Hello,
I am sorry if it is wrong place but I could not locate my product.
I am helping my daughter to install McAffee VirusScan Plus on her Dell XPS/Dimension 400/9150 (XP Media Center + SP2, 3.00 gigahertz Intel Pentium D). She has just renewed her subscription. Now she is trying to update this security software on-line from the My Account section. Here we come to the problem.
Every time during the installation when McAffee starts scanning the computer the system crushes with famous message
“SYSTEM SHUTDOWN
This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY SYSTEM
Time before shutdown: 00:00:99
Message:
Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly.”
The event log shows two errors:
“Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 10/25/2008
Time: 1:26:45 AM
User: N/A
Computer: DELL
Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 800706BA from line 44 of d:\comxp_sp2\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 8193
Date: 10/25/2008
Time: 1:26:45 AM
User: N/A
Computer: DELL
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040206.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 52 54 57 52 54 49 43 WRTWRTIC
0008: 32 31 34 39 00 00 00 00 2149....
0010: 57 52 54 57 52 54 49 43 WRTWRTIC
0018: 32 31 31 31 00 00 00 00 2111....”
It happens in a couple minutes after scanning begun. So the installation is interrupted at this point and can not be finished. Once the computer rebooted it works normally (never shut down unexpectedly).
A month ago I have cleaned this computer because it was infected by burrito virus and numerous less harmful worms. It was reasonable to suggest that the computer is not cleaned yet. So I scanned it several times using on-line F-security, NDO32. Also got and run Semantic W32.Blaster.Worm remover and McAfee Stinger. Nothing was really found as far as virus is concerned but McAfee update still results in the shutting down of the computer.
Please note that previous version of McAfee (Enterprose 8.0i) was completely removed.
I can provide a HJT report as need but it also seems clean to me.
thks & rgds,
ap