disabled AV

[k2j93]

Hi all,

I have been having a horrible time with my computer for the last 2
months. I have tried every download and just recently bought entirely
new McAfee AV programs. However, when I go to run them in safe mode
they are disabled and soon enough my entire system is shutting down.
Also, the firewall has been popping up every 2 seconds to let me know
that someone/thing is attempting to access either port 445 or 138.

What does that mean??

 

[Michael Cecil]

Hi all,

I have been having a horrible time with my computer for the last 2
months. I have tried every download and just recently bought entirely
new McAfee AV programs. However, when I go to run them in safe mode
they are disabled and soon enough my entire system is shutting down.
Also, the firewall has been popping up every 2 seconds to let me know
that someone/thing is attempting to access either port 445 or 138.

What does that mean??

Being notified by your firewall is good. It means it's working. If you
don't like those messages you can probably disable those popups in the
options.

Having your AV disabled either means you have malware that has actively
done that, or the AV product just doesn't work in Safe Mode.

Me, I would do a clean boot to my PE disc <http://www.nu2.nu/pebuilder/>
and scan the machine with F-Prot and McAfee that way. Or you could use
the online scanners available to IE users at most of the big AV vendor
websites.

Then I would reboot normally, install Ad-Aware <http://www.lavasoft.de/>
and Spybot <http://www.safer-networking.org/en/index.html> and MS
Antispyware
<http://www.microsoft.com/athome/security/spyware/software/default.mspx>
and HijackThis <http://www.tomcoyote.org/hjt/> and MWAV
<http://www.mwti.net/antivirus/free_utilities.asp>. Then I would reboot
to Safe Mode and scan with the 3 spyware scanner and the Microworld AV.
Then I would run HJT and remove any bogus startup entries. You could use
the automated HJT log parser here: http://hjt.iamnotageek.com/

Once the problems were resolved I'd reboot and run the system file checker
to verify their integrity (command prompt window, type "sfc /scannow" and
enter). Probably need your XP source disc for this.