Sometimes obvious deficiencies become invisible because they are long-running or prevalent problems. An example of this is how software and hardware suppliers manage operating system upgrades. Within the past three months, three O.S. upgrades have failed for various reasons, and not only Windows (e.g., Vista to Windows 8, or Windows 7 to Windows 8), but also Apple (whose applications don't migrate from some versions when upgraded).

Today this message from HP was a reminder of how pervasive this deficiency is:

If you purchased your computer prior to October 1st , 2011, HP has not tested or developed drivers for your model computer. Therefore an upgrade of your computer may be difficult or impossible.

With a shrinking market for desktop computers, support for O.S. upgrades may get worse, not better.

But, sure -- go ahead and try anyway. 

Now that Home Depot is selling computers, you may as well invest in a new hammer, which you'll want to use on your 18 month old computer when it's time to upgrade the O.S.

I posted an Amazon product review of the Seagate FreeAgent GoFlex Pro FireWire 800 USB 2.0 Ultra-Portable External Hard Drive for Mac and PC (STBB750100). Some may be interested in the Windows 7 error message that periodically appears when this drive is installed on Windows. 

It's unclear, but because the quick scan runs in under a couple of seconds, it may sometimes be a false positive for actual drive corruption. However, at times, it's been necessary to run the full "correct errors" option, because Windows would time out trying to read a file from the drive.

Windows Warning about a USB Drive Error

A Windows 7 Pro computer at some point was infected by the search engine malware known as JS/Medfos.B. The symptom of this malware is that search results are not processed by the selected search engine; instead results are clumsily merged with advertising and related links. A knowledgeable user sees this almost immediately, but that was not the case with the user of this computer.

This computer uses Microsoft Security Essentials (MSE). MSE was able to detect the presence of JS/Medfos.B, probably at the time it was invoked. MSE quarantined it, but after removal, Medfos.B "returned" within 24 hours. Unclear if that was due to the user visiting an infected site or reloading the malware.

Microsoft Security Essentials Detection of Medfos.B

The browsers on the machine didn't show any obvious rogue add-ins or redirects, and there were no network forwards in the obvious places. The Microsoft Malicious Software Removal Tool also found nothing.

A thread at Microsoft community provided some suggestions. In the past, my usual methods have been to use Malwarebytes, then Superantivirus, and then a root kit removal tool such as Kaspersky's TDSSKiller.  Two weeks ago, on a different computer, TDSSKiller had been the magic bullet to remove a different adware trojan. But on this occasion, none of these tools detected anything. The thread recommended Hitman Pro (trial), a sort of cloud-based malware tool aggregator, and it did find malware to remove, but the version downloaded wanted me to buy the tool to remove them. It didn't identify the evidence clearly enough ("tracking cookies?") for a connection to be made with JS/Medfos.B, but it was alarming enough.

At this point, the last MSE-detected appearance of the malware was 18 Feb 2013. I'm going to wait and see.

Not the first time I've encountered it, and when an event log goes bad (the word "corrupted" gets thrown around), it will pretty much render Windows useless except as an benchmark for reboot times.

Symptoms: applications won't start, though no errors are thrown. Eventually one looks into the event logs. Or tries to.

On Vista, the

%winroot%\System32\winevt\Logs

directory contains the logs. On the machine under investigation, these were numerous. The main interest was the Windows system log, but it wasn't obvious which of these reflected that. A Google search turned up the forensics utility "fixevt," so this simple exe was transferred to the offending machine. 

The Windows event log service must be disabled / stopped before the logs can be disturbed.

Log into an administrator command window in Safe Mode (possibly not necessary, but since the cause of the corruption was unknown, this was prudent), and run fixevt.

An attempt to run fixevt with the argument "*.evt" resulted in an immediate crash of fixevt, so simply "s*.evt" was attempted. Same result. A spot-check of a few event logs here and there ensued. A few would rebuild, but crashing was regular.

There was no time for further research, so the entire \Logs directory was renamed, and the service restarted after a restart.  The services wouldn't start, so the \Logs directory was manually recreated, and then the services would start. Windows recreates the logs anew. The history is gone from view, but the machine is usable again. Monitoring the logs for unusual activity and malware scans are advisable.

The Windows 8 upgrade script isn't bad, though you'll still have to reinstall plenty of applications. The script's UI is silent on which applications it either removes or leaves stranded from Vista (my latest use of the app) and, presumably, Windows 7. The upgrade seemed to remove Office 2010 completely. With a product key in hand, download it here as described in a Microsoft Community tip. Budget a little time for this. After the reinstall, a restart was needed, and some updates pushed after that. 

After several dead ends (PCI cards with unresolved PCI-to-PCI bridge issues, x16 extender cards that didn't work in the form factor of the chassis, interrupt conflicts with NIC hardware), one solution has been found that works in my Dell PowerEdge 2900. This is a low end server being used as a workstation. It wasn't designed to support an x16 PCIe card, so it's been difficult finding a substitution. The AMD ATI FirePro 2270 x1 version nicely supported dual monitors and installed without a hitch. Others with older machines where PCIe x1, x4 or x8 lanes are needed may wish to consider this alternative. Note: A "pro" not a "gamer" class device, but you can use two or more to support more than two monitors. Very tempting.

p.s. Another viable option for Nvidia users may be the PNY NVS Quadro 440 x1.

Update 19 May 2011 Laptop was repaired after 2 working days. The fan problem was corrected, but the  Event 17 errors have returned. The rep from the team handling repairs in progress insisted on dialing into the machine and reading the event log messages herself, then issued another RMA number. She indicated this would be "priority" (what is that?). Another box was shipped and the laptop has been returned to the depot.

Update 14 May 2011 As reported earlier, an HP Elitebook (c. 2010) was returned for repair after much investigation. The laptop was returned by overnight service from HP Depot repair with a new Nvidia 5100M graphics card. Impressively, a technician phoned form the depot facility to verify the nature of the complaints and to understand whether WLAN problems were also being experienced (Answer: Unclear). Unfortunately, the machine turns itself off a few minutes into the HP run-in test. Maybe fan or fan sensor disconnected or failed? The machine was returned to the depot the next day.

Internal Repair Processes Interestingly, HP hands off duties for repairs in progress to a different team. The chat channel used for triage is seemingly abandoned, though it can be assumed that transcripts are available for downstream technicians to read. Also, HP sends a new box for shipping rather than simply having customers print a new prepaid shipping label. Odd, considering that a day is lost while the box is shipped, and there's another box to be  disposed of (the packing material used is not recyclable).

An aging Dell 2900 server needed more RAM to extend its life. The used marketplace for RAM seemed like the right place to go. The specification called for ECC buffered, 555 or 667mhz PC2-5300 DIMMs, deployed in pairs. Straightforward enough. Or so it seemed. After reading the Wikipedia entry on DIMMs to refresh my memory of standards in effect at the time that this machine was new, a pair of 4GB DIMMs was purchased.

What was immediately apparent, but which presales research had failed to discover, is that PC2-5300 FB-DIMMs have their single notch in a different location than otherwise identical PC2-DIMMs. To avoid this mistake in the future, refer to the photo above, which shows the offset position of the FB-DIMM notch.

When everything's working smoothly, a PC seems a simple device, like a toaster, or, to use a better example, like a digital camera. Turn it on, launch an application, do work, and turn it off. A smoothly working PC offers its own quietly efficient version of Point and Shoot. 

Beneath the covers, with both devices, but more so with today's PC, a lot needs to go right to produce the appearance of a carefree toaster-like experience. Some problems are comparatively common (if not frequent) but straightforward to diagnose and correct. Disk drives still fail, and for most, while SMART doesn't generally provide warning of pending failure, it's usually obvious when it happens and the corrective action is also obvious. But once in awhile, problems arise that are a reminder of how much complexity lies beneath that ever-thinner chassis.

An incident in this latter category has been occurring with an HP Elitebook 8540p laptop. Several times a minute, Windows 7 throws this exception to the event log:

Event 17, WHEA-Logger
Component: PCI Express Root Port
Error Source: Advanced Error Reporting (PCI Express)
Bus: Device:Function: 0x0:0x3:0x0
Vendor ID:Device ID: 0x8086:0xd138
Class Code: 0x30400

More details are provided by Windows in the full WMI-interfaced Windows Hardware Error Architecture (WHEA) message. There were several problems with the laptop that could have been related to this error, which was thrown at least several times a minute, and sometimes more often depending on what processing was occurring. These included infrequent blue screens, fairly frequent glitching in pro audio devices (e.g., Echo AudioFire Pre8 and Ableton Live, as well as various USB audio devices), and an unsatisfactory rating by the Echo-recommended DPC Latency Checker.

Over several months, HP support and I worked on this issue. New device drivers were tried, USB device drivers were removed and added, self-tests and diagnostics were run. Nothing turned up. Finally, the hated "reinstall Windows" suggestion reared its head. Since everything else had been tried, the partition was erased and Windows 7 x64 was reinstalled. Result? Even before all the HP utilities were reinstalled, the problem recurred.

The last HP technician suggested it could be an issue with the Nvidia NVS 5100M discrete graphics card. There are two related threads in forums that illustrate the scope and diligence of some users in trying to resolve this error. One is in NotebookReview (more related to Asus motherboard problems) and the other in an Intel Community forum (where most of the blame was laid at the feet of AMD ATI graphics cards.

The laptop is off to HP for a repair attempt. Stay tuned. In the meantime, should this post have appeared in TechnologyHead.com or in ErrorProcessing.com? Arguing in favor of the later, for instance, were several remarks by hardware technicians consulted by worried forum posters that "these problems didn't used to be reported anyway, and can easily be ignored." Arguing in favor of TechnologyHead was the aspect of complexity; after all, the error message was close to what passes for best practice these days in error reporting (if not recovery).