Ramblings of an old Doc

 

 

Found out about this over at gHacks.

The tool does several things:

 

These are all good things. Face it, few of us know all the right settings to put in. One good step not touched on by this tool is creating a “Guest Account” so that the installing, etc. you do isn’t done with “Administrator” privileges. That’s actually a HUGE step in securing your computer.

Common sense browsing and the use of extensions like “Web of Trust” (or similar) is another. Most security software now comes with a “STOP!” preventing browsing to known “bad rep” sites, so check to see if your does. If so, WOT probably won’t add much.

Anyway, I believe this tool is worth running on your machine… and turn on your UAC. It does many good things, among them the “Stop for a second and think about what you’re about to do, Mister”.

Also, as Martin Brinkmann advises, run it on ‘manual’ so you learn about what it’s doing and intervene if the detection is incorrect. Also, as Brinkmann points out, it can be very useful after a malware attack to make sure any changes made by that malware have been corrected: Simply removing the malware will not put things back in order.

Have a secure weekend.   

Link to MS Tool: http://support.microsoft.com/kb/2534555

Source:

http://www.ghacks.net/2012/07/13/microsoft-malware-prevention-troubleshooter-now-available/?_m=3n%2e0038%2e580%2ehj0ao01hy5%2eld5

Good Malware Recovery Guide:

http://files.meetup.com/1332202/MakeUseOf.com_-_Malware_Removal_Guide.pdf

Good site for many FixIts after malware infection:

http://www.selectrealsecurity.com/

 

Feel free to add your own.


Comments
on Jul 14, 2012

So I can get back to this thread.

 

on Jul 14, 2012

Common sense browsing and the use of extensions like “Web of Trust” (or similar) is another. Most security software now comes with a “STOP!” preventing browsing to known “bad rep” sites, so check to see if your does. If so, WOT probably won’t add much.

I tend to agree although I have noticed lately that Web of Trust has been used by political extremists and others to designate sites they don't like or agree with as dangerous. WOT needs to have some method to fix this. This could lead to fraud. If I have a company that make gadget "A" and your company makes competing gadget "B" then all you need to do is get all your employees to rate the other company on WOT as untrustworthy and force net traffic to you instead of your competitor.

I know it's a bit off-topic.

on Jul 14, 2012

No problem, Mike. I've seen the same type of "dirty tricks" as well. That's a real drawback with all 'reputation based' sites, and it even extends into biasing security software to new devs. 

It's germane to the topic, imo. Thanks for the comment.

on Jul 16, 2012

Hum... But I like my UAC dialed down. Then I don't have to approve it if I sneeze. It still asks me some things anyway.

on Jul 16, 2012

Bookmarked!

on Jul 16, 2012

LizMarr
Hum... But I like my UAC dialed down. Then I don't have to approve it if I sneeze. It still asks me some things anyway.
Mine is off. UAC = Useless Annoying Crap.

on Jul 16, 2012

RedneckDude
Mine is off. UAC = Useless Annoying Crap.

yrag knows. 

"User Account Control (UAC) is a technology and security infrastructure introduced with Microsoft's Windows Vista and Windows Server 2008 operating systems, with a more relaxed version also present in Windows 7 and Windows Server 2008 R2. It aims to improve the security of Microsoft Windows by limiting application software to standard user privileges until an administrator authorizes an increase or elevation. In this way, only applications trusted by the user may receive administrative privileges, and malware should be kept from compromising the operating system. In other words, a user account may have administrator privileges assigned to it, but applications that the user runs do not inherit those privileges unless they are approved beforehand or the user explicitly authorizes it.

To reduce the possibility of lower-privilege applications communicating with higher-privilege ones, another new technology, User Interface Privilege Isolation is used in conjunction with User Account Control to isolate these processes from each other. One prominent use of this is Internet Explorer 7's "Protected Mode"." - https://en.wikipedia.org/wiki/User_Account_Control

Doesn't sound "useless" to me, Jim.

on Jul 16, 2012

Doc, I think "useless" would depend on the experience of the person using the computer.  For a new user it would prove to be a very good tool to have turned on.  For most of the folks here in the community who have taken steps to secure their systems, with your help I would add,  it could very well prove to be annoying.

I used the tool in the OP but I did go back and turn UAC back off. 

on Jul 16, 2012

I think the tool could be quite useful.

 

On a side note, I really do wish there could be something done to rep related security and safety add-ons, WOT is just one of them. Sadly, new mods/admins to security programs also often bring in their own bias or personal views into things, and any number of actually safe and worthwhile websites get blocked or set as a "STOP" kind of warning in security suites.

Sadly, that same type of things even has on the iTunes store. Honestly, I think between the "freemium" i.e. it's free so long as you buy the in-app addons, and/or where actual paid apps that are garbage end up being rated and shown as the top of the list, due to employees or bot programs used  in the hundreds or thousands to give something a top of the list 5 star rating. Likewise, often the reverse happens and an actual great app gets 1 star bottom of the pile reviews just by someone who makes a competing app/addon/program/game. I think Steve Jobs would be rolling in his grave if he knew just go sad the state of affairs are on the itunes store lately.

Unfortunately, it isn't just iTunes, its worldwide. Hell, even sites you used to be able to trust like Download.com, PC world, etc. just because their editor/reviews/tests/ etc. are only raving about 1 program while putting down another, just because of their own personal views or ratings and reviews that get posted due to company A paying them to promote their product while putting down company B's product.

As far as iTunes goes, thankfully (*crosses fingers* and hopes and prays this never happens) it's a simple point, click, delete for any offending trash app, and isn't a virus or spyware to ruin iOS.

For those that use an iPhone or iPad, no matter what "rave" 5-star review you see on there, all it takes is going to the developer's website to see if its in a foreign language, or just take a moment to look at the app release/update date next to the purchase button. It it's still on version 1.0 with no updates whatsoever, or has had an update or two but hasn't been updated in months to be leery and stay away from them. Despite how many good quality apps that do exist on the store, I still stand by and refuse to purchase anything until it has a "+" next to the name. The iPad has been out for a few years now, there is no excuse whatsoever for what a developer cannot make an app universal to work on both the iPhone and the iPad. It's a bit sad to buy one, only to to find you are expected to purchase the same thing a second time for the other, often for a higher price for the "HD" iPad version.

 

Sorry for somewhat derailing the convo, I do greatly appreciate the post about a official program from MS that could easily help some people quite a bit.