New
#1
Windows Test Mode: Enabled after Factory Recovery
I noticed today my Windows 7 Pro x64 version of windows is running in Test Mode. Not sure how long it has been in this mode and I just didn't notice it, because I had a shortcut icon sitting in the bottom right corner that pretty much made it impossible to see. Well today I moved that icon and noticed it. I googled it and discovered its purpose and why someone might want to use it. Unfortunately, none of the reasons explained why it would be enabled on a system without the user explicitly enabling it, and on a 64bit OS.
Also, none of the results made any reference to it as something to be concerned about. If it's enabled they tell you how to disable it. I'm sorry, but I'm concerned how a Windows 7 64bit system can enable Test Mode on its own. I'm thinking a rootkit or some other type of malware has possibly compromised my system. I had just removed Cryptwall 3.0 from my system, so you can understand why I was concerned when I seen my system was in Test Mode. How do I know whether or not the Test Mode allowed the malware into my system. If I didn't enable it, then I'm thinking the malware did.
So to be extra safe, I restored my system to factory settings and chose NOT to restore any of my personal files. Guess what I noticed after the factory restore in the bottom right corner of my screen: Test Mode.
Can someone please explain how this is possible? Is the setting saved in the boot configuration data or something? If so, is this not restored during a factory restore? Could malware have compromised the manufacturer's Recovery process?
Mike