Solved 'Hacked' PC Laptop 101

I was musing again. Is there a way to run Windows on an aged parent's computer so that he can access internet and email, but when he closes the lid or powers down, all changes are lost and his computer starts next time in 'as new' condition?
It would not protect him from online scams but old people can succumb to scams on their phone or even snail mail.
Alternatively, can you create a form of mentoring whereby any dodgy activities are flagged up instantly on the "guardian's" email?

Would Kiosk mode do it or does it ban internet access?

There are many ways to clean a Windows computer without installing Linux!

flashh4 said:

Chromebook's are among the most secure type of computers that you can buy. Based on the Linux operating system, the Chrome OS features sandboxing, automatic updates, verified booting, data encryption and full OS recovery, all of which should keep your computer running smoothly.
But with that said they can become corrupted unless the operator is careful of what you download & what you click on ! Anyway that is my experience in doing HJT logs & computer cleaning of Malware !!

Click to expand...

Thanks.

kelper said:

Chromebooks seem to have quite short lives after which the OS gets no updates. Sounds like Apple, so check that OS is current when buying.

Click to expand...

What's weird is if a person can turn a PC into a Chromebook does it have a timeclock too? And if it does can someone simply wipe and install the Chrome OS again?

@The Pool Man IMHO, Chromebook is a good alternative to a Windows laptop for your dad. Another good alternative is a tablet. Whatever platform it is, he needs handholding in whatever he is navigating, Internet, email, etc.

Another issue is the social engineering scams that he fell for. IMHO, he needs even more handholding in this regard!

And yet another issue altogether is whether he should still be driving a computer/car.

Chromebook's are among the most secure type of computers that you can buy.

Click to expand...

With that said i did not say it's not virus proof ! A new stealthy Linux malware known as Shikitega has been discovered infecting computers and IoT devices with additional payloads. Among that one there are a few others Linux malware sees 35% growth during 2021, here is a short list of them !
1. XorDDoS is a versatile Linux trojan
2. Mozi is a P2P botnet relying on the distributed hash table
3. Mirai is a notorious botnet

As stated by a few members nothing is completely safe & secure !

Things can also sneak into the Chrome browser as well. The addons I would add if possible are Ublock Origin, Malwarebytes Browser Guard, and the Netcraft Extension, That should pretty much prevent the tech scam redirects.

kelper said:

but when he closes the lid or powers down, all changes are lost and his computer starts next time in 'as new' condition?

Click to expand...

You access the Internet through your browser, so you set it up there.
This includes erasing stored information.

Firefox

aboutreferences#privacy

For example

Add to user.js :

/* 1001: disable disk cache ***/
user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.disk.capacity", 0);
user_pref("browser.cache.disk.smart_size.enabled", false);
user_pref("browser.cache.disk_cache_ssl", false);
user_pref("browser.cache.memory.enable", true);
user_pref("browser.cache.memory.capacity", -1); //1Gb=1048576‬
user_pref("browser.privatebrowsing.forceMediaMemoryCache", true); // [FF75+]
user_pref("media.memory_cache_max_size", 524288); //512Mb
user_pref("browser.cache.offline.enable", false);

Use policies for different restrictions.

Linux is a good tip.
GNOME Desktop is a real stupid kiosk.
If there are no problems with installation on your laptop (RGB etc.)
May be "Fedora".

abactuon said:

Add to user.js :

/* 1001: disable disk cache ***/
user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.disk.capacity", 0);
user_pref("browser.cache.disk.smart_size.enabled", false);
user_pref("browser.cache.disk_cache_ssl", false);
user_pref("browser.cache.memory.enable", true);
user_pref("browser.cache.memory.capacity", -1); //1Gb=1048576‬
user_pref("browser.privatebrowsing.forceMediaMemoryCache", true); // [FF75+]
user_pref("media.memory_cache_max_size", 524288); //512Mb
user_pref("browser.cache.offline.enable", false);

Click to expand...

I don't have any user.js so can I create a blank one and add those lines? In which profile, local or roaming?

Thanks.

There's an interesting app called Kioware which could lockdown a Windows computer so that only certain apps could run. it integrates with TeamViewer so you could operate it remotely. The computer will boot up nd log in a restricted user who has no access to the OS. It could run a browser and an email program (I set it for Google and Gmail and it works perfectly. It is pretty sophisticated and would take some time to really learn.

@The Pool Man does your father live a long way from you?

kelper said:

There's an interesting app called Kioware which could lockdown a Windows computer so that only certain apps could run. it integrates with TeamViewer so you could operate it remotely. The computer will boot up nd log in a restricted user who has no access to the OS. It could run a browser and an email program (I set it for Google and Gmail and it works perfectly. It is pretty sophisticated and would take some time to really learn.

@The Pool Man does your father live a long way from you?

Click to expand...

(I just saw this now.) Thanks for your reply. I'm now on the wrong coast of America to help him. This sounds very promising but I'd have to talk with him about it when he comes out soon.

kelper said:

There are many ways to clean a Windows computer without installing Linux!

Click to expand...

kelper said:

There are many ways to clean a Windows computer without installing Linux!

Click to expand...

I've gathered creating a Windows install thumb drive can do it and skip the entire Linux bootloader headache.

You could nail down a new, low-cost laptop yourself and mail it to him? That Kioware means he would have just a browser. I tried it and my antivirus loaded ok. I just need to add a login username and password for Gmail so the user does not have to log in every time.

With seniors my experience is to stick with what they know. My Dad got an iMac after having issues with browser hijacks on windows 7, rather than the change to Windows 10 and because the Imac had a big screen. He was fairly computer literate but just couldn’t get on with it - far too different. The same with his iPad. If Windows is familiar and intuitive (which it is!) I’d just get another Windows laptop and install good antivirus and fox filter to filter the web browser. I’m sure that would be fairly bulletproof - It’s how I used to set them up for kids.

The phone scams are something else- but you can get landline phones that block most junk calls and just tell him - ask for a number to call back and speak to someone else first before doing anything to check if it’s genuine.

I nearly fell for one recently as it sounded so authentic - even though I was suspicious. It was telling me my IP address had been compromised and was an open network. I ignored it - checked things out and it was rubbish. But they claimed they were from Openreach which made me think twice - even gave a name and a number to call back on. Still ignored it. They called back to say the same thing and that my internet would be cut off in 48 hours if I didn’t sort it out as it was illegal to use an IP address openly. So I cut to the chase and said what exactly do you want me to do - can’t see any issues at all. They said do you have s device handy that can access Google? Ha! So I put the phone down. And they called straight back! And got quite high pressure and threatening. Put the phone down again and reported it.

But the thing is - it’s very manipulative stuff and the scams are getting more and more devious.

I don’t think you need to lock down his computer - apart from good antivirus and fox filter. Just sort something to avoid the phone scams.

Hazel123 said:

The phone scams are something else- but you can get landline phones that block most junk calls and just tell him - ask for a number to call back and speak to someone else first before doing anything to check if it’s genuine.

Click to expand...

Never just ask for a callback number. Scammers will just give you the scammer's number. Do the research and call the official number of the supposed company they supposedly represent.

The Pool Man said:

Hey All. Thanks for your responses.

He is an older man that's not tech savvy and I just learned from a relation he's 'that' guy that gets the 'Call Microsoft -- your PC has been compromised!' and can write checks. So he's paying those Indian scam support companies to compromise his PCs. (And here I thought that Glitter Bomb guy on YouTube had taken them out. lol)

Click to expand...

Was the bad guys' first contact by phone? Just curious. I wonder if all you need to do is set him up as a User and yourself as Admin? Then keep your password secret. If he needs it, you could always log in with TeamViewer and check it was safe. Or let him do what he wishes but change the Admin password. I can operate the computers of some friends and family remotely using TV, but I only do it with permission and when they are sat in front of the PC.

Porthos said:

Never just ask for a callback number. Scammers will just give you the scammer's number. Do the research and call the official number of the supposed company they supposedly represent.

Click to expand...

Sorry yes I meant just to see if they hung up on you if you ask for a name and number but don't call it back as you say. In this case Openreach aren't even contactable by phone and dont publicise a contact number, so I guessed it was a scam from that.

Some of them use high pressure tactics these days. Just tell him to put the phone down if it's someone he doesn't know - they can always send a letter if it's genuine.

On some phone systems, a scammer can pretend to hang up or ask you to hang up but he keeps the line open. When you pick the phone up and dial, you will hear a dial tone and then ringing, but you are still connected to the scammer. One way round this is to call the bank or whatever on a different phone or to call someone else to make sure the line has cleared.

If my bank were to phone me, I would ask them to list some recent transactions. More likely I would call the number on the back of my bank card.