[DR M]

Hi, Joseph!
 
It seems that we have made much progress!

1. Set Windows Defender

• Go to Settings (Windows icon on the keyboard + i)
• Select Privacy & Security
• From the left pane, Windows Security
• Open Windows Security
• Select Dismiss for Virus & Threat protection and Account protection
• Turn on App & Browser control

 
2. Install programs we uninstalled before

• Adobe Flash Player for Firefox - NPAPI from here.
• Java from here (Ask her if she need it. If not, it's better not to install it)
• Paltalk from here.

 
3. Check the computer for any other issue

• Use the computer for a while, check how it is running now (don't forget the camera) and report back about what is happening right now.

[Advertisements]

Awesome news!

 

Okay, I have cleared off the desktop of the items we downloaded.

 

The cameras are working - switching between them with the MS windows app.

 

The Paltalk software appears to be working,  I was able to switch camera's.  Withing the software, there is a setting for the default camera.  I set it to the Logitech and it appears to reopen with that camera as the camera of choice.

 

I use my computer so differently than my friend, I am not sure what to test, My understanding it that she does virtual connections with many.

 

I am going to return the machine to her.  Then follow up a next Friday with it's operations.

 

Is there something I should be looking for or running as a report for you when I check in?

 

 Thank you so much. 

[whittakerjr]

Awesome news!

 

Okay, I have cleared off the desktop of the items we downloaded.

 

The cameras are working - switching between them with the MS windows app.

 

The Paltalk software appears to be working,  I was able to switch camera's.  Withing the software, there is a setting for the default camera.  I set it to the Logitech and it appears to reopen with that camera as the camera of choice.

 

I use my computer so differently than my friend, I am not sure what to test, My understanding it that she does virtual connections with many.

 

I am going to return the machine to her.  Then follow up a next Friday with it's operations.

 

Is there something I should be looking for or running as a report for you when I check in?

 

 Thank you so much. 

[DR M]

Hi, Joseph!

Excellent news!

It was a long road, but I'm glad the upgrade did the job at the end. Keeping everything updated (operating system, Flash player, Java etc.) is an essential step for security. I'm sure you will keep an eye on your friend's computer in the future, regarding this.

Although you said that you deleted the tools we used, this is the tool that does this job, resetting also the restore points. If you haven't returned the computer yet, please do the following:

Download KpRm by kernel-panik and save it to your desktop.

• Right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt.
• Please copy and paste its contents in your next reply.

 

Some final tips about any computer's security:

Some of the following, are from Klein's (2005) article, So how did I get infected in the first place. Since then, the article has been reproduced or linked to in dozens of locations. As a result, many malware experts have continued updating it, to include current operating systems and software program information. My source is Security Garden, and I marked for you the following:

1. Keep your Windows updated!
It is important always to keep current with the latest security fixes from Microsoft. This can patch many of the security holes through which attackers can infect your computer.

2. Update 3rd Party Software Programs
Third Party software programs have long been targets for malware creators. It has been stated that "Adobe’s Reader and Flash and all versions of Java are together responsible for a total of 66 percent of the vulnerabilities in Windows systems exploited by malware.'' It's important to keep everything updated.

3. Update the browsers you use
Many malware infections install themselves by exploiting security holes in the Internet browser that you use. So... Keep them updated.

4. Be careful about what you download and what you open!

• Many "freeware" programs come with an enormous amount of bundled spyware that will slow down your system, spawn pop-up advertisements, or just plain crash your browser or even Windows itself. Watch for pre-checked options such as toolbars that are not essential to the operation of the installed software.
• Peer-to-peer (P2P) programs like Kazaa, BearShare, Imesh, Warez P2P, and others, allow the creation of a network enabling people to connect with other users and upload or download material in a fast efficient manner. BUT even if the P2P software you are using is "clean", a large percentage of the files served on the P2P network are likely to be infected.
• Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Have this in mind.
• Do not open any files without being certain of what they are!

5. Avoid questionable web sites!
Visit web sites that are trustworthy and reputable. Many disreputable sites will attempt to install malware on your system through "drive-by" exploits just by visiting the site in your browser. Lyrics sites, free software sites (especially ones that target young children), cracked software sites, and pornography sites are some of the worst offenders. Also, never give out personal information of any sort online or click "OK" to a pop-up unless it is signed by a reputable company and you know what it is.

6. PC means personal computer!
Don't give access to your computer to friends or family who appear to be clueless about what they are doing.

7. Back-up your work!
Make back-ups of your personal files frequently. You never know when you'll have to reformat and start from scratch. You can always reformat and reinstall programs, but you cannot replace your data if you haven't made backups.

8. Must-Have Software
An anti-virus and an anti-spyware program is a necessity for the security of your computer. Be sure that you keep them updated, and that real time protection is enabled.


If you have any questions or concerns please don't hesitate to ask!

I'm glad I was able to help you.

[whittakerjr]

Afternoon, Morning started with a Freezer failure - [bleep], all that ice cream.

 

I returned the computer to Joanne yesterday afternoon.  So excited.  I told her I would be back on Friday, this week and check in and run the reports you wanted.

She is real bad about not finishing sentence, not thinking thing through, and not being prepared.   She was only concerned about Paltalk, asked be about her Yahoo!Mail, when I questioned how did you get to it in the past, she replied on her phone, then when I went to set up an icon on the desktop she stated that was not the Icon for it. I hate to suggest applications for her to enjoy, I know in the long run it will be an eternal training experience.

 

As for cleaning up.  I did not delete anything.  I just moved the desktop components into a folder Joseph/JulyCleanup. 

When I visit her on Friday, I will run the KpRun and send you the requested report.

 

Thanks so much and enjoy your music time.

 

Talk with you next Friday.

 

Joseph

[DR M]

Afternoon, Morning started with a Freezer failure - [bleep], all that ice cream.

 
Perhaps ... posting FRST logs regarding the freezer would help.
 

As for cleaning up.  I did not delete anything.  I just moved the desktop components into a folder Joseph/JulyCleanup.
When I visit her on Friday, I will run the KpRun and send you the requested report.
Thanks so much and enjoy your music time.
Talk with you next Friday.

 

Yes, I will be here.

[whittakerjr]

Freezer is up and running.  Ice cream is a bit tough.  Most everything else was tossed.

 

Joanne is happy with the computer operations.  When I arrived today she stated how nice it was and that she like the improvements.

 

Here is the report from run KpRM.

 

 

# Run at 7/24/2020 2:40:26 PM

# KpRm (Kernel-panik) version 2.8

# Website https://kernel-panik.me/tool/kprm/

# Run by HP Pavilion from C:\Users\HP Pavilion\Desktop

# Computer Name: HPPAVILION

# OS: Windows 10 X64 (19041) 

# Number of passes: 1

 

- Checked options -

 

    ~ Registry Backup

    ~ Delete Tools

    ~ Restore System Settings

    ~ UAC Restore

    ~ Delete Restore Points

    ~ Create Restore Point

    ~ Delete Quarantines

 

- Create Registry Backup -

 

   ~ [OK] Hive C:\WINDOWS\System32\config\SOFTWARE backed up

   ~ [OK] Hive C:\Users\HP Pavilion\NTUSER.dat backed up

 

     [OK] Registry Backup: C:\KPRM\backup\2020-07-24-14-40-25

 

- Delete Tools -

 

 

  ## AdwCleaner

     [OK] C:\AdwCleaner deleted

 

  ## ESET Online Scanner

     [OK] C:\Users\HP Pavilion\AppData\Local\ESET\ESETOnlineScanner deleted

 

  ## FRST

     [OK] C:\FRST deleted

 

  ## Windows Repair All In One (portable)

     [OK] C:\Users\HP Pavilion\Downloads\tweaking.com_windows_repair_aio.zip deleted

 

- Restore System Settings -

 

     [OK] Reset WinSock

     [OK] FLUSHDNS

     [OK] Hide Hidden file.

     [OK] Show Extensions for known file types

     [OK] Hide protected operating system files

 

- Restore UAC -

 

     [OK] Set EnableLUA with default (1) value

     [OK] Set ConsentPromptBehaviorAdmin with default (5) value

     [OK] Set ConsentPromptBehaviorUser with default (3) value

     [OK] Set EnableInstallerDetection with default (0) value

     [OK] Set EnableSecureUIAPaths with default (1) value

     [OK] Set EnableUIADesktopToggle with default (0) value

     [OK] Set EnableVirtualization with default (1) value

     [OK] Set FilterAdministratorToken with default (0) value

     [OK] Set PromptOnSecureDesktop with default (1) value

     [OK] Set ValidateAdminCodeSignatures with default (0) value

 

- Clear Restore Points -

 

   ~ [OK] RP named Windows Modules Installer created at 07/15/2020 09:00:26 deleted

   ~ [OK] RP named Scheduled Checkpoint created at 07/22/2020 17:49:12 deleted

     [OK] All system restore points have been successfully deleted

 

- Create Restore Point -

 

     [OK] System Restore Point created

 

- Display System Restore Point -

 

   ~ [I] RP named KpRm created at 07/24/2020 21:51:01

 

-- KPRM finished in 709.82s --

[DR M]

Nice to hear back from you, Joseph, especially regarding Joanne's satisfaction. You can give her my regards.

 

As for the freezer, I hope it will continue working good, as it is more than essential this period of the year!

 

If there are no further questions/issues about Joanne's computer, we can close this topic.

 

Again, I was glad I was able to help you.

[whittakerjr]

Joanne is happy; she apologized for all the calling on "how much longer."  If you did not see any issues with the last report, I agree, lets’ close this topic.  The end user is pleased; the unit appears to be performing like it is designed.

 

I am having a waffle cone filled with Amaretto Cherry Cordial ice cream, on your behalf to celebrate the completion.  Your hard work makes me envious of how much knowledge one can have and the ability to share it with others.

 

Thank you again with all your help.

 

Joseph

[DR M]

The last tool's run removed the tools we used and reset the restore points. It looks good.
 
I know that it took some time and I apologize for that, but it's great that things ended fine, with everyone happy.
 

I am having a waffle cone filled with Amaretto Cherry Cordial ice cream, on your behalf to celebrate the completion.  Your hard work makes me envious of how much knowledge one can have and the ability to share it with others.

 

Enjoy that sweet cool temptation!

 

Thanks for your kind words. If you ever need anything with your computer, you know where to ask for help.

 

Cheers!

 

[iMacg3]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.