Software: Hidden and Additional Themes for Windows 7

One of the nice cosmetic features in Windows 7 is the great variety of themes that you can select from to change the appearance of your computer system. I had not written this post earlier because somehow I seriously though that most people were aware of all their options. However, after a recent road trip (with the W7 laptop) where I kept getting asked “where did you get those backgrounds for your computer”, I suddenly understood that their are a lot of people who just don’t know about the additional cosmetic changes you can make to your Windows 7 pc. So with that being said, here is a simple way that you can add or change the look of your Windows 7 pc.

For those who still aren’t sure here is a short video from Microsoft explaining “What is a theme” – (LINK)http://windows.microsoft.com/en-us/windows7/what-is-a-theme (http://windows NULL.microsoft NULL.com/en-us/windows7/what-is-a-theme)

Microsoft has always offered what they refer to as themes for Windows, to all the user to change the appearance of their system. In Windows 7, Microsoft has a 3 different options for themes, 2 of which may not be well known. Everyone that has installed Windows 7 should be familiar with the personalization screen that you can find in Control Panel (Start Menu Button –> Control Panel)

When you click on Personalization, you get the following screen (This is the USA version, if you selected a different country during install of Windows 7 the pictures themselves may be a little different) where you can select the theme to use for your computer (Theme includes pictures –usually 5 or 6 in a group- plus color schemes and sounds). In addition, by selecting at the bottom you can select how often the background changes and if you want a specific color scheme or sound and what screen saver to go along with your theme.

Now this post could end right here but that wouldn’t cover the 2 other ways that you can add to your choices in the personalization screen.

Additional Themes Option #1 – The Hidden ones already on your pc

So lets start with the option that is already on your computer but is hidden because they are considered to be for other regions or locations. (NOTE: you will need to have hidden files and folders showing in Windows. You can change that setting in control panel –> folder options –> View tab –> put a bubble next to “Show hidden files, folders, and drives)

1) Click on Start and then in the search box type the following

- C:\Windows\Globalization\MCT and press the Enter key

- you will see the following window (below), just click on the folder called MCT

2) The window that opens will show you the additional themes for Windows 7 for other regions or locations (Depending on the version of Windows 7 your choices may be a little different than the ones shown below). In my copy of Windows I get themes additional themes from Australia, Canada, U.K, and South Africa (In addition to the US theme which is already showing).

- Once you are at the MCT folder open the theme for the country you like, and then you can either select the folder with the country name where you will see the pictures used in the theme or the theme folder itself to install the theme.

- If you select the folder with the pictures (below) you can right click on a picture you like and then select “Set as desktop background. (This will not make it into a changing theme, it will give you just that picture as your background. )

- If you choose to install the entire theme, once you have selected the Theme folder, double click on the file name.theme (in this example GB.theme). That will install the entire theme.

3) Once you have done that you can go back to your personalization folder in control panel and select the newly added themes. Once a theme is on your Personalization window, its just a matter of clicking on it to change between themes.

Additional Themes Option #2 –

Other than locating hidden Windows 7 themes in your computer, you can also download several windows 7 themes form the Microsoft Website.

Visit the Windows 7 Personalization page (LINK) http://windows.microsoft.com/en-us/windows/downloads/personalize (http://windows NULL.microsoft NULL.com/en-us/windows/downloads/personalize)

- Here you will find a large selection of themes you can add to your Windows 7 install. Its also very simple and best of all its FREE!!!!

All you need to do is scroll down the page until you find a theme that interests you, you will see a download button just under that them.

- Click on download, it will be followed by a screen that will ask you if you want to Open or Save. If you wish to save the themes for later just select save (and remember where you saved it to). If you just want to install select open and it will automatically install the theme on the computer for you. (NOTE: The theme will also become your default theme, so you will need to go back to the personalization folder to change it to something else.)

Themes take up a minimal space on a hard drive so don’t be afraid to download and try a few of these out.

And with that you have another simple way of changing the look of your Windows 7 pc. “I’m glad Windows 7 was my idea”. OK it wasn’t but I have always wanted to be in one of those commercials so that I could say that.

Software: Windows 7 – Problem Step Recorder for easier troubleshooting/support

From TechNet (LINK) http://technet.microsoft.com/en-us/magazine/dd464813.aspx (http://technet NULL.microsoft NULL.com/en-us/magazine/dd464813 NULL.aspx)

Tip: Easier Troubleshooting Support with Problem Step Recorder

Troubleshooting errors for a remote user can be very difficult since you can’t actually see what’s happening on the remote system. Often it comes down to a user saying he didn’t click a button, open a program, close a program, or so on. The new Problem Steps Recorder (PSR.exe) allows you to see exactly what’s going on, documenting every action that takes place on the system experiencing problems.

The Problem Steps Recorder tool is a simple screen capture utility that grabs screenshots whenever a mouse move or click is made and documents all the data into a zipped MHTML report page that can be sent off directly to the help desk. Every step of the user’s actions is logged complete with a screenshot with the item highlighted, and it even allows the user to provide commentary on specific details.

To launch the Problem Steps Recorder, just go to START and type PSR.exe and your off and running.

Alert: How to deal with Rogueware software when it tries to load on your computer.

While surfing the web today I ran across a another version of the installer that tries to load one FAKE antivirus software (Antivirus 2010 is one of the most common names). The following can come up if you visit an infected website. The site that triggered these pop ups is a well known site, so do not assume that just because you are on a MAJOR website that you are not at risk.

What to look our for

As soon as you get to the website, the following pop up appears. **This is why it is important to read messages before clicking ok.

What you probably wont see (unless you drag the window above around the screen) is the little window (as shown below) that opens directly behind the main window. If you were to expand the little window you will see that its for 1anetantispy.

If you click on the OK button above you will get infected.

What to do if you see the AV check Window

1 – DO NOT CLICK ON ANY OF THE POP UP WINDOWS.

2 – On your computer click on the start button –> click on Run (or type Run in the search box) –> Once you get the run box, type taskmgr into the Run box and press OK

3 – This will open up the Windows Task Manager. Look for all items that involve the browser you are using. (In the example below, its Internet Explorer) Highlight each item and then click End Task. Once all the browser windows close

4 – (A) If you are using Internet Explorer go to Tools –> Options –> and Click on Delete Browser History. (B) If you are using Firefox, go to Tools –> Options – > Privacy –> and click where it says “Clear you current history”.

Alert: Desktop Security2010 – Another Rogueware program which seems to be spreading fast. This is NOT something you want on your pc.

Job security is the probability that an individual will keep his or her job, and with the rate of computer clean up that I have to do that unfortunately seems to be going up and not down, I think I have job security for a while (Honestly, this is not the kind of job security that I want). We have had many posts on TGM about viruses, spyware, rogueware, yet the “my computer is infected” calls continue to come in, as people continue to fall for the tricks that get them infected.

The latest rogueware infection is called DesktopSecurity2010. What will happen if you get infected with the DesktopSecurity2010 rogueware

DesktopSecurity2010 is an adware program that warns users of non-existing threats in their computers so that they purchase a certain program that removes them from the computer.
Additionally, in order to make users think that their computer is really infected, it displays a warning message when the computer is restarted, and from time to time the screen fades to black and other times blinks with different colors.
DesktopSecurity2010 can reach the computer when the user accesses certain websites which display banners or pop-up windows which lead to the download of this program. It can also reach the computer in a link that can be received via spam messages, fraudulent websites, etc.

What should you look out for when web surfing

DesktopSecurity2010 is easy to recognize, as it shows the symptoms below (These are some possible symptoms, you can still get infected without seeing these):

It reaches the computer in a file with the following icon:
When it is run, a screen to install the program is displayed:
Once installed, it starts to carry out a system scan in search for possible malware and once finished, it displays warning messages informing users that the computer is infected:

One of the known ways that the rogueware is installing

The following post on the PandaLabs site (LINK: http://pandalabs.pandasecurity.com/making-new-friends%e2%80%a6/ (http://pandalabs NULL.pandasecurity NULL.com/making-new-friends%e2%80%a6/)) shows 1 of the ways you can get infected. Two of the clean up jobs that I have had to do in this past week occurred because the user also fell for a greeting card email as described below (Confirmed).

Making new friends…

Posted on 05/13/10 by Olaiz

I’m very happy because I’ve received a greeting card via email from a new friend, thought it’s not my birthday, my saint’s day or anything like that :-)

Look what a nice card I’ve received:

Google_groups_email_en

Besides, it has been sent from 123greetings, which is a legal website to download and send cards, so it must be trustworthy.

I’ve clicked the picture of the message and I’ve been redirected to the website http://luxxxx.googlegroups.com/web/setup.zip, but I can’t see any greeting card here, but a Google groups website containing a link… maybe I have to follow the link in order to view it…

There’s no way. I can only see the Windows of an antivirus called DesktopSecurity2010 (http://www NULL.pandasecurity NULL.com/homeusers/security-info/218297/DesktopSecurity2010) informing me that my computer is infected and that I have to pay the license in order to eliminate the malware. I think that I got infected :-( and I have neither a greeting card nor a new friend…

Now, talking seriously, yesterday we commented how this false antivirus was using Google Groups users (with malicious intentions) to be distributed. In fact, the URL from which the rogueware is downloaded is like the following:

http://Google Groups user.googlegroups.com/web/setup.zip

Some of these users are felixss, gorlum or misterxyz.

Google has reacted to this and has started blocking these malicious users. So, if you try to access any URL that uses these malicious users, the following message is displayed informing you that the user cannot be found:

Google_groups

Even so, some malicious accounts may still be active, so don’t trust messages like this and don’t follow any link like those we’ve previously mentioned in this post.

So what can you do to help protect yourself

If you get a link, email, instant message, asking you or telling about something you were not expecting, even if it seems to be from someone you know, DO NOT TRUST IT! Getting a message from grandma saying check out the new pictures i upload and realizing she is 80 years old, ask yourself, does grandma really know how to upload pictures? It only takes a minute to call the person, and get a response to “did you send me….. message”, if they did, they will tell you instantly. If they didn’t they will be the 1st to say “What are you talking about”.
Because of Twitter, the use of link shorting sites seems to have become the norm. The problem is that a link to http://bit.ly/dr9Ucz (http://bit NULL.ly/dr9Ucz) could be a link to many place. How do you know if it is a safe link or not a safe link. Again, even if the link is sent to you by someone you know, DO NOT TRUST IT unless you were specifically expecting it. For the record, http://bit.ly/dr9Ucz (http://bit NULL.ly/dr9Ucz) is actually a link to techgeekandmore.com, and TGM does not list shorten links on the TGM site, because we want you to know where you are clicking to. One thing you can do to check shortened links is visit sites that expand the shortened link. (If you use one of these link expander services and copy the link, be careful to copy the link and NOT accidently double click on the link) Some of the sites you can visit to use to expand links

-> LongURL (LINK: http://longurl.org/ (http://longurl NULL.org/)), PrevURL (LINK: http://www.prevurl.com/index.php (http://www NULL.prevurl NULL.com/index NULL.php)), ExpandMyURL (http://longurl NULL.org/) (LINK: http://www.expandmyurl.com/ (http://longurl NULL.org/)), URL Snoop (http://urlsnoop NULL.com/) (LINK: http://urlsnoop.com/ (http://urlsnoop NULL.com/)), Securi.net (http://sucuri NULL.net/?page=tools&title=check-url) (LINK: http://sucuri.net/?page=tools&title=check-url (http://sucuri NULL.net/?page=tools&title=check-url)). At all the sites, enter the shortened URL and click to find out where the link will lead

-> In addition if you use Firefox to browse the web, you can install LongURLPlease (LINK: http://www.longurlplease.com/ (http://www NULL.longurlplease NULL.com/)), or LongURL (LINK: http://longurl.org/tools (http://longurl NULL.org/tools)), which are Firefox browser extensions that automatically preview the destination URL for shortened links from just about any shortener you can name.

As always make sure that your PC is updated with all the latest Windows Updates, your Anti-virus is updated, your install of JAVA is updated, your install of Adobe Flash player is updated, Your PDF reader is updated. Most viruses, spyware, rogueware use problems with these programs to get into your computer. Use can use sites like File Hippo (LINK: http://www.filehippo.com/ (http://www NULL.filehippo NULL.com/) ) to check and make sure your programs are up to date.

What to do if you do get infected

If you still get infected, you can use SuperAntispyware and Malwarebytes programs to clean your machine, I recommend downloading both before you get any infection. Run them on a regular basis (Regular = once a week or so), even if your computer does not show any signs of issues.

To download both programs I recommend using Ninite (LINK: ninite.com)

If you would like to see more information on ninite you can see the TGM post http://www.techgeekandmore.com/2009/12/25/software-two-must-haves-for-the-new-pc-pc-decrapifier-and-ninite/

If after running SuperAntispyware and Malwarebytes, you are still infected, then you will need to use a PE (Physical Environment) disk. The PE disk that TGM recommends is UBCD (LINK: http://www.ubcd4win.com (http://www NULL.ubcd4win NULL.com)). The how to for the UBCD can be found at http://www.ubcd4win.com/howto.htm (http://www NULL.ubcd4win NULL.com/howto NULL.htm) .

Software: Repairing your Outlook file. What to do when Outlook wont open because your .pst file is corrupted.

A call that I get sometimes involves “I can’t open my Outlook email”. Microsoft Outlook uses a PST file to store your emails. The problem with the PST file is that a single file holds all the info, so if something happens to the file, it affects all parts of your email (Inbox, Sent Items, etc). The PST file has a size limit as well, for those using Outlook 2002 and earlier the limit is 2 GB. The size limit has changed for users of Office 2003, 2007, 2010 and its now 20 GB. Two of the most common ways to When you let your pst file get close to its size limit, or if your pc happens to power off while you are in Outlook you risk

Since the beginning of Outlook, one of the little known tools that Microsoft includes is the Inbox Repair Tool. The tool is designed to fix your pst file if it ever gets corrupted. The following steps will help you fix Outlook if your pst gets corrupted.

1 – Find your PST file. If you have installed Outlook in with default settings, the PST file will be located in

C:\Documents and Settings\user_id\Local Settings\Application Data\Microsoft\Outlook (Where user_id is the name of the Windows id that is signed in).

2 – Find the Inbox Repair tool for your version of office. Unfortunately Microsoft stopped putting an icon in the start menu for the Inbox Repair tool after Office 97.

To use the Inbox Repair tool, locate one of the folders by using Microsoft Windows Explorer, and then double-click the Scanpst.exe file.

The Scanpst.exe file is typically located in one of the following folders: ( Where disk drive is the location of your install, typically the C:\ drive)

<disk drive>:\Program Files\Common Files\System\Mapi\1033\

<disk drive>:\Program Files\Common Files\System\MSMAPI\1033

The Scanpst.exe file for Outlook 2007 is is typically located in the following folder:

<disk drive>:\Program Files\Microsoft Office\Office12

The Scanpst.exe file for Outlook 2010 is is typically located in the following folder:

<disk drive>\Program Files\Microsoft Office\Office14

3 – Once you found and started the Inbox Repair tool (Scanpst.exe), type the path and the file name of the personal folders (.pst) file or click Browse to locate the file by using the Windows file system.

4 – Click on start.

5 – Once it completes, you should be able to start Outlook again.

How To: Uninstalling Microsoft Office 2010 Beta, when the normal uninstaller says it failed. (Also works for all versions of Office 2007)

This week Microsoft released the final version of Office 2010 for those who have accounts with TechNet or MSDN (LINK: http://www.neowin.net/news/office-2010-now-available-on-msdntechnet?showcomments=true (http://www NULL.neowin NULL.net/news/office-2010-now-available-on-msdntechnet?showcomments=true)), so I figured I should move up from my beta version of 2010 (which has run without issues since I installed it) to the final version.

microsoft

I am one who always believes in doing “Fresh” installs whenever possible, which means that you need to uninstall your current version prior to installing the new edition of the software. However I came across this error when uninstalling the beta version

It seems the error is caused by a missing xml file that should have loaded into the Grove portion of the install but didn’t. When I installed my copy of Office 2010 Beta, I did a custom install and did not select Grove to install, so I will post the 2 possible solutions for this situation (With Grove and Without Grove)

To Check and see if you have Grove installed –> Go to ?:\Program Files\Microsoft Office\Office 14 or ?:\Program Files (X86)\Microsoft Office\Office 14 (the “?” in the address will be the location of where you installed your copy of office. If you installed it with default settings then the “?” will be your “c:\” drive. In addition, you will have (x86) in the address if you installed the 32 bit version of office in a 64 bit Windows Version)

(**Close all Office Files / Folders / Programs prior to attempting any uninstall)

Solution with Grove -

**You will need a copy of your installation source / CD for this solution
1 – Locate the Grove Folder on your Installation Source / CD

2 – Copy the setup.xml from the groove folder of the installation source, and paste it in C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\ or C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\ (Depending on the version you have installed)

3 – Try and uninstall (AGAIN)

Solution without Grove Installed or without the Office Installation Source

Go to the following Microsoft Support Page (LINK) http://support.microsoft.com/kb/971179/ (http://support NULL.microsoft NULL.com/kb/971179/)

Using the Microsoft Fix It function found about 2/3 of the way down the page, click on Fix It and then select run.

Microsoft Fix It will go in and remove the files

The entire process removed Office 2010 Beta in just a couple of moments.

**The process can be used to remove any version of Office 2007 Suite or Office 2010 Suite

Alerta: Mensaje en Espanol de correo electrónico que es un Virus de computadora.

Desde el inicio de la TechGeekandMore, uno de los ejes más grandes ha involucrado virus de computadors (que se llaman Rogueware o Malware). Rogueware y malware pueden infectar un pc a través de diversas maneras (visitar sitios del Web, haga clic en vínculos, a través de correos electrónicos, o mas….). Hasta ahora, todas las advertencias de correo electrónico cubierto correos electrónicos en inglés, porque eso es lo que se sabia que existia. Sin embargo por ahora puedo informar oficialmente que los correos electrónicos son ahora multi-lenguaje. Esta noche he recibido un correo electrónico (que me mando un miembro de familia) que dice "Amix, esto tienes probarlo".

La versión en inglés del correo electrónico se a visto por un tiempo, "Cheques para ver quien te está bloqueando en MSN". El gancho del ser que si puede clic en el enlace proporcionado en el correo electrónico, que podrá ver (supuestamente) que ha le bloqueado de su lista de MSN Messenger. Como se señaló mirando el origen del correo electrónico (abajo), es casi una traducción exacta de la versión en inglés, afirmando que si se mira el enlace usted será capaz de ver que está bloqueando le (bloquear las direcciones de internet dentro de la fuente del correo electrónico)

Lo que realmente hace el vínculo es instalar una versión de Antivirus2009 (o 2010) que produce una gran cantidad de dolores de cabeza para el usuario y normalmente requiere un tecnología para limpiar o reinstalar el equipo. Si tienes amigos ni familia de habla española, le recomendamos encarecidamente que Hágales saber no se van a abrir este correo electrónico y a sólo la lista como correo no deseado y elimínelo. Si ya han abierto el correo electrónico, pueden utilizar programas como la versión gratuita de SuperAntiSpyware (LINK: http://www.superantispyware.com/superantispywarefreevspro.html (http://www NULL.superantispyware NULL.com/superantispywarefreevspro NULL.html) ) o la versión gratuita de Panda (LINK: http://www.malwarebytes.org/ (http://www NULL.malwarebytes NULL.org/)).

Alert: Malware emails are not just in English – They also exist in Spanish.

Since the start of TechGeekandMore one of the biggest focuses has involved Malware and Rogueware. Malware and Rogueware can infect a pc via various ways (visiting websites, clicking on links, via emails, etc….). Until now, all the email warnings covered English language emails, because that’s what was known to exist. However as of now I can officially report that those emails are now multi-language. This evening I received an email (from a Spanish speaking family member) that says “Amix, esto tienes que probarlo”, which loosely translates to “Buddy, You have to check this out”.

The English version of the email has been a regular for a while, “Checking to see who is blocking you on messenger”. The hook being that if you click on the provided link in the email, that you will be able to see (supposedly) who has you blocked from their MSN Messenger list. As noted while looking at the email source (below), it is almost an exact translation of the English version, claiming that if you look at the link you will be able to see who is blocking you (I did block the internet addresses within the source of the email)

What the link actually does is install a version of Antivirus2009 (or 2010) which causes a lot of headaches for the user and normally requires a tech to clean up or reinstall your computer. If you have any Spanish speaking family or friends, we highly recommend that you let them know NOT to open this email, and to just list it as junk mail and delete it. If they have already opened the email, they can use programs like the free version of SuperAntiSpyware (LINK: http://www.superantispyware.com/superantispywarefreevspro.html (http://www NULL.superantispyware NULL.com/superantispywarefreevspro NULL.html)) or the free version of Malwarebytes (LINK: http://www.malwarebytes.org/ (http://www NULL.malwarebytes NULL.org/)).

TGM Q&A: Solution to Error “Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed” .

An interesting error came up this week when working on trying to add a pc on to a network. The error “Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed” came up while trying to add pc new pc onto an existing network.

I had not seen this error previously and started doing all the standard troubleshooting procedures and research, and discovered that this error happens both when adding a pc to a network or while trying to a new network drive to an existing pc.

The error itself seems to be triggered by the way Windows handles authorizations (I am assume on that, but due to the solution, it makes sense), and the solution is actually a very simple one.

SOLUTION:

On the pc that is getting the error, go to Start –> (settings –>) control panel –> Administrative Tools –> Services.

- In Services you will find 2 items toward the bottom. Locate where it says Server and Workstation.

- Once you find Server –> click on it 1 time to highlight it. On the top left you will see it say Server with a choice of Stop, Pause and Restart. Select STOP under server

- Now go down to Workstation –> click on it 1 time to highlight it. Again click on Stop.

Now you will be able to add either the pc to the network or add a mapped network drive. Once you have done either reboot the pc. Simple as that.

Alert: Another Fake Email install Rogue Software (From Panda Labs Blog)

One of the biggest reasons why TechGeekandMore started came from how many customers I had (and still have) to visit every week to either clean Viruses of PC or (even worse) recover as many files as possible and then reinstall Windows. I wanted a way a to try and alert and educate my customers about how …..

- No African Prince was going give you millions

- Emails that say that they are from a friend or family with that weird looking attachment could actually be fake

- Hot College Girl……well this one just really doesn’t have much beyond “Don’t do it”.

ETC ETC ETC…….

In those lines a new email starting this week, that has only 1 goal, to trick you into downloading and installing some really nasty software (more of the fake antivirus software). This new email says that “You have received a postcard”……

The following information comes from PANDALABS blog ( http://pandalabs.pandasecurity.com/the-thousand-faced-rogue/ (http://pandalabs NULL.pandasecurity NULL.com/the-thousand-faced-rogue/))

******************************************************************************************************************

The Thousand-Faced Rogue

Mar 5

Posted on 03/5/10 by Olaiz (http://pandalabs NULL.pandasecurity NULL.com/author/olaiz/)

We want to inform you of a new flood of email messages that seem to contain a postcard but are actually distributing malware. Concretely, we’ve seen several thousands in a few hours.

It’s not the first time we see emails like this in circulation, as subjects like “You’ve received a postcard” are very recurrent.

The message is like the following:

postcardzip_en

The message seems to have been sent by a member of your family through a legal website to download and send postcards, so that users don’t suspect. In order to view the postcard, you have to open the attached file. It’s a file compressed with zip and if you run it, a rogueware program will be installed in your computer, which is different depending on the message and the operating system you have.

The following are some of the names of the fake antivirus that can be installed in your computer if you run this file:

% Antispyware 2010

Antivirus % 2010

% Guardian 2010

% Guardian

% Defender 2010

% Antivirus

% Antivirus 2010

% Antivirus Pro

% Antivirus Pro 2010

% Internet Security

% Internet Security 2010

where % stands for the operating system of the computer in which it is going to be installed. Some examples: XPAntispyware2010, Vista Guardian, Win 7 Antivirus Pro.

Let’s take as an example Antivirus XP 2010 and see the actions it carries out once it has been installed in the computer.

As every rogueware, it starts scanning the system to check if the computer is infected.

Once finished, it displays a list with the malware that has detected in your computer to make you believe that you’ve got a problem and that this program will offer you the solution:

AntivirusXP2010

However, all the malware it has detected makes reference to unexisting files, so the only threat you have is the own rogue.

Additionally, it prevents the execution of programs whose window title makes reference to the following programs:

Internet Explorer

Firefox

Several security suites.

When you try to run any of these, a message is displayed informing you that these programs are infected and recommending you to install the fake antivirus to solve the problem.

The following image belongs to the message that is displayed when Firefox is run:

Firefox_infected

It also contains code to uninstall different security solutions. This way, the computer would be unprotected and the real antivirus programs could not detect it.

Tech Geek and More

Technology Explained for All

Category Archives: Microsoft