need some help w/Vundo, maybe others?

[Derek]

lets see if we can get the error message that is causing CF to crash so we can track down what is wrong

it doesn't look like Mcafee is causing it

disable the Auto-Reboot so you can finally read, and see the blue screen error.

Go to Start -> Control Panel -> System
Go to Advanced
Under the Startup and Recovery section, click Settings...
Under System Failure un-check "Automatically restart"

then reboot & try combofix
it will probably still crash but instead of rebooting it will stay on teh blue screen so you can write down what the message says

[peter_gibbons]

Thanks for being patient!  Here's the error screen, I'll try not to paraphrase too much.


A problem has been detected with your system.

IRQL_NOT_LESS_OR_EQUAL

If this is the first time you've seen this message, restart your pc.  If you've seen this message before, follow these steps:

Check to see if any new hardware or software is properly installed. 
If system is new, check for any windows updates you might need.

If problems continue, disable or remove any new hardware or software. 
Disable any BIOS memory options, like caching or shadowing. 

If you need to restart in safe mode, here's how ... 

Technical info:
*** STOP: 0x000000A (0x00000018,0x00000002,0x00000000,0x80519290)

Beginning dump of physical memory
Dump complete.
Contact your sys admin.



Then I rebooted in safe mode and tried the renamed combofix again, but got the same blue screen.

[Derek]

doesn't help at all unfortunately

I will ask the developer of combofix if he has any more ideas after seeing taht error message but it is so generic it could be anything

None of the usual reasons have shown up anywhere

[Derek]

can you go to C:\ComboFix right click it & select send to compressed(zip) folders

that will make a zipped copy of everything inside that folder including bug reports, that might help us track down the cause

upload the zip file it makes which should be C:\ComboFix.zip to the uploads board please

[peter_gibbons]

Here's the empty combofix folder, and the peter123456 folder that contains everything. 

And, not to be pushy, but ...  Do you think we're getting anywhere, or am I gonna need to reformat? 

[attachment deleted by admin]

[Derek]

I am waiting for the combofix developer to look over the folder to see

[Derek]

it couold be mcafee clashing with other security driovers

becasue mcafee hasn't been updated in 2 years it ios more than useless so uninstalll mcafee, reboot & download  anew version of combofix & try again
however I get the feeling that a complete format & reinstall of windows might be the safest & quickest route to follow

[Would you do all this for nothing?]

You have come to The Spykiller for help because your Antivirus or Antispyware hasn't been able to fix your problem.

Modern Malware has become so involved and difficult to fix that it takes a very long time and a lot of hard work to read all the logs posted here and research and prepare the fixes for you. In many cases each part of the fix takes about 30 minutes to prepare, so a large part of my time is spent helping you

Would you do all this for nothing?

The reason I run this site is to raise funds for Hedgehog Rescue

Please donate if I have helped you or you have found this site useful.

You can donate safely and securely by using the paypal service, just click on one of the buttons below.

To donate in UK £

To donate in US$

To donate in Euro €

Any amount no matter how small is gratefully accepted and needed to ensure we keep the Rescue Centre running

To donate via paypal when the button doesn't appear or the link doesn't work: just go to www.paypal.com or your country's paypal log in page and chose send money and use help@thehedgehog.co.uk as recipient email address and select other service as the option. then follow prompts

<>

[Information]

  
  Information
   Security & Protection Blog
   Prevention
   Using Autoruns
     System Restore
  Rss feeds
     Microsoft at Home
     MSRC
     Malware blog

Take the Kaspersky Challenge: See what your current antivirus is missing. Our free online virus scanner is a great way to find out if you have any viruses or spyware on your machine without having to uninstall your current antivirus software or install a new one.

Kaspersky Online Scanner

Most importantly, you can see what viruses your current antivirus software let slip through! Now works with ANY Java enabled browser