software and claims that Nook 7's are safe to use.

He stipulated that his company will be creating a future software update to remove this ADUPS spyware program. Nook 7's run Google's Android operating system. Google claims that this ADUPS passes their security requirements.

A Linux Journal report addressed an issue where by ADUPS was monitoring how this device was being used without permission. ADUPS claims that they released a newer version of their software that does not report back to any servers. They claim that ADUPS installed on Nook 7's is an older version.

You can test to see if your Android has ADUPS spyware with a free program called Debloater. This program works on both Microsoft Windows and Apple Macintosh computers. You do NOT need to root your Android device.

Once installed configure your device for "USB Debugging" mode. Connect your Android device to your computer with a USB cable. Start Debloater listed as "Gatesjunior developer" and then select "Read device packages".

If ADUPS is installed then you will see two ADUPS programs listed.You can disable this spyware by selecting ADUPS entries on left with a check and then clicking apply. This should disable this program until Barnes and Noble releases an update to remove this software.

Avast Free Antivirus – Registration For 1 Year Instead of 30

Avast antivirus is my secondary choice to AVG antivirus. These two antivirus software include free versions. I load Avast antivirus whenever I cannot install AVG antivirus on a computer.

One distinction between these two pieces of software is their free licensing. AVG is free for an eternity as of this blog post creation. Avast requires that you accept either a twenty or thirty day free trial.

However, if you register with Avast antivirus you can register in one year increments. Once you have Avast free antivirus successfully installed, right click on its system tray icon. Select "Registration Information" and a "Your Subscription" window will open.

You want to click on "Register now". Choose "Standard protection" on left hand side. This choice is for free version of Avast.

Avast requires registration to obtain a one year license of their free version. A "Register my FREE 1 Year license" window opens. You will need to enter in an email address and click on "Register".

You are now registered to use Avast antivirus free edition for one calendar year. Avast claims you can re-register in one year increments for as long as you like. Another point of contention is that if you register Avast for only twenty or thirty days then you will need to remove and reinstall that software to possibly use it again.

However, windows based programs don't clean themselves up very well and it is possible you could have old registry entries that would not allow you to use Avast antivirus. You might be able to cleanup your computer with an application similar to Ccleaner. It would make sense to just go ahead and register now so that you can save possibly avoid wasting time later.

Hicurdismos – Fake Microsoft Blue Screen of Death Malware Scam

Microsoft Corporation announced on October twenty one two thousand sixteen that they found a fake blue screen malware in existence. This threat is referred to as SupportScam:MSIL/Hicurdismos.A. This malware poses as Microsoft Security Essentials.

Computers running Windows eight and Windows ten already have built in anti-malware Windows defender. You do NOT need to install Microsoft Security Essentials on afore mentioned operating systems. Microsoft Security Essentials will install on both Windows Vista and Windows seven.

This Hicurdismos malware installs a fake blue screen of death BSOD graphic onto your computer. Once installed this malware will:

* Hides your mouse cursor, to make you think your system is not responding
* Disables Task Manager, to prevent you from ending this process
* Displays this fake Blue Screen of Death image, which then occupies your entire screen, preventing you from using your computer

This false positive blue screen of death malware includes a 1-800-418-4201 telephone support number. Microsoft never includes a phone number to dial in their legitimate blue screen error messages. Also, this bogus blue screen uses color yellow in some text.

Microsoft blue screen error messages are white font on a light blue background. Microsoft Internet Exlorer and Edge web browsers will warn you that this malware might harm your computer. When inspecting this executable once downloaded, there are obvious discrepencies.

File description, company, file version, and size information are all different. Also, this malware posing as a fake Microsoft security essentials uses a different icon. If you have been affected with this malware you can use tools like Windows Defender, Microsoft Security Essentials, MalwareBytes, etc. to try to remove this.

Microsoft technial support will never ask for your credit card information up front. Also, their blue screen error messages never have contact information, ie. a telephone number. Another way to attempt to mitigate malware, spyware, viruses, etc. from installing on your computer is to use your Windows based computer with an account with Standard privileges only and NOT administrator privileges.

Trend Micro – Password Manager Security Vulnerability Found

On January fifth two thousand sixteen a security vunlerability was found in Trend Micro's password manager by Google security research. Trend Micro Incorporated admitted this security vulnerability on January eleven two thousand sixteen. When endusers install Trend Micro anti-virus software, an additional software application Password Manager is installed, enabled and automatically starts on Windows boot.

Trend Micro's password manager is mostly written in javascript. This password software opens multiple instances of Hyper Text Transfer Protocal Remote Procedure Call ports using an Advanced Programming Interface. Google security research found a vulnerability within thirty seconds.

This allows any website to run arbitrary code using these opened Hyper Text Transfer Protocal ports. An example code looks like this:

x = new XMLHttpRequest()
x.open("GET", "https://localhost:49155/api/openUrlInDefaultBrowser?url=c:/windows/system32/calc.exe true);
try { x.send(); } catch (e) {};

Trend Micro has now fixed this security vulnerability in their password manager application. Trend Micro released a mandatory update on January eleven two thousand sixteen fixing this security hole. Current Trend Micro customers should have received this update via ActiveUpdate.

This anti-virus software producer is not aware of any current active attacks towards this vulnerability. You can check out Trend Micro's official blog post concerning this security flaw. Trend Micro endusers should make sure that that mandatory update released on January eleven two thousand sixteen, is installed.

BSOD Virus – Running a Malware Scan Might Fix Your Blue Screen

You need help with fixing a Windows blue screen death issue. Your not computer literate. Your PC keeps shutting down, restarting and freezing up.

Where can you get help with this problem? You have copied and pasted one of those screens that you get. You have tried to download fixes.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 3b
BCP1: 00000000C0000005
BCP2: FFFFF8000271C3D5
BCP3: FFFFFA6008061220
BCP4: 0000000000000000
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Files that help describe the problem:
C:WindowsMinidumpMini040212-11.dmp
C:UsersGaynellAppDataLocalTempWER-82898-0.sysdata.xml
C:UsersGaynellAppDataLocalTempWERF92C.tmp.version.txt

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

Have you performed any anti virus or malware scans? Also, have you run a hard drive diagnostic test? You could try removing and reinstalling your video drivers.

Also, have you tested it in any of those safe mode options? I recommend malwarebytes and ccleaner scans. If it runs without blue screening in any of those safe mode options, then it is most likely a drivers issue or malware/virus issue.

I recomend you download and run a free MalwareBytes scan. Make sure malwarebytes is updated before you begin that scan. Also, please download and install free CCleaner after running malwarebytes.

Use CCleaner for cleaning your PC and registry cleaning. You may need to run both clean and registry scans more then once. If you click on that blue "Download Now" button it should download a version that will work on XP, Vista, or 7.

It is preferable to run those scans at least malwarebytes scan in safe mode with networking. Malwarebytes program might want you to reboot your computer to completely remove any threats found.

Malware Threats – How to Get Rid of Common Malware on Your PC

Malware Threats

Your HP DV9723CL laptop has become unstable and all your attempts to rectify it have failed. You do not want to reinstall original CD's since you would lose too much. Is it possible to install Windows 7 without losing drivers?

You have also used PC cleaners to no avail. If you haven't done so already I recommend running a malwarebytes scan, ccleaner cleaning and registry scans. Also, I recommend you run both chkdsk and sfc scans.

You might need to boot into Windows safe mode with networking for ccleaner and malwarebytes. I recomend you download and run a free MalwareBytes scan. Make sure malwarebytes is updated before you begin that scan.

Malware Threats

You may need to boot your computer into Windows safe mode with networking. Also, please download and install free CCleaner after running malwarebytes. Use CCleaner for cleaning your PC and registry cleaning.

You may need to run both clean and registry scans more then once. Once you run afore mentioned scans then open a command prompt window and type "chkdsk c: /f /r" without quotes. Type Y at a volume is in use message.

A chkdsk scan will be scheduled so please reboot that computer and a chkdsk scan should begin. After chkdsk is completed you can type "sfc /scannow" in a command prompt window without quotes. Once you have completed all above scans then boot into normal windows mode and see if that improved your computer's performance.

Can t Install Any AntiVirus – Get Help Installing AVG Free Version

You are trying to help a friend download and install AVG antivirus software. They are not very computer literate and you are to some degree. They click an AVG download link and checks "Run" and then gets a window that opens asking him for proxy server information.

You are stuck as what to do. They can surf the web and get their web based e-mail without any trouble. Also, they can download and open attachments to their web mail.

Unfortunately, you are not at his computer and trying to help them from long distance. They are running Microsoft Windows Vista 32 bit version with ATT.net webmail. Your friend can try to download AVG free full version.

Have them select "Save File" to their desktop instead of "Run". Have them download that full version of AVG Free Anti-Virus. That full version download is an offline installer.