© Computer Care 1/25/2012
We recently had an interesting virus removal problem come in.
Customer had an off the shelf computer by one of the big computer manufacturers, and it was one month out of warranty.
Windows 7 Home Premium 64bit.
The customer had let the trial version of McAfee anti-virus expire, it was still functioning but no longer updating to the latest virus definitions.
The customer had picked up one of the fake Windows Virus Removal malware’s.
(The ones that pop up and tell you that you have infections and if you click here for $49.95 they can remove them) It disabled access to programs and the internet.
We stopped the process from running and used Malware bytes anti-malware and spybot s&d to remove the infection.
We also removed the outdated McAffee anti-virus and then replaced it with Microsoft Security Essentials.
All was good.
Until we ran the quick scan and found:
coinminer
SireFeF.B
SireFeF.T
Alureon.TK
Infections on the system.
Removing and cleaning up coinminer was no problem, but SireFeF and Alureon presented a strange issue.
When either quarantined or removed by MSE, Windows could not reboot.
MSE instructs you to reboot the system to finish the cleanup process.
Computer would shut down but on restart we got the error screen presenting us with the Windows Repair option.
The repair option failed to restore functionality to the system.
So we booted from a Repair disk but the only way to get the system to reboot was to restore to a previous restore point, which then restored the infections.
Here is what we did, maybe not elegant but it worked.
Boot Windows to the desktop.
Allow MSE to quarantine all 3 of the infections.
Insert the MS Windows 7 installation disk and start the Repair Installation process.
Followed all the steps to run a repair and NOT a clean install, do not allow Windows to install to a different folder than original install or allow it to format the hard drive.
Windows has to reboot during the installation process and that went fine.
After the repair install we just ran MSE on a full scan and all was clean.
For good measure we ran MalwareBytes and SpyBot S&D again, all clean.
The process was a little more involved than appears here but I hit the highlights.
Customer data protection was our first and foremost concern, many things on this system the customer did not want to lose. Personal files and new baby pictures and what not.
When doing these types of removals make sure to make backups and set restore points, even if those are going to be of infected systems. Just remember to use a clean external hard drive and then sterilize it once you have been successful.
A backup of an infected system is still better than no backup at all. Just keep the files isolated.
Also keep in mind when removing McAfee or Norton, you must download and run the remover otherwise you will not get all of the processes and services removed.
McAfee Remover
Norton Remover
I posted this not so much as a tutorial on how to remove these infections as much as when I researched these infections, no one else seemed to have the boot issue with Windows 7 that we did.
Your own mileage may vary; use this information at your own risk.
Computer Care & Computer Care Online cannot assume responsibility for damage or loss due to this information or it’s use.
Computer Care does not claim to represent any of the mentioned software vendors or programs listed in the post. All trademarks, copyrights and patents remain the sole property of the respective companies, they are mentioned here for reference only.
Link: http://www.computercareonline.com
© Computer Care 12/22/2011
To enable or disable mouse pad tap to click.
Tap to click is the ability to tap your finger on the surface of your laptop’s mouse pad and select the item your cursor is on. In other words, tap your finger and have your laptop respond as if you had clicked the left mouse button.
By default most laptops have this feature enabled out of the box. It worked that way the first time you started your laptop. Over time or by accident somehow this feature became disabled and you would like to have it back.
Link: http://www.computercareonline.com
Tell Tale PC Symptoms
© designjetparts.com 07/11/2011
Here are some simple and almost always true rules about PC problems.
If your PC boots to the desktop but then restarts, and constantly restarts over and over.
Most often it is a bad or weak power supply. Sometimes it can also be a failed peripheral device such as a secondary hard drive, CD / DVD rom drive or another device that connects to the power supply with a 4 pin plug.
When certain repairs are done to some DesignJet plotter models a carriage height calibration (adjustment) must be done.
Models include:
DesignJet 1050C and 1050C Plus
Designjet 1055 CM and 1055 CM Plus
DesignJet 5000 and DesignJet 5500
EagleJet
Link: http://www.computercareonline.com/product_info.php?products_id=793/part-no=Q1273-60228
Recently the HP website started showing the HP DesignJet Carriage Belt and Tensioner assembly Q1273-60228 for DesignJet Plotter models 4000 4500 and Z6100 has been replaced. HP now shows the HP DesignJet Carriage Belt and Tensioner assembly CQ109-67004 as the replacement part.
Be aware of this.
HP Designjet Printers - Blue Print on Screen Prints out Purple
ISSUE:
When using the HP-GL/2 HP-RTL Designjet driver, blue text or images, as they appear on the screen, appear to print more "purple" than "blue" on the HP Designjet printer from some Microsoft (R) applications.
SOLUTION 1: When using the HP-GL and HP-GL/2 drivers this specific version of HP blue (0.0.255) is a combination of Cyan and Magenta inks. The Cyan ink is more efficient at absorbing light where the Magenta ink is less efficient at absorbing light and better at reflecting light. This causes the combination of these two inks, combined to create blue, to appear to have a purple tint.
To correct this problem, perform the following: