HP Model CQ2713

Avatar

Please consider registering
Guest

Search

— Forum Scope —






— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

Register Lost password?
sp_Feed sp_topic_old
HP Model CQ2713
Avatar
dandl
Lexa, AR
Member
Forum Posts: 491
Member Since:
April 29, 2013
sp_UserOfflineSmall Offline
1
January 21, 2016 - 10:06 am
sp_Permalink sp_Print

Security-Essentials-Scan.PNGImage Enlarger

This is some of the threats MSE found and removed on the initial scan, not including what Super Anti Spyware found and removed. I then started scanning each account that was set up on the PC and found even more threats. Their were four "HELP_DECRYPT" files that kept cropping up that MSE would target, and they were in every nook and cranny on this PC. I finally started deleting user accounts until I got to the account that was first set up on this PC. It is scanning threat free now.Windows-Defender.PNGImage Enlarger
This PC had Norton installed, which had never been updated, so Norton had to go and MSE was installed, because the owner did not want to pay for any virus software. After uninstalling Norton I kept getting this action center popup, which was a notification to turn on Windows Defender. But how?Windows-Defender-Registry-Entry.PNGImage Enlarger
If the PC had had the gpedit tool this would have been simple but instead I had to find the registry entry that was causing this popup. I finally found a video on youtube, of all places pin pointing where to look. The registry key is located in the "HKLM_SOFTWARE_POLICIES_MICROSOFT_WINDOWS DEFENDER" and you delete the DisableAntiSpy entry.
I do believe this is only an issue after installing MSE, and MSE and WD cannot both run at the same time. After deleting the above entry WD will try to start but it can't if MSE is installed, so one will have to just close WD.
Now if one uses the action center to view what virus and malware protection is installed, one will see two entry, MSE which should be on, and WD which should be off, and no more popup.
Do not know why this entry isn't deleted after uninstalling Norton.
Although their were no important, except for image files, files involved. All important files were saved to a flash drive before deleting accounts. This PC is a perfect example of what happens when access is granted to multiple users.
Hope this can be of use to someone.

Avatar
David Hartsock
Admin
Forum Posts: 1113
Member Since:
August 7, 2011
sp_UserOfflineSmall Offline
2
January 21, 2016 - 12:44 pm
sp_Permalink sp_Print

dandl said
Their were four "HELP_DECRYPT" files that kept cropping up that MSE would target

Those files are a sure sign of cryptoware. Look out for encrypted user files and don't put that PC on your network!

Forum Timezone: America/Indiana/Indianapolis

Most Users Ever Online: 188

Currently Online:
9 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Member Stats:

Guest Posters: 10

Members: 1344

Moderators: 3

Admins: 4

Forum Stats:

Groups: 8

Forums: 19

Topics: 1561

Posts: 11950

Administrators: Jim Hillier, Richard Pedersen, David Hartsock, Marc Thomas

Moderators: Judy Novotny, Jason Shuffield, Mail Poet