Wednesday, February 21, 2007

Remove Rogue Desktop Icons Created By Spyware.

If you have used a Windows machine for a while, whether it's Windows XP, Windows 2000 you're sure to have noticed desktop icons appearing from out of nowhere. How can icons mysteriously emerge on your Windows desktop?


1. When you buy a computer, many vendors place icons to selected products and services on your desktop, such as links to high-speed Internet Service Providers (ISPs) or add-on services vendors think you may need.


2. As you install software on your Windows machine, icons may appear, either to start the application or link to the manufacturer's website. Installing just one program could add three or more icons to your desktop!


3. It's easy to accidentally drag a Favorite, bookmark, text file, or other icon to your desktop, creating an icon.


Normally, it's easy to delete Windows desktop icons. Just place your mouse pointer on the offending icon, then right-click it and choose "Delete", clicking "Yes" to confirm if prompted.


However, what if the rogue icons are for adult websites, unfamiliar search engines, or other websites you don't recall visiting? You may try removing these icons but get an error, or after removal they still reappear again and again and again!


If so, then more than likely spyware, adware, or other malware has infected your machine. It may have been through file trading software, an inadvertent "yes" click when a popup window asked you to install software, 'freeware' that included adware, or other means. To remove the rogue icons, you need to remove the malware creating these icons.


Removing spyware and adware can be a time-consuming process, fraught with potential disaster as it is possible to accidentally remove files that render your operating system unusable. However, the following software products can help with this process as long as you read the instructions carefully, make backups, and get expert advice if you're not completely sure about removing what they ask you to do:


* Ad-Aware: http://www.lavasoft.com/


* Microsoft Windows AntiSpyware: http://www.microsoft.com/athome/security/spyware/software/


* Pest Patrol: http://www.pestpatrol.com/


* Spybot Search and Destroy: http://safer-networking.org/


* Spy Sweeper: http://www.webroot.com/


So, how can you prevent these icons from appearing in the first place? Practice safe computing.


* Backup your machine. If it does get infected to the point of being unusable, at least you won't lose all your important files.


* Install security-related operating system updates so spyware and adware cannot enter your system through well-known exploits.


* Download or buy a virus scanner, and keep it updated! Virus scanners cannot detect all spyware, but it doesn't hurt to have one. Check online or visit your local computer software store.


* Purchase a hardware or software firewall, and keep it updated! Firewalls help protect your computer from common exploits that spyware or adware can use to infect your machine.


* Consider using a different web browser. Though it is not perfect, Mozilla Firefox is currently less susceptible to spyware than Internet Explorer, mainly because it lacks certain technology (such as ActiveX) that is often exploited by malware writers. Note that depending on your web use, certain websites may not work correctly with other web browsers.


By practicing safe computing and using spyware-removal software, you can help remove rogue desktop icons from your desktop and keep others from appearing.


Andrew Malek is the owner of the MalekTips computer and technology help site. Visit his anti-spyware page for more advice on removing adware, spyware, and other malware.

How to Manage Your Username and Password The Easy and Secure Way.

Have been an Internet user for more than 9 years, I have 100's of logins and passwords to keep. I'm paranoid. I'm now even more paranoid after I joined YMMSS because I use online payment systems on weekly basis if not daily.


I used to use Microsoft Excel to manage my usernames, passwords, and other registration information, both online and offline. Excel is not safe because there are programs to crack password protected Excel workbooks and I even cracked the spreadsheet and VBA source code password for one of my old Excel financial models I developed. Today I still use Excel to store some personal information but I only save the Excel file on my another PC that is not connected to Internet.


In my article "6 Essential Steps to Protect Your Computer On the Internet", I highly recommended the award winning RoboForm. Free version of RoboForm (http://www.roboform.com) does come with limitations such as 10 Passcards only. If you don't want to buy the Pro version (costs $29.99 as of my writing), there is an easy-to-use freeware (see below) you can download right now and manage unlimited usernames and passwords.


Download freeware Password Safe from SourceForge.net - the Open Source community.


https://sourceforge.net/projects/passwordsafe/


Here are some great features of Password Safe:


- No installation is required. Simply download and double click the pwsafe.exe file.


- Easy portable. Just copy and paste the EXE file and .dat database file to any disks. Be aware that when you open Password Safe in the other disk, you need to specify the database file location (the .dat file).


- One master password unlocks an entire password database that can contain all your other passwords.


- Grouping. Usernames and passwords can be grouped into different categories you define, eg. Email Address, Payment, etc. You are in total control.


- Strong, random password generation.


- Copy username and password to clipboard so that you don't have to type them. Always keep in mind that you should never type any username and password.


- Browse to URL. With one click, the URL related to your username and password can be opened in your default web browser. Another save on typing.


- You can create more than one password database (but you have to memorize more than one master password. Not recommended.)


Here are some tips of using Password Safe (version 2.04) and managing password in general.


Tip #1 - Always create a strong master password (Safe Combination as used in the software).


Strong password should meet the following criteria:


- At least 8 characters long to prevent cracking. The longer the better.


- The password should contain lowercase, uppercase, numeric, and any other characters that are available on keyboard.


- Ideally you should not use any meaningful words or numbers in the password. Totally random password is the best.


Tip #2 - Let PasswordSafe generate random password for you.


To generate random password:


- Click the menu item Edit.


- Select Add Entry (or use corresponding icon button).


- When the dialogue window opens, on the right hand side, you can see a Random Password Generate button. Click it, a random password will be automatically inserted in the Password field.


The generated random password is constructed according to the password policy defined in Password Safe. You can modify the default policy.


- Click the menu item Manage. - In the dropdown menu, click Options. - Click the Password Policy tab. - Change the policy based on the strong password criteria stated above.


Some sites only allow alphanumeric passwords so make sure you select the appropriate check boxes when this is the case.


Tip #3 - Very Important: Never type your master password when open PasswordSafe.


Keylogger spyware can record keystrokes.


How can you enter master password without typing? I do this.


Step 1: Open a Notepad file (.txt).


Step 2: Copy and paste an article from any Internet website to this .txt file.


Step 3: Select characters from this article and copy, paste to form your master password.


Tip #4 - Very Important: Never lose your master password.


I memorize my master password. In addition, I also physically write it down to a hand written study material that has my previous uni works. Among the 1,000's of words, I placed my 22 characters master password in two different pages in encrypted format that can let me derive my master password.


Tip #5 - Categorize username and password.


When you add a new entry, you need to specify Group, Title, Username, Password, and Notes. The entries that share the same Group name will be gathered together automatically.


One Group can contain another Group as its sub Group. For example, I have Email Address group which contains three sub-groups as Friend, Work, Family.


Tip #6 - For security reasons, always use Copy Username to Clipboard and Copy Password to Clipboard.


Remember, never type username and password on a web form. This is how to do it.


- Highlight an entry.


- Right click mouse.


- In the pop-up menu, select Copy Username to Clipboard or Copy Password to Clipboard


- Go to your login form, paste the username or password.


You can use mouse to do copy and paste. If you prefer short-cut keys, this is how.


Copy: Ctrl+C Paste: Ctrl+V


Tip #7 - Use "Browse to URL" rather than typing URL in browser address bar.


When you enter a new entry or edit an existing one, you can enter a URL (must start with http://) at the first line in the Notes field. You can save website login page's URL in this field. When you need to open a login page in browser, right click the entry and click Browse to URL in the pop-up menu. Then the login page will be opened in your default web browser automatically.


Tip #8 - Don't forget to backup your password database file.


Use the Make Backup menu item to save a second copy of your password file.


Tip #9 - Store your backups in a different offline computer or location.


This is a widely used backup strategy.


Tip #10 - Use the Notes field to store as many information as you want. Very handy for memo.


If you don't have two computers, you need to use other storage media to save a second copy of your backup file and version them by date (easy to track back). Other storage media can be zip drive, thumb drive, floppy disk, CD, etc.


Off site backups are also important. Don't overlook this. You lose all your data if you lose both your computer and your other storage media all together for any reason.


Many companies provide online storage services for a fee. You can store any digital files (you should password protect these files first) on their secure servers. Search Google and you will find a lot.


I have two computers. One is used to surf net and it does not have any sensitive info stored on it. Another one is for my development work (not connected to Internet) and it has my backup files. I also store my backups in a thumb drive and CDs sometimes.


The author, Jerry Yu, is an experienced internet marketer and web developer. He is a proud member of YMMSS. Visit his site Get Paid Full Time Income By Reading Ads Online - YMMSS for FREE "how-to" step-by-step action guide to kick start a successful online business, tips, knowledge base articles, and more.

Top 10 Ways to Get Spyware or Viruses on Your Computer.

virus-spywareIf you use the internet, you have probably been infected with a virus, trojan or spyware. According to the SANS Internet Storm Center, the average unprotected PC is infected within 20 minutes of normal internet usage. Many people want to know what they did to get infected. Unfortunately, usually it was just one wrong click.


Here are the top reasons people get infected and how to prevent these common internet security threats.


10. Exchanging files in chat rooms.
You should never download files from sources you don't trust. Viruses and other internet security threats can look like valid files or photos. Always scan files with a virus scanner before opening them.


9. Clicking on popup ads.
If you're like most people, you probably don't like popup ads. But whether you like them or not, you should never click on them. Popup ads can take you to a website that secretly downloads adware onto your computer. Enabling a popup blocker on your computer can help protect you. Some popups come from adware programs that have downloaded onto your computer, so if you still see popups after installing a popup blocker, scan your computer for spyware or adware.


8. Email attachments.
Viruses can be sent out as email attachments to infect your computer if you open them. If you download your email into an email program, scan all email attachments with a virus scanner. Most major webmail programs scan attachments before you download them, but you should still not download files from unknown sources. "Phishing" email, claiming to be from your bank or other financial institution which asks you to provide personal information or download something to your computer is another common email threat.


7. Instant messaging.
Because people are cautious with email attachments, new viruses are spreading through instant messaging programs. Infections look like valid files or photos, so always be careful accepting file transfers, even from sources you trust.


6. Downloading music.
Many websites that advertise free music downloads are loaded with spyware. You can even get spyware from these websites without manually starting a download. Other sites make you accept a spyware download to get the music you want.


5. Browsing websites.
Some websites use "drive-by downloads" - misleading dialogue boxes to secretly install spyware programs. Sometimes spyware can install even if you do not choose "yes" or "accept". Keep your browser security settings on default to protect yourself against these infections.


4. Installing free programs or screen savers.
Check the license agreement of any program you install to confirm it does not come bundled with other programs. License agreements are supposed to explain if the software you are downloading will cause advertisements or other downloads. These programs may have long or confusing license agreements where they have buried this information. Always carefully read what you agree to before you download free software.


3. Adult-related websites.
Many of these sites make a profit by forcing viewers to download spyware and adware to access their site. You may not be able to view these sites if you are using a secure browser or have your security settings too high.


2. P2P programs like Kazaa or Limewire.
If you share music using peer-to-peer networks, you may be forced to download advertising software onto your computer. This software can generate popups from within your computer. In these cases, you may see popups even if you are not online.


1. Gaming websites.
It may seem that viewing spoilers for online games will let you win faster, but it can slow down your computer with spyware. Mick Lathrop, part of StopSign's Spyware Research team says, "I get most of my spyware samples from gaming-related websites." Avoid any site that requires a software download to access information.


Even if you have an anti-virus product on your computer, confirm that it protects against the growing threat of spyware. Enable a popup blocker and firewall for further protection. Using safe browsing habits and good security software can keep you safe on the internet.


Marla Porter is part of the Product Development Team at eAcceleration Corp., the makers of StopSign anti-virus and spyware remover. StopSign detects and removes viruses, trojans, spyware, worms, keyloggers and browser hijackers. Learn more about StopSign at http://www.stopsign.com. StopSign is a product of eAcceleration Corp: http://www.eacceleration.com.

Security News