[BrianDrab]

Thanks. Just so I'm clear when you put times such as 07,18 does that mean it took seven seconds to get to the black screen with white cursor and then a 18 seconds the logon screen appeared so in this case the pause was 11 seconds?

 

Just making sure I understand.

[Advertisements]

No, I never timed the boot from beginning. I let the laptop boot then when the window logo disapear (after a time) the black screen with white Arrow appears, it's from this point I started the timewatch, untill the login screens appeers where I put the pasword to enter the account.

 

First it was 20 sec, then 10 sec, then 7 sec. Now 11sec

[HaraMo]

No, I never timed the boot from beginning. I let the laptop boot then when the window logo disapear (after a time) the black screen with white Arrow appears, it's from this point I started the timewatch, untill the login screens appeers where I put the pasword to enter the account.

 

First it was 20 sec, then 10 sec, then 7 sec. Now 11sec

[BrianDrab]

Got it. Thanks.

[BrianDrab]

Looks like we cut the delay time in half which is progress. Let's try one more optimization technique.

 

Step#1 - Optimize Boot

Note: This process can take 30 minutes or so to run so please plan accordingly.

 

1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.

3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.

5. Copy and paste the following command into the black window and hit enter.

xbootmgr -trace boot -prepSystem -verboseReadyBoot

 

6. Now your PC will be restarted 6 times. With a two minute pause before the tool runs after the desktop loads. After the second reboot the MS defragmentation program is running and is placing the files into an optimized layout, so that Windows will boot up faster. The last Reboots are training of readyBoot.
Note: If you normally get a logon prompt before getting to your desktop, you will need to log in each of the 6 times that your computer reboots so unfortunately you can't just leave it to run on its own.

 

Once this process is complete, let's see if your delay has improved any more and let me know if you are satisfied with the results overall.

 

At this point I have tried everything I personally know of short of doing a Repair Install (Non Destructive Reinstall) of your Windows operating system. This process is fairly involved and always has some risk involved since your basically doing an OS re-install. If you wish to go down this road please let me know. You can read about the general steps that we would be taking from here. Please don't do the steps without guidance however.

 

Thank you.

[HaraMo]

3 sec delay and run 3of 6 will start after 90 sec :-)

[HaraMo]

1 sec delay :-)

[HaraMo]

OK, I think it's ok now? No need to  do a repair install? or is it advised?

stopwatch: 01,26 seconds :-)

 

What did this command do to speed up the boot?  anyway it worked , thanks al lot

 

I'm very satified about all the steps you showed me to follow. Thank again :-)

[BrianDrab]

What did this command do to speed up the boot?

 

The main thing it did was to put all of the boot files in an organized and efficient spot on the hard-drive with no fragments. I'm glad it worked but I give all the credit to my mentor on this one (Essexboy).  I'm glad it worked. It is important however to note that you shouldn't use any 3rd party disk defragmenters as they all put the files in a different offset (different place on the disk) which will degrade your boot performance that you achieved.

 

 

No need to  do a repair install? or is it advised?

 

No it's not advised and should be used only as a last resort.

 

Is there anything else of concern or can I provide some final instructions to clean up our tools and information to keep you secure?

 

 

 

 

[HaraMo]

Wel anyway, thank you again and your mentor. Well, I'm going to install the paid bitdefender internet security. Is this enough to keep the laptop secure?

 

I don't have any tool on the desktop, only maybe one. But I have seen some folders on the C drive, maybe a clean up is needed?

[BrianDrab]

OK! Well done, your computer is clean again!  Part of our jobs here at G2G are not only to rid you of malware but also to educate you by providing information to you on how to stay safe online. Information regarding this is below. Bitdefender is an excellent product and that along with applying best practices (see below) is enough to keep you secure. I know you've been moving our tools off as we go but I've listed some files below that should be deleted if you haven't already. Also if you see any folders that remain from our tools you can remove this as well. Thank you very much for sticking with me.
 
1. Clean Up!
Let's remove the remaining files we used that are on your machine. We like to clean up after ourselves. Please delete all the files that should be on your desktop.
 
-Procmon.exe
-AccessDenied.PMF
-FRST64.exe
-fixlog.txt
-MSEInstall.exe
-sfcdetails.txt
-ListChkdskResult.exe
-ListChkdskResult.txt
-WPTx64-x86_en-us.msi
-GISELE-HP-LAP.11-25-2014.21-45-49.Boot_1.zip
-GISELE-HP-LAP.11-25-2014.21-45-49.Boot_1.etl

 
2. Windows Updates
Another essential task is to keep your computer updated with the latest operating system patches and security fixes. Windows Updates are constantly being revised to combat the newest hacks and threats. Microsoft releases security updates that help your computer from becoming vulnerable. It is best if you have these set to download automatically. Follow the instructions below to ensure your settings are optimal.
1. Click the Start Orb in the lower left corner of the screen.
2. Type Windows Update in the search box that appears
3. Click on the Windows Update program that appears in the search results.

4. Click on Change Settings.

5. Select "Install updates automatically (recommended)" from the Important updates drop-down.

6. Choose a day and a time when you know the computer will be on and connected to the internet. The default is 3:00AM every day.
7. Ensure that all of the other check boxes are checked.
8. Click OK.
 
3. Keeping Programs Updated
You need to ensure that any programs installed on your machine are kept current. The bad guys exploit vulnerabilities that are found in older versions of software. A very good piece of software that keeps your programs up-to-date is Secunia Personal Software Inspector (PSI). You can download and install it from here. You can read more information about this free software as well as a video walkthrough from here.
 
Another alternative and popular software program for keeping your programs current is FileHippo Update Checker. Some people prefer this one.
 
1. Please download FileHippo update checker from here and save to your desktop.
2. Double-click the FHSetup.exe file that was downloaded and accept all the defaults to install the program.
3. The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases. Once updates are found you will see information
    from your task bar as follows. If you click on this informational message you will be take to a website showing the programs that you have that are outdated and links will be provided to the updates.

 
 
4. Keeping Java Updated
WARNING: Java is one of the most exploited programs at this time. The Department of Homeland Security recommends that computer users disable Java. You can read more about this here.
I would recommend that you completely uninstall Java unless you need it to run an important software. If you need it or are unsure or uncomfortable with removing it then I would recommend that you disable Java in your browsers until you need it and then enable it at that time. (See How to diasble Java in your web browser and How to unplug Java from the browser). If you don't uninstall it, it's also important that you follow the directions below to update to the latest version of Java.
 
1. Go to this page to download the latest version of Java SE Runtime Environment JRE 8 Update 25.
2. When you click this link you will need to click the "Accept License Agreement" radio button and then click on the "Windows x86 Offline" installer link. You will notice that there is also a Windows x64 link option, however even if you are using a 64-bit operating system, it's very likely you aren't running a 64-bit browser and should only download the "Windows x86 Offline" installer. To determine if you are using a 64-bit browser you can follow these instructions. If you find that you ARE using a 64-bit browser then you can download the "Windows x64" one.

3. Once you click on the appropriate link, please download this to your Desktop like we have with all of our tools.
4. Close any programs you may have running - especially your web browser.
5. Now we need to uninstall all versions of Java that are currently on your machine before we install the newest version. Go to Add/Remove programs (instructions are here) and uninstall any item that appears in the list that has the following as part of the name: We removed your Java 7 Update 7 (64-bit). I wouldn't install unless you know you need it.
6. Reboot your computer once all Java components are removed.
7. Then from your desktop, right click on the file that was downloaded (jre-8u25-windows-i586.exe or jre-8u25-windows-x64.exe) and select Run as an Administrator to install the latest version. Accept all the defaults and you're good to go.
Note: Java has been notorious for installing foistware (software downloaded without the users knowledge). If you follow the instructions I provided no foistware will be installed but that doesn't mean it won't in the future. While performing the install of this software or any software for that matter, pay attention to each screen and ensure you uncheck any extra software that you don't want installed (i.e. Ask Toolbar, Chrome Browser, etc.).
 
5. Keep Adobe Reader Updated
Check to see what the latest major version of Adobe Reader is here. The full version is something like 11.0.06 for example but the major version is just the first number before the period so 11 in this case or XI.
Verify what version you have by doing the following.
1. Open Adobe Reader
2. Click Help on the menu at the top
3. Select About Adobe Reader
If your major version matches the major version from Adobe then perform the following steps.
1. Open Adobe Reader
2. Click Help on the menu at the top
3. Click Check for Updates
4. Allow any Updates to be downloaded and installed
5. If asked to reboot, please do.
6. Repeat these steps until you are told that no updates are available.
If your major version is lower than the major version from Adobe then perform the following steps.
1. Uninstall Adobe Reader. Click here for instructions on how to uninstall a program.
2. Install the newest version from this website.
Note: Make sure to uncheck the Optional Offer (i.e. Google Chrome, Google Toolbar) unless you really want it.
NOTE: You should disable JavaScript in the program as this is a highly exploitable method for the bad guys to get in your machine. Follow these instructions to disable it in Adobe Reader.
1. Open Adobe Reader
2. Select Edit from the menu and select Preferences
3. Click on JavaScript in the left column and uncheck Enable Acrobat JavaScript.
4. Click OK and close the program.
NOTE: Many installers, including Adobe Reader, offer third-party downloads that are installed automatically when you do not uncheck certain checkboxes. While most of the time not being malicious you usually do not want these on your computer. Be careful during the installation process and you will avoid seeing tons of new unwanted toolbars in your favorite web browser.
 
6. Antivirus - Preventative
It's critical that you have a reputable antivirus software installed on your machine at all times. One AV is a must have! But never more than one, as this can and will cause conflicts and false readings. If you haven't already now would be a good time to install Bitdefender.
 
Note: Let's keep Malwarebytes installed as it's a fantastic piece of software. Malwarebytes is not actively monitoring your machine so it won't conflict with the Antivirus that you decide to install. I would recommend that you open up this program, allow it to update and scan your machine at least quarterly...monthly if you can.
 
7. Crypto Warning!!!! - Complete Data Loss can occur!
There are particularly nasty infections out there at the moment that encrypt your data and hold it for ransom. You may read more about this here.

• Download CryptoPrevent free for home use here following the instructions below.
• Save the file to your desktop from the link above and then open the program by clicking Run when prompted from your browser or by going to the desktop where the file was saved and double-clicking.
• Accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This is good and will launch the program once you click Finish.
• You will get a prompt asking if you purchased a Product Key for Automatic Updates. You can answer No.
• You will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to.
• You will then be prompted to apply all default protections. Answer Yes.
• You may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.
• That's it. The protection is in place.

Note: The free version doesn't provide automatic updates. Periodically, you should open up the program (there is a shortcut on your desktop now) and select the Updates! menu....and select Check for Updates to see if there are any as this infection has serious consequences.
 

 
 
8. Adobe Flash Player
1. Determine if you have the most current version by going to this website. If your version represented by the top box matches the version in the bottom box you are current.

 
2. If your version is older than the current then click on the Player Download Center link (shown in the screen shot above).
3. You will be brought to the install/update page. Ensure you uncheck any optional offers (unless you want them of course) and then click on Install Now.

 
4. You may be prompted to run the installer. Go ahead and do this.
5. When it's complete, click Finish. You now have the latest version. You can verify by going back to this website if you feel the need.
 
For more information about computer security and how to protect yourself when on the internet, please read this guide Best Practices for Safe Computing
 
OK, all the best, and stay safe!

[HaraMo]

OK, thanks.

 

I installed the filehippo app and it says that 11 programs have to be updated. Thos you mentioned in detail are also in the list (java, adobe reader). 

 

Can I install the updates from filehippo and then follow you guidelines or do I have to download the updates as you said (uninstall old java,, download offline java)?

[BrianDrab]

You can do it through filehippo. Just be aware when installing the updates that there may be foistware. To avoid this be sure to pay attention to any checkboxes that are automatically checked while installing the update. For example if you install a java update there may be checkboxes to install Google Chrome or a Google toolbar or other software. Unless you want this software be sure to uncheck it. The offline installer instructions that I provided avoids this altogether. The offline installer doesn't have any foistware bundled to worry about.

 

 

[HaraMo]

I went for manual installation, as filehipp install English version of for example adobe reader. I test it for adobereader  I downloaded the adobe installation file from filehippe and I downloaden using your steps, the name is different. So I assume the filehipp adobe file is in English.

 

also java 64bit is showed in filehipp, but according to you steps that is not needed if 32bit Internet explorer is used;

 

So I prefer manual installation.

 

two steps left to do:   install crypto warning app. After this I will install bitdefender.

[BrianDrab]

Excellent. Thanks for the update.

[HaraMo]

I took the time to read about the crypto malware.  This is the first time I heard about it. Is it possible that this only exist in your country? In Belgium nothing is said about it (news).

 

Anyway, good to know it now, before it's too late.

 

So there is nu real fix at this moment for this kind of malware?  hmmm.

 

preventing important then, even a necessary step.

 

But I think it's safer to buy the CryptoPrevent? (update... ) Does the malware change everytime of installation folder? or why is this update important?

 

 

I first installed bitdefender, after the full scan is finished, I will see which version of cryptofrevent (free or paid) I will take.

 

Corrected: I just surfed on the internet and it already was in the news :-).

 

I also found in the article I read that the Computer Emergency Readiness Team of  VS  has a solution.

 

When I go to that site, https://www.us-cert....lerts/TA14-150A

 

I'm not sure there is a fix described in it?

Edited by HaraMo, 30 November 2014 - 10:35 AM.