[Essexboy]

No problem - whenever you are ready
Please make a note of the McAfee licence number

[Advertisements]

I tried to boot this morning below is what happened.

PC would not boot and went ot Light BLUE Windows screen and in WHITE writing belwo is the message.

Checking file system on C:

One of the Disk need to be checked fo consitencey. You may cancel the disk check but it is strongly recommended that you continue. Windows will now check the disk.

CHKDSK is verifying files ( 1 of stage 3)... file verification completed.

CHDSK is verifying indexes (stage 2 or 3) I MISSED SOME OF MESSAGE

- ??? index SI30 in file 26965.
- deleting index entry 7D1FBIN2, BUP in index $I30 of files 26965
" " 7Dbalsaf32eeO. BUP index $I30 of files 26965
" " More of the same but with different # for 3 more lines

Indexes verification completed.
CHDSK is recovery list files.

REcovery orphaned files 7D1B524.BUP (44043)
- More #s couldn't write down.

Then it booted.

Not sure if you want me to go through installing Mcaffee and the other softwares cause I may not be able to reboot ? Could a Combo Fix to help the boot work ? I 'm wide open for suggestions.

Edited by everythingsm, 28 December 2011 - 10:23 AM.

[everythingsm]

I tried to boot this morning below is what happened.

PC would not boot and went ot Light BLUE Windows screen and in WHITE writing belwo is the message.

Checking file system on C:

One of the Disk need to be checked fo consitencey. You may cancel the disk check but it is strongly recommended that you continue. Windows will now check the disk.

CHKDSK is verifying files ( 1 of stage 3)... file verification completed.

CHDSK is verifying indexes (stage 2 or 3) I MISSED SOME OF MESSAGE

- ??? index SI30 in file 26965.
- deleting index entry 7D1FBIN2, BUP in index $I30 of files 26965
" " 7Dbalsaf32eeO. BUP index $I30 of files 26965
" " More of the same but with different # for 3 more lines

Indexes verification completed.
CHDSK is recovery list files.

REcovery orphaned files 7D1B524.BUP (44043)
- More #s couldn't write down.

Then it booted.

Not sure if you want me to go through installing Mcaffee and the other softwares cause I may not be able to reboot ? Could a Combo Fix to help the boot work ? I 'm wide open for suggestions.

Edited by everythingsm, 28 December 2011 - 10:23 AM.

[Essexboy]

What that is, is that windows found some inconsistencies whilst it was writing data to the drive and self scheduled a disc check to clear them up

We can re-run Combofix although I feel it may find nothing of import

Delete the current copy from your desktop

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.
• Accept the disclaimer and allow to update if it asks
  
  
  
  
  
• When finished, it shall produce a log for you.
• Please include the C:\ComboFix.txt in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.



Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

[everythingsm]

Here ya go,

Thanks

ComboFix 11-12-28.03 - Scott 12/28/2011 15:01:27.4.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3061.2391 [GMT -8:00]
Running from: c:\documents and settings\Scott\Desktop\ComboFix.exe
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((( Files Created from 2011-11-28 to 2011-12-28 )))))))))))))))))))))))))))))))
.
.
2011-12-28 11:55 . 2011-12-28 11:55 56200 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{427CBB10-6559-485B-8FE1-C88941647E6B}\offreg.dll
2011-12-28 11:52 . 2011-12-28 11:52 -------- d-----w- C:\found.000
2011-12-27 18:18 . 2011-11-21 10:47 6823496 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{427CBB10-6559-485B-8FE1-C88941647E6B}\mpengine.dll
2011-12-27 17:52 . 2011-12-27 17:52 -------- d-----w- c:\documents and settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2011-12-27 17:09 . 2011-12-27 17:09 -------- d-----w- c:\documents and settings\Scott\Local Settings\Application Data\PackageAware
2011-12-26 23:48 . 2011-12-26 23:48 -------- d-----w- c:\windows\system32\wbem\Repository
2011-12-26 23:47 . 2011-12-26 23:47 -------- d-----w- c:\windows\MATS
2011-12-26 23:47 . 2011-12-26 23:47 -------- d-----w- c:\program files\Microsoft Fix it Center
2011-12-26 23:47 . 2011-12-26 23:47 -------- d-----w- c:\documents and settings\Scott\Local Settings\Application Data\FixItCenter
2011-12-26 23:26 . 2011-11-19 00:36 150856 ----a-w- c:\windows\system32\mfevtps.exe.88b4.deleteme
2011-12-26 22:41 . 2011-11-19 00:36 150856 ----a-w- c:\windows\system32\mfevtps.exe.799b.deleteme
2011-12-20 23:29 . 2011-12-20 23:29 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-24 15:21 . 2011-06-03 19:30 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25 . 2008-04-14 12:00 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-22 21:48 . 2011-11-22 02:01 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-21 10:47 . 2009-05-09 21:20 6823496 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2011-11-15 22:29 . 2009-10-03 11:25 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-11-04 19:20 . 2008-04-14 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2008-04-14 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2008-04-14 12:00 385024 ------w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2008-04-14 12:00 1288704 ----a-w- c:\windows\system32\ole32.dll
2011-10-28 05:31 . 2008-04-14 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-25 13:37 . 2008-04-14 12:00 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-25 12:52 . 2008-04-14 00:01 2027008 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 11:13 . 2008-04-14 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-10-15 21:16 . 2010-09-07 22:26 9608 ----a-w- c:\windows\system32\drivers\mfeclnk.sys
2011-10-15 21:16 . 2010-09-07 22:26 89792 ----a-w- c:\windows\system32\drivers\mfetdi2k.sys
2011-10-15 21:16 . 2010-09-07 22:26 87656 ----a-w- c:\windows\system32\drivers\mferkdet.sys
2011-10-15 21:16 . 2010-09-07 22:26 83856 ----a-w- c:\windows\system32\drivers\mfendisk.sys
2011-10-15 21:16 . 2010-09-07 22:26 57600 ----a-w- c:\windows\system32\drivers\cfwids.sys
2011-10-15 21:16 . 2010-09-07 22:26 464176 ----a-w- c:\windows\system32\drivers\mfehidk.sys
2011-10-15 21:16 . 2010-09-07 22:26 338176 ----a-w- c:\windows\system32\drivers\mfefirek.sys
2011-10-15 21:16 . 2010-09-07 22:26 121256 ----a-w- c:\windows\system32\drivers\mfeapfk.sys
2011-10-15 21:16 . 2009-04-01 20:47 59456 ----a-w- c:\windows\system32\drivers\mfebopk.sys
2011-10-15 21:16 . 2009-04-01 20:47 180816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys
2011-10-10 14:22 . 2009-04-01 17:03 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-03 13:06 . 2011-06-02 14:59 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 10:37 . 2009-11-04 07:06 73728 ----a-w- c:\windows\system32\javacpl.cpl
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-01-13 134656]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-01-13 166912]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-01-13 135680]
"RTHDCPL"="RTHDCPL.EXE" [2008-09-02 16851456]
"VBTUCopy"="c:\program files\VBTUCopy\VBTUCopy.exe" [2005-04-27 356352]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-23 1318816]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-13 342312]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2011-06-15 864664]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2009-04-01 17:17 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt\0sprestrt
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [6/26/2009 11:07 AM 64288]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [9/7/2010 2:26 PM 89792]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2/4/2010 7:52 AM 1355968]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [9/7/2010 2:26 PM 214904]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [9/7/2010 2:26 PM 214904]
R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [9/7/2010 2:26 PM 160608]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [9/7/2010 2:26 PM 150856]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 6:19 PM 13592]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [9/7/2010 2:26 PM 57600]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [9/7/2010 2:26 PM 338176]
R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [9/7/2010 2:26 PM 83856]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [4/2/2009 12:17 PM 47360]
S0 cerc6;cerc6; [x]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS --> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys --> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 12:16 PM 130384]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe --> c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [?]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [12/18/2009 11:58 AM 11336]
S3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\Microsoft Fix it Center\Matsvc.exe [11/16/2010 1:10 AM 267568]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [9/7/2010 2:26 PM 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [9/7/2010 2:26 PM 87656]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS --> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]
S3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [11/21/2011 6:01 PM 111872]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [4/14/2008 4:00 AM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 12:16 PM 753504]
S4 PuranDefrag;PuranDefrag;c:\windows\system32\PuranDefragS.exe [6/25/2011 6:27 AM 229376]
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Contents of the 'Scheduled Tasks' folder
.
2011-12-28 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-04 02:20]
.
2011-12-28 c:\windows\Tasks\User_Feed_Synchronization-{07C0E146-67A0-4598-811F-D68B8AF0D168}.job
- c:\windows\system32\msfeedssync.exe [2007-08-14 12:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://my.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: download.microsoft.com
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: update.microsoft.com
Trusted Zone: windowsupdate.microsoft.com
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
.
- - - - ORPHANS REMOVED - - - -
.
HKU-Default-RunOnce-tscuninstall - c:\windows\system32\tscupgrd.exe
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\documents and settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\bm_installer.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-12-28 15:08
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(1100)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\WININET.dll
c:\program files\Citrix\GoToAssist\514\G2AWinLogon.dll
.
- - - - - - - > 'explorer.exe'(3200)
c:\windows\system32\WININET.dll
c:\program files\iTunes\iTunesMiniPlayer.dll
c:\program files\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll
c:\program files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll
c:\windows\system32\igfxsrvc.dll
c:\windows\system32\igfxrENU.lrc
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2011-12-28 15:11:00
ComboFix-quarantined-files.txt 2011-12-28 23:10
ComboFix2.txt 2011-11-23 22:10
.
Pre-Run: 2,636,017,664 bytes free
Post-Run: 2,732,384,256 bytes free
.
- - End Of File - - 14B26AEFE1400B610D61A2FDEE6DCCEE

[Essexboy]

Definitely no malware apparent.. Are you still having the McAfee problem ?

[everythingsm]

Thanks... this morning my computer booted with no problems

I've been on my system for abt 3 hrs and haven't seen the Micrsoft McAfee ERROR yet It comes sometimes, possibly when I'm on a site with allot of activity(advertisements, video, or maybe a site is trying to launch something on my system).

I REBOOTED 2nd time today and good boot

2 things
1)Why am I not having problems now with reboot( I didn't do anything different besides System Resstore earlier)
2) Everytime I REBOOT I have a new McAffe Icon on my desktop. I take the new Icon put in a FOLDER(Cleaning Software, on dekstop and delete the old ICON in the folder) but I still keep getting a NEW ICON upon every new boot. McAfee acts odd.. that's why I cringe at having to deal with it. Any thoughts on what's happening with the new icon ?

I ran the MCaffe Virtual Tech and below is the report. Looks like I'll need to follow you step by step how to remove and reinstall. Mcaffe is not correct so I be looking for your next direction and look to be uninstall and reinstall Mcafee.. if you agree.

This virus is the gift that keeps giving.


MVT Version : 6.0.0.0
System Information
Operating System : Microsoft Windows XP Professional (Build 2600)
Service Pack : Service Pack 3.0
Language : 0409
Internet Explorer Version : 8.0
Internet Explorer Language : en-us
System Drive Type : NTFS
Physical Memory Available : 2097151
Physical Memory Total : 2097151
Virtual Memory Available : 2049828
Virtual Memory Total : 2097024
System Architecture : x86 Family 6 Model 23 Stepping 10Intel® Core™2 Duo CPU E7400 @ 2.80GHz
Date Time : 12/29/2011 10:14:29
Time Zone : GMT -08:00
Product Details
Product Name : VirusScan - McAfee SecurityCenter
Product Version : 15.0.294
Language : en-us
Partner : Dell
Account ID : 123222954
Health Check Details
Registry 1 Registry key(s) incorrect
Expected Registry Value not Present
Expected : ini log txt trc
Existing : ini log txt trc wiki-publisher log1 evtx mui
Key: HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration SmoothWritesExtensions

File OK
Process OK
Service OK
COM OK
DAT and Engine OK
Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------


Product Name : QuickClean and Shredder - McAfee SecurityCenter
Product Version : 11.0.416
Language : en-us
Partner : Dell
Health Check Details
Registry OK
File OK
Process OK
Service OK
COM OK
Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------


Product Name : SecurityCenter
Product Version : 11.0.649
Language : en-us
Partner : Dell
Health Check Details
Registry OK
File OK
Process OK
Service OK
COM OK
Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------


Product Name : SiteAdvisor
Product Version : 3.4.143
Language : en-us
Partner : McAfee
Health Check Details
Registry OK
File 10 file(s) incorrect
Expected File not Present
File: c:\program files\mcafee\siteadvisor\elist.dat
Expected File not Present
File: c:\program files\mcafee\siteadvisor\install.rdf
Expected File not Present
File: c:\program files\mcafee\siteadvisor\scripts\safe.xul
Expected File not Present
File: c:\program files\mcafee\siteadvisor\scripts\saffplg.js
Expected File not Present
File: c:\program files\mcafee\siteadvisor\contents.rdf
Expected File not Present
File: c:\program files\mcafee\siteadvisor\mcchplg.crx
Expected File not Present
File: c:\program files\mcafee\siteadvisor\scripts\balloon.js
Expected File not Present
File: c:\program files\mcafee\siteadvisor\scripts\main.js
Expected File not Present
File: c:\program files\mcafee\siteadvisor\scripts\safe.js
Expected File not Present
File: c:\program files\mcafee\siteadvisor\scripts\safe_im.js

Process OK
Service OK
COM 3 component(s) incorrect
Expected COM Component File Missing
Component Name: SACore protocol handler {5513f07e-936b-4e52-9b00-067394e91cc5} c:\program files\mcafee\siteadvisor(2)\mcieplg.dll
Expected COM Component File Missing
Component Name: SiteAdvisor BHO {b164e929-a1b6-4a06-b104-2cd0e90a88ff} c:\program files\mcafee\siteadvisor(2)\mcieplg.dll
Expected COM Component File Missing
Component Name: McAfee SaUpKeep {21cbfec0-e728-420c-b4a4-a58ad2089aba} c:\program files\mcafee\siteadvisor(2)\saupkeep.dll

Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------


Product Name : Personal Firewall - McAfee SecurityCenter
Product Version : 12.0.345
Language : en-us
Partner : Dell
Account ID : 123222954
Health Check Details
Registry OK
File OK
Process OK
Service OK
COM OK
Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------


Product Name : Parental Controls - McAfee SecurityCenter
Product Version : 13.0.319
Language : en-us
Partner : Dell
Account ID : 123222954
Health Check Details
Registry OK
File OK
Process OK
Service OK
COM OK
Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------


Product Name : AntiSpam - McAfee SecurityCenter
Product Version : 12.0.292
Language : en-us
Partner : Dell
Account ID : 123222954
Health Check Details
Registry OK
File OK
Process OK
Service OK
COM OK
Top Issues OK
SYSTEM OK



--------------------------------------------------------------------------------

Edited by everythingsm, 29 December 2011 - 12:20 PM.

[Essexboy]

OK first thing to do is make a note of the McAfee licence

Then download a fresh copy of McAfee to your desktop

Then download the following two programmes

Preinstall tool

Uninstall tool


From control Panel add/remove uninstall McAfee
After the reboot run the Uninstall tool
After that reboot run the preinstall tool
Then install the latest copy of McAfee that you downloaded earlier

Why am I not having problems now with reboot

Disc check cleared the errors that were causing the problem

Everytime I REBOOT I have a new McAffe Icon on my desktop.

I have no idea I am afraid as I have never used McAfee

[everythingsm]

Completed as you stated. Hopefully the Preinstall & Uninstall Tool was the trick. Thanks for the tools. I looked for such a tool on their site and didn't find. The NEW Icon created upon boot is McAfee software problem per info i've just read.

I'll reply tomorrow if I see the error any longer.

Thanks

[Essexboy]

Aye they hide the tools away from view, that way you get to ring them with problems

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.