Issue 38.12
We all know what havoc a virus can cause in your system. That is why we always recommend having a decent anti-virus program on your computer, especially if you get email or browse the internet. What is happening recently is that malicious programmers are finding new ways to attack your system that are not specifically viruses, and are often not detected by anti-virus software.
It always starts the same. You click on a link or other seemingly innocent permission box to install, improve or correct something for your computer. This action tells the computer that you know what the program is and are giving permission to install it, in spite of any concerns the anti-virus software may have about it. The biggest culprit recently is pop-ups that invite you to install a search engine or toolbar. These programs have unique access to what you do while you are on the internet.
They can do a number of things you don’t want. They can report where you go and what you do while there, they can record and send out (to the programmers) your logins and passwords to sites you visit and they can direct you to sites you may not have wanted to go to, since their purpose is sometimes to advertise certain sites over others, which they get paid for. The most recent one that has caused my customers serious problems is the Babylon search engine and toolbar. None of those “infected” with this program asked for it, and most did not even notice it had taken over from their previous toolbar/search.
One of the things toolbars can do is block certain types of sites or content. That can usually be a good thing, protecting you from “poisoned” sites that can cause you trouble or block pornography and other nasty content. What this one does is decide for you that NO site is permissible, so you can’t go to any websites of any kind. It also has the added bonus of being persistent – in other words, even if you uninstall it, it may come back again. It hides in your system and waits for another opportunity.
You can delete the program and it may solve the problem, but if you have trouble getting it to go away, you may want to call a professional to help you. I am finding it and other programs like it are doing some other nasty things as well, such as shutting down your ability to “restore” your system to an earlier date or use the msconfig command, all under the guise of a legitimate program. As always, be careful of things you didn’t ask for – and as always, make sure you have a back up of anything important.
Shaun McCausland has worked in the computer industry for over 30 years, 20 years of it locally with Bits ‘N’ Bytes and Musicomp and currently does in-home and on-site computer consultation, service, training and repair. If you have questions you can reach him at 435-668-7118 or through his website at www.bitsnbytescomputers.com.