BleepingComputer.com: Computer Crashing at Start-Up

FranklenStein, on Nov 14 2009, 02:37 PM, said:

The System Tray (or Notification Area) is at the bottom right-hand-side of the screen with the icons of some running programs. You should find an Icon there of McAfee. Right-click on it. On the menu that opens ....
and here I have to start guessing ....
choose to open the McAfee user interface.
From there you should be able to choose to SCAN ... and somewhere there you should be able to choose what you want to scan ... namely the external hard drive.

MBAM = Malwarebytes Antimalware
I think you are using "Malwarebytes" as an abbreviation ... there is ONLY the one program: You can't possibly be mistaken. It will be the same thing.

This post has been edited by AustrAlien: 13 November 2009 - 10:46 PM

AustrAlien, on Nov 13 2009, 10:46 PM, said:

When I right click on the icon I get three options: "epolicy orchestrator agent", "update now" (done), and "About". Running Malwarebytes now.

FranklenStein, on Nov 14 2009, 02:49 PM, said:

You got me ...?

Assuming it is the correct McAfee icon .... ? try double-clicking on it instead.

Do not do two things at the same time.
Do not start a McAfee scan until the MBAM scan has finished.

AustrAlien, on Nov 13 2009, 10:59 PM, said:

Malwarebytes gave the external drive a clean bill of health. Nothing happens when I doulbe-click the McAfee icon in the system tray...

FranklenStein, on Nov 14 2009, 03:09 PM, said:

Tell me what you see when you select "About".

I have to wonder if McAfee is running at all ? Are you sure there is not another icon for McAfee there in the System Tray?

AustrAlien, on Nov 13 2009, 11:16 PM, said:

I get a window that states "ePolicy Orchestrator Agent" version 3.6.0.453 (Copyright McAfee 2006)

Than just has a line giving last update time, and the version info again.

Only gives me a one button option to click ok which just closes that window again.

FranklenStein, on Nov 14 2009, 03:22 PM, said:

The following link will explain a little .... I guess McAfee is there somewhere, but controlled by your IT department?
http://w3.fiu.edu/mcafee/mcafee80i/faq.html
.... and also to quote:
When I perform a right-click scan, viruses are detected but McAfee VirusScan does not take any action. Why doesn't McAfee VirusScan perform any actions and how do I remove the file(s) infected with viruses?

According to the software vendor, the default action for a right-click initiated scan is continue scanning, even if viruses are detected, and this action cannot be changed. After the scan is complete, the user must determine whether to clean, quarantine, or delete the infected file(s) manually.

On-Access scans (scans that work in the background) and On-Demand scans (scans that run on a set schedule) have default actions that can be adjusted and executed when viruses are detected. The default action for these types of scans is to clean the infected file(s) and then either quarantine or delete the infected file(s) if they cannot be cleaned.
--------------------

Try right-clicking on the external hard drive icon after opening "My Computer" and choose to scan the whole drive with McAfee. It seems this option might be available?

This post has been edited by AustrAlien: 13 November 2009 - 11:52 PM

My guess is it is going through the IT department.

My only scan options when I right-click the hard drive are through Malware and AdAware.

Either way that's as far as I'm going to be able to go with this for tonight...

Place is closing down and I will be off for a few days.

Please please please look for this thread again come Tuesday as I won't have computer access until then. You have been infinitely helpful, and since my data has been recovered anything else at this point is just gravy.

That said, I'd still like to see if I can't get this poor sucker back up and running with your assistnace.

Thanks again.

FranklenStein, on Nov 14 2009, 03:56 PM, said:

In that case ...
Check that your version of SpyBot is the latest one ... and update the definitions files and run a scan.

Then download SUPERantispyware (free version)
http://www.superantispyware.com/superantis...efreevspro.html
Install and update and run a scan.

That should just about cover it!

This post has been edited by AustrAlien: 14 November 2009 - 12:07 AM

FranklenStein, on Nov 14 2009, 04:05 PM, said:

No worries, I will get an email as soon as there is a post in this thread. See you next week then.
Have a good weekend.

FranklenStein, on Nov 14 2009, 04:05 PM, said:

Here you go then ...

This is likely to provide the explanation and the solution for your problem.

IIS Hacks ...... November 11, 2009
Malwarebytes Atapi.sys and Registry False Positives
http://www.iishacks.com/index.php/2009/11/...alse-positives/
and STOP: 0x0000007B .... BSOD .... oooops!

This is a confirmed false positive.
http://www.malwarebytes.org/forums/index.p...st&p=156300

Update Malwarebytes Anti-Malware's database to resolve this issue for the future.

AustrAlien, on Nov 14 2009, 11:27 PM, said:

Am currently downloading the UBCD4WinV350 repair disc. Have previously tried to use the BartPE thing to get in, but couldn't get it to load (though perhaps the copy I burned was deffective like the previous "Ubuntu" one). Will likely need some more hand-holding to get through that fix though as ust reading the instructions makes my head start to ache. Thanks in advance.

FranklenStein, on Nov 18 2009, 10:43 AM, said:

No worries: I will be around .... just give me some time to read up on the instructions again, and to get my copy of UBCD4Win booted, when you are ready.

This post has been edited by AustrAlien: 17 November 2009 - 07:59 PM

Okay, I think I have the CD built correctly but don't hold me to that. Do I insert the disc into the dead computer, or "export the 3 register keys" that I'm not sure what they're referring to?

UPDATE: I downloaded the zip file in step #3 (from the instructions in you link) and booted up the dead laptop with "Ultimate Boot CD 4 Windows". Seems to have worked despite my ineptitude, and is now telling me that "Network Support is not started yet", and asking me if I "want to start network support now". Yes or No?

This post has been edited by FranklenStein: 17 November 2009 - 08:52 PM