Prev: xp failed to recover/ startup..unable to find "AUDITPE.ISO"
Next: 711917 M3i Zero , Ezflash Dsi , R4i Dsi 58209
From: beldonga on 7 Sep 2009 12:39 I have McAfee on the PC with the problem. A full scan returns no problems. I have Trend-Micro on the PC that will perform a clean boot. "Daave" wrote: > beldonga wrote: > > I have 2 independent PCs running XP Home Edition w/Service Pack 3. I > > am the only user and system administrator of both. The "clean boot" > > process works on one. On the other I get an error that 'an access is > > denied while attempting to change a service and I may have to log on > > as system administrator to make a change' . > > What antispyware program or suite are you running on that PC? > > Are you sure that that PC is malware-free? If so, how did you determine > that? > > >
From: Daave on 7 Sep 2009 13:31 It is well documented that McAfee often interferes with many functions, presumably including clean booting. I remember once starting a PC that had McAfee installed in Safe Mode and McAfee was *still* running! You might need to use AutoRuns to configure a "cleaner" clean boot: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx Also, you didn't answer the other question concerning malware; that *always* needs to be ruled out first. beldonga wrote: > I have McAfee on the PC with the problem. A full scan returns no > problems. I have Trend-Micro on the PC that will perform a clean boot. > > "Daave" wrote: > >> beldonga wrote: >>> I have 2 independent PCs running XP Home Edition w/Service Pack 3. I >>> am the only user and system administrator of both. The "clean boot" >>> process works on one. On the other I get an error that 'an access is >>> denied while attempting to change a service and I may have to log on >>> as system administrator to make a change' . >> >> What antispyware program or suite are you running on that PC? >> >> Are you sure that that PC is malware-free? If so, how did you >> determine that?
From: beldonga on 8 Sep 2009 11:47 I checked the 'EVENT VIEWER' the failure is identified as a security problem. 'Unknown User Name or Bad Password. The process was indentified as 'Advapi'. I did a Google search on this and found Advapi.exe is malware. One article identified the same problem I have when trying a clean boot attributed to Avapi. All articles advised to get it off the system assap. McAfee doesn't pick it up. I am trying to find ways to get rid of it. "Daave" wrote: > It is well documented that McAfee often interferes with many functions, > presumably including clean booting. I remember once starting a PC that > had McAfee installed in Safe Mode and McAfee was *still* running! You > might need to use AutoRuns to configure a "cleaner" clean boot: > > http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx > > Also, you didn't answer the other question concerning malware; that > *always* needs to be ruled out first. > > beldonga wrote: > > I have McAfee on the PC with the problem. A full scan returns no > > problems. I have Trend-Micro on the PC that will perform a clean boot. > > > > "Daave" wrote: > > > >> beldonga wrote: > >>> I have 2 independent PCs running XP Home Edition w/Service Pack 3. I > >>> am the only user and system administrator of both. The "clean boot" > >>> process works on one. On the other I get an error that 'an access is > >>> denied while attempting to change a service and I may have to log on > >>> as system administrator to make a change' . > >> > >> What antispyware program or suite are you running on that PC? > >> > >> Are you sure that that PC is malware-free? If so, how did you > >> determine that? > > >
From: Daave on 8 Sep 2009 12:39
That is a trojan and needs to be removed! Hopefully these pages will help: http://www.bleepingcomputer.com/startups/Advapi.exe-199.html http://www.bleepingcomputer.com/tutorials/tutorial101.html http://www.elephantboycomputers.com/page2.html#Removing_Malware beldonga wrote: > I checked the 'EVENT VIEWER' the failure is identified as a security > problem. 'Unknown User Name or Bad Password. The process was > indentified as 'Advapi'. I did a Google search on this and found > Advapi.exe is malware. One article identified the same problem I have > when trying a clean boot attributed to Avapi. All articles advised to > get it off the system assap. McAfee doesn't pick it up. I am trying > to find ways to get rid of it. > > "Daave" wrote: > >> It is well documented that McAfee often interferes with many >> functions, presumably including clean booting. I remember once >> starting a PC that had McAfee installed in Safe Mode and McAfee was >> *still* running! You might need to use AutoRuns to configure a >> "cleaner" clean boot: >> >> http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx >> >> Also, you didn't answer the other question concerning malware; that >> *always* needs to be ruled out first. >> >> beldonga wrote: >>> I have McAfee on the PC with the problem. A full scan returns no >>> problems. I have Trend-Micro on the PC that will perform a clean >>> boot. >>> >>> "Daave" wrote: >>> >>>> beldonga wrote: >>>>> I have 2 independent PCs running XP Home Edition w/Service Pack >>>>> 3. I am the only user and system administrator of both. The >>>>> "clean boot" process works on one. On the other I get an error >>>>> that 'an access is denied while attempting to change a service >>>>> and I may have to log on as system administrator to make a >>>>> change' . >>>> >>>> What antispyware program or suite are you running on that PC? >>>> >>>> Are you sure that that PC is malware-free? If so, how did you >>>> determine that? |