Consider It Fixed

Microsoft Security Essentials: Reasonable Security for Free

I'm awfully sick of bulky security products.  You know, those do-anything-anti-everything products from Symantec, McAfee and the others.  Over the last 6 months, my client call volume increased dramatically with complaints of slowing computers.  My customers were not be assaulted by spyware and adware.  They were under assault from their trusted security vendors raising pigs - bloated anti-everything products.  If you have a 3 year old PC with a 2 GHz processor and 1GB of RAM, you may find the machine nearly useless overnight due to the latest antivirus update.

So, I began a quest to find a great security product based on new criteria – it must be small and use limited system resources.  As well, it must install in under 5 minutes.  Anything that takes longer is such a dead giveaway that it’s bloatware.  I started looking at the options and spent time with a number of products including Kaspersky, Viper from SunBelt Software, and ClamWin, an open source antivirus program.  I started installing Kaspersky on a number of client PCs with good results.  

However, there was a downside to this choice.  Most PC users now have access to ‘free’ antivirus software from their internet service providers.  Comcast and AT&T, my 2 providers, offer McAfee to their users at no additional cost.  It’s quite a tempting offer until it renders your PC somewhat useless.

Now enters Microsoft to offer Microsoft Security Essentials.  I have been testing the product on 4 of my PCs, and I must admit, Microsoft has done a decent job on this product.  So far in my testing, I have not seen any problems.  In fact, it’s proving to be a great product.  I'm especially pleased with its performance on my netbook.  Most netbooks are optimized for long battery life – the opposite of performance.  Most antivirus suites kill any remaining performance in a netbook.  But Microsoft Security Essentials' small profile is perfect for these low performance computers.

Here is what I like about Security Essentials:

• It’s readily available at no cost
• It installed very quickly
• It’s small and doesn’t have much overhead
• It installs on Windows XP, Vista, and Windows 7
• It can catch most common virus and malware problems

If you are interested in trying it, you can download it here: http://www.microsoft.com/Security_Essentials.  Just remember to remove your old bloated antivirus software in the add/remove programs section of the Control Panel before installing it.

If this post was helpful to you, please click on Comments below and leave a comment.

Contact Info: info@consideritfixed.com
                   860-985-7300

Revisited: Insidious MS Antivirus Removal Instructions

I last wrote about MS Antivirus and its derivatives in March of 2009.  In recent weeks, this parasite has been extremely active as I have seen a significant spike in service calls.  According to the Wikipedia, this parasite is going by many names: XP Antivirus, Vitae Antivirus, Windows Antivirus, Win Antivirus, Antivirus Pro, Antivirus Pro 2009, Antivirus 2007, 2008, 2009, 2010, and 360, Internet Antivirus Plus, System Antivirus, Spyware Guard 2008 and 2009, Spyware Protect 2009, Winweb Security 2008, System Security, Malware Defender 2009, Ultimate Antivirus2008, Vista Antivirus, General Antivirus, AntiSpywareMaster, Antispyware 2008, XP AntiSpyware 2008 and 2009, WinPCDefender, Antivirus XP Pro, and Anti-Virus-1.

Before I provide instructions on how to remove this parasite, I have a few words of advice.  This parasite will tell you that your computer is infected with many things, and if you buy it for $29.95, $34.95, or 49.95, etc., if will fix your computer.  If you have given this parasite your credit card, immediately stop what you are doing and cancel your credit card.  That said, these instructions have worked on removing the parasite from many computers.  But if you have interacted with this thing a lot or have one of the more destructive versions on your computer, you may end up with no other option than to rescue your data, format your hard drive and reinstall your operating system and applications.  If you don’t know how to do this, contact your local computer professional for assistance.

OK, here’s what to do when you are infected. 

1. Don’t interact with it.  If possible, use Ctrl+Alt+Del to bring up the task list and kill the window which is telling you that your computer is infected.
2. Step #1 - Run System Restore.  You can do this by clicking on Start, All Programs, Accessories, System Tools, System Restore.  Select a restore point from before you got infected and run system restore.  If you have no restore points or you run System Restore and you are told that it wasn’t able to restore your computer to date you selected, you may be in trouble.  You can try the next steps, but your chances for a good outcome have just lessened.
3. Step #2 - If you use Internet Explorer, empty your browser cache.  Open Internet Explorer and click on Tools, Internet Options, and delete all of your browsing history and cookies.  Please note that these instructions may vary based on the version of IE that you are using.  You can consult Internet Explorer's Help if you can't figure out how to do this.
4. Step #2 - If you use Firefox, click on Tools, Clear Recent History and delete all your browsing history and cookies.  Please note that these instructions may vary based on the version of Firefox that you are using.  You can consult Firefox's Help if you can't figure out how to do this.
5. Step #3 - Install and run Anti-Malware by Malwarebytes.  Go to http://www.malwarebytes.org/.  Click on the link to “Download free version” on the left side of the screen.  Next, install it on your computer.  Leave both check marks selected and start Anti-Malware and update.  Make sure that you have the Scanner tab selected. Select Perform full scan.  When the scan is complete, you will be given the option to remove what Anti-Malware finds. Use that option. It may ask for permission to restart your computer. Do so.
6. Setp #4 - Install and run Microsoft’s Malicious Software Removal Tool.  Go to http://www.microsoft.com/security/malwareremove/default.aspx.  Click on "Skip the details and download the tool".  Click on the download link and install. Run Microsoft's Malicious Software Removal Tool and follow it's instructions to remove any malware that it finds.

If you are unable to perform these steps, you are in trouble.  Your best course of action is to backup your data, format your hard drive and reinstall your operating system and applications.  I know that it hurts, it hurts a lot.

In the future, be very careful when security warnings appear on your computer. Unfortunately, you need to evaluate them and decide if they are real, or as in your recent case, malware.  It is very confusing.  If you get involved with this type of malware in the future (and Windows XP is the target as Visa is more secure), go immediately to system restore and restore your computer to a date prior to the infection. Do not interact with it as by doing so, you are most likely giving permission to install on your computer.  If you are unable to perform a restore, call me or your local computer repair professional for assistance.

Contact Info: info@consideritfixed.com
                    860-985-7300

Update on Insidious MS AntiVirus

On December 2nd of last year, I wrote about a family of computer parasites going by the names MS AntiVirus 2009, MS AntiVirus XP, etc.  A number of my clients had close encounters with this pest and it wasn't kind.  Some had been duped and offered it their credit card in a frustrated attempt to get their computer back.  In all of these cases, the fix was bogus.  Some of my readers took the time to offer stories of their experiences with it and solutions that they have found to remove it.  You can see their comments here:  http://www.consideritfixed.com/2008/12/insidious-ms-an.html.

Since I originally wrote about MS AntiVirus, I have had more opportunities to spend time with it.  Here are some of the things that I have learned.

1. When you first see signs that this parasite is on your computer, don't interact with it.  Simply stop what you are doing and run system restore to an earlier date.  Next, download Microsoft's Windows Malicious Software Removal Tool (http://www.microsoft.com/security/malwareremove/default.mspx) or Malwarebytes Anti-Malware (http://www.malwarebytes.org and run them.  You should be OK.
   
2. If you interact with it, it will install into your system and begin to cause problems.  I have found that it can do several things including disabling the tools that computer repair techs use to fix computers.  For example, it will delete all system restore points so that you can not run system restore.  I have seen it disable the menu system so that the run command and control panel appear unavailable.  In these cases, I believe that it is better to remove any user data from the PC, format the hard drive, reinstall the operating system and replace the data.  One specific procedural note.  Make sure that the new install has modern virus protection in place before putting the user data on it.  Also, run either Microsoft 's Windows Malicious Software Removal Tool or Malwarebytes Anti-Malware on the new configuration to ensure that the parasite hasn't hitchhiked.
   
3. If you were duped by it and gave it your credit card, call your credit card company and report the exploit to them.  I also recommend that you cancel your credit card.
4. When in doubt, take a more conservative approach with this parasite.  While some malware tools appear to remove it, it's unclear as to whether it has left any 'back doors' open into your system for further exploits.  So, in my view, a full format and reinstall is the only way to insure a successful removal.

Please keep posting information about this family of parasites here so that we can collectively help others who are infected.

Contact Info: info@consideritfixed.com
                    860-985-7300

Computer repair in West Hartford, Computer repair in Avon, Computer repair in Simsbury, Computer repair in Farmington, Computer repair in Newington, Computer repair in Canton, Computer repair in Hartford, Computer repair in Bloomfield, Computer repair in Unionville, Computer repair in Wethsfield, Computer repair in Glastonbury

Black Screen of Death

Does your display suddenly go black and your computer shut off?  If it does, you may be suffering from what I call the black screen of death.  When this happens to most people, they simply restart their computer and move on.  When it happens again, they get confused and often think that they have a virus or spyware infection.   After scanning, and usually not finding much, the computer goes black again. 

Fixing computers requires a fair amount of detective work.  It's very helpful to look closely at the computer's behavior,  and to identify any patterns that appear to repeating.  In this case, the screen usually goes black and the computer powers off.  However, sometimes the screen goes black and there is a small flashing cursor in the upper left corner as the computer does not power off.  If this is the case, the computer doesn't easily restart and unplugging the power cord or holding down the reset button may be the only way to get it to start again.  Another telling bit of information is if the computer is making loud fan noise.  Users often complain that their computers are making a lot of noise.  The typical 'noise' is that of cooling fans blowing continuously, never cycling down.

These are the signs and symptoms of an overheating computer.  Nearly all computers built today have a thermal switch.  When the computer reaches a certain high temperature, it shuts itself down to prevent heat damage.  Without this switch, the computer could be irreversibly damaged, and at high temperatures, become a fire risk.  Computers accumulate a lot of dust and hair around their fans and vents.  This is especially the case with computers that are left powered on for extended periods of time and/or are used around pets that shed.  As the computers collect dust and hair, their cooling systems need to work harder.  So, the fans work harder and stay on longer as they can never reduce the temperature to the point where the fans are instructed slow down or power off.  Hence, the increased fan noise.

Dust and hair are not the only causes of overheating.  Here is a simple list of other causes:

• Defective cooling fans
• Blocked airways and vents
• Unseated or underpowered heat sinks
• Dust and hair accumulations that physically stop cooling fans
• Laptops sitting on pillows and blanket that block their cooling vents

Please post a comment if this has been helpful to you.

Contact Info: info@consideritfixed.com
                    860-985-7300

Insidious MS AntiVirus 2009

In the last month, 5 customers have called me about a parasite called MS Antivirus 2009.  MS Antivirus 2009, and others in its sick family tree like XP Antivirus 2008, are infecting Windows computers at an alarming rate.  All of my customers had modern, up to date antivirus programs installed and they still got it. Ouch!

The first sign of an infection by MS Antivirus 2009 is usually this: a window opens on the  computer that looks just like the Windows Security Center and it claims that you have no virus  or spyware protection installed.  This usually gets the user's attention and leads to the opening of a scanner that tells the user that they are infected with a number of things.  This is usually followed by an offer - give some money and this software product, MS Antivirus 2009 will remove the problem.  Two of my customers believed this ruse enough to offer up their credit cards.  And guess what - the problem didn't go away.  It actually got worse.   The result was a computer with disabled menus, no access to utilities in the control panel, the deletion of system restore saved states, popups, and system reboots.  So, you just can't use your computer.

In my experience, one of the best sources of information on a virus or parasite is a Google search.  I can often find loads of useful information very quickly and be well on my way to removing a pesky varmint.   This was not the case with MS Antivirus.  A Google search does lead  to several pieces of information, but many of the hits end up on web sites claiming to be able to remove MS Antivirus but for a fee.  They offer a download link to a free scanner, but when you want to remove the pest, they want money.  Gosh, doesn't that sound an awful lot like the parasite that we just discussed?  Call me paranoid, but doesn't it make you wonder that the vendors detecting this parasite and selling a solution to its removal may just have something to do with the problem.  The availability of these solutions is just too convenient, and for me, hard to trust.

Here's my recommendation:  In the business of fixing computers, I've learned that customers want simple solutions - keep the cost down and guarantee that the pest is gone.  I can't trust these no name spyware scanners.  I can't trust registry hacks and file deletions.  My approach is to fix MS Antivirus infections the old fashion way.   Remove all important data from the PC; format the hard drive; reinstall the operating system, applications, and virus protection; and then put the data back.  All in all, it takes about 2 to 3 hours of work, but I can guarantee a good result.

One additional note: If you see the first signs of an infection which is usually a popup window that looks like Microsoft's Windows Secutiry Center claiming that you don't have virus protection, don't click on anything related to it.  Go right to system restore and restore your PC back to a previous date.  If you can do this, you will be one of the lucky ones like my friend David. 

Please post a comment if this has been helpful to you.

Contact Info: info@consideritfixed.com
                    860-985-7300

Computer repair in West Hartford, Computer repair in Avon, Computer repair in Simsbury, Computer repair in Farmington, Computer repair in Newington, Computer repair in Canton, Computer repair in Hartford, Computer repair in Bloomfield, Computer repair in Unionville, Computer repair in Wethsfield, Computer repair in Glastonbury