Showing posts with label Deceptive Business Practices. Show all posts
Showing posts with label Deceptive Business Practices. Show all posts

Friday, 10 July 2009

Rogue Infection: WARNING! YOUR’RE IN DANGER!

One of our clients received a link via an e-mail from a friend saying that they needed to purchase, download, and install a product to help keep their system running great!

Now, the machine is virtually unusable due to constant battering by pop ups from a product called System Security 2009 (also a Rogue AntiSpyware blog link). The rogue also prevents any .EXE from running on the system except an IE window that takes us to the “online activation system”.

We are going to flatten this system, extract their data from an earlier ShadowProtect image, and start fresh.

Since much of the infections legitimately found on the system are Trojan related, there can be no guarantees that removing them does not leave a backdoor of some sort into the system.

The desktop as it is now:

Security-Warning

And:

Security-Warning-2

Our client new something was well out of sorts due to the misspelling of “YOUR’RE” when the background started showing up.

Note the constant fight between the malware and AVG Free.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Saturday, 19 January 2008

Symantec now biting the hand that feeds it?

Occasionally, Symantec is the product of choice for a client.

Setting up an SBS install for this weekend, we registered the client licenses for Symantec's new EndPoint Protection Suite and proceeded to download the files.

This is what we were greeted with on the file download page:

WHY INSTALL THIS YOURSELF? LET US INSTALL IT FOR YOU!

Ouch.

In some cases our clients have registered and downloaded the Symantec products.

Where would something like this leave us if they decided to pursue Symantec's install service? Out in the cold.

Click the link to the REIS site and we see the following costs:

Symantec Remote Expert Installation Services Cost

Given our most terrifying moment of 2007 (previous blog post) was relinquishing control of a key system in our organization to one of Symantec's "Experts", we can only wait and see how this service actually works out.

Unfortunately for Symantec, when one of our "partners" begins to compete with us, we will walk away from them and their products if at all possible. In this case, the walk away process has already been started, with this situation only adding further evidence that we have made the right decision.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Wednesday, 2 January 2008

Suspicious Search Result for Free AVG

In the process of searching for AVG's site for the previous post, which is on the Grissoft.com Grisoft.com domain, we turned up the following result:

AVG Free Search Results

Note the link to "free-avgDOTorg" as the first result under the sponsored sites before Grissoft's Grisoft's site links.

After clicking on the free-avg link, one is presented with this site:

AVG Free Download

Note that the button includes the line to "Get Full Support" in it.

The following page is presented after clicking on the button and resides on a completely different domain - ordersignupDOTcom:

Sign Up: General Information

Note the now distinct absence of the AVG logo and software reference. Enter an email address and:

AVG - No where to be found

The orginal AVG .org domain is protected by Domains by Proxy. This in and of itself leads one to be really suspicious as the original owners of the domain cannot be contacted at all.

Go to the ordersignupDOTcom root page that is hosting the "Membership Type" page and one is lead on a wild goose chase that ends up on sites that also look like their sole purpose in life is to garner a person's credit card info.

All in all, this is one very good reason to be "street smart" on the Internet and for companies like Grissoft Grisoft to be aware of what others are doing with their online reputation.

UPDATE: Updated the spelling of Grisoft!

UPDATE 2: Courtesy of Alex over at the Sunbelt Blog: Anti-virus vendor AVG subpoenas information on counterfeiters.

My apologies to Grisoft for the inference above that they are not taking care of their reputation. It seems that they are, but as the article indicates, it is very difficult for them to follow through on it!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Tuesday, 28 August 2007

Internet Explorer - Surreptitious Entry in the User Agent String

What does the Internet Explorer User Agent String say?

You can check it here: User Agent String.com.

By default on XP IE 7:


Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Okay, so it tells us that the browser is IE 7, on Windows XP and it has the three versions of .NET installed.

By default on Windows Vista IE 7:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506)
Again, it is quite simple. We have IE 7 as a browser, Vista as the OS, something about SLCC1, and the .NET components.

Now, what do we have here:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.0.04506.30)
We have it seems, some free advertising for a particular Web site going on. Somehow, whether by software install, spyware or malware install, the above .com site is in the User Agent String that IE shows to the world.

The InfoPath entry would have come by an InfoPath install.

To get rid of any unwanted entries, navigate to the following locations in the registry:

Windows XP:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
Windows Vista:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform
Delete the offending key and close all IE windows. Open an IE session again and navigate to User Agent String.com and verify that it is gone.

It only seems fair that the offending site ask permission for their name to be carried around the Internet. If the offending entry's permission came via some small print in a Terms & Conditions somewhere, then this situation demonstrates why we should be reading them!

This is one more little indicator for us to use to keep an eye on system health and integrity.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Thursday, 21 June 2007

Business Principles: How not to handle a mistake!?!

It is very important for our clients to know where we stand if we make a mistake. We must take responsibility for it. We must make every effort to make it right. They need to know that.

In the long run, it builds trust between us and our clients.

Yes, we may loose a couple. But, if the mistake we made costs them, do you blame them for leaving? No. Hopefully we are given another chance though.

For example, Toyota's newly released Tundra full sized trucks have had a cam failure problem on what looks like early production run versions of the vehicle with a certain cam supplier's product in the engine. The number of cam failures have been relatively minor compared to the volume of trucks produced, but Toyota has implemented a replace the whole thing for free policy.

Not just fix it, replace it.

An article on the subject: autoblog: Toyota expresses regret for Tundra camshaft failures on internet forums.

Ford on the other hand, has a different stance on a cam failure issue that affects the Ford Taurus SHO V8 engine co-produced with Yamaha. Around 20,000 of these hand built in Atlanta vehicles were sold across the 1996-99 life of the car. The 1997 year was the largest run of the vehicle.

Some would say that the number of cars produced warrants a "no response" attitude. Some would say that it isn't worth Ford's time to recognize and take responsibility for the issue.

The number of known affected vehicles is approaching 5% (1,000) of the entire product run.

This is not a statistical anomaly as the Tundra's failures will be over the entire production run of the Tundra.

Wikipedia: Ford Yamaha V8 engine.

V8SHO.com: Cam Failure Links.

Ford took the same stand with the vehicle fires due to a faulty seal in the break booster, and with the ~1997-2000 F-150 door latch failures.

As a result, owners of the affected vehicles have had to initiate class action lawsuits to get any recompense or recognition for their problems.

So I ask you:
  • Which company took the best approach with their clients? Ford or Toyota?
  • Which company will build long standing relationships with their clients? Ford or Toyota?
  • Which company took responsibility for the quality of their products? Ford or Toyota?
There are many of these types of questions that we can ask about the above similar situation between Ford and Toyota and how either company handled problems with their respective products.

Those questions in turn need to be asked towards our own companies and our own attitudes with regards to the products and services we provide our clients.

For whose best interest do we operate our business? That is a critical question, and the answer to it colours everything we say and do as representatives our company and the products and services provided by it.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

Tuesday, 24 April 2007

Help catch spammers and more - Project Honey Pot

A Honey Pot is a term for a computer, Web server, site, and the like that are purposefully left open to the Internet in an insecure manner so as to trap those trying to get unauthorized access to them.

Project Honey Pot is an organization that encourages us to get involved in the monitoring of malicious activity.

All of us who have Web sites, blogs, eCommerce sites, and more that are on the Internet are subject to many forms of malicious activities. Everything from e-mail address harvesting from our sites to comment spamming on our blogs are examples of the types of behaviours the Honey Pot Project is trying to monitor.

We can help by placing a hidden link on our sites and blogs to capture illicit robots/spiders that crawl them as one example. We can volunteer an MX record for a domain we own but do not use for e-mail. We can also setup a Honey Pot for them if we are so inclined.

Please, check it out, and if it suits you, get involved.

Honey Pot (Computing) definition on Wikipedia.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

Saturday, 10 March 2007

An Open Letter to Tier 1 System Manufacturers

Every once in a while we check out what the retail companies are doing via their flyers and their Web sites.

This blog post is a comment on the fine print that can be found on Tier 1 System Manufacturer’s flyers that advertise laptops, desktops, and poorly (my opinion) configured base SBS servers.

For us, it is important to comment on several aspects of the fine print.

We here at MPECS Inc. run our business based on a set of principles founded on honesty, integrity, and providing our clients with the best value for their dollar. We use what we sell; we have come to know what works and what does not work based on that philosophy. Our clients have come to expect that their solutions will work out of the box, and if they don’t, we will fix it with no questions asked.

I personally come from the school of, “A man or woman is only as good as their word”, “treat others as we would have them treat us”, and, “Under promise and over deliver”.

The above may be old clichés, but they are clichés that we live and breathe here in our company. There is proof in the pudding: we have client relationships spanning a decade now, and many more that we are building beyond the 5 year mark.

Here is an example of what can be found in the fine print, paraphrased, that I believe deserves comment:

All prices, specifications and promotional offers are subject to error, change, cancellation and substitution at Tier 1’s discretion at any time without notice.
When we provide a quote or proposal to our clients we stand by it. Generally, we give at least a minimum of 5 business days for the validity of the quote, and 30 days for the validity of the proposal. If the industry is going through a particularly volatile time, such as with production facilities being down and prices fluctuating wildly, we will notify our client as to those circumstances and request, request, permission to redo the quote at the time of purchase.

Either way, we honour the original agreement. There is no escape clause anywhere to be found in our quotes or proposals provided to our client or prospective client.

I do believe that is how a business is supposed to be run! The price is the price…A commitment is a commitment.

I really love the following paraphrased lines we have seen in some fine print:

Tier 1 cannot be responsible for typography, photography, pricing errors or other such errors. Tier 1 reserves the right to cancel orders arising from any such
errors.
We at MPECS Inc. stand by our word. There have been times where that has cost us. But, it is the price of doing business. We check, double check, and triple check our quotes and proposals before they go out the door. But, sometimes mistakes happen. We will honour the quote or proposal, even with the mistake. It will be mentioned to our client that a mistake was made and that they were getting incredible value for their purchase.

We have done a lot of publications, flyers, business pamphlets, and the like for our clients. We develop them on the Adobe Creative Suite 2 Premium Edition of applications. There is a multi-tiered vetting process that the publication goes through before going final.

Surely, in a company as large as Tier 1, there are enough people to go through the flyer before hand to make sure that no mistakes have been made?

I can’t imagine what our reputation would be like if we were cancelling orders on our client due to the discovery of a mistake in pricing!

With a reputation of cancelling orders, why would anyone want to deal with us in the first place? We quote on something, and then we turn around and cancel the order on them? If I were on the receiving end of that cancellation, how would I feel about the company that just bailed out on their commitment with me? Certainly not too happy, and possibly quite upset … to the point of letting others know of my bad experience.

To paraphrase yet again from the fine print:
Advertised configurations and limited-time offers only available to business customers in your country with xx employees or less … Tier 1 reserves the right to limit quantities to x (x) systems per customer.
Here we go again, more restrictions. Just who is this flyer aimed at Tier 1? Where exactly is the commitment to provide the products and services as advertized to anyone that may come calling after reading that flyer?

Therein lies a significant clue for those looking to get work done on their small business network infrastructure of one (1) to seventy five (75) seats: An I.T. organization that can assess, design, implement, and support a Small Business Network Infrastructure Solution may cost more in the short run, but it will surely save the small business owner from making costly purchase decisions for hardware and software that won’t do the job they intended it to.

To boot, a Solution implemented by this particular Microsoft Small Business Specialist will work out of the box! The solution would be designed that way.

Why should a small business owner need to gain an understanding of server capacity planning, server operating system features and management, and end-user support? The small business owner should be working in their respective industry generating revenues for their company!

An Intel CELERON processor based server for Microsoft Small Business Server 2003 R2 (Flyer configuration: Tier 1 Entry Level Server with Celeron D 3xx, 512 MB RAM, sub 200 GB SATA drive)? I can smell up-sell all the way in that one. To date, we have never sold Celeron into business/corporate environments. The Celeron processor was never meant to be in that environment. Also, the base server configuration with 512 MB of RAM will not stand up in an SBS production environment. There is no redundancy built into the server configuration either!

Again, to paraphrase the fine print:
Remember, backup your data. Tier 1 is not responsible for lost or corrupt data or software.
Heh, no wonder there is no redundancy!

This is a great example of why an experienced smaller I.T. Solution Provider should be dealing with small to medium businesses. We have the knowledge, the experience, and the industry specific understanding to design a complete infrastructure solution that will do what the client expects it to do, with minimal fuss and muss. Part of that solution is Disaster Recovery Planning. Redundancy is an important factor with DRP.

In the above quote, one little 4 word line nested before the (paraphrased): “we are not responsible if our server dies at your establishment” line just does not make it clear to a client that backups and redundancy matter. It does make it clear that Tier 1 absolves itself if things go sideways for the client though.

And finally, the Next Business Day On-Site Service - a paid for service BTW - clause paraphrased:

TECHNICIAN MAY BE DISPATCHED, FOLLOWING PHONE-BASED TROUBLESHOOTING.
We do not put our clients through “Phone Support Hell”. We do not put them on hold for an indeterminate amount of time for the next available “technician”, we do not make them go through phone menus to get to speak to someone here, and we do not subject them to a “technician” who will make them tear apart a system they purchased from us. That is our job, not theirs.

Recently, we fielded a call from an organization whose Board required that they purchase Tier 1 computers. They were having a problem with one of them. The machines were only a month old at best. They had purchased two (2) systems. After we assessed the system, it was clear that the problem was hardware related.

I mentioned to the Executive Director of the organization that she should brace herself for the necessary Tier 1 Support call. She was the one who had to make the call. I also mentioned that after the hold period, the “technician” would be asking her to essentially tear both the machine and operating system apart.

A callback to that particular Executive Director to determine the result of the Tier 1 support call revealed that she was indeed put on hold for a long time, then when the call was picked up, the “technician” did make her do all sorts of things in the operating system as well as open the case and start pulling cards and “stuff” out of the machine.

In the end, the “technician” absolved Tier 1 of anything wrong in the system, having satisfied themselves that there was nothing “wrong” with it. Of course, the system still remained unstable at best. It was a really frustrating experience for her and for us as we have dealt with this “Tier 1 Support” scenario repeatedly. The Tier 1 Support “Technician” categorically refused to begin an RMA process for the faulty system.

For your information Tier 1, if we determine that our system’s hardware is at fault, we replace the offending part. In a warranty based situation, the system is down for a day, possibly a couple of days for warranty replacement. We do NOT absolve ourselves from going the extra mile to satisfy our client. If there is a situation where the client would possibly be without a system for a long period of time, we will provide them with a temporary system, at little or no cost to them.

From another perspective: The client gets this great “deal” on their Tier 1 systems. Now, after the fact they can see that it was not such a great deal after all. Not only that, if they had to ship the CPU box back to the warranty depot, be without it for weeks at a time, it would have cost them at least another $75 for the shipping. To boot, who keeps the original box that the units come in? So, for the most part they would be shipping the product out in an improper manner at best.

How much did the Executive Director’s time on the phone cost the organization? How much does it cost any organization whose employee has to tear through a system at the hands of a Tier 1 Support “technician”?

Here are some observations via our experience with what is in our opinion a “Tier 1 Support Nightmare”:

  1. The hold times for support can at times be absolutely horrendous.
  2. The Support “Technician” at no time indicated to the Executive Director that she needed to follow proper anti-static grounding while handling the system components. We always ask the person who had to work with Tier 1 Support if they were instructed to be “Static Aware”. The resulting answer is always the same: “No”.
  3. There are times where one has to spend more time trying to figure out what the Support “Technician” just said than working on the system!
  4. Tier 1 system chassis are seemingly designed to be easy to get into and out of due to John and Jane Customer being the main set of hands that will have to go into the case if there is a post-sale problem.
For those of us who work very hard to provide our customers with the best possible value for their I.T. budgets, this Tier 1 situation is a sad state of affairs.

It is a shame that a Tier 1 business cannot stand by its word, that it can categorically refuse to provide a quoted product or service with no repercussions, and that we in turn accept these types of business practices as status quo.

Who are we servicing here Tier 1? Are we a company that strives to provide products and services that meet our client’s needs or are we a company that strives to put dollars into our shareholder’s pockets? At what point does the line between being a Product and Service Company and the shareholders stake in the company blur?

Cheers to the Microsoft Small Business Specialists and Small I.T. Companies out there who make every effort to be on top of technologies and solutions to the advantage of their clients.

In our particular business, there is nothing more satisfying than a compliment offered freely by our client to the effect of, “You guys are doing a fantastic job!” That makes it all worth it.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

Wednesday, 7 March 2007

Buyer Beware: Internet Prices Do Not Match In-Store

Robert McLaws blog, Best Buy Just Lost My Business Forever talks about the now documented evidence that shows Best Buy has an internal Web site that is identical to their Web facing site, but with different, higher prices.

The salesman takes the unsuspecting customer over to a terminal when the customer indicates they saw a lower price for the product on Best Buy's Web site, and shows them this internal site that, of course, has a higher price.

The customer is then stuck for the burden of proof. Most people will shrug it off and pay the higher price without really thinking about it.

I ran a similar situation last summer buying a barbeque from one of our local retailers. I happened to flag a manager down when I was looking for the model I wanted, and he and I eventually found it. The price on the unit was more than the Web advertized price.

When I challenged him on it, he said I needed to give him proof.

So, back home I went, and sure enough the price was lower. I PDFd the site page with the sale price, and also printed the product's Web page. I went back with that print-out, and the manager went with me to the till to authorize the lower price. :D

PDF:
  • It is very important to make a permanent copy of the site. The URL will be saved in the header as well as the date the copy was made.
  • If the URL is too long to show up completely in the header, copy and past it into an associated word processing document.
  • Company Web sites, especially retail and eCommerce sites, change frequently, so a permanent copy helps to preserve the evidence.
Print-Out:
  • Hard evidence for the manager or salesman/woman to prove the case.
  • Gives the buyer leverage if there needs to be an escalation in confrontation.
If there is an escalation in confrontation, and the results are less than satisfactory, then one needs to be as public as possible. Spread the word on the Internet, let your local Better Business Bureau know about your situation, and talk about it with others.

There is also the possibility of getting the local law enforcement, district attorney's office, or your own lawyer involved depending on the gravity of the matter.

Business practices of this sort need to be rooted out, and people need to know about them. If a business consistently operates in a shady manner such as this, the more people that know about it, the more likely it will have an impact on their business by not giving them any and hopefully wake them up!

Buyer Beware!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists