I installed & ran Comodo Cleaning Essential.
For full system scan, it requested to restart. I accepted. But, on restart, I got Blue Screen of Death.
I switched off my PC using the cabinet button. On booting, this time it took me properly to my windows login. The CCE scanner auto-started. After sometime, it said i had rootkits. So, i clicked on ‘Clean’ option.
All GUI started to have problem. The top bars of open programs disappeared. Computer became slow. After, restart, now i am constantly getting BSOD!!!
Please help me out.
The error code displayed in BSOD:
Thanks for your detailed reply. However, it is not working for me.
I did the above, but got error
(have also tried the command directly in the run window):
C:\Documents and Settings\ma4k>sfc /scannow
Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable.
The System restore is switched off on all drives, so i do not think it can be used, after normal boot, as it wont have any restore point stored.
Also, I do not have a single bootable WinXp CD. I have a branded PC & was provided pack of 9 discs to install XP-Home. I tried to put in the first one, but it takes me on the path for a fresh re-format.
Is it not possible to correct things in safe mode? Can anything be done using the Log that i provided earlier?
The log is too cryptic for me. I am not sure how to analyse what it says.
I did ask somebody of Comodo staff to come and take a look and help.
In the mean time. Can you try starting the Remote Procedure Call service when in Safe Mode. You can do that from Control Panel → Administrative Tools → Services. Hopefully the RPC service can be started in Safe Mode.
Edit: I sent a pm to somebody of the AV team who forwarded it to the CCE team.
sorry for late response.
Turns out that CCE give many FPs on hidden files, some of them (especially files in C:\Windows)are windows system files.
You may have to restore these files to fix your system, which sounds a liittle difficult, or do a system reinstall.
Now we are looking into this issue and trying to reproduce it.
Is your C: drive NTFS or Fat32?
which build of CCE are you using?
The Remote Procedure Call (RPC) is already started and startup type is Automatic.
False Positives?!.. that too windows files. thats surprising. I assumed the software to be correct about the report and thought it would be cleaning them, as in like, ‘healing’ & ‘not deleting’.
Its difficult for me to judge what can be FP from a long scan list.
Sigh… That is a LOT of work. I was hoping i could get a easier fix in here(forum)
Guess, i will have to start with the inevitable. Backup, 9 disc install, plus the Windows updates(i heard MS is going to stop support for XP, hope the updates are still available)
Man!! That will cost me all of my Download limit for the month, and possibly more, as my PC would need to be updated right from SP1 upto SP3.
Its amusing & sad, how a single click could ruin so much time and, demand so much re-work & money.
Please provide a quarantine button for CCE. Also, please rename the ‘clean’ to ‘Delete’ to avoid any future mine-like incidents.