Virus scan failed – Attachment manager?

Just had a customers laptop in for virus removal. Once we’d removed the virus we found that it wouldn’t allow you to download files through IE, Chrome, Firefox or any other browser. Of course we don’t know if this was caused by the virus or if it was a pre-existing condition.

Originally we thought this might be down to Windows Attachment manager but through some investigation we found that it was caused by AVG 8.5, more specifically the Office plug in – avgoff2k.dll.

To disable it

First open a run dialog by pressing the Windows Key (on keyboard) & the letter R

Copy and paste the following into the box: regsvr32.exe “C:\ProgramFiles\AVG\AVG8\avgoff2k.dll”

then hit Enter.

Now open explorer and navigate to C:\ProgramFiles\AVG\AVG8\ then rename avgoff2k.dll to avgoff2k.bak

Restart your browser and voilà, you will be able to download files again.

If you’re still unable to download then it could be another issue – why not give One Touch Services a call on 0844 870 6754? We’re based in Egham, Surrey and cover a wide area in Surrey, Berkshire, Hampshire & Greater London.

Posted in Uncategorized | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , | Comments Off

Touch / Synaptics pad won’t move & USB mouse doesn’t work – Code 19

We came across this issue the other day with a customers machines where neither the touch pad or a USB would make the mouse cursor move.

We checked all the usual places including function keys, all to no avail.

Upon entering the device manager we noticed that the touch pad (and I forget which exact touch pad it was but that’s irrelevant for this article as it’s a universal issue) showed up with a yellow triangle with an exclamation mark. Well it couldn’t have been a missing driver is all touch pad drivers are native to Windows.

When we right clicked and went into properties we found an error code with something along the lines of “Your device is missing or is not recognized by Windows or other programs – code 19″. If we plugged a USB mouse in we got a very similar issue only this time we received a code 10.

Now we have seen error code 19 many-a-time with CD & DVD drives but never before with a touch pad or USB mouse – so hey we learned something here too!

To resolve the issue we had to make our way in to the registry.

To do this:

Hold the Windows Key (Between Ctrl/FN & Alt)

When the Run dialog box shows up type in there “regedit” with the quotation marks and press enter.

Before making any registry changes it’s a good idea to make a system restore point first.

Refer Here for Windows XP, Windows Vista,Windows 7

Now you’re backed up lets begin…

From the 5 main registry keys you need to navigate to HKEY_LOCAL_MACHINE

then SYSTEM then CurrentControlSet then Control then Class then {4D36E96F-E325-11CE-BFC1-08002BE10318}

The last part although it’s quite long MUST be the correct one, there are quite a few of these here (40ish) so make sure you have the right one else you risk messing up another device. To make sure when you click on it, in the right hand column to the right of the word “Default” it should read “Mice and other pointing devices”, if it doesn’t then carry on looking.

Further down in the right hand column (probably right at the bottom) there is a String called UpperFilters, it’s “type” should be “REG_MULTI_SZ”, and the “Data” should read “mouclass” (without quotation marks). With the one we fixed it read something like “Fjunazo mouclass”, we simply right clicked on it, clicked “modify” and removed the first part and the space.

Once completed you don’t need to save anything as you’ve already saved the change upon clicking ok.

Close regedit down, restart the PC & your mouse cursor should now be moving freely. If it’s not then just double check you haven’t inadvertently disabled it & not re-enabled it with a function key or the likes.

If you still can’t get the mouse cursor to move then it could be another issue – why not give One Touch Services a call on 01784 770 402? We’re based in Egham, Surrey and cover a wide area in Surrey, Berkshire, Hampshire & Greater London.

Posted in Uncategorized | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , | Comments Off

Forcefully clearing Windows XP, Vista & Windows 7 Print queue

Something which is often frustrating is a print job getting stuck in the print queue and no matter how many times you hit cancel, unplug/switch of the printer, try pleading with it – it just won’t go!

Your last option is normally to restart the PC or Laptop *sigh*

Well you needn’t have to do that again. We’ve created 2 little scripts which all you have to do is run the correct one and it will clear your print queue in seconds.

I will provide both the script and the pre-made file so you can choose to make your own or just use mine.

The first is for Windows XP

Here is the script if you care to make your own file. Just save it as a *.bat or *.cmd file and run it.

net stop spooler
del %systemroot%\system32\spool\printers\*.shd
del %systemroot%\system32\spool\printers\*.spl
net start spooler

Here is the link to the pre-made file (You MUST right click and click save file/link as, else it will just display the script) : http://www.onetouchservices.co.uk/dls/DeletePrintJobsXP.cmd

Once you’ve saved it just double click on the file. It will open a small black command prompt, then once completed (couple of seconds) it will close & you’re ready to start printing again!

The second is for Windows Vista or Windows 7

Here is the script if you care to make your own file. Just save it as a *.bat or *.cmd file and run it.

net stop spooler
del /f C:\Windows\system32\spool\printers\*.*
net start spooler

Here is the link to the pre-made file (You MUST right click and click save file/link as, else it will just display the script) : http://www.onetouchservices.co.uk/dls/DeletePrintJobs-Vista7.cmd

Once you’ve saved it just double click on the file. It will open a small black command prompt, It will ask you if you want to delete the files in the print queue, the options are (Y/N), you need to click Y (If you accidentally click N then just run the script again), then once completed (couple of seconds) it will close & you’re ready to start printing again!

If you’re still getting problems with printing or any other computer related issues then why not give One Touch Services a call on 01784 770 402? We’re based in Egham, Surrey and cover a wide area in Surrey, Berkshire, Hampshire & Greater London.

Posted in Uncategorized | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , | Comments Off

Reinstalling the HP Envy Sleekbook 6 – AHCI Drivers

Whilst in the process of reinstalling we came up against the need for drivers so Windows 7 could recognise the AHCI and allow us to install on the Seagate Momentus 500Gb hard drive.

The Intel Rapid Storage Technology Driver can be download from HP’s website

If you still get stuck why not give One Touch Services a call on 01784 770 402 or visit our Contact us page?

Posted in Uncategorized | Tagged , , , , , , , | Comments Off

Microsoft Office sharing violation & Webdav

We recently ran in to trouble with one of our servers, we ended up reinstalling Debian as time was against us.

Upon reinstalling we setup Apache with Webdav which we provide as a service to several of our clients via Net Drive.

When they came to start using it they noticed that files that they tried to edit, in this case Word (.docx) & Excel (.xlsx) would open but it wouldn’t allow them to save them, giving the following error messages.

“Your changes could not be saved to ‘FILENAME’ because of a sharing violation. Try saving to a different file.”

Upon clicking ok another message appeared:

‘FILENAME’ could not be found. Check the spelling of the filename, and verify that the file location is correct.

Pressing OK to that brought up another message:

Your changes could not be saved to ‘FILENAME’, but where saved to a temporary document named ‘FILENAME’. Close the existing document, then open the temporary document and save it under a new file name.

At first we thought it may be down to the files being accessed not belonging to the Apache user (www-data). We checked that and confirmed that they did.

It then occurred to us that it could be down to a problem with DavLockDB file as this locks the file opened by the user from anyone else trying to edit it.

We navigated to the DavLockDB location, /var/lib/dav/ and checked the permissions & owner, it was set to 700 & user/group – root. We changed this to be 770 & user/group – www-data. Restarted Apache, disconnected & reconnected Net Drive – Hey presto, saves files perfectly!

Solution: Check your DavLockDB file and ensure it is writable to Apache user/group (in our case www-data)

Posted in Uncategorized | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , | Comments Off

How to Prevent Met Police, PCeU, Strathclyde Police, Ukash etc. Virus

There seem to be hundreds of guides on the internet on how to remove these virus/exploits but very few on how to prevent them.

These different variations of the same exploit/virus have been around since roughly 2010 and have caused a lot of people headaches!

The first thing to say is Do not pay the £100 fine, you are encouraging these people if you do.

We usually see & remove upwards of 5 infected computers a week and almost without doubt the most asked question is “Why did my anti-virus not stop this?

Well in short it’s because these virus’s or exploit’s as they should be called use polymorphic code which means that, like the human cold virus, it morphs and ‘changes shape’ effectively, and without going in to too much detail about anti-virus, the way they work is to look for certain snippets of code to identify virus’s, so of course if the code is forever changing it is extremely difficult to keep with them.

Where did the Met Police, PCeU, Strathclyde Police virus come from?

Another frequently asked question, and in the vast majority (90+%) of cases it’s the same source, pornography websites. Although they shall remain nameless we have recently visited someone 4 times in the past month who just can’t help themselves and has managed to get several different variations of this virus. The next biggest culprit is facebook and email spamming – if you don’t know the recipient or the link looks like a weird website e.g. www.f3m7km.com/cgi-bin/test.cgi – DON’T open it!

What can I do to prevent it returning?

Well as previously mentioned these exploits are fairly difficult to detect to anti-virus, but even still it is well worth checking your anti-virus is up to date everyday. Whatever the variation of this virus they all share the same point’s of entry and that is vulnerabilities in the operating system or browser add on’s. The most common of vulnerabilities is Java, in fact Firefox (The browser I use & recommend) now disables Java if its out of date to prevent it being a security issue. The other such vulnerabilities are Flash & Adobe reader.

In summary ensure that your operating system updates are up to date, ensure that you have the latest version of your browser and that all add on’s are up to date.

If you have been unfortunate enough to have this virus enter your PC then cleaning it can be a little tricky. One Touch Services offers virus removal in Egham & Staines, and surrounding area’s and are available 7 days a week. Call us on 01784 770 402 or visit the contact us page.

Posted in Uncategorized | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , | Comments Off

HP G62 fan cleaning. Very close to overheating and damaging graphics chip

 

Just cleaning a fan on an HP G62 laptop. The customer reported that when it had been on for half an hour or more it would get extremely hot underneath and that it often became slow or unresponsive too. We collected it from his house in Staines near Egham, Surrey; took it apart about half hour ago and just in the process of putting it back together now.

It’s not a good idea to let it get this bad before you think about cleaning it or getting it cleaned. A annual clean can save you a lot of money in the long run, if the graphics card overheats regularly it can cause lots of damage and it can be a lot more costly.

Why not call us today on 01784 770 402, we can visit you at home, at work or wherever is convenient to you and often have it cleaned and back to you within 24 hours at a very reasonable price.

20130127-225815.jpg

Posted in Uncategorized | Tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , | Comments Off