Fake Virus Alerts, Browser Hijacking (Firefox and IE11) Using Windows 7

I like that: "...any failure becomes an opportunity." I agree. So I just read a good how-to on reinstalling on a partitioned HD. That part gives me some pause, but I believe I can figure out which partition it's on by looking at the properties before I start (right?)

I'm proud of myself for finding good info and following instructions--like a monkey! But I've found that even very experienced folks in our group don't try the things I do. I joined about 4 years ago after being able to "save" our computer after my husband downloaded some junk (evidently) and it locked up. He was convinced it was unsalvageable, but I was determined to try to fix it--and, miracle of miracles, I did, after hours and hours of "futzing." I was thrilled with myself. :)  So since then, I've successfully undertaken all kinds of "scary" things, like creating a new partition, taking apart laptops (with a youtube video, of course), a little registry editing, and helping teach classes to other seniors. And we got a "bug" a few years ago (I don't remember which one) and I found a good article in the Washington Post, I believe it was, about using a fake certification key to trick it into unlocking. I also give one-on-one assistance at our senior center to folks with all kinds of issues/problems with various devices. I've learned a lot by doing this, too. I always say, "I might not know how to do what you're asking, but I'm sure I can find the solution!" And I usually do. :)

One of my biggest issues is that I don't know the "language" for all of these related things, so it's difficult to express myself when trying to discuss a problem--like when I saw the browser hijacking in progress with lots of various websites shooting across the tabs. I know I'm not even saying that properly, but I just don't know a lot of jargon, which makes it challenging to describe a problem in the first place.

Anyway, you've given me great information and advice, Rob, in language I can understand. I feel encouraged and empowered! Thank you!

Chris

Haha, Carol, that's funny. :)  Yeah, I think I sound like a girl, too. :)  I understand different philosophies and experiences in this arena. Folks in my group have the same disagreements. One of our guys absolutely hates M$ (as you and he write it!) and advocates for Linux. He introduced me to it, and if I had to use it, I could learn it. But I'm comfy with MS. I'm not a super-user by any means. I recently discovered the simplicity of the Chromebook (helping my 68-year old sister make the decision, as she's terrified of computers and had still been using Vista! That's what I recommend now to seniors who don't want to deal with all of the updates and iterations of Windows. Most of us just want to browse, do email, and save pictures and music.

This has been an educational weekend for me, thanks to you and Rob. I expected to find some good suggestions here, as I have in the past, but the two of you surpassed my expectations! I plan to do the clean install tomorrow (in between practice for a children's puppet show series this summer!)

Thanks again!

Chris

Christine, I just knew you were a girl. :)

I agree, Rob's posted a wealth of good info. and suggestions! I would never try to compete with him. I just disagree on some points. Even MS admitted yrs. ago security wasn't their main focus, if I recall correctly. While I suggested a few third-party apps, I realize there must be limitations in situations such as yours.

Hope things go well for you from here on out.

You said, "Internet Explorer hasn't been part of the operating system itself since roughly Windows 7"

"Windows 7 includes Internet Explorer 8 as part of the operating system."

https://answers.microsoft.com/en-us/ie/forum/ie7_6-windows_other/what-version-of-internet-explorer-comes-with/ab41ffe9-fc95-4f6f-8d2a-ee3422a00f82

"Windows 7 includes Internet Explorer 8 as part of the operating system."

https://www.quora.com/Which-IE-version-does-Windows-7-come-with-by-default

"..any 3rd-party apps simply adds to the vulnerabilities as I stated earlier, so there's never a more secure operating system possible than the original installation."

Naturally, all apps have their vulnerabilities. However, stating there's never a more secure OS possible than the original installation.. is just plain false. I know for a fact that most, if not all, experts in the security industry will strongly disagree. Windows has always been an insecure OS. I could write a book on all the tweaks and hacks I applied to XP to make it more secure! Firewall wasn't enabled by default.  Services that shouldn't have been included or enabled by default, etc. After it's release multitudes of systems became infected by that internet worm. (I don't recall the name offhand.)

I realize there's been much improvement in 7 and 10. However, there are still out-of-the-box security issues with both OS's.  I consider privacy invasion a security issue, as well. I'm sure you're aware of all the ways MS is spying on users in Win10, and I just read somewhere they're also ways they're spying on Win7 users, but I haven't looked into it. 

As as admin, you're applied many restrictions on the systems you maintain. I wouldn't call that out-of-the-box security. Generally speaking, though, that's just not true and never has been.

Christine,  Missed the modification to your name while writing my extensive replies, but glad you've got some direction in mind after all of this.

I also forgot to mention that PC #12 is an opportunity to try out all of the new configuration items on a fresh system to see how they work in your environment.  Since you'd know it's starting state if you rebuild it, you'll be able to determine whether these settings create any issues on a "new" system and also how well it keeps them protected.

Not that you can't go ahead with these on all systems, but if you want to test first it's a great opportunity.

That's the difference in my own philosophy, since I treat any system the same whether it's my own, a friend's or any client in a business of any sort.  All of these are simply a client system with varying capabilities, but are able to be sacrificed at any point since all important data should be stored [or replicated] elsewhere.  This way any sort of failure including malware or hardware such as a hard drive is a relative non-event, while the ability to immediately switch to an alternate system removes the urgency for any recovery.

For this reason any failure becomes an opportunity, either to improve the hardware (replaced HDD with an SSD when mine died in a laptop) or the software installation, including simply cleaning up the current mess and doing it better with what I've learned since the last time.

Rob