How To Remove The CryptoWall Virus And Get Your Data Back

  My first and foremost bit of information is to have good up to date Virus Protection. Okay now back to the subject at hand.  I had a friend recently whose computer had become encrypted from a virus. The name of the virus is called CryptoWall. This virus is transmitted through emails and is in the form of a attachment in a zip file. They generally are disguised as a pdf file. The pdf files that come through will be in the form of an invoice, bill, purchase order, complaint or some kind of a fake business transaction. It basically comes back to the saying if you don't know who it is or you did not ask for it DELETE IT and EMPTY THE DELETED FOLDER . I have seen some people save thousands of emails.
  This virus is one of the typical Ransomware viruses where they try to get you to send money to get the unlock key code. Most of the time you send the money and get nothing in return. What the person did was download a program called Shadow Explorer. It is a removal tool to export the encrypted files to preferably to an external hard drive.  It can be downloaded at this website link http://www.shadowexplorer.com/downloads.html . The best thing to do is use a clean empty hard drive to move all the folders and files you unencrypt to. You can also download a program called List C Wall. It will check the registry and list all the encrypted files. You should run this before you unencrypt your files. You can download the program at this link http://www.bleepingcomputer.com/download/listcwall/ . After you have determined all the files to unencrypt run the shadow explorer program and follow it through. This can be a long and tedious job, but be patient. I do not know of any av removal tools yet to just clean and unencrypt the whole computer system yet.
  Once you have finished unencrypting all the files you will need to clean all the viruses from the computer. If it is windows 8.1 do not run the combofix program, because it does not run on windows 8.1 yet. Other than that run all programs in the safe mode. I would use combofix, tdss killer, free malwarebytes, Super Anti Spyware Portable, Spybot Portable, Clamwin Portable, Eset Online Scanner, A-Squared, Bitdefender Free as a Portable Scanner, Norton Power Eraser and also Free Avast which can be run as a portable virus cleaner off a usb flash drive. These are all free virus removal tools from the internet. Basically you will be doing a manual virus removal of all infections in the system. When all files have been scanned, I would scan the unencrypted files and then delete the encrypted files. Then you can move the unencrypted files back. Make sure you have the unencrypted files saved before you perform the above virus cleaning. Once all files are back, check and make sure the system is working properly and open the various files with their associated program such as Microsoft word or excel. Here is a link to information on all this from bleeping.com http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information .
  Just remember that there are still problems with some of these viruses like cryptolocker, which still has no solution. The best thing you can do is back up your data to an external hard drive or to the cloud with carbonite. It is just a shame what people will do to get your money. So remember to always stay safe and protect your data. Also remember to back up all data to the cloud or an external hard drive and always have good virus protection.
  I would also say that I have seen some occasions when the data was not able to be unencrypted and gotten back. It depends on how it infected your computer.
  Thank You for reading and stay safe.

  This an update on my findings with the cryptowall virus. Some have said to delete certain dll files. Next run the system restore in windows or boot off a windows cd and run the system restore. Usually I find that either the system restore does not function or go back far enough. I also have only had one computer function properly after cleaning the system of infections. I have had systems where the cryptowall virus had been found in system files as well as other windows files. It is very possible that the system restore archive may have been infected. Restoring back to a different date may put the virus right back. It may seem okay for awhile and then start up again. I had one system where the computer had been in awhile ago and the system was clean. It seemed to be functioning properly and then became encrypted again. Either the customer infected the system again or the infection lay dormant and then started up again. It was always found that infections entered the system archive files and also the system information file. The system restore should be turned off and then restart the system. That way any infection will be gone. The system information file should be deleted, restart the system and the file is recreated.
  In any event you will be taking a chance at restoring the system to an earlier date. I would follow the shadow explorer and export the files to an external hard drive first. Next I would reformat the hard drive or write zeros to it. Then reinstall all software and move the data back in place. This may or may not work so always save your data. Alot depends on how far the infection went in the system. Just deleting certain files because you believe they are from the infection is foolish. Going by guessing makes you a shotgun technician. I would not go to that company for repair especially when they use the word GUESS.
  Thank You for reading again.

Help My Computer Runs For A Few Seconds And Shuts Off By Itself

  I don't know how many times someone brings in a computer and says it runs for a few moments and then it shuts off by itself. There are a few things to check first. Most of the time this happens because something is stopping the system from being cooled properly. The first step is to remove the side cover and inspect the inside of the computer. There are a couple of things I look for first. The most common problem is a build up of too much dust, cobwebs and bugs. Look at the microprocessor fan and heat sink. If they are packed with dust the heat sink can not dissipate the heat from the microprocessor. This will result in the motherboard shutting off the system to protect it from damage. You can use some computer air spray or it is better known as canned air to blow out the dust or you can use an air compressor. I myself use the air compressor, because the canned air does not always last. Just make sure to hold the cpu fan so it does not spin. If it spins too fast it could damage the fan and you will have to replace it. These are the best ways to clean dust from the computer. If you are not comfortable with doing the work yourself I would recommend taking the computer to a computer repair service. Some computer repair shops have an in shop fee as well as an on site service fee.

  The other fans to inspect are the fans in the power supply and any front, rear, side or top case fans. Sometimes you may have to remove the fans to clean the dust and dirt off the blades. I use a dampened q-tip to do this. You can use some cleaner like fantastic to clean off the blades. The second thing with any fan is to make sure it is spinning properly. If it spins too slowly or make a groaning noise it is time to replace it. Fans are not expensive and usually easy to replace. Front case fans may require removing the front case cover. Be careful because the plastic catches can be easy to break. If the the power supply fan is not spinning or making noise, the power supply will have to be replaced. Make sure to buy a new power supply with the same wattage or more wattage. Nowadays 500 Watts or more is normal.
  Another problem with fans not spinning are cables that are getting stuck in the fan blades. Just use some tie wraps and move the cables or wires away from the fans. A good system has good air flow to keep it cool and running properly. Removal of power supplies can be easy most of the time to replace. I have had some computer cases that required taking off the top cover and then the power supply can be taken out from the top. You can find good power supplies at your local computer store or pc service repair shop and prices are not usually too bad. I would recommend buying off the internet through Amazon or Ebay. One place on the internet I like is Newegg. They have always had good parts and good prices. I know of some computer store that buy from them at retail prices and then mark up the price again to make a profit. My advise is buy it yourself, replace it yourself, learn something and pass it on to someone else. Avoid the crooked people trying to get your money. I do have to say that there are some very good computer repair shops around that do provide very good computer repair services.
  If all the above repairs are not solving your problem, then something else is causing it. I would look at the motherboard and make sure the cpu heatsink is not loose or broken. Check the motherboard for any damaged components such as a capacitor that may be bulging or leaking. Make sure the sticks of memory are installed properly. Try removing them and reinstalling them. If none of them are causing the problem, then the hard drive may be defective or you may have gotten a virus, malware, spyware or adware. I have seen some infections lately that are causing problems like this. I would recommend download the hirens program. It is a zip file that can be installed on another computer. It will then create a file with an iso extension. Burn this image program to a cdr or dvd disk. You can also put it on a usb flash drive. Either way see if you can boot off of it. There are many programs to scan the hard drive for problems with the hard drive. You can scan and test the memory. I also copy the various programs for scanning for viruses such as malwarebytes, spybot, eset online scanner as well as others. Just copy to the root and run the program. Just remember to connect to the internet first, so you can update the programs. Hirens download zip file can be found at this link http://www.hirensbootcd.org/download/  . There are other programs as well to scan and repair for technicians. There is the windows 7 PE or the Windows 8 PE disks that have good programs on them. Here is a link to a website with lots of information on them http://technet.microsoft.com/en-us/library/dn293200.aspx or http://windowsmatters.com/2013/04/30/windows-8-based-pe-boot-disk-with-explorer-shell-and-all-my-favorite-apps/ .
  If all these troubleshooting methods do not solve the problem or the infection has gone to deep it may be time to replace the system depending on its age. You may have to clean the infections, save the data, wipe out the system and reinstall the operating system, drivers, updates and then move the data back in place. A lot depends on what virus or infection has gotten in the system. If it is one of the encrypting infections you may have lost the data. Some data from ransom encryption viruses can be saved by different programs. Check out bleeping.com for various solutions.
  Thank You for reading and I hope this information helps. Always remember to educate yourself in any way possible so you can save your money and buy more computers or hardware. Also keep you virus cleaning software up to date.

Study For Your A+ Certification

  If you are thinking of becoming a computer repair technician I would start studying for your A+ Certification as soon as possible. The A+ Certification is generally needed today if you want to work as a computer technician. Most good companies will require it. If you come across a company and they don't care if you have it chances are they won't be paying you proper wages. Believe me I know of such places and ones that promise you a good increase if you get the A+ Certification. You then pass the tests and they just keep blowing you off in the hopes that you will forget about it. My advise is if you are in this situation, find another job

  There are various places that are free on the internet where you can study tutorials online for no cost. The only cost involved is your time. There are also websites that provide videos or lectures on studying for your A+ Certification. Again all it costs you is your time to watch and listen. I have done various certifications on different products through out the years in my career. Some of the time it was studying the
material from Hewlett Packard and taking the test online. As far as the A+ Certification goes you study and then go and take the test at a specific location when you are ready. You can not take the test online at this time.
  There are plenty of excellent good books to study from before you go and take the test. Comp Tia A+ Certification is one of those good examples of an excellent book to buy to use to study for the test. You can always go with one of the A+ Certification for dummies books to study from. They are generally made easier to study from for the individual. I still have mine from a few years ago. Unfortunately in my position I was told that even if I got it I would not get any kind of a raise. I did find out that other individuals were getting raises for getting their A+ Certification. All I can say is nice company. You may guess what I am in the process of at this time.
  Some other advise would be that after you achieve your A+ Certification don't stop there. I would think of what other part of the field of computers you are interested in and go for it. Whether you are interested in security, networking of whatever you may want to pursue. Once again there are various different websites out there to study from for whatever your career path may be. All it takes is your time and some effort. One of my favorite websites to visit for studying is at this link http://www.professormesser.com/ .  Here is another website for excellent free training http://www.cbtnuggets.com/it-training-videos/course/comptia-a-plus-2012 . There are also plenty of websites where you can also take free A+ Certification tests to see if you are ready to pass the test.
  Well that is all for now. Thank You for reading.