Avatar
Please consider registering
guest
sp_LogInOut Log Insp_Registration Register
Register | Lost password?
Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
sp_Feed Topic RSSsp_topic_old
HP Model CQ2713
Avatar
dandl
Lexa, AR
Moderator
Members

Moderators
January 21, 2016 - 10:06 am
Member Since: April 29, 2013
Forum Posts: 740
sp_UserOfflineSmall Offline

Security-Essentials-Scan.PNGImage Enlarger

This is some of the threats MSE found and removed on the initial scan, not including what Super Anti Spyware found and removed. I then started scanning each account that was set up on the PC and found even more threats. Their were four "HELP_DECRYPT" files that kept cropping up that MSE would target, and they were in every nook and cranny on this PC. I finally started deleting user accounts until I got to the account that was first set up on this PC. It is scanning threat free now.Windows-Defender.PNGImage Enlarger
This PC had Norton installed, which had never been updated, so Norton had to go and MSE was installed, because the owner did not want to pay for any virus software. After uninstalling Norton I kept getting this action center popup, which was a notification to turn on Windows Defender. But how?Windows-Defender-Registry-Entry.PNGImage Enlarger
If the PC had had the gpedit tool this would have been simple but instead I had to find the registry entry that was causing this popup. I finally found a video on youtube, of all places pin pointing where to look. The registry key is located in the "HKLM_SOFTWARE_POLICIES_MICROSOFT_WINDOWS DEFENDER" and you delete the DisableAntiSpy entry.
I do believe this is only an issue after installing MSE, and MSE and WD cannot both run at the same time. After deleting the above entry WD will try to start but it can't if MSE is installed, so one will have to just close WD.
Now if one uses the action center to view what virus and malware protection is installed, one will see two entry, MSE which should be on, and WD which should be off, and no more popup.
Do not know why this entry isn't deleted after uninstalling Norton.
Although their were no important, except for image files, files involved. All important files were saved to a flash drive before deleting accounts. This PC is a perfect example of what happens when access is granted to multiple users.
Hope this can be of use to someone.

Avatar
David Hartsock
Admin
January 21, 2016 - 12:44 pm
Member Since: August 7, 2011
Forum Posts: 1117
sp_UserOfflineSmall Offline

dandl said
Their were four "HELP_DECRYPT" files that kept cropping up that MSE would target

Those files are a sure sign of cryptoware. Look out for encrypted user files and don't put that PC on your network!

Forum Timezone: America/Indiana/Indianapolis
Most Users Ever Online: 2303
Currently Online:
Guest(s) 22
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Chad Johnson: 867
Mindblower: 666
carbonterry2: 356
Flying Dutchman: 278
grr: 211
Member Stats:
Guest Posters: 11
Members: 3182
Moderators: 7
Admins: 3
Forum Stats:
Groups: 8
Forums: 20
Topics: 1944
Posts: 13524
Newest Members:
Zoeypenelope, Jeff Coder, anhd389, blutsband, cyberguy
Moderators: Carol Bratt: 67, dandl: 740, Jason Shuffield: 1, Jim Canfield: 8, Terry Hollett: 0, Stuart Berg: 0, John Durso: 0
Administrators: Jim Hillier: 2701, Richard Pedersen: 203, David Hartsock: 1117
Scroll to Top

WHY NOT SUBSCRIBE TO OUR NEWSLETTER?

Get great content like this delivered to your inbox!

It's free, convenient, and delivered right to your inbox! We do not spam and we will not share your address. Period!