Now what...

[SteamWake]

My wife was playing some game when some warning message came up and evidently it shut itself down. I wasent here so I dont know wtf happened.

All I know is that the toolbar was all foobar and most apps will not launch.

No problem I'll run a system restore.

"System restore is unable to protect your computer"

Sonofa...

Okay Ill start in safe mode !

Get to safe mode prompt.... system reboots gets to safe mode prompt... system reboots... you get the idea.

Ive done some searching on the system restore issue and found advice on how to 'correct' the issue including checking registry keys and everything looks in order. Yes I had it turned on.

This has got to be some flippin virus that slipped by mcaffee ... of course now I cant start any system accessories, let alone mcaffee.

Running a chkdsk from the command prompt now.

I'm stumped... oh yea nfi where the winders disk is. :oops:

[Castout]

Could this be it?

http://www.computerworld.com/s/article/9175896/Flawed_McAfee_update_paralyzes_corporate_PCs?taxon omyId=125

[CaptainHaplo]

Ya beat me to it Castout :yeah:

Definitely looks like something similiar - and the timing is highly suspect.

Using McCrappy av?

[SteamWake]

Hrm probably is but symptoms are a little different.Thanks Ill look into this.effin Mcaffee

[Castout]

Hrm probably is but symptoms are a little different.Thanks Ill look into this.effin Mcaffee

http://vil.nai.com/vil/5958_false.htm


Workaround 2

If the false detection has deleted or quarantined svchost.exe on your system:

IMPORTANT: Ensure that you have applied the EXTRA.DAT to suppress the false positive detection before restoring svchost.exe.

Copy the svchost.exe from a working system


On a computer that is not affected by the issue, navigate to the location below:

C:\WINDOWS\system32
Copy svchost.exe to a network location or removable media device.
On the affected system, copy svchost.exe to the location below:

C:\WINDOWS\system32
Restart the affected computer.



All you need to try is to get an svchost.exe from another XP machine and copy it into the affected PC and if that worked then it was it. Of course after applying the extra.dat file first to prevent the AV from mistaking the svchost as a malware again(see the above link)


Ya beat me to it Castout :yeah:
. . .


:DL

[CaptainHaplo]

Biggest problem is he cant get to safe mode.

My suggestion would be command prompt only - do everything needed at the command line and that SHOULD get you going.

Since its XP - you also have the option of using an old boot floppy (if you stayed with FAT) or a cd.

[SteamWake]

Yes I saw that extra.dat thing.

Curious thing is I do not have the directory in my Mcaffee install that they tell you to put it in /Mcaffee/Engine does not exist.

In fact I cant find any effin .dat files anywhere

Oh and just to make things a little more challanging I cannot copy paste between devices anymore.

Cannot get to command prompt only in safe mode.

[SteamWake]

I was wondering if anyone could send me a certain sv file :salute:

[CaptainHaplo]

I'm using 7 - or I would offer to. I have 3 machines handy - my 7 box (this one) - and 2 vista home premiums (YUCK!). I have an XP machine at work though - so if you haven't gotten it soon tell me the name of the file - pm me your email addy and I will email it in the morning when I get to the office.

[Feuer Frei!]

Hmm, when i had XP on my old rig, i got similar symptoms, endless reboot, could not reboot into safe mode.
The only difference was that i, after a XP update, was advised to reboot system to have updates take effect, when this issue ocurred.
Had to do a complete re-install. :damn:
Prognosis: More than likely a dll file or such missing from a crucial Microsoft update.

[Castout]

I'm using Vista myself so I don't think I can be of any help to you.

[SteamWake]

Thats okay after working on the damn thing for 4 hours straight and making no progress whatsoever and absolutly exhausted I went to bed.

Here at work I grapped an XP disc and the svchost.exe file from a machine here.

I'm really hoping to not have to reformat the machine.

[SteamWake]

Only took me about 3 hours tonight but she is back on the air :haha:

All told almost 9 hours lost to this ... sigh...

[CaptainHaplo]

Almost woulda been easier to just rebuild from scratch - and faster too.

Now what you asked in the OP - I should answered "Now you cuss like a sailor for a solid workday".

Glad its up!

[Castout]

3 Hours? So was it the AV that caused it?!

How did you solve it?

[SteamWake]

3 Hours? So was it the AV that caused it?!

How did you solve it?

Yes it was mcaffee that caused it.

The only safe mode I could get it to start in was the registry management one (got to by pressing F8 during boot).

Then I copied a known 'good' copy of svchost.exe to c:\windows\system32 using a dos prompt.

Then you run a file provided by mcaffee 5959xdat_em.exe or something like that.

Then find and delete the DAT folder under virus protection. This is an important step because if you dont your back at square one again.

Then get the virus program to run a manual update... oops no internet access :doh:

Then go though the tedious process of getting the processes started again through the start up manager. To regain internet access. Then run the update.

Most of the time was lost trying to get to a safe mode prompt figure out wth was going on and the first two times I tried it Mcaffee promptly deleted svchost.exe again :stare: (forgot to delete the dat files).

Sounds simple doesent it. :D

[Castout]

Yes it was mcaffee that caused it.



Sounds simple doesent it. :D

LOL. As easy as A B Z

I'm with COMODO here. Have had a few problems with the AV update but none as damaging as the one that had just struck the McAfee users. Plus I wouldn't get so worked up if it had since it's a free app afterall.:D

[SteamWake]

I remember when Norton Borked all the network connections at work and I to fix them one by one. :doh:

That was a much easier fix though.

This one by mcaffee is really bad because there is no 'easy' fix.

I really feel for the 'average' computer user who dont even know what a dos prompt is let alone how to get to it.

With command lines like copy g:\svchost.exe c:\windows\system32\*.* ... they just look at that and their eyes glaze over.

I'm lucky I grew up with that crap.