Windows XP odd behavior

Starting today, my system have a very odd behavior.

I came home and my PC has rebooted (Windows or McAfee update?)

On starting my sessions, I get an error message from an application that "can't register its class name".

There are no other error message, however, many applications don't seem to work properly.  

The Windows task bar does not show buttons for running applications.  

McAfee icon is visible in the system tray but is not responsive (right click does not show menu).Click on the McAfee anti-virus program in the menu doesn't start it either. McAfee Virtual Technician starts the stop automatically.  I tried to re-installed it... the installation script says that Windows Installer is not present.

Outlook will start but will not fetch the email (I am using vPop3 Mail server on the same machine. I can access the email directly).  From Outlook, testing the account setting says everything is ok.

Firefox works (thankfully) but IE8 will not start.  No error message.

Windows Services Manager will start, but shows no content at all in the "advanced" tab but list services in the Standard tab (I have a French windows, so the tab name are my translation)


My guess is that something is broken in Windows... any suggestions where to start looking?
LVL 14
ragoranAsked:
Who is Participating?
 
CheVive92626Commented:
Here's the text from the article, as well as a second (printer friendly) link

McAfee Document ID: TS100969

Unable to use Windows after updating the DAT file

Description
Some McAfee customers may encounter challenges when using Windows after receiving an updated virus signature file (5958 DAT).

IMPORTANT:
• If you are running the 5957 DAT, you can manually update by right-clicking the M icon in your taskbar and selecting Updates or Check for Updates.
• If you are running the 5958 DAT, DO NOT run a scan or reboot your computer. Use the previous step to update your DAT.
• If you are running the 5959 (or higher) DAT you will not have this issue, so you do not need the steps below.

To check your DAT version
1. Double-click the M icon in your taskbar.
2. Click Navigation.
3. Click About. The DAT version is located in the VirusScan section.

  OR

1. Double-click the M icon in your taskbar.
2. Click About. The DAT version is located in the VirusScan section.

Solution
McAfee is aware of this issue and has released an updated DAT file.

For users who have already experienced this issue, a solution is in progress and will be made public through this FAQ article as soon as it is available. Until this solution is available do not run a scan or restart your computer until you have verified your DAT version is 5959 or higher.

Printer Friendly: http://service.mcafee.com/FAQDocument.aspx?id=TS100969&lc=1033&pf=1
0
 
optomaCommented:
May got to do with an update McAfee brought out
http://isc.sans.org/diary.html?storyid=8656

Is your c:\windows\system32\svchost file there
If not copy it back from another machine and it may be ok afterwards
0
 
ragoranAuthor Commented:
More information

I don't have any sound on my PC anymore.

Windows Media will not start either.

The Event viewer will open.  I have many errors starting this afternoon, however, I can't see the details (properties) of any event.

I have Windows XP Home edition.  About 3 years ago, I hack the system to be able to run local IIS (I developped web services as a hobby). Never had any problem before, but now I can't access IIS management tools.  (Is it the cause or another symptom?)

0
On-Demand: Securing Your Wi-Fi for Summer Travel

Traveling this summer?Check out our on-demand webinar to learn about the importance of Wi-Fi security and 3 easy measures you can start taking immediately to protect your private data while using public Wi-Fi. Follow us today to learn more!

 
ragoranAuthor Commented:
The svchost file is not in c:\windows\system32.

All the other PC I have are running XP Professional.  Thsi one si runnign XP Home.  Is it the same version?
0
 
CheVive92626Commented:
0
 
ragoranAuthor Commented:
I manage to copy the svhost.exe file from another PC to a USB memory stick.  
Connect the stick on the PC.
 Windows explorer won't see it.
I open a cmd prompt and change to the stick drive.
Dir... the file is there
Copy to C:... error no file ???
dir again... no more file... ouch  mcAfee is still moving this file to quarantine!

0
 
ragoranAuthor Commented:
Sorry CheVive.  this link does not work (


And I just find out Ctrl-C & Ctrl-v are not working either on my PC
0
 
ragoranAuthor Commented:
CheVive

I found a link to a more detail instruction on McAfee site that requires to boot in safe mode.  I could not print from my PC (another thing not working), I printed it from another pc.

I will now try the procedure and get back here afterward.

0
 
ragoranAuthor Commented:
no luck

KB68780 from McAfee has a very detail procedure to correct the situation but the installation file provided with the article for DAT5959 does not work (no McAfee product found)... guess it is for the corporate version.

I know I have DAT 5958.. it is the latest in the DAT folder of the program

I can't even start a chat session with McAfee technicians because I can't install their tool...created this afternoon at 1:40pm EST


0
 
CheVive92626Commented:
The link to 5959xdat.exe from McAfee KB68780 is working now at my end -- the entire file downloads w/o a hitch.

www.mcafee.com/apps/downloads/security_updates/dat.asp?region=us&segment=enterprise

http://download.nai.com/products/licensed/superdat/english/intel/5959xdat.exe
0
 
nickomashCommented:
Download Malware-Bytes: http://www.malwarebytes.org/

Anti virus programs look for files that have been corrupted with a known virus signature, anti spyware programs will look for files or registry entries that are known spyware. However malware may often exist and lay undetected. Malware is a program or utility, often disguised as something familiar, perhaps an anti virus program, but instead does not do what it claims to be, and instead will hijack your browser, delete files or other damage to your computer.

Download Link: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button

Install Malware-Bytes.

After Installation, Launch Malware-Bytes.

Click Update Tab, Perform Malware-Bytes Update.

After Update, Click Scanner Tab.

Perform Quick Scan.

When Malware-Bytes has finished running you will be prompted with a log file. (you may close this.)

Click Remove selected in the lower right corner to fix your issues.

Cheers


0
 
zeltrustCommented:
0
 
zeltrustCommented:
or you can use this site http://siblog.mcafee.com/support/mcafee-response-on-current-false-positive-issue/

and try to look David Blankenship  April 21st, 2010 at 11:36 pm comments.  I think he found a solutions for the problem
0
 
nobusCommented:
can you boot to safe mode - then select last known good?

or do a system restore to a date it worked...
0
 
ITT2006Commented:
Try running the SFC command in the command line. This utility replaces any corrupted Windows files.

-Start > Run > type CMD and click OK.
-In the command line, type: sfc /scannow

Note: You may need to have your Operating System disc inserted in order for SFC to replace corrupted files with the ones from the disc.

http://support.microsoft.com/kb/310747
0
 
ragoranAuthor Commented:
Thank you all.

I was pretty tired yesterday night and quit.  When I came back from work I found a link on McAfee support site to resolve this issue for home users.  The link is not obvious to find, I stumble upon it quite by accident.

Here is the link for other users
http://service.mcafee.com/FAQDocument.aspx?id=TS100969

With it, I was able to fix the problem.



0
 
ragoranAuthor Commented:
Actual link to "entreprise" solution from McAfee, but very useful to eliminate other possibilities.

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.