March 22, 2010

AVE.exe (Total Vista Security) Virus Removal

I recently wrote about removal of fake security alert Anti-Virus System Pro. The main step in the removal procedure was restarting PC in safe mode and running Malwarebytes (mbam.exe). Unfortunately, it does not work with a new modification of this virus, called Total Vista Security that runs a program file ave.exe. This program continues running in safe mode and prevents you from starting mbam. So, how to stop it? You can temporarily stop ave.exe process via Task Manager but it reappears in a moment. What does ave.exe do? Basically it does the same as similar fake security alert malware- it prevents you from opening any program on an infected computer and is trying to trick you into buying their software. Don't pay them - you can fix the problem for free in minutes. I managed to get rid of this malware just by restoring my computer to a previous date.

To use the system restore while this virus is running you can begin as if you are restarting the computer in safe mode via Start menu:
Start> Shut Down>Restart.
When Windows shuts down and the screen becomes blank, start hitting F8 key until you hear a beep and a menu appears. Select Safe Mode with Networking, hit Enter and then hit Enter again on selection of your operating system (such as Windows XP). After computer restarted and you logged in, it asks you if you want to proceed into Safe mode or use System Restore. Select System Restore and choose a past date when you are sure you had no viruses. Note that this process does not affect your files, only the programs you might install or update since the restore date you chose. After restoring your system you should be able to download (if you have not done it yet) and run free Malwarebytes (mbam.exe). Just update it to the latest version first. The above ave.exe removal guide does not constitute a professional advice: if you choose to use it, do it at your own risk. It worked for me, but of course I can't guarantee it would work for everyone.

March 11, 2010

Meeting Energy Efficiency Standards for External Power Supplies

I previously wrote about the Energy Independence and Security Act of 2007 (EISA 2007). Its Section 301 establishes efficiency standards for external power supplies (EPS), such as power adapters. The U.S. Department of Energy (DOE) has recently published a Final Rule on "Energy Conservation Program: Certification, Compliance, and Enforcement Requirements for Certain Consumer Products and Commercial and Industrial Equipment." In this document under section 430.24 (bb), is the requirement for determining the number of EPS units to be tested to claim compliance with EISA 2007. In short, the DOE document requires 97.5% confidence level to reflect variations in materials, the manufacturing process, and testing tolerances.

The Section 24(bb) of Title 10 of the Code of Federal Regulations (10 CFR) Part 430 states:
For each basic model of external power supply selected for testing, a sample of sufficient size shall be selected at random and tested to ensure that—

(1) Any represented value of the estimated energy consumption of a basic model for which consumers would favor lower values shall be no less than the higher of: (i) The mean of the sample, or (ii) The upper 97.5 percent confidence limit of the true mean divided by 1.05;

and

(2) Any represented value of the estimated energy consumption of a basic model for which consumers would favor higher values shall be no greater than the lower of: (i) The mean of the sample, or (ii) The lower 97.5 percent confidence limit of the true mean divided by 0.95.

To demonstrate compliance with EISA 2007 standards for Class A EPSs (in effect since July 1, 2008), manufacturers must test representative sample of units according to the DOE test procedure, and certify their compliance by submitting a compliance statement and the first certification report to DOE by July 6, 2010.

To translate their language to plain English, when they say the "represented value of energy consumption for which consumers would favor higher values" they refer to the efficiency. Conversely, the "represented value for which consumers would favor lower values" is input watts. (Our lawmakers of course presume they know what we, the consumers would favor. Would you favor a charger with 51% efficiency over a charger with 49% if the latter one costs twice less?)

To determine the number of the samples to be tested to confirm the compliance with 97.5% confidence level, the manufacturers would have to revisit the statistical analysis theory. To be able to sell the affected external power supplies in US, they have to do the testing, the math, and to submit the required docs to DOE by 07/06/10.

January 22, 2010

Antivirus System Pro- How to Remove It for Free

During the last few months there have been massive attacks against personal computers by so-called Anti-Virus System Pro, Antivirus Pro 2010 or similar. Once installed in your PC it is constantly barraging you with fake security alerts, such as that your computer is being attacked from an Internet (which is true except they are the attackers), will impersonate Windows Security Center with fake security alerts, etc. and will be continuously trying to trick you into buying their software by asking you to activate their protection. They are trying to scam you to paying some $50 for three months of so-called protection. (Would you give thieves your credit card to buy back your things they stolen from you?) Common anti-virus software programs do not seem to be able to prevent these attacks. The main difficulty with removing Antivirus System Pro and similar trojans is these malwares prevent you from running any program such as task manager, web browser, or antivirus software, claiming that these program files are infected.

I know people who wind up reformatting their hard drive because they could not find a way of getting rid of this infection. When I first got this virus, I've spent hours searching the web from my other computer looking for the procedures to remove it. Likely, there is a simple way of removing Anti Virus System Pro for free. The main thing to do is to restart your computer in Safe Mode. One can do it from the start menu: Start>Shut Down>Restart. Once the computer shuts down and begins restarting [while you still have blank screen], start hitting the key F8 until you hear beeps and a menu appears. In this menu, select Safe mode with Networking. Once your computer restarted in safe mode, you should be able to connect to Internet and download a free version of the program called Malwarebytes. Save it to your desktop and install. After installation firstly run Update. It took me a few minutes to install updated version. Then run Full Scan. It took it several hours to run a full scan, but it did find plenty malware files. When it finish scanning, select Display Results and then select Remove all selected malware. If you have any antivirus program installed, you can now run it too. Malwarebytes may then ask you to restart your computer. You can now restart it in a regular way and you should be OK. Note that their free version does not provide live protection- it only activates manually. I have not tried Malwarebytes paid version (at least because I already have one licensed antivirus program installed), so I can't tell if their live protection is solid. One more thing: the malware sometimes changes Internet Explorer connection setting to Proxy. If your IE does not connect to Internet in safe mode or after the clean-up, try this: Tools> Internet Options> Connections> LAN settings, then if Proxy Server is checked and you are not using proxy, uncheck Proxy Server and hit OK.

The above procedure worked for me, but of course I can't guarantee it will work for everyone. If you choose to go through these steps, you do it at your own risk- I don't give you any professional advices. Also, the malicious programs are being constantly updated. They may possibly invent a new trick that interferes with the above removal procedure. It's a shame that Microsoft Corp. with all its funds and resources as well as the anti-virus software firms so far can't provide live protection against a bunch of criminals.