Looks like February is starting with a big snow storm here in Massachusetts - hopefully that will keep the groundhog from seeing his shadow and we can get outside sooner rather than later!

Ever wonder what happens to a file when you download it? If so, my first article is for you. Next, how to shut down scam tech support alerts by force quitting your browser. And lastly, I've had a few calls about Apple's new password breach warning, so I wrote an article explaining what that is about, and what to do if you are being warned.

Stay warm, and stay well!

Regards,

Julie Marto

508-359-8176
508-333-8176 (cell)

P.S. The new Mac computers are really nice - if you have a Mac that can no longer run the latest MacOS, it's time to think about upgrading!
Downloads 101
With so much of our social and work lives happening on-line, you've probably been asked to download more programs and files than you ever expected to deal with. I see a lot of confusion about downloaded programs and files - where to find them, and what to do with them.
In its simplest form, downloading is the process through which a program or document is copied from another computer on the web, and digitally stored on your computer. Both PCs and Macs have dedicated download folders, where downloaded items are temporarily stored by default. The PC folder is found in File Explorer - the little manila folder icon on your toolbar. The Mac folder can be located in the Finder - the two faced icon on the lower left of your dock. Both of these tools give you a graphical representation of the internal folder structure on your computer - much like a filing cabinet drawer. On a Mac, you might also see a downloads folder icon in the lower right. When you click on that you will see a graphical representation of your most recent downloads.

Though you can download many different types of files, the two most common things to download are programs and documents. Documents are just that - pictures, PDF's, Word documents or Excel spreadsheets, PowerPoint presentations. When you download a document, you just need to find it, and open it to view or edit. As long as you have the right program to open it, you will be fine just clicking on the download.

Programs are a different matter. Almost always, a program download needs to be run and installed. Most PC programs download as a .exe file. Most Mac programs download as a .dmg file. Think of the .exe and the .dmg as the container the program comes in - you then have to open the box and put the pieces in place. Simply put, after you download a program file you need to find the actual download, click or double click on it, and follow the instructions that will pop up, in order to set up the program for use.

Because you surf the web and download files using a browser, different browsers point you to your downloads in a different way. If your browser is still open after downloading a file or document, clicking on the browser's download icon is often the easiest way to find your file. Here's how to find downloads from the most popular browsers:

Chrome and New Edge - Look for a rectangular box that pops up in the lower left hand corner with the name of the download in it. Click on that to open or run the downloaded file.

Firefox - Look for a downward pointing arrow in the upper left, next to the bookmarks icon. Click on that and it will open a list with recent downloads.

Safari - Look for a circle with a downward facing arrow in the upper left. Click on that and it will open a list of recent downloads.

I often see clients who have downloaded multiple copies of a file or program because they don't understand where it went, or what to do with it, once it's been downloaded. If you feel like you need more help with this, I can walk you through it in a remote session.
How to Force Quit your Browser
I get multiple calls each month from people with a browser window taken over by a scam tech warning, usually claiming to be from Microsoft or Apple. The actual verbiage is different for each one, but typically there are loud sirens, scary alerts about viruses and trojans found on the system, and a phone number to call for help. There doesn't seem to be any way to shut off the alert without calling the number on your screen.
Scary though these alerts are, they are just a scam. Whatever you do, DO NOT CALL THAT PHONE NUMBER. Scammers are very good at talking you into believing you need their services - don't give them the chance.

Remember, you are not infected - this browser hijack is just a pop-up ad. Sometimes simply restarting your computer will do the trick, so try that first. However, a lot of computers are set up to reopen whatever was open when you restart the system, so the scam ad will just return when you start up the system again. If that's the case, the way to get rid of it is to force quit your browser, and then make sure you don't restore the old session. Here's what to do on a PC and on a Mac:
On a PC - Hit control-alt-delete. A window will pop up - click on "Task Manager". Another window will pop up - click on the name of your browser - Edge, Chrome, or Firefox. Click on "End Task". That will force your browser to quit, and the alerts will silence. When you reopen your browser, hit "start new session".

On a Mac - Click on the finder icon in the lower right of the dock. This is to make sure that your browser is not the active application. Then click on the Apple menu in the upper left, and choose "Force Quit". Pick your browser from the list of open applications, and choose "Force Quit" and then click on "Force Quit" again. When you reopen your browser, make sure you tell it to start a new session.

If you have any trouble following these instructions, or forcing the browser to quit doesn't solve the problem, please give me a call for further instructions or assistance. If you find that you are getting these types of scam pop-ups on a regular basis, you might need to drop off your system for a good cleaning.
Compromised Passwords Warning
Recently Apple, Google Chrome, and Firefox have started to warn users if their stored passwords have been compromised. I've had quite a few clients call me about these messages, so here is an explanation.

Whenever a corporate website is hacked, one of the valuable items hackers attempt to steal are log in credentials - that is, the user names and passwords of customers of the site. Most of the time the user name is in the form of an email address.
Vast lists of stolen credentials, basically email addresses and passwords, are compiled, bought, and sold on the "dark web". Criminals plug these credentials into "bots" - computer programs that will try the email and password pair against hundreds of websites, looking for a match. If they get a match, they can take over the account, leading to identity theft or other nefarious crimes. That's one of the reasons so many websites have a little "I am not a bot" checkbox on their log in pages. It's also why you should always use strong, unique passwords for every site, and you should turn on two factor authentication whenever it's feasible.

To counteract the criminals compiling lists of compromised credentials on the dark web, there are "white hat" sites that collect them as well, so that you and I can check and see if our user names and passwords have been stolen in any breaches. The best known site is haveibeenpawned.com, a site where you can type in your email address and see which, if any, data breaches include your credentials.

Apple, Chrome, and Firefox have started automatically checking your stored credentials against the lists of data breaches. If they find a match, they will put a warning in the passwords area of their browser, or the passwords area of Apple's iCloud Keychain, to proactively inform you that some of your credentials are for sale on the dark web. It doesn't necessarily mean that your account has been hacked, but it does mean that that email/password combination is no longer safe to use, and you should change that password at ANY site it's being used on, as soon as possible.

So, check your iCloud Keychain, or look in the passwords section of Chrome or Firefox, and see if you are being warned about any of your passwords. If you find your credentials have been compromised, set aside an afternoon to go through your passwords, log onto websites, and change each one to a unique, strong password for that site only. Yes, it's a pain in the neck, but not nearly as much of a pain in the neck as identity theft!