Tech Help and Discussions

Hi, I know that my question is not related to the said topic but how do I downgrade my HP Pav laptop OS from Windows 10 to 8? Windows 10 is creating an update from time to time and it affects my internet connection. Mod Edit: Posts split away to their own thread. Starbuck

• • 
• 3 replies
• 938 views

missygreta replied January 11, 20187 yr

Dear All, i have used FRST and i found this : GroupPolicy: Restriction <==== ATTENTION in the FRST.TXT FILE i don't know exactly what that mean. i need help, anyone can do it for me. Many thanks. FRST.txt Addition.txt

• • 
• 12 replies
• 6.2k views
• 1 follower

LEMLEM replied January 10, 20187 yr

Laptops sold between December 2015 and December 2017 may be powered by a battery that's prone to overheating or even melting. If you own a laptop, you already have the Meltdown and Spectre security flaws to worry about. If you own a HP laptop, add another potential woe to your list. A small number of HP laptops and mobile workstations shipped between December 2015 and December 2017 will need their batteries replaced because they have a "potential to overheat, posing a fire and burn hazard," the company said Thursday. These batteries are sealed within the laptop, which means their removal and replacement is not a DIY job. "This action pertains to approximate…

• 1 reply
• 555 views
• 1 follower

Tony D replied January 7, 20187 yr

Some Windows 7 and Windows Server 2008 users are reporting they can't check for updates using Windows Update and Microsoft Update. No word yet on a Microsoft fix. Windows 7 users are reporting problems checking for updates through Windows Update and Microsoft Update. The root of the problem may be an expiration date that Microsoft needs to fix on its side, noted Computerworld earlier today. A Microsoft Answers thread for those hit by the Windows Update Error 80248015 -- which began at some point on December 3 -- is growing. I've also seen some with Windows Server 2008 reporting this same problem on Twitter. I am one of those affected on my desktop Dell…

• 1 reply
• 1.1k views

Kick replied January 2, 20187 yr

There are many HKLM Group Policy restriction ATTENTION lines in the FRST report. Maybe they're there due to CryptoPrevent. Here's an exaple. The full logs are attached. HKLM Group Policy restriction on software: *.mp3.msh* HKLM Group Policy restriction on software: *.png.hta HKLM Group Policy restriction on software: *.7z.jse HKLM Group Policy restriction on software: %userprofile%\AppData\*.isp I also note that MBAM starts with Windows. I have it set to NOT start with Windows. I'll have to play around with that. Anything else to be concerned about in these logs? ESET said it was clean. I ran MBAM afterwards and it found PUPs. Kaspersky scan is clean. …

• 4 replies
• 1.3k views
• 1 follower

Tony D replied December 28, 20177 yr

Attackers behind new ransomware campaign are offering a "really easy" tutorial video in order to ensure they make money from their criminal activities. A new form of ransomware has emerged and is being distributed through malicious Office documents, infecting victims with file-encrypting malware. Uncovered by researchers at Netskope, the 'Spider Virus' ransomware campaign was first detected on December 10 and is ongoing. Like many ransomware schemes, the attack begins with malicious emails to potential victims. The email subjects and the lure documents indicate the attackers are keen on targeting victims in the Balkans. It's currently unknown where the at…

• • 
• 1 reply
• 677 views

missygreta replied December 20, 20177 yr

For the second time this year, HP has been forced to issue an emergency fix for pre-installed keylogger software. Hewlett Packard has issued an emergency patch to resolve a driver-level keylogger discovered on hundreds of HP laptops. The bug was discovered by Michael Myng, also known as "ZwClose." The security researcher was exploring the Synaptics Touchpad SynTP.sys keyboard driver and how laptop keyboards were backlit and stumbled across code which looked suspiciously like a keylogger. In a blog post, ZwClose said the keylogger, which saved scan codes to a WPP trace, was found in the driver. While logging was disabled by default, given the right permis…

• 2 replies
• 643 views
• 1 follower

starbuck replied December 11, 20177 yr

My nephew Craig (a great guy) brought his computer to me because he was having problems with it. Turns out the hard drive was failing. I was able to image the drive and restore it on a new hard drive. While doing so, I ran a MBAM scan. MBAM found Rootkit.Fileless.MT Gen and quarantined it. I then installed Emsisoft AntiMalware - it found only adware. He was using AVG Free and Spybot S&D. Check out that host file. Can you please check to see if there's anything that needs to be addressed. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2017 03 Ran by Craig DiPiano (administrator) on CRAIGDIPIANO-HP (14-11-2017 19:27:09) Running from C…

• • 
• 18 replies
• 1.7k views
• 1 follower

starbuck replied November 19, 20177 yr

I was in the forum and was advised, after trying to remove the pups unsuccessfully, to run tests and post here. I am only a mid level user. I have Windows 10 and use Chrome. My wife has a chromebook on the same network and it uses chrome. I reset them bot h after disabling the extensions. I am uploading the tests I ran per directions from the forum. I patiently look forward to your reply as to how to remove these PUPS from the MBAM scan. Addition.txt JRT.txt FRST.txt 1.txt

• • 
• 5 replies
• 886 views

peterr replied November 17, 20177 yr

When I run MBAM I get the same PUPS. When they are quarantined and deleted why do I keep getting them back? What would you advise so my scans are s clean as before. I don't just want to accept them unless I have to.

• • 
• 18 replies
• 1.6k views
• 1 follower

peterr replied November 16, 20177 yr

By 2018, they are expected to account for 35 percent of all cyberattacks. Fileless attacks are on the rise and are predicted to comprise 35 percent of all attacks next year, according to the Ponemon Institute. A new national survey conducted by Barkly and the Ponemon Institute titled "2017 State of Endpoint Security Risk," released on Wednesday, suggests that this method of cyberattack is becoming more popular -- and traditional antivirus solutions are doing little to stop the trend. After surveying 665 IT security professionals in the enterprise, the organizations discovered that faith in traditional file-scanning and antivirus software has become ashes in t…

• 2 replies
• 701 views
• 1 follower

starbuck replied November 15, 20177 yr

Malwarebytes announced last week that they have discontinued development for Junkware Removal Tool. For those who have never heard of Junkware Removal Tool, or JRT, it is a popular adware and junkware cleanup utility that is commonly used in support forums and tech shops. JRT was developed in 2012 by one of BleepingComputer's malware removal helpers named Thisisu and was used extensively in the site's virus removal guides and in our support forums. As one of the first, if not THE first, site to host the tool, it quickly became one of our most downloaded utilities with over 8 million downloads. In June of 2015, Malwarebytes acquired JRT and hired its develope…

• • 
• 2 replies
• 621 views
• 1 follower

starbuck replied November 3, 20177 yr

Thanks. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-10-2017 01 Ran by mike (administrator) on DESKTOP-20VMLL0 (23-10-2017 15:23:08) Running from C:\Users\mike\Downloads Loaded Profiles: mike (Available Profiles: mike) Platform: Windows 10 Home Version 1703 15063.674 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be clos…

• 17 replies
• 5.3k views

starbuck replied October 26, 20177 yr

A well-hidden feature in Windows 10 version 1709 prevents "unfriendly" apps (including most known strains of ransomware) from modifying files in protected folders. Here's how it works. One of the most intriguing new features in Windows 10 version 1709 is a security setting that prevents unauthorized apps from gaining access to Windows system files and your personal data files. With the Controlled Folder Access feature turned on, malicious and suspicious apps are blocked from changing files in known locations. That's a major roadblock for most known strains of ransomware, which do their dirty work by encrypting your personal files and demanding payment for th…

• 4 replies
• 941 views
• 1 follower

starbuck replied October 26, 20177 yr