Getting "Preparing Security Options"

I forget people get nervous,
There are registry back up progs, most use Erunt. ERUNT Download
ONLY change the first field values (8 and 0 on yours to 1 and 100 mine)
RIGHT click on the field name>>then on Modify , a smaller window will appear with the current value in it just input the new value

reboot to update the registry

And they are reversable values

Roy

Hello Roy

I've gone ahead and changed the registry entries.

The first gif shows the new registry numbers altered to the new value. I immediately re-booted the machine but when I went back to check, the entries had changed, the Refcount showing 2 and State had gone back to 00000. Is this normal? Or should the values stay to what I changed them to?

Hi LevelBest,
NO they should not change back.
When you ran Malwarebytes, did you have the Rootkit option ticked?
if not please rerun it with it checked, would you also run ESET on-line scan, dissable Mcafee first.

Can you also check in Mcafee's logs to see a if it stopped the change, or any other reference to a registry change or permissions/user rights

Roy

Hi Roy

I downloaded and ran Malwarebytes as it came, I didn't make any changes to what it was scanning. I've since uninstalled Malwarebytes but I'll download it again.

I've found ESET and will run. Do you want me to run both ESET and Malwarebytes?

Where do I access McAfee logs? (via event viewer?)

I'll need to leave all this now until the weekend when I'll have more time.

I've also seen on the net about changing the permissions of registry entries - would this be a way forward or are we trying to determine whether preparing security options is a virus?

Many thanks for your continuing help.

I came home a little early from work, so am getting started on Roy's list.

The reason I uninstalled Malwarebytes was because I thought that was causing the PSO problem. However, I'm still getting it, so I was intending to reinstall at some point, so this has given me the opportunity to do that. Thank you, Layback Bear, I found the rootkit option. I've performed a MB scan without the rootkit option ticked and I am re-running again with the rootkit option ticked.

I'm going to need some guidance with delving into the McAfee logs. I've located them in the C drive programmes but there is a large list of folders (gif attached) and I don't know which one/s I should be looking at. I'll await Roy's guidance on that one.

I'll also await Roy's response or whether it's an idea to change the registry permission settings.

Many thanks for all of your inputs.

Hi Roy

As above post, I've done two scans with MB, the second one with the root kit option ticked. No issues.

Could you please help with what McAfee logs to look at.

I'll leave the scan with ESET to another time (bit nervous about disabling McAfee!)

I'm logging off now for the evening but many thanks for your continued support.

Hi LevelBest,
follow this link, (states W8 but that doesn't matter coz its a Mcafee prog)
https://www.google.co.uk/url?sa=t&rc...CGiVpqqkM7uCHw

There will not be a problem running the ESET on line scan with Mcafee dissabled as your only in thier site.

Roy