Archive for the ‘News’ Category

On-site Tech Support Wins the BBB Torch Award for Marketplace Ethics

Thursday, December 6th, 2012

On-site Tech Support was recognized on December 4th as the winner of the 2012 Torch Award for Marketplace Ethics by the San Diego, CA Better Business Bureau (BBB). The Torch Award is presented to businesses that adhere to high ethical standards of behavior and demonstrate a commitment to customers, employees, suppliers, shareholders and surrounding communities.

Scott Smeltzer and Sharon Smeltzer accept 2012 BBB Torch Award

Scott Smeltzer and Sharon Smeltzer accept 2012 BBB Torch Award

Scott Smeltzer and Sharon Smeltzer accepted the award on behalf of everyone at On-site Tech Support.

We are honored to be recognized as a leader in business ethics. This award is the direct result of the outstanding service that all of our employees put into each and every On-site Tech Support client.

We have many goals for our company, and we have achieved many things, but our proudest achievements are those that you can’t really put a dollar amount on—the respect and loyalty of our employees and the friendship and trust of our customers.

About On-site Tech Support

On-site Tech Support provides computer consulting and outsourced IT support (i.e. Managed Services) to businesses with between 10 to 150 employees.  Founded in 2004 by Scott Smeltzer, On-site Tech Support’s focus is to deliver a solution that is driven by your business. We collaborate with you to translate your business strategy into the right IT plan. This process allows our technical support team to meet your IT needs with a perfect match of network security, computer support, proactive maintenance, and IT consulting.

Our team of IT professionals have all passed thorough background checks and bring deep expertise and experience to each client engagement. Our Customers are small businesses to mid-size enterprises across many industries, including financial services, franchises, legal and healthcare.

On-site Tech Support was also a finalist for the San Diego Chamber of Commerce Small Business Awards. 

Chamber of Commerce Small Business Award Finalist

 

Bank of America Alert Phishing Scam

Tuesday, August 14th, 2012

I just received this email.  I have a Bank of America account yet I instantly knew this was fake.

Here is what it looked like and how you can tell it’s fake.

 First of all, Signin isn’t a real word.  This should be enough to make you delete it.

Second, Bank of America does not send email from customer@mail.com

Third, my email address is not even in the To: field.

Fourth, B of A will not attach an HTML form for you to fill out.  HTML is for the web.  They will either send you a link or ask you to call customer service.

Fifth, This font looks “totally” credible.

Sixth, Since they are sending me an email about my account, they know who I am, and therefore would not address it to “Dear Customer”.

When you get emails like this, do a quick exam.  This is actually one of the better ones.  Most of them have significantly more spelling and grammar errors.  Keep in mind, this is supposed to be coming from one of the largest banks in the world.  Does this really look like something they would send?

When in doubt, delete it and call customer support on a number you look up yourself, not one listed in the email.

 

 

 

Windows 7 – 0x0000007a error when printing

Monday, July 30th, 2012

Windows 7 pro 64 bit OS. 

Brand new install with all updates and service packs installed.

When I plugged in the printer, it searched Windows Updates and installed the printer.  It looked good in “Devices and Printers” but when I tried to print, I got this error:

Test page failed to print.  Would you like to view the print troubleshooter for assistance?  Operation could not be completed (error 0x0000007a).

 

Fix 1:

  1. Open Devices and Printers
  2. Right click on the affected printer and select Remove device.
  3. Unplug the USB cable from the printer or PC
  4. Click on the Start button and type Print Management and hit enter.  You will get this window.  
  5. Click “All Drivers” to expand the folder.
  6. Right click on the affected printer driver and click Remove Driver Package.  
  7. Reboot
  8. Plug the printer USB cable back in and it should re-install and work. 

Fix 2:

  1. Reboot into Safe-Mode by pressing the F8 key during boot-up.
  2. Navigate to C:\Windows\System32\spool\drivers
  3. Check all the folders for a folder titled “3″ and rename them to “3-OLD”.  
  4. Close window and open Devices and Printers”
  5. Right click on the affected printer and select Remove device.
  6. Unplug the USB cable from the printer or PC
  7. Reboot
  8. Plug the printer USB cable back in and it should re-install and work. 
 

 

DNSChanger Virus/Malware

Friday, July 6th, 2012

Recently there has been a lot of press on the DNSChanger Virus.  The reason you haven’t heard anything from us, is if you are a current OnePlan Managed Service client, you are taken care of.  Plenty of news outfits are amping up this DNSChanger malware “event” on Monday with stories with apocalyptic titles like “Countdown to Internet Doomsday: Will Your Computer Survive?” or “How to survive internet doomsday” or “End of the Internet? ‘Doomsday’ virus will crash thousands of computers on July 9.”

Here’s what’s going on.

“Criminals have learned that if they can control a user’s DNS servers, they can control what sites the user connects to on the Internet,” warns the FBI on its Web site. “By controlling DNS, a criminal can get an unsuspecting user to connect to a fraudulent Web site or to interfere with that user’s online Web browsing.”

The Internet isn’t shutting down. What is happening, is that the FBI will turn off two servers that it originally architected to thwart the spread of an opportunistic and irritating (but otherwise innocuous) bit of malware.  When the two servers do go dark, computers still infected with the malware will lose their ability to translate web addresses into IP addresses. For these people this means any network requests made using web addresses won’t work.

Here’s the deal. If you haven’t already, click this simple infection checker, run by the DNS Changer Working Group (The Good Guys) to determine if your computer has the malware.  You will get an instant GREEN or RED answer.  If you are infected visit the DCWG’s “fix” page today (or by this weekend) and follow a few simple steps to cleanse your computer.

If you are a business and need help, you can call On-site Tech Support.com at 619-717-8070.  If you are a home or home office user you can call our sister company CODE29 at 858-461-7275.

If you are looking for a DNSChanger Kaseya Script, it’s here.

Should You Go To The Cloud?

Thursday, June 21st, 2012

Cloud Computing: To do, or not to do.

Cloud computing is more than a passing trend. Cloud computing is a way for small businesses to have enterprise class applications and infrastructure that once only large companies could afford.  Cloud Computing shares the overhead for data center security, bandwidth, monitoring and management.  Small businesses share infrastructure without having to invest in capital intensive projects. If you are considering a move to the cloud, here are some things to consider.

Public Cloud vs. Private Cloud

With cloud computing you are moving your data and computer processing to a location other than your own. The cloud location may be shared (i.e. public cloud) or dedicated environment (private cloud). The trade off for private cloud versus public cloud is that the private cloud is far more expensive, but you have more control.  The big knock on public cloud is security, but typically, public cloud is more secure than your office.

While sensitive data, such as, financial records, may be more secure in the cloud, you may have regulatory requirements that prevent you from sharing common resources such as CPUs, racks or cages to store your data in a public cloud. If you have compliance issues that require extra physical security, consider a private cloud solution.

Cloud Migration Consideration

Take the time to consider what data you need to migrate to the cloud.  This is a good time to clean up those customer lists. You may also consider archiving some of your information, like financial history and email rather than migrate it to the cloud. Either way, you need to consider the formatting and structure from your premise based software to the cloud based solution. Plan out the migration of your data. It will save you time and make your new cloud application work smoother in the long run.

Documenting IT Policies and Procedures

PCI and other regulations may require documentation of policies and procedures to ensure compliance for your company. When adopting solutions such as cloud based customer relationship management (CRM), remote backup or hosted email, take the time to revise policies and procedures to ensure your compliance.

Moving to the cloud is a great way to fix IT spending while transferring costs from a capital expense to an operating expense. If planned correctly, your migration to the cloud can be smooth and your cloud based applications will not only work better, but you will have improved security.  If you have any questions about the Cloud, call us at 619-717-8070.

Who manages your Backup?

Thursday, June 21st, 2012

Do you really care about backup and disaster recovery (BDR)?

I believe deep down inside you do care about the integrity and security of your data, but what are you doing to protect it?  My suspicion is that you rely on your IT provider to handle it.  That’s good, that’s what you should be doing.  But are they handling it?

Most companies I talk to just assume that their IT service providers are backing up all data on site as well as taking critical business data off site to a secure facility.  Without a business continuity system in place to ensure that critical company data is properly backed up, safely stored and fully recoverable whenever needed, you are essentially playing Russian roulette with your company and everyone’s livelihood.

One of my favorite sayings is “Trust, but verify.”  I expect my accountant to file my taxes on my behalf with the IRS. I expect my lawyer to file my corporate return for me annually.  I just assume they are doing these things, but I always make sure they are done.  If your IT is not actively managing your backups, they are leaving your company exposed.

On-site Tech Support manages backups daily and performs monthly test restores.  When was the last time your IT provider did a test restore?

For more information about StorageCraft or our managed backup and disaster recovery solution, click here or call 619-717-8070.

Legality and Ethics of Keeping a Digital Eye on Employees

Thursday, June 21st, 2012

There are many reasons business owners might want to monitor the digital footprints of their employees, from protecting your company from theft to ensuring your workplace is free of harassment.   But you need to do it right.  Legally and ethically.

There can be several reasons in favor of monitoring. First, it can help protect your company from theft or other harm. Monitoring can also help affirm compliance with regulations, secure evidence in case of lawsuits and ensure the workplace is free of harassment. At least two thirds of companies monitor and half have fired employees for Web and email infractions.  

Potential Pitfalls of Monitoring:

You could create a morale problem and hurt employee performance if your workers feel a distrustful Big Brother is lurking over their shoulders. You could inadvertently learn about people’s religion, sexual orientation, political views and medical problems, creating potential privacy dilemmas or even opening your firm up to discrimination lawsuits. And you could run afoul of the National Labor Relations Board if you discipline employees for making negative comments about you online.

Monitoring vs. Surveillance:

It isn’t controversial or obtrusive to monitor events on a company’s computer system to ensure proper use and protect the company’s assets and reputation.  General monitoring for electronic abuses, with employees’ full knowledge, is a necessary practice.   Employees will put your business at risk accidentally or intentionally. You need to mitigate those risks to keep misdeeds from turning into expensive crises or lawsuits.

Let me give you my ethics on digital monitoring.  Employees should have no expectation of digital privacy at work.  

  • It’s your network hardware the data is traveling through. 
  • It’s your computer they are using.
  • It’s your time that you are paying for.
  • It’s your email address they are using. (No, it’s not theirs and they have no legal expectation of privacy.)

It’s your company.  Put the policies in place that you see fit.  Technology can support policies to ensure appropriate use of your assets and protect your business, BUT, the policies must be in place FIRST.  

Create a Technology Policy:

Write a technology policy.  If you need help with this you can use customizable forms offered by the ePolicy Institute or have On-site Tech Support help you with this.  (This is free for our Managed Service Customers).  We can outline your rules for using and tracking email and instant messaging, Web surfing and blogging and downloading software  on company devices.  Make sure your policies also cover employees’ use of their own devices while at work and when accessing company data.

Inform Your Workforce:

Explain the risks to the business from improper use of digital assets, the company’s digital policy, the limits on employee privacy in the workplace and the fact that monitoring will occur.  As long as your people know you are monitoring to maintain a compliant workplace, you shouldn’t run into morale issues or legal issues.  Also, Simply letting people know you’re watching can have an important deterrent effect.

Only Delaware and Connecticut require employers to notify employees about electronic monitoring, but it’s a good CYA practice wherever you live.  

Monitoring Social Media Usage:

Content Filtering:

Content filtering has been around for years but recently the prices have come down to very affordable levels.  Content filters allow companies to monitor employee activity on the web.  If you want more than monitoring, we can set access levels to block certain sites or entire categories of sites to keep employees from accessing sites — from news to porn to gambling.  For example, 70% of the bandwidth at one of our customers was going to Facebook and Pandora.  With the information from the content filter, the company was able to create an Acceptable Use Policy for the internet and enforce it with the technology by blocking certain sites.  

Companies like On-site Tech Support can assess the level of web/social media use a use and implement a content filtering system for as little as $0, depending on the number of users.  If you want to uncover what employees are doing and saying, call us for a free evaluation.  619-717-8070.

Gateway Antivirus:

In addition to content filtering, On-site Tech Support can install a secure Gateway Antivirus.  Gateway Antivirus is exactly what it sounds like.  Think of this as a bouncer at a bar.  Isn’t it better to keep the riff-raff out rather than try to kick them out after they are in?    Gateway Antivirus runs on your firewall and scans every packet coming from the internet for malware and viruses.  We have one customer, 20 users, 3-4 virus issues per month.  We installed Gateway Antivirus and we have had 3 virus issues in the past 3 years. 

Tracking use of computers and smartphones:

There are several products are available for tracking activity on company devices.   On-site Tech Support does this for many of our clients.  We can record everything that occurs on company devices and provide reports about suspect activity.  

It’s your company.  As long as you have the policies in place you are legally and ethically covered and you can use the technology to enforce those policies.  

The Majority of Small Business are not Taking Steps to Prevent a Security or Data Breach

Wednesday, June 20th, 2012

Think your business is too small for hackers to bother with?  In recent years, small businesses have become the target for security and data breaches.  Despite that trend, a majority of small businesses are not taking steps to try to prevent a data or security breach.

According to the Verizon 2011 Data Breach Investigations Report, organizations with between 11 and 100 employees reported almost six times as many as organizations with between 101 and 1,000 employees .

For some reason, that number does not scare many small business owners.  Eighty-five percent of them said in a new survey, conducted for investment and insurance company The Hartford, that they believe a data breach is unlikely to happen to them.  A majority of those business owners also said they are unlikely to put any measures in place to prevent such an attack.

Six in 10 small business owners acknowledge that a data breach would compromise relationships with customers.  Additionally, 38 percent said they would have a negative opinion of companies that responded poorly to a breach.

Either these people are very bad at math, or just want to bury their head in the sand.  Here are the numbers:

  • SIX times as many data breaches as larger organizations
  • It’s not going to happen to them
  • They are not going to do anything to prevent it.
  • 60% say it would affect customer relationships
  • 38% say it would affect their relationship if a vendor had a breach

If you are a small business owner that IS scared by these numbers and you do want to put something in place to attempt to prevent it, here are some things you can do.

  • Restricting employee access to sensitive data.  This may seem so basic, but I can’t tell you how many companies we do audits for where every employee is an Administrator on the server.
  • Shredding and securely disposing of customer, patient or employee data.  It seems so simple but unless you make it a regular practice, most of this just gets thrown in the regular trash.
  • Using password protection and data encryption.  Forcing password changes is such a simple process but most companies don’t do it.
  • Having a privacy policy.  This is an HR issue, not an IT issue but is still relevant.
  • Updating systems and software on a regular basis.  I just ran a network audit for a company and the last time Windows Update was run on the server was April 2010.  (over 2 years ago)
  • Using firewalls to control access and lock out hackers.  I continue to be amazed at companies that won’t spend $300 on a real firewall because they think the $39 wireless router they bought at Best Buy or Fry’s is good enough.
  • Ensuring that remote access to their company’s network is secure.  This is not difficult but may require someone with IT and network security experience t configure secure access.

If you need help with any of these items or would just like a free Network Security Audit, give us a call at 619-717-8070 or fill out the form below.

LinkedIn Hacked, Passwords released to Hacker Community.

Wednesday, June 6th, 2012

Just a quick PUBLIC SERVICE ANNOUNCEMENT.

LinkedIn may have a bit of an issue to deal with.  They are investigating that potentially over 6 million password have been compromised.

Here are some reports to date:

http://www.bbc.co.uk/news/technology-18338956 http://www.businessinsider.com/linkedin-hacked-2012-6 http://www.thestar.com/business/article/1206692–linkedin-users-read-this-then-change-your-password

Please pass this information along.

Also, if you use the same email address/password combination other places on the web, you need to change those passwords as well.

Onsite Tech Support Selected as a Finalist for Chamber of Commerce Small Business Award

Wednesday, May 30th, 2012

On-site Tech Support has been selected as a finalist for the 2012 San Diego Regional Chamber of Commerce Small Business Awards! 

Chamber of Commerce Finalist