Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Slow laptop after rootkit virus eradication


  • Please log in to reply
11 replies to this topic

#1 White Rose

White Rose

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 14 September 2013 - 03:32 PM

I would welcome your help, please, in restoring my computer to its former self.  After a bit of a battle to eradicate a rootkit virus from my TCPIP stack (http://www.bleepingcomputer.com/forums/t/503827/backdoorrootkit-zeroaccess-help/), Catbyte has advised that I ask for advice in this forum as to how to speed my laptop up again.  It's slow to boot, slow to log on, slow to load programs, and opening tabs on the internet is also slow!

In the course of clearing the rootkit, I've discovered that I don't have full admin rights over my machine (I bought it from my old work and was assured that I had full control).  I'm using MSE as my anti-virus program, and have defragged and cleaned the laptop as CatByte instructed.

 

ETA Sorry, I'm not sure what info you'll need but the laptop is a HP ProBook 6550b, running XP Professional 5.1.2600, it has 2G of RAM and 202G of free capacity


Edited by White Rose, 14 September 2013 - 04:23 PM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,551 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:33 AM

Posted 14 September 2013 - 04:29 PM

Please download MiniToolBox  , save it to your desktop and run it.

 

Checkmark the following checkboxes:

  List last 10 Event Viewer log

  List Installed Programs

  List Users, Partitions and Memory size.

 

Click Go and paste the content into your next post.

 

Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.

 

Louis



#3 White Rose

White Rose
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 14 September 2013 - 04:55 PM

Thanks Louis.

 

MiniTool results as follows, Speccy coming up

________________________________________________________________________

 

MiniToolBox by Farbar  Version: 13-07-2013
Ran by HPUSER (administrator) on 14-09-2013 at 22:53:33
Running from "C:\Documents and Settings\HPUSER\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/14/2013 10:36:50 PM) (Source: Userenv) (User: NT AUTHORITY)
Description: Windows cannot load extension \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dll. (The specified module could not be found. ).

Error: (09/14/2013 08:58:49 PM) (Source: Userenv) (User: NT AUTHORITY)
Description: Windows cannot load extension \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dll. (The specified module could not be found. ).

Error: (09/14/2013 08:57:22 PM) (Source: MSSQLSERVER) (User: )
Description: FCB::RemoveAlternateStreams: Operating system error 6(error not found) occurred while creating or opening file 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\tempdb.mdf'. Diagnose and correct the operating system error, and retry the operation.

Error: (09/14/2013 08:57:22 PM) (Source: MSSQLSERVER) (User: )
Description: FCB::RemoveAlternateStreams: Operating system error 6(error not found) occurred while creating or opening file 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data\UGPD Choices.mdf'. Diagnose and correct the operating system error, and retry the operation.

Error: (09/14/2013 08:57:21 PM) (Source: MSSQLSERVER) (User: )
Description: FCB::RemoveAlternateStreams: Operating system error 6(error not found) occurred while creating or opening file 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\MSDBData.mdf'. Diagnose and correct the operating system error, and retry the operation.

Error: (09/14/2013 08:57:10 PM) (Source: MSSQLSERVER) (User: )
Description: FCB::RemoveAlternateStreams: Operating system error 6(error not found) occurred while creating or opening file 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\tempdb.mdf'. Diagnose and correct the operating system error, and retry the operation.

Error: (09/14/2013 08:57:02 PM) (Source: MSSQLSERVER) (User: )
Description: FCB::RemoveAlternateStreams: Operating system error 6(error not found) occurred while creating or opening file 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\model.mdf'. Diagnose and correct the operating system error, and retry the operation.

Error: (09/14/2013 08:56:49 PM) (Source: MSSQLSERVER) (User: )
Description: FCB::RemoveAlternateStreams: Operating system error 6(error not found) occurred while creating or opening file 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\master.mdf'. Diagnose and correct the operating system error, and retry the operation.

Error: (09/14/2013 06:00:19 PM) (Source: Userenv) (User: NT AUTHORITY)
Description: Windows cannot load extension \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dll. (The specified module could not be found. ).

Error: (09/14/2013 04:01:18 PM) (Source: Userenv) (User: NT AUTHORITY)
Description: Windows cannot load extension \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dll. (The specified module could not be found. ).

System errors:
=============
Error: (09/14/2013 10:53:30 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:48:28 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:43:26 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:38:23 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:33:21 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:28:19 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:23:17 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:18:14 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:13:12 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Error: (09/14/2013 10:08:10 PM) (Source: DCOM) (User: 6550-03525)
Description: DCOM was unable to communicate with the computer CMES using any of the configured
protocols.

Microsoft Office Sessions:
=========================
Error: (09/14/2013 10:36:50 PM) (Source: Userenv)(User: NT AUTHORITY)
Description: \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dllThe specified module could not be found.

Error: (09/14/2013 08:58:49 PM) (Source: Userenv)(User: NT AUTHORITY)
Description: \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dllThe specified module could not be found.

Error: (09/14/2013 08:57:22 PM) (Source: MSSQLSERVER)(User: )
Description: FCB::RemoveAlternateStreams6(error not found)C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\tempdb.mdf

Error: (09/14/2013 08:57:22 PM) (Source: MSSQLSERVER)(User: )
Description: FCB::RemoveAlternateStreams6(error not found)C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data\UGPD Choices.mdf

Error: (09/14/2013 08:57:21 PM) (Source: MSSQLSERVER)(User: )
Description: FCB::RemoveAlternateStreams6(error not found)C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\MSDBData.mdf

Error: (09/14/2013 08:57:10 PM) (Source: MSSQLSERVER)(User: )
Description: FCB::RemoveAlternateStreams6(error not found)C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\tempdb.mdf

Error: (09/14/2013 08:57:02 PM) (Source: MSSQLSERVER)(User: )
Description: FCB::RemoveAlternateStreams6(error not found)C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\model.mdf

Error: (09/14/2013 08:56:49 PM) (Source: MSSQLSERVER)(User: )
Description: FCB::RemoveAlternateStreams6(error not found)C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\master.mdf

Error: (09/14/2013 06:00:19 PM) (Source: Userenv)(User: NT AUTHORITY)
Description: \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dllThe specified module could not be found.

Error: (09/14/2013 04:01:18 PM) (Source: Userenv)(User: NT AUTHORITY)
Description: \\srhtdc2.srht.nhs.uk\SYSVOL\srht.nhs.uk\Policies\Desktop Authority\Desktop Authority Agent 8.0\daci2_x86.dllThe specified module could not be found.

=========================== Installed Programs ============================

Adobe Flash Player 11 ActiveX (Version: 11.5.502.146)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Reader XI (11.0.04) (Version: 11.0.04)
Adobe Shockwave Player (Version: 11.0)
Adobe Shockwave Player 11.6 (Version: 11.6.8.638)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.60.48.35)
Centricity Enterprise Web 3.0 Client (SPa07) (Version: 1.0.0)
Classic Client 5.1.7 for NHS (Version: 5.17.000.002)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
DisplayLink Core Software (Version: 5.2.22271.0)
DPM Download/Configuration (Version: 2.01.0180)
Embedded Security for HP ProtectTools Driver (Version: 5.5.100)
GemAuthenticate Client v5.2.7.1 (Version: 5.2.7.1)
HP 3D DriveGuard (Version: 1.10.9.1)
HP BatteryCheck 2.10 A4 (Version: 2.10 A4)
HP HotKey Support (Version: 3.5.15.1)
HP Integrated Module with Bluetooth wireless technology (Version: 5.5.0.8300)
HP USB Docking Video (Version: 5.2.22372.0)
HP Webcam Driver (Version: 5.8.50012.1)
IDT Audio (Version: 1.0.6275.0)
Intel® Graphics Media Accelerator Driver (Version: 6.14.10.5258)
Intel® Management Engine Components (Version: 6.0.0.1179)
Intel® Network Connections Drivers (Version: 14.8)
iSOFT Clinical Manager Client 1.4 (Version: 1.4.1024)
iSOFT Clinical Manager SIR Tab (Version: 1.0.5)
J2SE Runtime Environment 5.0 Update 11 (Version: 1.5.0.110)
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Java™ 6 Update 37 (Version: 6.0.370)
Marvell Miniport Driver (Version: 11.25.4.3)
McAfee Agent (Version: 4.0.0.1421)
McAfee DLP Agent (Version: 9.0.0.416)
McAfee Security Scan Plus (Version: 3.0.318.3)
McAfee SiteAdvisor (Version: 3.6.489)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office 2003 Web Components (Version: 11.0.8173.0)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 (Version: 9.00.1399.06)
Microsoft SQL Server 2005 Backward compatibility (Version: 8.05.1054)
Microsoft SQL Server 2005 Tools (Version: 9.00.1399.06)
Microsoft SQL Server Compact 3.5 SP2 ENU (Version: 3.5.8080.0)
Microsoft SQL Server Native Client (Version: 9.00.1399.06)
Microsoft SQL Server Setup Support Files (English) (Version: 9.00.1399.06)
Microsoft SQL Server VSS Writer (Version: 9.00.1399.06)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual Studio 2005 Premier Partner Edition - ENU (Version: 8.0.50727.42)
Mozilla Firefox 23.0.1 (x86 en-US) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 6.0 Parser (Version: 6.00.3883.8)
NHS Identity Agent v11.02.00a (Version: 11.02.00a (11.2.0.24579))
OMNIKEY 5x21, 5x25 PC/SC Driver (Version: 3.0.0.0)
OMNIKEY CardMan 3x21 PC/SC Driver (Version: 2.0.0.11)
SCR3xxx Smart Card Reader (Version: 8.40)
ScriptLogic Desktop Authority: Computer Agent (Version: 8.08004.63486)
Secunia PSI (3.0.0.6001) (Version: 3.0.0.6001)
SQLXML4 (Version: 9.00.1399.06)
swMSM (Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 15.0.17.2)
Trend Micro OfficeScan Client
Tweaking.com - Windows Repair (All in One) (Version: 1.9.16)
UGPD Choices (Version: 1.0.0.3)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Windows Internet Explorer 8 (KB2598845) (Version: 1)
Update for Windows XP (KB2141007) (Version: 1)
Update for Windows XP (KB2345886) (Version: 1)
Update for Windows XP (KB2467659) (Version: 1)
Update for Windows XP (KB2541763) (Version: 1)
Update for Windows XP (KB2616676) (Version: 1)
Update for Windows XP (KB2616676-v2) (Version: 2)
Update for Windows XP (KB2641690) (Version: 1)
Update for Windows XP (KB2661254-v2) (Version: 2)
Update for Windows XP (KB2718704) (Version: 1)
Update for Windows XP (KB2736233) (Version: 1)
Update for Windows XP (KB2749655) (Version: 1)
Update for Windows XP (KB2863058) (Version: 1)
Update for Windows XP (KB898461) (Version: 1)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB967715) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB971737) (Version: 1)
Update for Windows XP (KB973687) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
WebFldrs XP (Version: 9.50.7523)
WIMGAPI (Version: 1.0.0.0)
WinDIP Enterprise Client (Version: 2.2.10)
Windows Genuine Advantage Notifications (KB905474) (Version: 1.9.0040.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Internet Explorer 7 (Version: 20070813.185237)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Format 11 runtime
Windows Media Player 11
Windows Server 2003 Service Pack 2 Administration Tools Pack (Version: 5.2.3790.3959)
WOT for Internet Explorer (Version: 13.9.2.0)

========================= Memory info: ===================================

Percentage of memory in use: 71%
Total physical RAM: 1903.36 MB
Available physical RAM: 541.77 MB
Total Pagefile: 3796.84 MB
Available Pagefile: 2455.71 MB
Total Virtual: 2047.88 MB
Available Virtual: 1976.69 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:232.88 GB) (Free:202.32 GB) NTFS

========================= Users: ========================================

User accounts for \\6550-03525

_Administrator_          Administrator            ASPNET                  
Guest                    HelpAssistant            HPUSER                  
SUPPORT_388945a0         xxx                     

**** End of log ****



#4 White Rose

White Rose
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 14 September 2013 - 05:04 PM

And the Speccy link should be here

http://speccy.piriform.com/results/8WSfXd22BHJahANRVw8MUaa



#5 hamluis

hamluis

    Moderator


  • Moderator
  • 56,551 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:33 AM

Posted 14 September 2013 - 07:43 PM

System reflects 2GB of RAM.

 

You have Trend Micro Officescan AV and MS Security Essentials installed...please uninstall the Trend Micro product.\

 

You have 2 outdated versions of Java installed, along with the current version.  Please uninstall the two outdated versions, they present possible system vullnerabilities.  See http://www.java.com/en/download/uninstallapplet.jsp .

 

 

fcag.exe           Process ID: 2732
fcags.exe         Process ID: 1588
fcagswd.exe     Process ID: 2328
fcagte.exe        Process ID: 4232
 
Above processes relate to McAfee Data Loss Prevention...these need to be uninstalled/removed.
 
 
FrameworkService.exe  Process ID:1724   Path: C:\Program Files\McAfee\Common Framework\FrameworkService.exe   Memory Usage: 13MB   Peak Memory Usage: 14MB

 

Another process related to McAfee, needs to be uninstalled/removed.

 

You are choking your system...by having processes from various competing malware vendors...running at the same time.  Please uninstall all McAfee and Trend Micro software, using Add/Remove Programs.

 

Then...run the chkdsk /r command on the Windows partition.

 

Whatever...Desktop Authority Agent is....please uninstall it, there is a problem with it, as evidenced by the errors.

 

Louis

 



#6 White Rose

White Rose
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 15 September 2013 - 03:54 PM

Thank you very much for your help!  And sorry, I've done what I can - but unfortunately it looks as though some things are out of my control so you may be unable to help me (please see my replies to you below). As I mentioned above, my laptop is one that I was given by my previous place of work when I left - they assured me that I had full admin rights and that they had no further control over it, but it looks as though that's very much not the case, and I've no idea what can be done about it :-(

 

 

 

System reflects 2GB of RAM.

 

You have Trend Micro Officescan AV and MS Security Essentials installed...please uninstall the Trend Micro product.\

 

I tried to do this, but it appears that the IT department at my old place of work password-protected this, and I need to insert a password to delete.  They no longer support my machine and have washed their hands of it - so it would seem that there's not much I can do?

 

You have 2 outdated versions of Java installed, along with the current version.  Please uninstall the two outdated versions, they present possible system vullnerabilities.  See http://www.java.com/en/download/uninstallapplet.jsp .

 

Done

 

 

fcag.exe           Process ID: 2732
fcags.exe         Process ID: 1588
fcagswd.exe     Process ID: 2328
fcagte.exe        Process ID: 4232
 
Above processes relate to McAfee Data Loss Prevention...these need to be uninstalled/removed.
None of these will delete - they have a  "fatal Error"
 
 
FrameworkService.exe  Process ID:1724   Path: C:\Program Files\McAfee\Common Framework\FrameworkService.exe   Memory Usage: 13MB   Peak Memory Usage: 14MB

 

Another process related to McAfee, needs to be uninstalled/removed.

 

You are choking your system...by having processes from various competing malware vendors...running at the same time.  Please uninstall all McAfee and Trend Micro software, using Add/Remove Programs.

 

I've discovered both McAfee and Trend (and everything associated with them) are password protected and won't delete.  McAffee does at least appear to be updating (though with errors!) so maybe I should delete MSE instead???

 

Then...run the chkdsk /r command on the Windows partition.

 

Whatever...Desktop Authority Agent is....please uninstall it, there is a problem with it, as evidenced by the errors.

 

I've no idea where or what this is as I can't find it - but assume it's something else installed by the Tech Support people? 

 



#7 hamluis

hamluis

    Moderator


  • Moderator
  • 56,551 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:33 AM

Posted 15 September 2013 - 04:02 PM

You can do a clean install...after checking the functional status of the hard drive...and rid yourself of these mysterious problems from previous owner.

 

Since it's an OEM system, a restore to factory defaults should be possible, see http://www.manualslib.com/manual/359128/Hp-Probook-6550b.html?page=153 .  Not quite as good as a clean install but it will at least get the system back to "when purchased" status.

 

Louis



#8 White Rose

White Rose
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 15 September 2013 - 04:10 PM

Now that sounds promising - though slightly on the technically daunting side (my computing abilities tend to be of the "close your eyes, press go and hope" variety!).  OK boss, am off to read your link (and to discover what an OEM system is!)



#9 White Rose

White Rose
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 15 September 2013 - 04:19 PM

OK, I've read the link and it looks like I need to assemble wine and chocolate before I start as I'm sure I saw a mention of a BIOS Setup in there!  Do I need to back up files and photos and generally prepare for the risk of things going adrift, or is it much more straightforward than it feels? 

 

Sorry, am sounding flippant to disguise the fact that I'm badly out of my depth - generally I turn my computer on, use the web/MSOffice/work sites and that's about the limits of my technical abilities!



#10 hamluis

hamluis

    Moderator


  • Moderator
  • 56,551 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:33 AM

Posted 15 September 2013 - 04:52 PM

A restore to factory defaults...is the system implemented by the system manufacturer...in lieu of providing a Windows install disk so that customers would be able to easily reinstall Windows.

 

The differences consist of the fact that a factory restore to defaults...isn't guaranteed to work properly...and amounts to wiping everything currently on the drive and reinstalling whatever was on the system when sold.  It is the only alternative the manufacturer provides...for customers who buy these systems.  Been that way since about 2005.

 

There is never any guaranty...that anything on a computer system...comprised of mechanical and electronic components...and dependent upon human programming and electronics engineers...will ever work without the possible loss of data files.  That's the primary principle behind making routine, periodic backups of system contents.

 

Technical skills are not required to run a computer system competently and with confidence...just the ability to read, the ability and willingness to use search engines to find answers to questions that may arise...and the knowledge that the unforeseen is bound to happen on your computer system :).  Many IT personnel don't have "technical skills" but they do read, interpret, and profit from their own experiences, as well as those of others which are made available for public consumption. 

 

The way that I think of it is...if something goes wrong with my systems and I'm able to overcome it without taking it to a 3d-party and being charged for their efforts (no matter how great or how small)....then I prefer that to doling out money fo someone for doing that which I could have done myself.  I'm cheap and I resent having my system sit in someone's shop when it did not have to be that way :).

 

Louis



#11 White Rose

White Rose
  • Topic Starter

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:01:33 PM

Posted 15 September 2013 - 05:13 PM

Ok - yes, I'm in full agreement with everything you say (especially that last paragraph :-), am just distinctly unnerved at meddling with something about which I'm utterly clueless!

However, as you make it sound so straightforward, I reckon I'd be daft not to give it a go :unsure: .  As the last back up I did was to my memory stick when my computer was still infected with rootkit virus,  I reckon I'd better call in at the supermarket tomorrow after school drop off and get another memory stick so I can back everything up again on a clean stick (this computer will go out of the window if I have to wrestle with Rootkit again!).  Will be back with the results tomorrow, just as soon as I can craft a little peace and quiet time without a small child helpfully pressing buttons :-)



#12 hamluis

hamluis

    Moderator


  • Moderator
  • 56,551 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:33 AM

Posted 15 September 2013 - 08:43 PM

Wel'll be around :).

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users