Ramblings of an old Doc

 

This via Sophos and Hankers (ty, Hank):

The only Update notification from MS to trust is one coming while surfing with Internet Explorer.

This is what showed up for the Sophos people surfing with FireFox:

Which is high graphics quality.

“The page is nearly an exact replica of the real Microsoft Update page with one major exception... It only comes up when surfing from Firefox on Windows. The real Microsoft Update requires Internet Explorer.

The same site was also hosting the traditional Windows XP explorer scanner we have seen for years, as well as a new Windows 7 scanner.

Similar to spam messages that have corrected their grammar and use correct imagery and CSS, the attackers selling fake anti-virus are getting more professional.

They use high quality graphics and are using information from our UserAgent strings that are sent by the browser to customize your malware experience.

Just like visiting your bank you should only trust security alerts in your browser if you initiated a check with Microsoft, Adobe, Sophos or any other vendor for updates to their software.” – Sophos

If this pops up on you, immediately get away from the site. Do not install anything, not allow anything to install automatically.


Comments (Page 2)
2 Pages1 2 
on Jun 09, 2011

Philly0381
Yes I know, very mean, but when will some of these folks ever learn.

just to add to it ... NEVER

EXample

My X-brother-in-law he NEVER learns and has had a PC for over 10 years..  ever time he calls me for PC help I have to tell him what and where the start menu and Taskbar is ....

and YES I have told him YOU need to sell your PC and never buy one again...

on Jun 09, 2011

 

...and once again here I go.

 

Let's see.....I've said the following maybe 1000 times?  Maybe more......sigh

 

Don't EVER browse the internet using an account with ADMIN credentials, educate yourself on what your computer system's "Local Security Policy" is/does and then use it to lock-down things correctly.

Doing those two things alone will have a much much much much better effect of protecting your system from ANY attack than say running 3rd-party security software and/or hoping one doesn't click on the wrong thing.

 

the Monk

 

EDIT:  I routinely demo the above fact to clients of mine using a brand-new OS installation with no 3rd-party security installed.  Running limited user accounts and a properly configured LOCAL SECURITY POLICY prevents all but the worst malware from even getting onto your system and those that can get onto your system still can't actually DO anything since the restrictions imposed by a PROPERLY configured system security policy don't allow it.  There are plenty of ways to EFFECTIVELY secure a system so it in fact does NOT need 3rd party security software for anything other than a "second opinion" (for those nervous nellies).  Education, education, education........can't say it enough! 

 

on Jun 10, 2011

@ the_Monk,

At the risk of sounding redundant can you explain to those out there who aren't familiar or just plain ignorant what the Local Security Policy is or rather how to configure it properly. Memory refresh.

on Jun 10, 2011

 

Uvah:

But I'd read Simonski's article (link at the bottom). Technet stuff here is good too, but read his first. 

http://technet.microsoft.com/en-us/library/cc736685(WS.10).aspx 

http://technet.microsoft.com/en-us/library/cc739442(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc755686(WS.10).aspx 

When you type in the search box "local security policy" you get:

 

 This article explains things (a few) : http://help.artaro.eu/index.php/windows-7/essential-windows-7-administration/local-security-policy-in-windows-7.html

But Shimonski's article here is really good:

http://www.windowsecurity.com/articles/windows-7-security-primer-part1.html 

 

2 Pages1 2