このフォーラムスレッドには解決策が必要です。
拍手0

Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-28 | 06:07 · 返信 52 · · 翻訳:

Hello,

I am a senior citizen (81 years old) who, for the most part, has NOT used the majority of the features on my HP laptop (such as Corona, Widgets, and 99% of the Apps). This has recently changed due to malware ending up on my laptop.

So, my question is...

In trying to beef up security on my HP laptop I came across Core Isolation & Memory Integrity. I Tried to turn on Memory Integrity, but each and every effort to do so failed (sadly)! ;o(

I bought my laptop from BestBuy, and while in store, asked GeekSquad to install Norton & MBAM Premium on my new HP laptop. My understanding is is that they had to disable Microsoft Windows Defender (Firewall & AV), hence could this account for the fact that I CANNOT turn on Memory Integrity? (as the security has been outsourced to Norton & MBAM)

I have had this laptop for 3 years and never used Core Isolation/Memory Integrity (because I was to naïve to even know that they existed), hence is Memory Integrity THAT important?

Question number two...

I have recently paid my ISP to swap out my Modem & Router for new firmware (replacement Modem & Router) plus new SSID and Wi-Fi password. I changed some of the passwords on my laptop on evening (late at night) and therefore had to restart my HP laptop...because it was late at night I forgot to reconnect to the Wi-Fi network when I shut down my laptop (I was very tired). The next morning I noticed that my laptop was NOT connected to the Wi-Fi network over night...does this make my laptop more vulnerable to attack? 

I thank you in advance for having taken the time to read my post, and of course, for responding. THANK YOU! ;o)

返信

拍手2 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-28 | 10:08 · パーマリンク

David. I believe all your questions can be answered in a fairly straight forward way at this Microsoft linked article:

https://support.microsoft.com/en-us/windows/device-protection-in-windows....

SA

MS Certified Professional : Windows 11 Home/Pro 22H2 x 64 build 22621.2715 / Windows 10 Pro x 64 version 22H2 / build 19045.3693 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.10.10 / Opera GX LVL5 (core: 104.0.4944.70) 64 bit-Early Access w/Norton Chrome Extensions
拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-28 | 12:44 · パーマリンク

SA,

Thank You for responding & Thank You also for the Microsoft article! ;o)

'Have a good day!" :o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-29 | 05:37 · パーマリンク

david S.:

...In trying to beef up security on my HP laptop I came across Core Isolation & Memory Integrity. I Tried to turn on Memory Integrity, but each and every effort to do so failed ...

Question number two...

...The next morning I noticed that my laptop was NOT connected to the Wi-Fi network over night...does this make my laptop more vulnerable to attack? ...

 Hi david S.

What is your computer make/model, Windows operating system [if Win 10 or Win 11 please include the edition (e.g., Home, Pro, S mode, etc.], version (e.g., 21H2, 22H2, etc.) and the OS build number shown at Settings | System | About | Windows Specifications] and what type of CPU do you have in your computer?

If the toggle for Memory Integrity is greyed out (disabled), the Microsoft support article Core Isolation notes that "To use memory integrity, you must have hardware virtualization enabled in your system’s UEFI or BIOS."  If I open Task Manager, choose the Performance tab and select CPU, it shows that my Intel Core i5-8265U CPU has virtualization enabled.  If your computer shipped from the factory with Windows 11 pre-installed then virtualization is likely enabled.

If you are able to toggle the switch for Memory Integrity on but it reports that you have an incompatible driver during the driver check, that support article also notes that it should list the responsible driver.  In many cases a simple driver update will solve this problem.

Regarding your second question, I would assume that disconnecting your computer from the internet for a short time would not make your computer more vulnerable, and when you are disconnected it actually decreases the risk your computer will be infected by an outside attack (e.g., you will not be able to receive new emails that might include a malicious attachment).  If you stay disconnected for a long period of time (say several days), however, the virus definitions and other malware protection definitions for your Norton and Malwarebytes security software will not be automatically updated and you would eventually see a warning to update your definitions - see the image I posted <here> in an old 2016 thread that shows the warning I saw after my Norton SDS virus definitions hadn't updated for ~ 5 or 6 days.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-29 | 07:02 · パーマリンク

Imacri,

Thank You for responding & ALSO in such great detail! ;o)

I followed up on the link (Microsoft Article) which SA had kindly provided me with.

After various attempts to Turn On Memory Integrity, which sadly failed, I started trouble shooting (based on the Microsoft Article - Core Isolation/Memory Integrity).

So, it would appear that a driver is to blame (BrUSBSib.sys)...my Brother Printer?

"Turning on the Memory integrity setting would block these incompatible drivers from loading. Because blocking these drivers might cause unwanted or unexpected behaviors, the Memory integrity setting is turned off to allow these drivers to load."

Solution...

"If you want to restore the Memory integrity setting, you can try to resolve a driver incompatibility by seeing if an updated and compatible driver is available through Windows Update or from the driver manufacturer. Microsoft does not recommend that you delete drivers to attempt to restore this setting."

I shall see if above information does the trick (if so GREAT/if not DAMN). I shall be sure to report back on my progress.

"Have a great Day, in lovely Canada!" :o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-29 | 07:17 · パーマリンク

david S.:.

...So, it would appear that a driver is to blame (BrUSBSib.sys)...my Brother Printer? ...

Hi david S.:

According to the Brother support article "A driver cannot load on this device - BrUsbSib.sys" or "Failed to connect to the device", you must uninstall your Brother printer software, enable Core Isolation, and then re-install the Brother printer software recommended on the support page for your printer model.

Before you do that I'd just check to see if there's an update available for your printer software.  With any luck a driver update will save you the effort of a complete uninstall / reinstall of the software.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-30 | 05:18 · パーマリンク

Hello Imacri,

So, in case I forgot to say so earlier, THANK YOU ever so much for posting in PLAIN ENGLISH. I Am Mr. TV Guy rather then Mr. IT Guy (an analog person living in the digital age)! :o)

I did check, as per your suggestion, Task Manager - Performance (tab) - CPU - Virtualization: Enabled.

I thank you for the Brother link as well.

Thank you also for suggesting Updating the driver first (rather then un-install).

So, recently I did a reset (un-install Windows/download Windows/re-install Windows) because (post malware on my laptop) my HP laptop behaved as if it were suffering from a demonic possession! :o(

Maybe the re-set, necessary as it was, had something to do with the driver/Core Insolation issue?

Well, as it would appear, I ONLY have a desk top icon (short cut) Brother Printer Driver left (not listed under Start - all APPS), hence do I right click on said icon in order to remove Brother from my HP laptop completely?

My options, right clicking, are:

Open
Run as Administrator
Pin to Start
Add to Favorites
Compress to ZIP file
Copy as Path
Properties
Norton Security
Share with Skype
Show more Options:

(under more options)

Troubleshoot Compatibility  (I tried that DID NOT work)
Give Access to
Copy as path
Share
restore previous version
send to
Cut
Copy
Create shortcut
Delete                       (Permanently?)
Rename
File Insight
Properties

I sometimes try to delete something permanently, yet sometimes something gets left behind (remnant)! ;o(

As in...

The Steam (online Game Hub) icon & Everything associated with Steam (albeit it is still listed under - all APPS).

So, prior to downloading/re-installing Brother software...I want to make sure first that there is nothing (old) Brother left on my HP laptop!

THANK YOU for your kind advice and help (as well as ALL of your patience with me)! :o)
 


 

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-30 | 08:37 · 編集日: 2022-12-30 | 08:47 · パーマリンク

david S.:

... , recently I did a reset (un-install Windows/download Windows/re-install Windows) because (post malware on my laptop) my HP laptop behaved as if it were suffering from a demonic possession! :o(

Maybe the re-set, necessary as it was, had something to do with the driver/Core Insolation issue?

Well, as it would appear, I ONLY have a desk top icon (short cut) Brother Printer Driver left (not listed under Start - all APPS), hence do I right click on said icon in order to remove Brother from my HP laptop completely?...

Hi david S.:

That's difficult for me to answer since I don't know if your computer originally shipped with Windows 10 or Windows 11 or how you "reset" your Windows 11 OS.   Did you perform a repair as instructed in the ElevenForums tutorial Repair Install Windows 11 With an In-place Upgrade and keep all your third-party apps, or did you reset your computer as instructed in the ElevenForums tutorial Reset Windows 11 PC ? If you reset your computer using the "Keep my Files" option I assume this would still have removed all your third-party apps, including Norton, Malwarebytes, your Brother printer software, etc. that were not installed on your computer when it originally shipped from the factory. 

If you reset your computer did you reinstall your Brother software afterwards, and are you currently able to control your printer from your computer?  For example, can you open a .DOCX or .PDF file, choose File | Print, and select your Brother printer from the list of available printers to send it to your printer for printing?  If I open a .PDF document in my Firefox browser for example, and go to File | Print, I have the option of printing the document to my Epson XP-7100 printer.  If you removed or damaged your Brother printer software during the reset that might explain why Core Isolation is now detecting a problem with your BrUSBSib.sys driver during the driver check.

What is your printer model?  If you go to the Brother support site for home users at https://www.brother-usa.com/brother-support/driver-downloads and enter your printer model it should re-direct you to the correct support page for your printer model, and the FAQ and Troubleshooting section might include a support article that includes the best way to uninstall your printer software.  I don't have a Brother printer, but I would assume the best place to uninstall your printer software (assuming it's currently installed) would be from Control Panel | Programs | Programs and Features.

If your Brother software is currently installed and your printer is working correctly you might also have a shortcut to the Brother Utilities mentioned in the support article Uninstall the Brother Software and Printer Driver - Windows (e.g. at Start | Programs | Brother | Brother Utilities) where you can select Tools | Uninstall.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-30 | 12:46 · パーマリンク

Hello Again Imacri,

My apologies for not being specific enough (My Bad)!  

So, I chose the re-set plus "Keep my Files" option.

"If you reset your computer did you reinstall your Brother software afterwards, and are you currently able to control your printer from your computer?"

The answer to that question is...No & no.

I, currently, don't need the use of my Brother printer, yet I do need "sound of mind" when it comes to cyber security (ergo the last remnant of Brother on my HP laptop has got to GO Away and make space for Core Insulation/Memory Integrity to work again...priority One).

"2020 Canadian Budget - A Plan to Grow Our Economy and Make Life More Affordable" 

(this is SO wonderfully Canadian...Canada the Switzerland of the American Continent)  :o)

(just in case that I was being to subtle...meant as a high-mark compliment of course)

"Control Panel | Programs | Programs and Features."

I looked into that, first thing I did, yet NO listing for Brother.

'Start | Programs | Brother | Brother Utilities) where you can select Tools | Uninstall"

Also NOT on my HP laptop...ALL I had was the Brother Printer Driver (short cut icon) on desktop...which I deleted in hopes of solving this problem, yet Core still has a problem with BrUsbSib.sys.

The Techno God hates me! ;O(

(I am listening to Phil Collins - In the Air Tonight...while eating a snack...to try and "mellow out" because the Techno God hates me!) LOL

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-30 | 14:58 · 編集日: 2022-12-30 | 15:04 · パーマリンク

david S.:

...So, I chose the re-set plus "Keep my Files" option.

"If you reset your computer did you reinstall your Brother software afterwards, and are you currently able to control your printer from your computer?"

The answer to that question is...No & no.

I, currently, don't need the use of my Brother printer, yet I do need "sound of mind" when it comes to cyber security (ergo the last remnant of Brother on my HP laptop has got to GO Away and make space for Core Insulation/Memory Integrity to work again...priority One).

Hi david S.:

For now my best guess is that your Windows 11 reset removed or damaged your Brother software files and left behind remnants like your BrUSBSib.sys driver that are now interfering with activation of Memory Integrity.

As a first troubleshooting step I would suggest that you reinstall your Brother software from the support page for your Brother printer model.  That might not get your printer working again (you mentioned you recently replaced your router so if you normally print via a wireless connection instead of connecting with a USB cable you might have to re-configure the wireless connection to your printer) but it's possible that a software reinstall will stop Memory Integrity from complaining about your BrUSBSib.sys driver.  If Memory Integrity still complains about your BrUSBSib.sys driver after your Brother software is reinstalled you should at least be able to uninstall the software (and hopefully the problem Brother driver) properly this time using your Brother Utilities app or Control Panel | Programs | Programs and Features.

You haven't provided some of the information I've requested [e.g., your computer make/model, Windows operating system (including the edition, version and OS build number shown at Settings | System | About | Windows Specifications), your type of CPU, the model of your Brother printer, whether your computer originally shipped with a Win 10 or Win 11 OS, etc.] so I can't be more specific about the best way to uninstall and reinstall your Brother printer software.
_________________________________________

Just an aside, but I've had a quick read through some of your older threads and can't see any definitive proof that your poor computer performance was caused by a malware infection that somehow managed to get past both Norton 360 and Malwarebytes Premium.  In future if you suspect you have a hidden malware infection it would be much better to ask a trained malware removal specialist to check your system before you do anything as drastic as resetting your system or changing your router.  There are a few reputable free malware removal sites that will do this, but since you have Malwarebytes Premium installed on your system I'd suggest posting in Malwarebytes' Windows Malware Removal Help & Support board first (see the instructions <here> for collecting diagnostic logs for your original post) and ask them to look for hidden malware if you ever encounter another "demonic possession".
 
Also note that Memory Integrity is normally disabled on Win 10 computers, and while it's nice to have this feature enabled to prevent the installation of older drivers that are not compatible with your operating system and might cause system instability I'm not sure this should be your top priority.  My image below shows that my Win 10 Pro v22H2 laptop does not have Memory Integrity automatically turned on even though my Intel Core i5-8265U CPU has hardware virtualization enabled, and that Kernel DMA Protection (also known as Memory Access Protection) is not even available on my two-year-old computer. If you have a reputable antivirus (which you do with Norton 360, and you've added an extra layer of protection with Malwarebytes Premium) then I personally would be more concerned about getting your printer working than enabling Memory Integrity - at least for now.  Don't let an obsession about computer security ruin the enjoyment of using your new computer.

-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-31 | 07:34 · パーマリンク

Hello Imacri,

Thank you for responding!

"but it's possible that a software reinstall will stop Memory Integrity from complaining about your BrUSBSib.sys driver. "

Whatever it takes Imacri, as said, previously I DID NOT even know Core Insulation/Memory Integrity existed on my HP laptop, hence could I manage without it for a while?

As in...

Are Norton 360 & MBAM Premium doing ALL the heavy lifting (Norton = AV + Firewall + VPN, MBAM = Web Protection/Malware Protection/Ransomware Protection/Exploit Protection) and one of those two had better also protect my HP laptop from rootkits!

(Scratch that...you went into lengthy detail in part two of your post, Thank You) :o)

I am currently in the midst of downsizing/packing/moving (once I have found the right apartment), hence I am, at times, somewhat overwhelmed (particularly apartment hunting). Moving can be very stressful at my age.

"Just an aside, but I've had a quick read through some of your older threads..."

"Wow, you REALLY put your back into it in an effort to provide me with answers/advice/help/solution!"  

THANK YOU VERY MUCH! ;o)

SA suspected that my SSID and Wi-Fi password might have been compromised (the more I thought about it the more I was inclined to agree with him). It seemed that someone was trying to block my every move (when I tried to improve cyber security). I was baffled why Norton & MBAM scans were telling me everything is okay, yet that was CLEARLY not the case.

I did not mind the extra expenditure (regarding my ISP coming out here and providing me with new firmware Modem & Router + new SSID & Wi-Fi password).

I thank you for the MBAM link (posting problems)!

I might very well be a low tech luddite, yet I do know when my 3 year old HP laptop is behaving bizarre (as in "demonic possession"). The NEW piece of tech is the Acer 315 Chromebook (which is still in-box...just haven't had the time to set it up...and I wanted to resolve ALL HP laptop problems/issues first).

I differentiate between 'oh, rats" my laptop is to old (as in graphic card of my HP laptop incompatible with video games, hence no playing free trial/demo version of Detroit: Become Human...although that video game is older then my laptop...and yes, my HP laptop is not a Gamer laptop) and someone trying to trip me up/sabotage my efforts to improve cyber security (address the bizarre behavior, post malware, of my laptop).

Solution to the my graphic card being incompatible with Steam (Game Hub) video games...YouTube! LOL

There are free walk through game videos (Cinematic HD 4K quality), yet it is NOT my primary concern (cyber security is) just another limitation of my aging HP laptop (which has nothing to do with malware/or anything else malicious, but rather one more nuisance...for which I have found a partial solution).

I am SO OLD...I remember the days when YouTube was completely for FREE (same goes for Hulu)..."American Cutthroat Capitalism!" :o(

I also realize, of late, that Norton warning me "Memory low" is not malware related (I believe it was peterweb who told me I should restart my laptop more often).

The majority of advice, improving cyber security on my HP laptop (and Modem/Router Wi-Fi), comes from these forums and a minority comes from google research  + YouTube IT videos (plus "learning by doing" on my part).

As in...

'Extension?" Oh, you mean my Google Chrome Browser? (hidden under "more tools"). Like I said, "learning by doing!' LOL

Although it does NOT have anything to do with malware...

I have done such a great job 'packing" my browser with cyber security extensions...that sometimes Google/Norton SafeSearch says, "10 results," yet the page is BLANK (come on...cough up the 10 hyperlinks) or try as hard as I may I cannot, sometimes, click on an Image under google search engine (Web/Image/Videos). Is it frozen? Or have I done such a fantastic job at weaponizing Google Chrome?

I shall try to address the Brother printer problem (software) this weekend. It does not help that I no longer have the original box & install disk (from BestBuy), yet you were so kind as to provide me with a Brother link. :o)

Once again...

THANK YOU for your patience with me!

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2022-12-31 | 10:00 · パーマリンク

david S.:
...as said, previously I DID NOT even know Core Insulation/Memory Integrity existed on my HP laptop, hence could I manage without it for a while?

Hi david S.:

I don't think that leaving your Memory Integrity disabled a bit longer is going to put your system at undue risk, especially when you're busy preparing for your move to a new apartment.

When you're ready to get going again on this problem be sure to post all the information I requested (e.g., your computer make/model, Brother printer model, etc.), since many of the printer model instructions I've found for a complete uninstall of Brother software recommend that you remove the printer device and drivers (e.g., from Settings | Devices | Printer & Scanners - see the Pureinfotech article How to Remove Printer Driver on Windows 11) before uninstalling the software from Control Panel | Programs | Programs and Features. At this point I don't know how old your printer is or whether Brother even offers Win 11-compatible drivers for your printer model.

Are Norton 360 & MBAM Premium doing ALL the heavy lifting (Norton = AV + Firewall + VPN, MBAM = Web Protection/Malware Protection/Ransomware Protection/Exploit Protection) and one of those two had better also protect my HP laptop from rootkits! ...

If you're running Norton 360 and Malwarebytes Premium together in real-time protection mode then you might find some helpful suggestions in my 18-Sep-2022 post in Kristal9's thread Compatibility Norton 360 with Malwarebytes.  To minimize any possible conflict with these two programs just make sure that your Malwarebytes Premium setting at Security | Windows Security Center | Always Register Malwarebytes in the Windows Security Center is turned OFF.  This will ensure that your Norton 360 antivirus keeps the primary responsibility for malware detection and remediation, and Malwarebytes Premium will essentially work in the background as a "backup" to look for any potential threats missed by Norton.

I use Microsoft Defender as my primary antivirus and Malwarebytes Premium for secondary protection, and here's what that setting looks like on my machine. 

Please note that Malwarebytes recommends that you leave Settings | Security | Scan Options | Scan for Rootkits turned OFF (the default setting) because of the amount of time this could add to your daily scans.  If you ever suspect that Norton and Malwarbytes have both failed to block a rootkit infection (which would be very unusual) you can create a custom scan at Scanner | Advanced Scanner | Custom Scan that includes a deep scan for rootkits - see the support article Scan Types in Malwarebytes for Windows.


-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-01 | 06:23 · パーマリンク

Hello Imacri,

"Good Moring...all the way from the U.S. of A!' ;o)

I, alas, in my last posting forgot to wish you a "Happy New Year," hence belated "Happy New Year" (hopefully 2023 will end up being a better year for you then 2022)!

I, unfortunately, had to try several times to log-in to this website (Norton kept rejecting my password). I managed to eventually  sign-in (after six failed attempts). This keeps happening more often of late. ;o(

"At this point I don't know how old your printer is or whether Brother even offers Win 11-compatible drivers for your printer model."

I bought my Brother printer from BestBuy (in-store) in early 2021 because of tax purposes. My CPA who prepares my taxes, who is also a lawyer, made it clear to me, "Don't bring me a shoebox full of paper receipts!" (otherwise he would charge me more money). He suggested I get a modern printer (with scan feature) thus I could send the documents via e-mail attachment or flash drive.

So, I had a chit-chat with the salesperson staff at BestBuy. I told them I had a HP laptop (which they had sold me/same store), hence now I need a compatible printer (ergo Brother Printer).

THANK YOU for the Pureinfotech article link! :o)

"To minimize any possible conflict with these two programs just make sure that your Malwarebytes Premium setting at Security | Windows Security Center | Always Register Malwarebytes in the Windows Security Center is turned OFF. "

Thank you for the advice, and yes, I followed your instructions as per your recommendation. Post-malware I even password protected MBAM.

I remember BestBuy GeekSquad trying to talk me out of buying MBAM Premium (as Norton is fine by itself). I told them whereas I have I high opinion of Norton sometimes MBAM catches something which Norton missed (that also goes for website warnings...adware/Trojan/Reputation/Riskware/etc...etc...etc..). I also don't run the scans concurrent (MBAM first as it is faster).

Mind you...I am VERY grateful that Norton bailed me out when I clicked on a wrong piece of information (within a Norton SafeSearch website/Green Dot + white checkmark) and next thing I know, 'Battle Stations" flashing red lights and a female voice (via my speakers encouraging me to follow her instructions and not to disconnect the laptop from the internet/gave me a number to call).

Nearly gave me a heart attack as there never was any audio warning in the past (at age 80 years old), yet the Russian Cyber Crime Mob did not get my personal info ("Blocked"). I was VERY grateful + I had GeekSquad double check that everything is ALRIGHT with my HP laptop . I had ALSO informed my Credit Card company + Bank to monitor the situation. I was fortunately okay! ;o)

I shall try and tackle the Brother Printer Driver issue today, by going online and visiting the Brother website (read through their FAQ/ Trouble Shooting Section) and download the right software...if I have the time for it...busy downsizing a 3 bedroom house/tossing things out/putting things up for sale/donating items to charity/packing up...exhausted.

I shall be sure to let you know once I have the right Brother solution/software.

Imacri, "I wish you a long life, good health, and much Happiness and Joy!" :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 07:43 · パーマリンク

Hello Imaci,

So, under the category, 'learning by doing" I spent a little time yesterday watching IT videos on YouTube. I do not have an account with YouTube, hence I watch their FREE stuff from time-to-time.

Well, I noticed, not for the first time, following message, "Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending the requests, and not a robot.'

I only made ONE attempt to load YouTube. I'm not sure if this is a semi-regular thing with people trying to access YouTube or something new?

Its new to me, post-malware on my HP laptop, hence I pay closer attention.

I also got a similar message from this Norton webpage, yet I only made one attempt to sign-in. Odd!

I am going to tackle the Brother Printer Driver problem today & thereafter report back to you.

"Have a great Day, in Canada!"

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 08:01 · パーマリンク

Hello imacri (again),

So, I went to the Brother website and typed-in my Brother model # whereupon..."An unexpected error occurred.
We are now investigating the problem. Please wait for a while." (and then NOTHING happened) (so much for Japanese perfectionism)

I tried finding my printer by looking at all Brother products, yet I could not find Brother Printer DCP-L2550DW (built in July 2020).

As said...

The Techno God hates me! :o(

I shall continue to try and find my printer model, on the Brother website, so that I can finally get Core Insulation/Memory Integrity up-and-running again.

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 08:30 · パーマリンク

Hello Imacri,

This old Man managed to find his printer model on the Brother website. I had to go about it manually, by checking ALL products, hence their search engine is rubbish.

I now have the right printer Model webpage (Brother) and am going to read through the FAQ/Trouble Shooting prior to downloading the software (in an attempt to get rid of BrUSBSib.sys driver for good).

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 09:22 · パーマリンク

Imacri,

"Good Afternoon!"

So, having read the FAQ/Trouble Shooting (for my Brother Printer Model). I downloaded the uninstall tool to get rid of  the faulty driver once and for all.

Small snag...

  The Uninstall Tool (Brother) downloaded to my download folder "delinf_10590" - (Folder) - 20220608_1.0.59.0 - (Open Folder) yields rempnp (Folder) double-click = BrRemPnP.ver click-On said file (Select an App to open this .ver file)

POP Up Options are:

Notepad

Windows Media Player Legacy

Word

WordPad

Browse apps in Microsoft Store

Choose an app on your PC

Sorry to bother you with such a mundane (Chickensh t) issue, yet I am stuck in the process of opening-up the Uninstall Tool.

Also sorry that I cannot seem to be able to provide you with a link (tried several times all attempts failed).

In the Marvel Universe (Marvel Comic Books) a mild-mannered scientist sometimes turns green due to anger/frustration/rage...and then goes about wrecking the entire neighborhood! :o(

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 11:51 · パーマリンク

david S.:

... The Uninstall Tool (Brother) downloaded to my download folder "delinf_10590" - (Folder) - 20220608_1.0.59.0 - (Open Folder) yields rempnp (Folder) double-click = BrRemPnP.ver click-On said file (Select an App to open this .ver file)

Hi david S.:

Assuming you have a Win 11 OS [I'm still not sure since I've asked you multiple times for details about your computer make/model, Windows OS details (including the edition, version and OS build number), etc. without a response], download the Uninstall Tool delinf_10590.exe from the DCP-L2250DW support page <here> and then follow the instructions <here>.

According to those instructions, when you run delinf_10590.exe it should create a folder called rempnp; open the rempnp folder and run the BrRemPnP.exe file inside that folder to start the uninstall tool.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 13:49 · パーマリンク

Hello Imacri,

"download the Uninstall Tool delinf_10590.exe from the DCP-L2250DW support page <here(link is external)> and then follow the instructions <here(link is external)>."

So, yes, I had already managed that much on my own...thats not the problem I ran into.

"According to those instructions, when you run delinf_10590.exe it should create a folder called rempnp; open the rempnp folder and run the BrRemPnP.exe file inside that folder to start the uninstall tool."

This is the problem I ran into...once delinf_10590.exe creates the folder rempnp...and I open said folder...I don't get  BrRemPnP.exe

instead I get BrRemPnP.ver (how do I go about opening .ver?) Its the .ver that is throwing me off!

Regarding Win 11/Version/build/edition/etc.

Cortana is of no use right now (because I asked for said above information).

Also cannot find it under Start/Settings or Start/ALL APPS

In other words...

Its NOT so much that I am withholding information from you, but rather am still in the process of hunting down said info on my HP laptop.

There are SO many features on this HP laptop which I have never used, hence sorry for being tardy with said info!

Thank you for responding (and your patience with an Old Analog Guy such as myself)! :o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-02 | 14:46 · 編集日: 2023-01-02 | 14:52 · パーマリンク

david S.:

This is the problem I ran into...once delinf_10590.exe creates the folder rempnp...and I open said folder...I don't get  BrRemPnP.exe.  instead I get BrRemPnP.ver (how do I go about opening .ver?)

Hi david_S:

As a test, I downloaded the delinf_10590.exe and saved it in my "Downloads" folder in a subfolder I created called Test (i.e., C:\Users\<myusername>\Downloads\Test\).  I opened that folder, right-clicked on the delinf_10590.exe (size = 1,103 KB) file and chose "Run as Administrator".  This unpacked the uninstaller tool and I now have 46 files in C:\Users\<myusername>\Downloads\Test\20220608_1.0.59.0\rempnp, including the BrRemPnp.exe file that should launch the uninstaller tool interface.

I used my default Firefox v108.0.1 browser to download the delinf_10590.exe file, but I tried a second download from MS Edge v108.0.1462.54 and that worked as well.

Perhaps you just can't find BrRemPnp.exe because the .exe extension is hidden when viewed in File Explorer. Open your Folder Options (see the Digitional article 5 Ways to Open Folder Options in Windows 11 ) and choose the View tab. Make sure that the option to "Hide Extensions for Known Types" is disabled (unchecked) so that the file extensions (e.g., exe, .dll, .sys, etc.) are always displayed in File Explorer. 


-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-03 | 05:59 · パーマリンク

david S.:

.... So, under the category, 'learning by doing" I spent a little time yesterday watching IT videos on YouTube. I do not have an account with YouTube, hence I watch their FREE stuff from time-to-time.

Well, I noticed, not for the first time, following message, "Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending the requests, and not a robot.'

Hi david S.:

...and further to the "unusual traffic" message you sometimes see, if you use Google Chrome as your browser see the 12-Feb-2022 Lifewire article Understanding Google's "Unusual Traffic" Error that lists several reasons why you might be seeing this warning.  Using a Virtual Private Network (e.g., a VPN like the Norton Secure VPN built into your Norton 360 security software) is one of the top reasons that this warning sometimes appears in Chrome.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-03 | 06:43 · パーマリンク

Hello Imacri,

"Good Morning Canada!" ;o)

So, as per your request, my HP laptop info:

64-bit

Windows 11 Home

22H2

22621.963

Intel(R) Core(TM) i5-1035G1 CPU @ 1.00 GHz 1.20 GHz

8 GB RAM

I hope the above information proves to be useful to you! ;o)

_________________________________________________________________________________________________________________________________________

I un-installed what I had previously downloaded from the Brother website. Then, following your instructions, I created a new folder "TEST" in downloads - went back to Brother website - downloaded un-install Tool - went for Folder Options - Under VIEW un-checked "Hide Extensions for Known File Types" Apply/Okay - went back to  delinf_10590.exe - I opened that folder, right-clicked on the delinf_10590.exe (size = 1,103 KB) file and chose "Run as Administrator".  This did unpack the uninstaller tool and I now have 46 files in C:\Users\<myusername>\Downloads\Test\20220608_1.0.59.0\rempnp, including the BrRemPnp.exe file which did launch the uninstaller tool interface (Chose DCP-L2550DW Model). 

I then checked Core Isolation - Memory Integrity - moved the dot over to 'ON" position - FAILED - Driver Problem - BrUsbSib.sys is STILL THERE! (Not for OUR lack of trying)

Its now official the Techno God hates me! :o(

Imacri THANK YOU for ALL the trouble you went through (you really put your back into it).

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-03 | 07:00 · パーマリンク

Hello Imacri,

THANK YOU for the link and said clarification. I am inclined to believe that it is the built in Norton VPN that is triggering said messages.

A Question...

I, by choice, decided to forfeit the Private Network option and instead went for Public Network instead as it is stricter (never taken my HP laptop out of the house...unless a needed trip to BestBuy GeekSquad in the past).

Network Connection

If your network is using a shared public IP address, such as a public proxy server, Google may have triggered the message based on traffic from other people's devices. Additionally, this error could be triggered if multiple people on your network were searching at once.

So, I don't believe I'm sharing my IP address with anyone else. Several of my neighbors have the same ISP I have, hence I can see who's on the network (left-click on network icon task bar - 14 other people on here as well - NORMAL?).

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-03 | 08:12 · パーマリンク

david S.:
...I don't believe I'm sharing my IP address with anyone else. Several of my neighbors have the same ISP I have, hence I can see who's on the network (left-click on network icon task bar - 14 other people on here as well - NORMAL?).

Hi david S.

Yes, that's normal.  I live in an apartment building and can see the wireless connections for many of my neighbours, but like my own wireless connection, they all have a lock icon that shows their internet connections are secure [i.e., their router is password-protected and uses a secure encryption method like Wi-Fi Protected Access-2 (WPA2)] so I can't use their internet connection.  Even public locations like coffee shops or libraries that offer free Wi-Fi often have to provide the login password for their router to customers so they can use their wireless connection.

If you have any questions about private vs public networks (or public vs private IP addresses) it would be best if you started a new thread so this discussion doesn't go off topic.  Any questions about your Norton VPN can be posted in the Norton Secure VPN for Windows board.

Let me know if you were able to run the Uninstall Tool that you downloaded from your Brother DCP-L2250DW support page and, if so, whether this removed the BrUsbSib.sys driver that is preventing you from enabling Memory Integrity in your Core Isolation settings.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-03 | 12:16 · 編集日: 2023-01-03 | 12:19 · パーマリンク

david S.:
...This did unpack the uninstaller tool and I now have 46 files in C:\Users\<myusername>\Downloads\Test\20220608_1.0.59.0\rempnp, including the BrRemPnp.exe file which did launch the uninstaller tool interface (Chose DCP-L2550DW Model). 

I then checked Core Isolation - Memory Integrity - moved the dot over to 'ON" position - FAILED - Driver Problem - BrUsbSib.sys is STILL THERE!

Hi david S.:

Sorry, I didn't see the comment below your system specs that said the Brother Uninstall Tool did not fix your Memory Integrity problem.

Unfortunately, I've found a few posts in other forums from Win 11 users with the same problem who don't own a Brother printer and don't even know how BrUsbSib.sys got on their system (more about that later), so it's not too surprising the Uninstall Tool didn't remove this driver.

My best advice is that you open a support request at Brother Customer Support at https://www.brother-usa.com/contact-us and tell them that you need instructions to completely remove your Brother printer device and software, including the BrUsbSib.sys driver, so that you can enable Memory Integrity in your Windows 11 Core Isolation settings.  There are many people posting about this same BrUsbSib.sys problem in different forums so I'm hoping that someone at Brother can provide a simple fix.  Be sure to include all your system specs like your computer make and model, that you have a Win 11 v22H2 Home OS (build 22621.963) and that your Brother DCP-L2250DW printer hasn't worked correctly since you performed a Windows 11 reset (using the option to "Keep My Files") and ran the Uninstall Tool from your DCP-L2250DW support page.
____________________________________________

One important question.  When you try to turn on Memory Integrity, does the warning message about an incompatible BrUsbSib.sys driver mention any other specific details like the driver version or Published Name (e.g. "oem12.inf")?

I did find one comment on the ElevenForums from someone who managed to remove the BrUsbSib.sys and turn on Memory Integrity, but do not attempt the following instructions unless everything that Brother Customer Support suggests has failed.  If something goes wrong you could damage an important system driver and leave your system unbootable, so don't proceed unless you're certain you know what you're doing and understand the risks.  I'm not a tech expert when it comes to hardware problems and if something goes wrong I might not be able to help you to help you recover your system.

First, see if you need to remove any Brother printer device from your Windows settings as instructed in Option 1 (Remove Printer in Settings) of Brink's ElevenForums tutorial Remove Printer in Windows 11. Here's what Settings | Device | Printers & Scanners looks like on my own Win 10 v22H2 laptop with an Epson XP7100 printer:

IMPORTANT: Be sure to read the discussion below that ElevenForums tutorial from user sjrockower who noted that a driver named BrUsbSib.sys was preventing them from turning on Memory Intergrity, even though they did not own a Brother printer, and how they used a PnPUtil command to remove this driver from their Win 11 machine.

If your Brother DCP-L2250DW printer is not listed in Settings | Device | Printers & Scanners (or removing this printer device still doesn't allow you to enable Memory Integrity) then follow the instructions in Brink's ElevenForums tutorial Uninstall Driver in Windows 11  to selectively uninstall the Brother BrUsbSib.sys driver.  I would start at Option 1 (Uninstall Driver from Settings) and then proceed to Option 2 (Uninstall Driver from Control Panel) and then check if you can turn on Memory Integrity.

PLEASE DO NOT PROCEED with Option 3 (Uninstall from Device Manager) or Option 4 (Uninstall from Command Prompt)  since these options are intended for users with advanced technical expertise.  As noted in those Option 4 of those instructions, running the dism /online /get-drivers /format:table​ command from an elevated command prompt might show you the Published Name (e.g., "oem26.inf") of your Brother BrUsbSib.sys driver (see the image below that shows a partial list from my Win 10 laptop), but if you use Device Manager or run the PnPUtil command and uninstall the wrong driver you could end up with an unbootable system.


-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-04 | 06:29 · パーマリンク

Good Morning Imacri,

THANK YOU for responding! ;o)

So, as you had asked me, 'When you try to Turn On Memory Integrity...what else does it say ("oem12.inf")?

Well, when I try to move the dot to Turn On Memory Integrity...I get a Windows Security (pop-up) notification, "Memory Integrity cannot be turned on (try resolving any incompatibilities with your driver)." Underneath said Windows Security notification it merely gives me the "Dismiss" option.

(Under) Resolve any driver incompatibilities and scan again

(when I click on) Scan again (same difference Windows Security Notification, "Memory Integrity cannot be turned on").

(Underneath Scan again) 

Review incompatible drivers

(It merely lists BrUsbSib.sys and Brother)

"mention any other specific details like the driver version or Published Name (e.g. "oem12.inf")?"

The short answer is NO!

If I may make a suggestion (as this involves your precious spare time).

I will contact Brother directly (THANK YOU for providing me with the link) and explain the problem to them. I have no idea as to how quickly they might get back to me, hence I propose 'WE" keep this thread OPEN (I realize its YOUR spare time & that YOU are helping me) and in the mean time wait for them to get back to me with a resolution to the Core Isolation/Memory Integrity problem (I shall be sure to keep you in the loop).

THANK YOU for ALL of your kind help/good advice thus far! :o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-04 | 08:15 · パーマリンク

david S.:

...Review incompatible drivers

(It merely lists BrUsbSib.sys and Brother)

"mention any other specific details like the driver version or Published Name (e.g. "oem12.inf")?"

The short answer is NO!

Hi david S.:

I'll stand by and wait to hear what Brother Customer Support has to say. Try not to make any major changes to your system other than regular Windows and antivirus definition updates while they're trying to help you or it will make troubleshooting more difficult.

In the mean time you might want to read up on Windows Plug and Play (PnP) in the MS support article Introduction to Plug and Play and Lifewire article How Does Plug and Play Technology Work? if you aren't already familiar with this technology.  Given the fact that some affected users have successfully removed this "incompatible" BrUsbSib.sys driver from their Windows 11 driver store with PnPUtil.exe, it's always possible that you tried to use your Brother printer before you installed / reinstalled your Brother printer software (which should include all the Win 11-compatible drivers required to run your printer), and the PnP manager installed this generic BrUsbSib.sys driver so you would be still able to use the basic functions of your printer.

I still don't know your HP computer model, whether this computer originally shipped from the factory with a Win 10 or Win 11 OS (an automatic upgrade from Win 10 to Win 11 or a recent Feature update from Win 11 v21H1 to v22H2 might have corrupted your Win 11 OS and caused your computer to behave like it was "suffering from a demonic possession", which might have been corrected by your Win 11 reset) or whether you connect to your Brother printer via a USB cable or via a wireless connection, but those are questions you can answer later if Brother Customer Support can't get your printer up and running with Memory Integrity enabled.
____________________

Just an aside, but if you want to attach a screenshot (press the PrtSc button to capture your entire screen, Alt+PrtSc to capture an active window like an error message) to your support request then see the The Windows Club tutorial at How to Use Microsoft Paint in Windows 11 for instructions on how to use your built-in Microsoft Paint basic image editor to crop and resize images.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-05 | 06:11 · パーマリンク

Hello Imacri,

"Good Morning Canada!" :o)

O Canada!
Our home and native land!
True patriot love in all of us command.
With glowing hearts we see thee rise,
The True North strong and free!
From far and wide,
O Canada, we stand on guard for thee.
God keep our land glorious and free!
O Canada, we stand on guard for thee.
O Canada, we stand on guard for thee.

A small appreciation for the Switzerland of the American Continent! :o)

THANK YOU, once again, for responding (and with good advice as well). Thank you also for ALL your patience with me.

"it's always possible that you tried to use your Brother printer before you installed / reinstalled your Brother printer software (which should include all the Win 11-compatible drivers required to run your printer), and the PnP manager installed this generic BrUsbSib.sys driver so you would be still able to use the basic functions of your printer."

That is one hypothesis which does not apply...

I have NOT used my printer in a long time (and certainly NOT Post-Malware on my laptop/reset of HP laptop), when the "demonic possesion phase" took place, but it was worth a shot.

"I still don't know your HP computer model, whether this computer originally shipped from the factory with a Win 10 or Win 11 OS (an automatic upgrade from Win 10 to Win 11 or a recent Feature update from Win 11 v21H1 to v22H2 might have corrupted your Win 11 OS and caused your computer to behave like it was "suffering from a demonic possession", which might have been corrected by your Win 11 reset) or whether you connect to your Brother printer via a USB cable or via a wireless connection, but those are questions you can answer later if Brother Customer Support can't get your printer up and running with Memory Integrity enabled."

I too don't know my computer model (Laptop 17-by3xxx?). I bought the HP laptop from BestBuy, as per recommendation of their sales staff ($650 on Sale), and I believe it was originally Windows 10. I did a upgrade, following a Microsoft prompt, from Win 10 to Win 11 the laptop/printer worked fine thereafter (and then later, Post-Malware, updated to latest version of Win 11).

"suffering from a demonic possession", has to do with either the malware (Post-Malware) and/or compromised Router (SSID/Wi-Fi Password). It is uncanny how someone (outside of my home) tried to block EVERY cyber security change/upgrade I tried to implement (NOT to subtle in giving me the middle finger). The Reset (password change)/New Modem plus New Router (New SSID & New Wi-Fi password) made a big change I'd say 98% of my HP laptop is restored (Post-Malware/Compromised Router/Wi-Fi password) and I have wrestled back control over my HP laptop.

So, in short, the "demonic possession" of my HP laptop occurred prior to the reset (why the reset took place in order for there to be meaningful change). Also the update to the latest Windows version took place post reset. This is the responsibility of an outside person(S).

SoulAsylum told me how to check if some else is using this computer (unauthorized).

So, its not just technical writers who richly deserve to be hung up by their thumbs. LOL

When I was at BestBuy, in-store, the sales staff assured me that the Brother printer is 100% compatible with my HP laptop (they had sold me the HP laptop) and also user friendly. So I bought the damn thing.

When I got home and un-boxed the Brother printer (and read the instructions manual) it said, "It would be helpful if I had a USB cable." It OF COURSE does NOT say so OUTSIDE of the box (nor did BestBuy sales staff bring up the USB cable). I would have bought a USB cable along with the Brother printer had I known that ("Lord love a Duck")! ;o(

So, in the absence of being the proud owner of a USB cable, I went with the wireless option (where the installation process & fine tuning took much longer). 

Imacri, I truly don't know how long it is going to take Brother to get back to me, if they can fix the faulty driver issue, hence I don't know how long it will take me to get back to you...

In the meantime I wish you good tidings! ;o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-05 | 10:55 · 編集日: 2023-01-05 | 10:57 · パーマリンク

david S.:

... I too don't know my computer model (Laptop 17-by3xxx?). I bought the HP laptop from BestBuy, as per recommendation of their sales staff ($650 on Sale), and I believe it was originally Windows 10. I did a upgrade, following a Microsoft prompt, from Win 10 to Win 11 the laptop/printer worked fine thereafter (and then later, Post-Malware, updated to latest version of Win 11).

 HI david S.:

Hello back at you from the Great White North (which, not coincidentally, happens to my user name on the Microsoft Answers support forum ).  I'll be watching both the American and Canadian junior men's hockey teams playing for medals in the IIHF World Junior Hockey Championship today so I hope that buys me a bit of street cred on both sides of the border.

The Windows Certificate of Authenticity (COA) sticker on the outside of your computer case should have a serial number and/or part number that you can enter at https://support.hp.com/us-en/computer that should direct you to the correct support page for your computer model.  That support page also has an auto-detect feature ("Let HP detect your product") that might be able to display basic information about your computer.

You can also open a Run dialog box (Windows key + R) and enter msinfo32 to open your System Information panel and find all sorts of information about your computer, including your computer model (although it may list the general series model like HP Pavilion dv6800, not the exact model like HP Pavilion dv6835ca), BIOS version, etc.  From my 15" Dell Inspiron 15 5584 laptop:

There are also many free hardware diagnostic utilities like HWiNFO that will display detailed information about your computer.

If you have HP Support Assistant installed on your computer you can use this software to find your computer model and serial number as instructed in the HP support article HP PCs - Using HP Support Assistant (Windows).  Just note that some releases of HP Support Assistant can be buggy and insecure, and this utility tends to consume high amounts of CPU and RAM, so this would be my least favorite option.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.1 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-05 | 13:15 · パーマリンク

Hello Imacri,

I DO hope that you are enjoying watching the IIHF World Junior Hockey Championship (Canada's # 1 Sport...both British Canadian as well as French Canadian in Quebec )!

"I hope that buys me a bit of street cred on both sides of the border."

Sure, I'll gladly grant you some extra street credit. ;o)

I grew up in Sunny Southern California, hence no snowflake ever stood a chance (ergo no outdoor winter/ice hockey). Unlike Detroit Michigan, first city in America to embrace hockey, Detroit Red Wings (NHL).

I did not always follow the Stanly Cup as I spent many decades living in Germany with my German wife & in-laws (both Cold War West Germany as well as a unified Bundesrepublik Deutschland). Germany being a GREAT Soccer nation (okay admittedly Fussball trust us American's to call it Soccer). On top of it all my Wife's uncle was on the Board of Directors of a major league German Soccer club, hence we attended the games and hung out in the VIP Box/Club House/Stadium restaurant. My wife and I preferred to play tennis together.

I grew up loving baseball (LA Dodgers...previously Brooklyn Dodgers). My biggest dream, growing up, was to play for the Dodgers (turns out I was good a Tennis instead). LOL

So, please do forgive me if, in all those many decades when I lived in Europe, I didn't exactly keep up with the LA Kings & Wayne Gretzky!

I recall that the sticker was on top of my Dell desktops Certificate of Authenticity (COA) sticker(link is external)

, yet on this HP laptop all I have is a Intel Core sticker.

"You can also open a Run dialog box (Windows key + R) and enter msinfo32 to open your System Information panel and find all sorts of information about your computer" (having done so...System Model = HP Laptop 17-by3xxx)

THANK YOU for the info & continue to enjoy watching hockey!

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-06 | 08:25 · 編集日: 2023-01-06 | 08:29 · パーマリンク

david S.:
... having done so...System Model = HP Laptop 17-by3xxx

Hi david S.:

Sorry, I can't find a model 17-by3xxx on the HP support site at https://support.hp.com/us-en/computer, although I did find a support page <here> for a 17-by3000 series.  However, there are no Windows 11 compatible drivers posted on the support page for that 17-by3000 series, even though there have been a few Win 10-compatible BIOS firmware and driver updates released in the past year.

I did find a refurbished HP 17-by3xxx laptop on sale <here> on newegg's USA site that looks similar to the specs you provided (e.g., Intel Core i5-1035G1 CPU), and I found about 25 topics listed <here> on the HP Community that were posted between 2020 and 2022 from users with a HP 17-by3xxx laptop [see ISeyd's 16-Sep-2020 New Laptop Causing my Internet Router to Re-boot Every Time I Connect Laptop (Using WiFi) for one example] so I think you must have found your correct computer model.  You might want post in that HP forum (or try contacting HP Customer Support at https://support.hp.com/us-en/contact, although HP's official support might not help if your service warranty has expired) and ask for a link to the correct support page for the HP 17-By3xxx, just in case HP has posted Win 11-compatible software and drivers posted for the 17-by3xxx somewhere on their support site that matches your specific hardware components.

 I bought the HP laptop from BestBuy, as per recommendation of their sales staff ($650 on Sale), and I believe it was originally Windows 10. I did a upgrade, following a Microsoft prompt, from Win 10 to Win 11 the laptop/printer worked fine thereafter (and then later, Post-Malware, updated to latest version of Win 11).

If you originally installed your Brother printer drivers and software when you still had Windows 10, did you ever update that printer software after you upgraded to Windows 11 and/or reset your Windows 11 OS?  If not, it's possible that you just have an older version of your BrUSBSib.sys driver that can't be removed by the Brother Uninstall Tool and needs to be updated to a newer version that's compatible with Win 11 Memory Integrity.  That why I suggested in my 29-Dec-2022 post <here> that the first thing you should try is to update your Brother printer software and drivers. I don't know if that would have actually worked, but since you decided to go another route and already ran the Brother Uninstall Tool I'd just leave things as they are for now and wait to see what Brother Customer Support advises.

So, I chose the re-set plus "Keep my Files" option.

I'm still not certain why you decided to perform a Windows 11 reset with the "Keep My Files" option, although I suspect is had something to do with your 14-Nov-2022 post in Malicious Website Plus Pop-Up Script! where you said you believed you were infected with malware after disconnecting your Ethernet cable and browsing to a potentially dangerous website using a WiFi connection, even though Norton and Malwarebytes scans found no evidence that this website was able to drop a malicious file on your system. I don't know if my assumption is correct, but if you were hoping to remove hidden malware then please read the 27-Jun-2022 Droidrant article Will Reinstalling Windows 10 Remove Viruses?.  That article notes that some malware can even evade a hard Windows reset (i.e., using the "Remove Everything" option with Data Erasure ON) or even more extreme measures that reformat your entire hard drive like a reset to factory condition or a clean Windows reinstall (see Brink's ElevenForums tutorial Clean Install Windows 11 ).  If you aren't familiar with these different recovery methods, or aren't sure when you should them, the Microsoft support article Recovery Options in Windows is an excellent resource.

As I noted in my 30-Dec-2022 post <here>, the next time you suspect you have a hidden infection that was missed by both Norton and Malwarebytes be sure you consult a trained malware removal specialist in the Malwarebytes' Windows Malware Removal Help & Support board or some other reputable free malware removal forum like Bleeping Computer's Virus, Trojan, Spyware, and Malware Removal Help board, since a trained specialist should be able to identify any hidden infection and recommend the best way to remove it.  If you ever need this type of expert assistance choose one site only and follow their instructions until they have confirmed that your system is clean - if they discover you have cross-posted in another malware removal site asking for the same help they will immediately close your topic.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 05:31 · パーマリンク

Hello Imacri,

"Good Morning Canada!"

My Word, Imacri you REALLY TRULY are putting your back into it when coming up with a solution for me...THANK YOU! :o)

 "You might want post in that HP forum (or try contacting HP Customer Support at https://support.hp.com/us-en/contact(link is external), although HP's official support might not help if your service warranty has expired)"

I got a HP pop-up, on my desktop, not that long ago to click on it to see if the HP warranty had expired...which of course was the case (Post Warranty). 

"and ask for a link to the correct support page for the HP 17-By3xxx, just in case HP has posted Win 11-compatible software and drivers posted for the 17-by3xxx somewhere on their support site that matches your specific hardware components."

I shall be sure to do so.

"If you originally installed your Brother printer drivers and software when you still had Windows 10, did you ever update that printer software after you upgraded to Windows 11 and/or reset your Windows 11 OS?"

Come to think of it...NO...I just had a million things on my mind at the time (such as my Niece, who is my landlord, saying that I am behind in downsizing/selling furniture/Donations/packing...doctors appointments...etc...etc...).

I, as said, was unaware that Core Isolation/Memory Integrity even existed (more focused on Norton & MBAM Premium working properly), hence Post-Malware I simply became EVEN more cautious and explored my HP laptop features (which I had never used), and thus, stumbled across Core Isolation. Memory Integrity was in "OFF" mode, hence tried to push that dot into "ON" position....which, by now, famously did not work (BrUSBSib.sys).

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 06:20 · パーマリンク

Hello Imacri,

"Good Morning Canada!" (Part 2)

I am SO scatterbrained these days with the upcoming move, as yet, still no NEW apartment, hence STILL apartment hunting (plus downsizing/selling/donating/packing).

So yes, I DID install Brother Printer software because of "Bad Boy" BrUSBSib.sys, yet during the install wizard set up something went wrong, hence could not go through with it (which does not mean that I wont try again).

"I'm still not certain why you decided to perform a Windows 11 reset with the "Keep My Files" option, although I suspect is had something to do with your 14-Nov-2022 post in Malicious Website Plus Pop-Up Script! where you said you believed you were infected with malware after disconnecting your Ethernet cable and browsing to a potentially dangerous website using a WiFi connection, even though Norton and Malwarebytes scans found no evidence that this website was able to drop a malicious file on your system."

Plus I was surfing the Web in Administrator/Owner status (no one ever told to surf the Web using a Standard User Account only), hence that only made it worse! :o(

Imacri, I DO know when my HP laptop starts to behave bizarre, and wont allow me to improve the laptop's cyber security (an invisible person(S) trying to block my every move), hence the reset as a means to be able to shore up cyber security (and that includes creating a Standard User Account which Pre-Reset was blocked). The Reset fixed most of the issues, yet some members on the forum took a more holistic approach that my Modem/Router SSID/Wi-Fi Password could be compromised, hence outside person(S) had unauthorized access to my HP laptop.

"As I noted in my 30-Dec-2022 post <here>, the next time you suspect you have a hidden infection that was missed by both Norton and Malwarebytes be sure you consult a trained malware removal specialist in the Malwarebytes' Windows Malware Removal Help & Support(link is external) board or some other reputable free malware removal forum like Bleeping Computer's Virus, Trojan, Spyware, and Malware Removal Help(link is external) board, since a trained specialist should be able to identify any hidden infection and recommend the best way to remove it.  If you ever need this type of expert assistance choose one site only and follow their instructions until they have confirmed that your system is clean - if they discover you have cross-posted in another malware removal site asking for the same help they will immediately close your topic."

I shall be sure to do so....THANK YOU for the good advice!

I suppose I was indeed concerned regarding hidden malware as the Norton/MBAM Premium scans came up clean, and yet, my laptop was behaving bizarre (it was NOT until later that it occurred to me that someone else had access to my HP laptop via compromised Router/SSID/Wi-Fi password).

THANK YOU again for going through ALL that trouble by researching my HP laptop model! ;o)

"Enjoy the rest of your weekend in Egalitarian Canada!" :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 06:57 · パーマリンク

Hello Imacri,

I had promised you that I would keep you in-the-loop regarding Brother Technical Support.

So, I made good use of the hyperlink which you so kindly had provided me with. ;o)

Well, on Brother Technical Support webpage I was prompted to enter Brother printer model in their search engine (in order to see what support is available). Hmmm, alas, after entering DCP-L2550DW into their search engine nothing happened (it just said below search engine in quotation marks DCP-L2550DW). I tried said process over again with the same non-result (tried several more times).

Many Corporate websites these days have a friendly Pop-up A.I, 'How Can I Help You?" So, I chose the Software/Driver option with the A.I. (which did not give me the desired result). I then tried typing in 'Agent," yet no agent came online.

I could not get the chat feature to work on the Brother website (I'm not inept I got a refund from Amazon.com via chat...Heaven forbid they were to make their 1-800-# public).

Okay, "let's remain calm," I tried calling Brother (1-877-276-8437), yet could not get through to them on Thursday (tried several times over the course of the day) and on Friday as well. On Friday I managed to injure myself (as part of the downsizing process) just outside of Good Will (in their parking lot) dropping of donations (had to go back home in pain and get some bedrest). I AM still in pain, yet I shall continue to pursue getting an answer from Brother, "As to how to remove BrUSBsid.sys" once and for all from my HP laptop?"

When it comes to Brother their Chat & Phone contact options are Monday – Friday 9AM to 9PM Eastern, hence there is not all that much more that I can do over the weekend (other then staying in bed and taking it easy at my age).

I hope that YOU are doing much better Up North! :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 07:35 · パーマリンク

Hello Imaci,

Well, still in pain at my end...I, none-the-less, was able to make some small progress (emphasis on small) on the Brother Technical Support website (once again I entered printer model DCP-L2550DW into their search engine, yet this time I got more options). I read through the FAQ section, yet NO new info (that ALSO goes for advanced search).

Page 4 question 29 - "A driver cannot load on this device - BrUsbSib.sys" or "Failed to connect to the device"

I already have that information...and it DID NOT remove BrSUBSid.sys permanently from my HP laptop!

It could be as a layperson, when it comes to IT, that the solution was on one of the other 31 FAQ pages (I read through ALL of them), yet to ME nothing new stood out. :o(

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 09:33 · 編集日: 2023-01-08 | 09:38 · パーマリンク

david S.:

...Well, on Brother Technical Support webpage I was prompted to enter Brother printer model in their search engine (in order to see what support is available). Hmmm, alas, after entering DCP-L2550DW into their search engine nothing happened (it just said below search engine in quotation marks DCP-L2550DW). I tried said process over again with the same non-result (tried several more times)...

Hi david S.:

Try searching at https://www.brother-usa.com/contact-us for DCPL2550DW [i.e., without the hyphen ("-") in the model number].  When I searched for DCPL2550DW and clicked the "Get Support" link I was directed to https://www.brother-usa.com/support/dcpl2550dw.  The Contact Support section at the bottom of that page only offered email support (which re-directed me to an online submission form, which is probably the better choice for your particular problem) and phone support (1-877-276-8437) on weekdays.

...So yes, I DID install Brother Printer software because of "Bad Boy" BrUSBSib.sys, yet during the install wizard set up something went wrong, hence could not go through with it (which does not mean that I wont try again)...

Keep in mind that if you log into Windows with an account that only has Standard privileges then you might be prevented from doing more complex tasks like installing and/or changing configuration settings in certain software, especially if it is "global" software that can be used by any user logged in to the computer (see the MakeUseOf article What's the Difference Between Standard and Administrator Accounts in Windows? ).  If you have problems running a software installer then make sure you are logged in to Windows with an account that has Administrator privileges.  If that doesn't help then download the .exe or .msi installer and save it to your Windows desktop, and then right-click the installer and choose "Run as Administrator".

... I, as said, was unaware that Core Isolation/Memory Integrity even existed (more focused on Norton & MBAM Premium working properly), hence Post-Malware I simply became EVEN more cautious and explored my HP laptop features (which I had never used), and thus, stumbled across Core Isolation. Memory Integrity was in "OFF" mode, hence tried to push that dot into "ON" position....which, by now, famously did not work (BrUSBSib.sys)...

Also keep in mind that having Memory Integrity ON will add another layer of security by preventing malware from using insecure /  incompatible drivers (e.g., older .sys drivers that do not have a valid digital signature), but if you want to prevent your computer from being infected while browsing the internet then here are three important steps you can take:

  • Keep your browser, antivirus and Windows operating system fully patched with the latest updates.
  • Install a reputable content blocker in your browser(s) as peterweb suggested on 21-Oct-2022 in your thread Malicious Website Plus Pop-Up Script! to block ads, trackers, scareware, malicious code, and other unwanted content.  Note that I use both uBlock Origin (for Chrome <here>; for Firefox <here>) and Malwarebytes Browser Guard (for Chrome <here>; for Firefox <here>) in my MS Edge and Firefox browsers and those two browser extensions work well together.
  • Most importantly, avoid risky behaviour like clicking on links in the video description or comments section of YouTube videos (see the Oct 2021 BleepingComputer article Massive Campaign Uses YouTube to Push Password-Stealing Malware for one example) and avoid downloading free software from third-party download sites like CNET Download that might be bundled with unwanted PUPs like toolbars, adware, etc. Whenever possible, always download software from the original manufacturer's site.

The OSIbeyond article 10 Tips for Making Web Browsing More Secure has more tips for safe browsing.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 10:29 · パーマリンク

Hello Imacri,

THANK YOU, once again, for going through ALL that trouble in helping me & also THANK YOU for the good advice! ;o)

"The Contact Support section at the bottom of that page only offered email support (which re-directed me to an online submission form, which is probably the better choice for your particular problem) and phone support (1-877-276-8437) on weekdays."

I intend to compose a LENGTHY, step-by-step, e-mail for Brother explaining what happened, what did not work, and request alternate solution to getting rid of BrusbSid.sys (hopefully they will get back to me with a "Silver Bullet" solution that will take care of BrUSBSid.sys once and for all). Wish me luck!

So, sometimes the devil is in the detail...I use Start - ENTER Core Isolation - (and lately I get..."Page Not Available" pop-up at Windows Security site...when I click on OK pop-up disappears & I have access to Windows Security, ODD!)

Imacri, I was using Administrator/Owner mode when trying to get the Brother Printer software install Wizard to work, yet did not succeed/abort. :o(

  • 'Keep your browser, antivirus and Windows operating system fully patched with the latest updates." So, please don't laugh...how do I go about updating Google Chrome browser? (I know how to update Norton/MBAM and also Windows)
  • Install a reputable content blocker in your browser(s) as peterweb suggested on 21-Oct-2022 in your thread Malicious Website Plus Pop-Up Script! to block ads, trackers, scareware(link is external), malicious code, and other unwanted content.  Note that I use both uBlock Origin (for Chrome <here(link is external)>; for Firefox <here(link is external)>) and Malwarebytes Browser Guard (for Chrome <here(link is external)>; for Firefox <here(link is external)>) in my MS Edge and Firefox browsers and those two browser extensions work well together. (I have UBlock Origin, as well as, Privacy Badger + MBAM Browser Guard as extensions in my Google browser)
  • Most importantly, avoid risky behaviour like clicking on links in the video description or comments section of YouTube videos (see the Oct 2021 BleepingComputer article Massive Campaign Uses YouTube to Push Password-Stealing Malware(link is external) for one example) and avoid downloading free software from third-party download sites like CNET Download that might be bundled with unwanted PUPs(link is external) like toolbars, adware, etc. Whenever possible, always download software from the original manufacturer's site. (Okay, I shall be sure to follow your advice)
拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-08 | 13:28 · 編集日: 2023-01-08 | 13:38 · パーマリンク

david S.:

... I intend to compose a LENGTHY, step-by-step, e-mail for Brother explaining what happened, what did not work, and request alternate solution to getting rid of BrusbSid.sys (hopefully they will get back to me with a "Silver Bullet" solution that will take care of BrUSBSid.sys once and for all). ...

Hi david S.:

Be as concise as possible (I posted a summary of the important information they need to know <above>) so they don't get lost in the details.  All you need Brother to tell you is how to get rid of BrUSBSid.sys on your Windows 11 v22H2 laptop so you can turn on Memory Integrity, and how to re-install your Brother DCP-L2550DW software and drivers so you can use your printer again.

... So, sometimes the devil is in the detail...I use Start - ENTER Core Isolation - (and lately I get..."Page Not Available" pop-up at Windows Security site...when I click on OK pop-up disappears & I have access to Windows Security, ODD!) ...

Please run the DISM command Dism /Online /Cleanup-Image /CheckHealth from an elevated command prompt with Administrator rights as instructed in the ghacks.net article Use DISM to Fix Issues SFC Can't.  If that scan doesn't find any issues with your Windows image then run the System File Checker command sfc /scannow to look for and repair any damaged or missing Windows 11 system files. If either of those scans detects a problem with your system files then post back and let us know the exact message shown.

From my Win 10 v22H2 laptop:

...I was using Administrator/Owner mode when trying to get the Brother Printer software install Wizard to work, yet did not succeed/abort. ...

Did you download the software from the official support page at for your Brother DCP-L2550DW at https://support.brother.com/g/b/downloadtop.aspx?c=us&lang=en&prod=dcpl2550dw_us and did you select Windows 11 as your operating system before starting the download?  Were you trying to install Version G2 of latest Full Driver & Software Package (Y17C_C1_ULWL_PP-usa-inst-G2.exe, released 13-Sep-2022, ~ 459 MB) and, if so, did you follow the detailed "How to Install" instructions <here> on the download page (e.g., logging in as an Administrator, uninstalling the current drivers with the Brother Uninstall Tool, and disconnecting your printer before running the installer)?
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-09 | 04:42 · パーマリンク

Hello Imacri,

"Good Morning Canada!" :o)

I, alas, am still in a lot of pain, yet I am pulling myself together (at my age). :o(

You had suggested in a previous post (while Memory Integrity is not functioning) to up Google Chrome browser. Don't laugh, yet I don not know how to update a browser (I know how to update Windows/MBAM/Norton), yet I drawing a blank when it comes to keeping Google Chrome Browser current! 

"Be as concise as possible"

I shall be sure to be concise (stick to the basics).

"Please run the DISM command Dism /Online /Cleanup-Image /CheckHealth"

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-09 | 05:11 · パーマリンク

Hello Imacri,

"Good Morning Canada!" (Part 2)

Sorry, I am juggling several things all at once (while having only two hands)! LOL

I have to address a Social Security paperwork issue that arrived in the mail (important business), and that involves several hundred $ per month, America is NOT as Egalitarian as Canada. If I don't contest this in a timely fashion (there is a deadline) I stand to lose a lot of money each month for the rest of my life, hence this Social Security bureaucratic nightmare is what I have to focus on today (Monday) ;o(

I shall be sure to do DISM scan Tuesday or Wednesday (no offense to you & your precious spare time).

"Did you download the software from the official support page at for your Brother DCP-L2550DW at https://support.brother.com/g/b/downloadtop.aspx?c=us&lang=en&prod=dcpl2550dw_us(link is external) and did you select Windows 11 as your operating system before starting the download?  Were you trying to install Version G2 of latest Full Driver & Software Package (Y17C_C1_ULWL_PP-usa-inst-G2.exe, released 13-Sep-2022, ~ 459 MB) and, if so, did you follow the detailed "How to Install" instructions <here(link is external)> on the download page (e.g., logging in as an Administrator, uninstalling the current drivers with the Brother Uninstall Tool, and disconnecting your printer before running the installer)?"

Yes, I did download the software from the official support page at for my Brother DCP-L2550DW at at https://support.brother.com/g/b/downloadtop.aspx?c=us&lang=en&prod=dcpl2550dw_us(link is external)

"and did you select Windows 11 as your operating system before starting the download?"

Yes, I did.

"Were you trying to install Version G2 of latest Full Driver & Software Package (Y17C_C1_ULWL_PP-usa-inst-G2.exe, released 13-Sep-2022, ~ 459 MB) and, if so, did you follow the detailed "How to Install" instructions <here(link is external)> on the download page (e.g., logging in as an Administrator, uninstalling the current drivers with the Brother Uninstall Tool, and disconnecting your printer before running the installer)?"

Version 2 vs. Full Driver & Software Package?

I had to go back to Brother website and retrace my steps. The first thing I did was to download the uninstall tool/run (failed to remove BrSUBSid.sys). Then I downloaded Full Driver & Software Package (recommended)/run problems during install Wizard (had to abort). :o(

"and, if so, did you follow the detailed "How to Install" instructions <here(link is external)> on the download page (e.g., logging in as an Administrator, uninstalling the current drivers with the Brother Uninstall Tool, and disconnecting your printer before running the installer)?"

Yes, I followed the instructions verbatim (uninstalling the current drivers with the Brother Uninstall Tool...tried and failed) and the printer was disconnected (and Power "OFF"). 

"I hope all is well up North!" :o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-09 | 09:08 · 編集日: 2023-01-09 | 09:12 · パーマリンク

david S.:
...I drawing a blank when it comes to keeping Google Chrome Browser current! ...

Hi david S.:

I don't use Google Chrome but I believe this browser comes with a service call Google Update Service that automatically updates your Chrome browser whenever it detects a new version is available.  This happens in the background and you won't even notice that an update is being applied.  If you want to see your Chrome version number or run a manual check for updates go to More [the three dots (ellipsis) in the top right cormer of your browser] | Help | About Google Chrome as instructed in the Google support article Update Google Chrome or the HelloTech article How to Update Chrome on Your Computer, Android, or iPhone (which includes screenshots).  The version number of the latest stable release is posted at https://chromereleases.googleblog.com/.

If you want to install a browser extension like the uBlock Origin content blocker that peterweb and I recommended to improve your browser security then search for and browse to the extension's official download page on the Chrome Web Store (e.g., https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm for uBlock Origin) and click the Add to Chrome button as instructed in the Google support article Install and Manage Extensions.  By default, these browser extensions are also configured to update automatically.

...I shall be sure to do DISM scan Tuesday or Wednesday (no offense to you & your precious spare time).

There's no need to rush on my account, so just post back whenever you have time. You've been using your HP 17-by3xxx laptop for two years with Memory Integrity disabled and it sounds like you haven't used your Brother DCP-L2550DW printer for several months so none of this requires your immediate attention, especially when you're dealing with Social Security paperwork and looking for somewhere new to live. 
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-09 | 13:58 · パーマリンク

Hello Imacri,

I sincerely hope that YOU are having a better day (Up North) then I had, yet your kind response posting "made my day!" :o)

"I don't use Google Chrome but I believe this browser comes with a service call Google Update Service that automatically updates your Chrome browser whenever it detects a new version is available.  This happens in the background and you won't even notice that an update is being applied.  If you want to see your Chrome version number or run a manual check for updates go to More [the three dots (ellipsis) in the top right cormer of your browser] | Help | About Google Chrome as instructed in the Google support article Update Google Chrome(link is external) or the HelloTech article How to Update Chrome on Your Computer, Android, or iPhone(link is external) (which includes screenshots)."

THANK YOU I would never have found that in a million years on my own! LOL

"If you want to install a browser extension like the uBlock Origin content blocker that peterweb and I recommended to improve your browser security then search for and browse to the extension's official download page on the Chrome Web Store(link is external) (e.g., https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm(link is external) for uBlock Origin) and click the Add to Chrome button as instructed in the Google support article Install and Manage Extensions(link is external).  By default, these browser extensions are also configured to update automatically."

Imacri we managed to get our wires crossed. I ALREADY have uBlock Origin (as per your suggestion, peterweb, & SoulAsylum). I sometimes see how a web page does not load (uBlock), however, THANK YOU for spelling it out to me if I didn't already have it! :o)

"There's no need to rush on my account, so just post back whenever you have time. You've been using your HP 17-by3xxx laptop for two years with Memory Integrity disabled and it sounds like you haven't used your Brother DCP-L2550DW printer for several months so none of this requires your immediate attention, especially when you're dealing with Social Security paperwork and looking for somewhere new to live."

"Some of the kindest, nicest, most generous people you are ever likely to meet are Canadians!" (Robin Williams)

"You've been using your HP 17-by3xxx laptop for two years with Memory Integrity disabled"

I hope it has not been that long (that factory default is for Memory Integrity to be "ON"), but rather for a few weeks!

"and it sounds like you haven't used your Brother DCP-L2550DW printer for several months so none of this requires your immediate attention"

The Printer, right now, is the least of my worry (and yes, I have not used the printer/scanner in several weeks)!

"especially when you're dealing with Social Security paperwork and looking for somewhere new to live."

THANK YOU for your kind words & understanding. Apartment hunting and moving can be very stressful and those unforgiving bureaucrats with their ultimatums (the last thing that I need on my plate right now...seriously considering emigrating to Canada...I already know the Canadian National Anthem by heart)! LOL

Take care Imacri...I shall be back soon! :o)

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-09 | 15:42 · 編集日: 2023-01-09 | 15:45 · パーマリンク

david S.:

..."You've been using your HP 17-by3xxx laptop for two years with Memory Integrity disabled"

I hope it has not been that long (that factory default is for Memory Integrity to be "ON"), but rather for a few weeks! ...

Hi david S.:

The section titled "How Do I Manage Memory Integrity" in the Microsoft support article Core Isolation notes that "In most cases memory integrity is on by default in Windows 11, and can be turned on for Windows 10 ".  Memory Integrity is turned OFF by default in Win 10 (like most Win 10 users, the image in my 30-Dec-2022 post <above> that shows that Memory Integrity is currently turned OFF on my Dell Inspiron 5584 / Win 10 v22H2 laptop, and I've never bothered to enable it), which is the operating system you had when your HP 17-by3xxx laptop shipped from the factory.  If your incompatible BrUSBSib.sys driver was already in your driver store when your OS upgraded from Win 10 to Win 11, which is highly likely, then Memory Integrity would have remained OFF after the OS upgrade.

Since you said this is a security feature you only recently learned about I strongly suspect that Memory Integrity has never been enabled on your system.

Take care.  I've moved on from IIHF Junior Hockey and will probably be glued to the TV watching the NCAA College Football championship tonight.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-10 | 12:16 · パーマリンク

Hello Imacri,

I do hope you get to enjoy switching from watching Hockey to Basketball (let's hope know one throws an elbow...happened to President Obama during the course of a friendly game).

I ran the Dism scans CheckHealth/ScanHealth/RestoreHealth (No component store corruption detected. The operation completed successfully). :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-10 | 12:29 · パーマリンク

Hello Imacri,

(Part 2)

I ran sfc /scannow Windows Resource Protection found some corrupt files and successfully repaired them. 

Enjoy watching NCAA College Football championship! :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-11 | 05:00 · パーマリンク

Hello Imacri,

"Good Morning Canada!"

So, whereas I am not interested in starting a new thread (just bend your ear) "Fake websites?' :o(

I have two separate FREE e-mail carriers Google & GMX, of the two I happen to use Google more often, yet ever once in awhile I do use the gmx account.

Well, needing to retrieve an e-mail address from a relative on gmx.com...I went to my google bookmark and chose gmx.com clicked on bookmark - gmx.com webpage loaded - I agree to terms and conditions - long pause - icon in the middle of the page kept spinning, and spinning, and spinning (looks like second dial on a Man's wrist watch just spinning faster 360 degree). All of this on the consent page...after having waited for several minutes I reloaded the page/same result.

I looked up gmx.com on Google search engine (in case my bookmark is corrupted). I chose gmx.com with the NortonSafe Green dot with white checkmark next to google search result hyperlink. It took me a dozen attempts to sign-in to gmx.com. I made sure that next to http, on gmx.com,  that the padlock was in the locked position.

A kudos for your thoughts...on "Fake Websites!"

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-11 | 07:56 · パーマリンク

david S.:

... I ran sfc /scannow Windows Resource Protection found some corrupt files and successfully repaired them.

Hi david S.:

Glad to hear that System File Checker (SFC) was able to repair your damaged / missing Windows system files. In future it might be a good idea to run the scf /verifyonly command from an elevated command prompt after a major change to your operating system (e.g., after your monthly Patch Tuesday updates are installed on the second Tuesday of each month).  The sfc /verifyonly command will only look for problems with your Windows system files but won't try to fix them and this scan should run relatively quickly.  If that initial scan finds problems you can try to repair them by running Dism /Online /Cleanup-Image /CheckHealth (just to check your Windows component store is okay) and sfc /scannow as instructed <above>.

So, whereas I am not interested in starting a new thread (just bend your ear) "Fake websites?' :o(

I have two separate FREE e-mail carriers Google & GMX, ...I looked up gmx.com on Google search engine (in case my bookmark is corrupted). I chose gmx.com with the NortonSafe Green dot with white checkmark next to google search result hyperlink. It took me a dozen attempts to sign-in to gmx.com. I made sure that next to http, on gmx.com,  that the padlock was in the locked position.

Sorry, I'm not going off on a tangent discussing fake websites - that's another topic for another day.

I've never heard of GMX email, although a quick Google search indicates it's an advertising-supported email service provided by a German company.  Did you start using GMX when you were living in Germany, and is there some reason why you still need to use it, other than having a few old email addresses stored there in your contact list? 

Who is your Internet Service Provider (ISP)? If you want a second email address as a backup to Google Gmail it's likely your ISP provided an email address with your account that should be safer to use than an advertising-supported email service like GMX.
-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手1 統計

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-11 | 11:57 · 編集日: 2023-01-11 | 12:06 · パーマリンク

lmacri:

...I've never heard of GMX email, although a quick Google search indicates it's an advertising-supported email service provided by a German company...

Hi david S.:

One other thought, since GMX Mail is supported by ads.  It's always possible you are having problems using the GMX website because your uBlock Origin content blocker is blocking ads or trackers on this "free" site that GMX added to generate revenue.  If you are certain that there are no malicious ads on this site, temporarily disable the uBlock Origin extension in your Chrome browser by going into your Chrome extension settings at More [the three dots (ellipsis) in the top-right corner of your browser] | More Tools | Extensions and toggle off the extension as instructed in the Lifewire article How to Disable Extensions and Plug-ins in Google Chrome.  Then try to access your GMX email at https://www.gmx.com/mail while uBlock Origin is disabled.

If the login to your GMX mail works correctly while uBlock Origin is disabled (and you are certain this site is safe) then re-enable the uBlock Origin extension in your Chrome settings, browse to https://www.gmx.com/mail, and then turn OFF blocking for the GMX site (i.e., add GMX to uBlock Origin's list of trusted sites) by selecting the uBlock Origin icon in your browser toolbar and then clicking the large blue power button.  The power button should turn grey, which means blocking is now OFF for that one site. See the uBlock Origin wiki article How to Mark a Web Site as Trusted for more information. From my Firefox browser:


-----------
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.2364 * Firefox v108.0.2 * Microsoft Defender v4.18.2211.5-1.1.19900.2 * Malwarebytes Premium v4.5.19.229-1.0.1860 * Macrium Reflect Free v8.0.7175 * Inspiron 5583/5584 BIOS v1.21.0 * Epson XP-7100 AIO printer

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-01-12 | 06:49 · パーマリンク

Hello Imacri,

"Good Morning Canada!" :o)

THANK YOU, once again, for the good advice regarding Dism.

THANK YOU also for scf /verifyonly.

Yes, my focus is still on BrSUBSid.sys...

"Did you start using GMX when you were living in Germany, and is there some reason why you still need to use it, other than having a few old email addresses stored there in your contact list?"

No, I did not use GMX.com in Germany (they opened up shop in 1997 & thereafter became very Popular). I was doing fine for the longest time with my gmail account, yet one day I could no longer sign-in (went on for days).

So, I had to look for a short term solution regarding my google sign-in problem. I went online and almost ALL of the other FREE e-mail providers required me to have a smart phone...except GMX.

The only reason why I have a Consumer Cellular (Senior Citizen) phone is in case my Jeep should break down in the middle of no where. I have AAA roadside assistance (Gold Member), hence that would be the ONLY time I would use my "dumb phone" (I have a great home phone Senior Citizen friendly/with great Spam Alert/digital answering machine).

GMX.com was the "crutch" until I could get my google account problem resolved. Live goes on SO a great many people have the GMX.com account when contacting me (I am in the process of moving those contacts over to gmail).

I am taking more painkillers these days then usual  (not to worry I no longer drive...recently sold the Jeep) due to downsizing/tossing/donating/packing, hence I should have realized the before/after. That I set up the GMX.com account LONG before I packed my Google Chrome Browser with Cyber Security extensions, hence the ad-content uBlock   ("Duh, You SO dumb!").

THANK YOU for your input! :o)

Years ago when I bought Dell desktops from BestBuy or Dell direct...the bundled pre-installed package was not so great (in particular McAfee AV), hence BestBuyGeekSquad recommended Norton (NIS). So, I bought the box, went home, had a problem with the installation (no tech support number I could call...not outside of the box/also not inside the box).

So, I googled Norton Tech Support & got a hyperlink (inside said website it listed "Norton" Tech Support phone #).

So, I made that call...ended up talking to Mumbai/India. The A@@ on the other end of the line never identified himself as working for Ioyogi, or that it was a bait & switch trick (Ioyogi put up a fake Norton phone # on Google ...their phone number), next thing I know said A@@ is suggesting "Remote Assistance"  (which I was familiar with due to Dell Tech Support Mubai/India).

Well, naïve Senior Citizen that I was I agreed to the "Remote Assistance" session. I did, however, become suspicious when I saw the Ioyogi icon (at that point the A@@ in India had already conned me into allowing him to have access to my Dell desktop). Then later the prompt for me to please get out my credit Card ($45 fee). Upon realizing this was a con...I terminated the link.

DAMN! :o(

So, I contacted MBAM Technical Support (getting hold of the Pros was difficult on VERY short notice). A charming female volunteer offered to help me & told me not to be SO upset with myself having been the victim of a con (happens every day of the week). She also explained to me that she has the necessary skill set to uncover anything nefarious Ioyogi might have done to my Dell desktop (such as their software running, in the backgrond, whenever I launched Internet Explorer...she removed the Ioyogi software for me). I, for my part, was VERY grateful!

Well, I guess the point of ALL of this is that people REALLY do have to be cautious (and this is harder for us laypersons because we sometimes are not aware of ALL the dangers lurking out there on the Internet...vs. the Pros). THANK YOU! :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-02-06 | 08:53 · パーマリンク

Hello Imacri,

My apologies for not getting back to you sooner! :o(

("You and your precious Canadian spare time")

I had sent Brother a precise account as to what was going on, yet they took longer to get back to me then expected.

Then I could not sign-in to my email (to see their response email)...thereafter I nearly ended up in the hospital in screaming back pain (ended up in Urgent Care instead...steroids & new painkillers).

My Niece leased me a smartphone Samsung Galaxy A14 G5 (Android) so that I don't have to leave my bedroom and walk, in terrible pain, across the house to my AT & T landline in the living room (Emergency/Ambulance) ...to keep my smartphone by my side in the bedroom.

I have never owned a smartphone (only a dumbphone/flip phone from Consumer Cellular for REALLY old people), yet I am still trying to figure out how to get the Norton 360 onto my smartphone (the medication that I'm taking makes me drowsy).

I was going to post the response by Brother into this post, but I NOW get page wont respond (Google/YouTube/etc). Hitting refresh page icon  does not make a difference (top left of said Internet page). I shall keep at it and let you know what Japan has to say regarding the faulty driver & Core Isolation/Memory Integrity.

I hope that things are going much better for you way Up North! :o)

拍手0

Re: Microsoft - Core Isolation - Memory Integrity

投稿日: 2023-02-10 | 06:32 · パーマリンク

Hello Imacri,

"Good Morning Canada!"  :o)

As promised...I was persistent and managed to get back into my GMX.com e-mail account and retrieve the response by Brother (Tech Support).

Here is the cut & paste from their response e-mail...

Answer Link: Uninstall the Brother MFL-Pro Suite software, printer driver, and scanner driver - Windows

Answer Link: Install the MFL-Pro Suite or Full Driver and Software package

Download link: DCP-L2550DW - Full Driver & Software Package - Windows 11

Answer Link: "A driver cannot load on this device - BrUsbSib.sys" or "Failed to connect to the device"

I had stated in my e-mail to Brother Tech Support that I had already "Uninstall the Brother MFL-Pro Suite software, printer driver, and scanner driver - Windows,"  yet the faulty printer driver remained stubbornly in place.

and...

I had stated in my e-mail to Brother Tech Support that I had already "Install the MFL-Pro Suite or Full Driver and Software package," yet that too did not do the trick.

and...

I had stated in my e-mail to Brother Tech Support that I had already "DCP-L2550DW - Full Driver & Software Package - Windows 11," yet that also did not take care of the faulty driver.

and...

I had stated in my e-mail to Brother Tech Support that I had already "A driver cannot load on this device - BrUsbSib.sys" or "Failed to connect to the device," yet once again I had tried that as well and it did not work! :o(

So, I am somewhat baffled as to how to remove "BAD BOY" BrUsbSib.sys so that Core Isolation & Memory Integrity can function on my HP Laptop.

I hope you are doing well in egalitarian Canada! :o)