Ever wonder why your antivirus program didn’t catch that virus? It’s not broken. Security is a race, and the bad guys are usually ahead. Learn why security tools can’t stop everything, what that means for you, and the most important step you can take to stay safe.
(Image: iStock)
Question: I’ve been an independent computer repair tech for over 12 years now. The question I get the most (and have the hardest time answering) is this: how come my antivirus program didn’t stop me from getting this virus? When you’re installing AVG, the program says that only 3% of today’s security problems are caused by traditional viruses. Is this true? Is it true for the other antivirus programs as well?
In other words, why don’t anti-malware tools work better? Why don’t they work the way we expect them to?
I fault AVG for the phrase “traditional viruses”. I think that puts an unrealistic spin on your expectations. Malware is malware, and that includes viruses, spyware, ransomware, rootkits, zombies, and gosh knows what else. What they mean by “traditional” is unknown, and I have no idea where the 3% figure comes from.
But there’s a kernel of truth in AVG’s statement. No matter what program you run, there’s still a chance your computer will get infected.
Lost your password vault? You’re not locked out forever. It's just an inconvenience. With some patience and the right steps, you can reset your accounts, rebuild your vault, and protect yourself from future mishap.
(Image: adobe stock photos)
Question: Do you have a general technique for creating new passwords for every single site that needs them? Yes, I did the unthinkable, I lost my password vault account, and have to start over.
The technique is simple.
The technique is also time-consuming and ponderous.
Let’s review it, and what you can do to avoid this situation in the future.
Want to email a big group without looking like a spammer or getting blocked? I'll show you why the usual tricks don’t work well and walk you through safer, smarter ways to send group emails, from simple groups to full newsletter services.
(Image: ChatGPT)
Question:
1: I have been working on figuring out how to send emails to a large group of people at a time. I have an organization, and would like to send weekly emails out to them. Right now, I have 1500 people, but am actively signing people up and expect to have several times more over the next couple of months.
2: When I travel, I send e-mails to a selection of friends (all of whom have explicitly asked to be on the list of recipients, and who presumably therefore do not mark them as spam). But my ISP sees multiple addressees and an overseas IP address, assumes spam, and prevents it from being sent. I have taken it up with them, and their attitude is “Your problem, not ours.”
First, thank the spammers. 🙁 Because of them, email services — the ones you use to send as well as those used by your intended recipients — have been forced to make this more difficult than it should be.
What we might do without thinking about it too hard makes us look like spammers. Hence, our messages don’t get through — either bouncing, landing in spam folders, or just disappearing entirely.
And yes, it’s our problem, not the email service’s.
Gmail is taking away the handy “Check mail from other accounts” feature in 2026. If you use it to manage multiple email accounts in one place (Gmail), you’ll need an alternative approach. I'll cover what’s changing, why it matters, and the options you have left before your mail disappears.
(Image: askleo.com)
I’ve recently learned that Gmail will remove the ability to check email from external accounts.
If you don’t use it, you don’t care. If you do use it, I’m guessing you’ll care deeply.
I fall into the latter category; for years, I’ve used Gmail as a one-stop collection of all my email from all my email accounts.
Thinking of skipping or delaying Windows 11? You can keep using Windows 10 safely, but changes are inevitable. From security updates to app support, here’s what happens if you stay put. Learn how long you can expect things to keep working before problems appear.
(Image: ChatGPT)
Staying with Windows 10 — not updating to Windows 11 — is a valid choice. I’ve written about how you can keep using Windows 10 safely after support ends.
But there’s more to it than that, isn’t there? Over time, things will change. It’s important to understand what those things are and how you need to prepare.
Some system cleaners cry wolf, showing scary error counts to pressure you into buying. Others disagree on what counts as “dirty.” I'll unpack the scare tactics, the lack of standards, and the risks of using these utilities, plus safer ways to keep your PC running smoothly.
(Image: depositphotos.com)
Question: I have a couple of good cleaning programs to protect my computer, which you’ve recommended. But occasionally, I get suckered into running a free trial of a program (like a registry cleaner). I may have just run my cleaner and been given a clean bill of health, but when I run the free trial, I invariably get hundreds of errors. Why?
What you’re experiencing leads me and many others to avoid recommending any registry or system-cleaning utility.
It’s not just a few bad apples that spoil the entire bunch; in this case, it’s often difficult to find an apple worth biting into at all.
A blue screen that won’t go away feels like the end, but it may not be. Learn how to boot from other media, rescue your files, and figure out if it’s Windows or hardware at fault. Most importantly, backing up now saves heartbreak later.
(Image: ChatGPT)
Question: How do I stop it from booting up and then immediately going to the blue screen of death? I’m so desperate to keep it, there are so many things on there I need to have.
This question has a lot to unpack, including why a blue screen may prevent a normal boot-up to the potential for data loss.
There are techniques to deal with the former, and I have strong opinions on the latter.
Wonder what those strange strings of numbers labelled things like MD5 or SHA mean next to a download? They’re a way to double-check that a file is safe and complete. Here’s how checksums work, why they matter, and when you might want to use them.
Checksums for Hiren’s Boot CD. (Screenshot: askleo.com)
When you go to a download website to download a large file, you might see a series of numbers displayed alongside the download link. These are commonly referred to as checksums or hashes and allow you to confirm that the download completed successfully.
The example above for Hiren’s Boot CD PE shows a link for what some would consider a fairly large download: over three gigabytes. (If you’re curious, Hiren’s Boot CD provides diagnostic and recovery tools that run from a bootable CD, DVD, or USB drive.) We’ll use it as an example as we look at why checksums exist and how to use them.
Ever right-click the Start button and wonder why you sometimes see Command Prompt, other times PowerShell, or maybe something called Terminal? They look similar, but each has its own role.
Right-click the Start button, and you may see any one of these. (Image: askleo.com)
There’s a very good chance you’ll never need a command-line interface in Windows. However, on occasion, particularly when diagnosing or tweaking your system, there are certain things that are more easily done using one. In rare cases, a command-line interface might be the only way to accomplish some obscure tasks.
Depending on your setup, you might see one of three separate options in the alternate (right-click) Start menu:
Command Prompt
Windows PowerShell
Terminal
They’re all command-line interfaces, but of course, they’re different. Sort of.
Let’s examine what they are, what you can control, and which you might want to use.
AI is rewriting the rules of the web, and sites like Ask Leo! are feeling the squeeze of fewer clicks, more bots, and uncertain futures. What does that mean for the content you rely on? I'll look at the challenge, the irony, the fear, and what you can do to help.
(Image: ChatGPT)
I have a love/hate relationship with AI. Hate might be too strong a word — let’s just say I have concerns. And some of those concerns relate to whether sites like Ask Leo! will survive.
AI is an existential threat. Maybe someday for humanity, I don’t know; what I do know is that the threat is real and current for websites you probably rely on for content… like answers to your technical questions.
Tempted to hit "reply" and tell spammers to knock it off? Don’t. Here’s why replying makes things worse, and what you can do to keep spam under control.
(Image: dollarphotoclub.com)
Question: Can I set up an automatic email reply to all the [BULK…] emails I get telling them that such are not being received at my email address? Would it be advisable to do so? I get few if any that inform or provide any useful info. Or perhaps I need to ask, “What is the best way to deal with [Bulk…] emails other than one by one?”
I assume that by “BULK” you mean unsolicited email, more commonly called spam: email you never signed up for and don’t want.
Never, ever reply to spam. Period. It won’t help and will more likely make things worse.
I won’t show you how to set up an automated reply because it’s the wrong thing to do. Period.
Instead, let me explain why replying to spam — automated or manually — is a really, really bad idea.
Thinking of backing up your files to another partition on the same hard drive? Learn how this puts your data at risk and discover smarter, safer ways to back up before disaster strikes.
Question: I am going to do a clean install of Windows to hopefully fix some errors, which means that I need to back up my files. The problem is that I don’t quite have the means to back up my hard drive. Can I create a new, separate partition on my existing drive (1TB), copy my files to that, and then perform a clean install on the existing Windows partition? Afterward, I would transfer the files back and delete the “backup” partition. Would that work, or am I heading in the wrong direction?
It would work, but, yes, it’s the wrong direction.
There are risks. And from what I can see, you’re running a huge risk before you even begin.
Not all websites protect your password the same way. Some do it well, others badly, and a few dangerously poorly. I’ll walk through the good, the bad, and the ugly of password storage, and share one simple step you can take to keep your accounts safe.
(Image: adobestock.com)
Question: After reading your excellent article, “How Can a Hacker Try All Possible Passwords If Systems Block the Login Attempts?” I still don’t understand. Even if a hacker has stolen the user database of logins and hashes, how can they duplicate the method of hash creation used by any particular website? I would think different websites would use different hash-creation formulas.
You would think. And they should. That’s what makes it so frustrating when these attacks are successful.
The problem is that security is sometimes an afterthought. In fact, it’s often not thought of in any deep sense until after a successful attack.
The good news is that there’s something simple you can do about it.
Want Windows 11 without tying it to a Microsoft account? There’s still a way. I’ll walk you through a simple but slow two-step trick. The result: a fresh Windows 11 setup with only a local account... at least until Microsoft closes the door again.
(Image: ChatGPT)
Microsoft has removed various workarounds discovered to allow Windows 11 to be installed without using a Microsoft account. Their recent justification claimed a change was to “avoid missing important parts of the setup process”.
Important for whom?
The technique I’m about to describe is simple but time-consuming. So far, my results show it works… for now. The resulting installation of Windows 11 Home has only a local account.
The process starts a little further back than you might imagine.
Is your PC slowing down, acting odd, or just feeling old? A full reset might be the fix, but how often should you do it? I’ll share when it makes sense, when it doesn’t, and how to decide if your computer needs a fresh start.
(Image: depositphotos.com)
Resetting your PC involves backing everything up, reinstalling Windows and applications from scratch, and restoring your data from the backup or elsewhere.
In years past, I advised doing a reset fairly regularly. Recommending an annual reset wasn’t uncommon for active users, including me.
These days, a reset isn’t as necessary as it once was. I’ll review why and when we would want to reset Windows.
When people find their posts or comments removed or altered from websites they visit, sometimes they claim that their right to free speech has been violated. That's rarely the case.
(Image: canva.com)
Question: Can you advise me on the “rules” of the internet regarding free speech? I’ve had my comments on some sites and posts deleted by the owner. Doesn’t that violate my right to free speech?
No, it doesn’t.
Free speech is an interesting concept in general, especially in today’s turbulent times. Take it to the internet, and things get even more “interesting”.
Yes, there are rules and even laws, but it’s complex.
Internet cafe owners can monitor the activity on open WiFi hotspots. Whether or not they take the time to do it is another story!
(Image: canva.com)
Question: Just wondering if others can see what I’m downloading, say in a coffee shop or some other public place, like the administrator there? Or can they just tell that something is being downloaded? It’s a local place, so I assume they have some local provider like Comcast. I imagine it takes up their bandwidth, and they don’t like that because it makes the connection slow for others in the establishment. Please let me know.
When you’re using someone else’s WiFi — or even their wired connection — they’re providing you with internet service.
They’ve become your internet service provider, or ISP.
Think a VPN makes online banking safer? Banking is already protected by strong encryption, but a VPN adds a twist. I’ll explain what’s really protected, what isn’t, and where the real risks lie when you bank on the go.
(Image: canva.com)
Question: Is it safe for me to use a VPN for online banking while I’m on the road?
Online banking these days is relatively safe to begin with. HTTPS connections, for example, mean your conversation with the bank is encrypted between your computer and the bank’s servers, regardless of whether or not you use a VPN.
There are a couple of things that a VPN kinda/sorta makes slightly safer.
With USB-A and USB-C, things have gotten simpler, but not always obvious. I’ll walk you through what cables really do, how devices and chargers “talk,” and why missing charger blocks isn't a big deal.
(Image: canva.com)
Question: So many devices come with only the charging cable and not the actual charger (plug/block) itself, which has the label on it stating what voltage & amperage ratings it has. I have yet to find charging cables that come with such labeling on them. So how do you know what that particular charging cable is capable of — or are they all universal charging cables whether or not they come with the plug?
USB standardization has made all of this much simpler.
For the most part, if the cables fit, your device will charge safely. Slowly, perhaps, but safely. There are exceptions, but when talking about portable devices, it’s rare.
Worried that staying signed in leaves you open to hackers? I’ll explain why your router, firewall, and smart habits protect you, what the real risks to your accounts are, and the simple steps you can take to stay safe online.
(Image: ChatGPT)
Question: Is it possible for hackers to hack an account that has not been logged out from the Internet?
There are two ways to take your question:
Can hackers hack into my computer from the internet to access accounts that I’ve signed into?
or
Can hackers hack into my online account on the internet because I haven’t signed out of the account on my computer?
Both answers are basically “no”. But because there are never any absolutes when it comes to security, the true answer for both is that it’s extremely unlikely.
Possibly being labeled a spammer is another reason not to forward political and other emails. Do it enough, and your normal email may not get delivered.
(Image: canva.com)
As I write this, thousands of people have my email address. It’s right there on the “From:” line of every newsletter I send.
Naturally, some of them forward me jokes, political messages, hoaxes, or urban legends. I know they mean well and do so with the best of intentions.
But I mark them all as spam. It seems harsh, but I feel I have to.
Because that’s exactly what they are.
Even if I don’t, others may, and because of that, there’s a very important lesson here in making sure that the rest of your email keeps getting delivered.
Worried you need a new rescue disc every time your backup program updates? Relax. I’ll explain when it matters, why it usually doesn’t, and how you can get one at the last minute.
(Image: ChatGPT)
Question: Hi Leo, I’ve been using the Macrium Reflect program to back up my Windows computer. However, I’m finding that when I try to do an image or a clone backup, I’m prompted each time to update the software. This requires making a new rescue disc, which can be fairly time-consuming as I’m using Macrium Reflect to back up my desktop PC and my laptop, too. I’m concerned that if I don’t make a rescue disc each time the software asks me to update (which is every time I open it), my backups won’t work and I’ll be “you know what” out of luck! Can you advise?
You don’t need to make the rescue media every time you back up.
You don’t even need to make new rescue media each time Reflect updates itself.
Heck, you may not even need to make rescue media at all until you need it.
There are times it’s appropriate to make a new one, but even then, it’s not a disaster if you don’t.
Think those old files on your hard drive are gone forever? Maybe not. I’ll walk you through what affects your chances of recovery, the tools you can try, and why sometimes, it all comes down to luck.
(Image: ChatGPT)
Question: Is it possible to recover data that was deleted a year ago from an external hard drive?
This is another question that earns my most common answers: “Maybe” and “It depends”.
As long as a few conditions are met, it may be possible to recover old data from a hard drive. I’ll review what those are and recover some files from a drive I formatted.
If your computer refuses to start, the problem might be the Master Boot Record (MBR). Fixing it isn’t as scary as it sounds. I’ll show you how to use Windows’ built-in Startup Repair and a couple of handy command-line tools to get your machine running again.
(Screenshot: askleo.com)
Question: Can you tell me how to fix the MBR?
The MBR, or Master Boot Record, is the first sector of MBR-configured hard disks. (GPT-configured hard disks have something similar, but I’ll be referring to MBR unless the difference matters.) In either case, it tells the BIOS or UEFI where on the hard disk to locate the software to be loaded when you boot the computer.
Without an MBR, or with a damaged MBR, your machine won’t boot (power up and load the operating system).
There’s a lot more to booting than just the MBR. Fortunately, recent versions of Windows have made the distinction between these various pieces fairly transparent, referring to all of them as “Windows Startup”.
I’m not sure what led you to ask about fixing the MBR, but repairing Windows Startup will address MBR problems as well as others.
Accidentally run or opened something suspicious? We've all done it. I’ll walk you through the options from scans to resets, and consider what to learn from the experience.
(Image: ChatGPT)
Question: I have a question. I recently downloaded a wrong file after being redirected. I even allowed the .exe to run the cmd (I didn’t see it type anything in it before closing, though) after allowing the threat in Windows Security. I did a full scan afterwards, and it said everything was fine. Should I still be worried and consider a factory reset?
Worried? Probably.
This is exactly the scenario security folks warn against so strenuously: running or opening something you shouldn’t and bypassing warnings from your security software.