Getting "Preparing Security Options"

Hello Roy

I found that link yesterday when searching for the location of the logs so I could find them. But there's no info on where to look for anything stopping me from changing the registry keys. When I access the logs I get this list. What folders do I look in? And what am I looking for?

Hello Roy

Haven't heard from you for a while - hope all is OK with you.

I've spent the morning on the computer and have run an ESET scan. A mighty scan it was too, lasting an hour an a half. The good news is that no issues were found. So that's no issues found from McAfee, Malwarebytes or ESET. Is it now safe to rule out a virus causing PSO?

There may also be some progress, not done knowingly. but I've gone into the registry and changed those numbers a couple of times and just lately (up to 3 separate sessions) the bottom state line seems to be retaining the 100 (256) figure where as the refcount number changes each time I go in; it's either 5, 8, 2 etc. Not sure what this means.

Are you able to help with what McAfee files to look into to see if it's preventing the registry changes being made; although now of course it's only one line that isn't remaining the same; so I would have thought if the culprit was McAfee it would stop both lines being changed.

I await further guidance.

Hi LevelBest,
the logs will be accessible from the Mcafee main menu, either directly or from the history option.

How is your comp set-up as a Workgroup/Domain or Homegroup ??

Roy

Hi LevelBest,
As you only have 1 profile, and its the admin account, i'm loathed to follow the usuall course of action, rename/recreate/delete, why copy a corrupt version, the "new" profile is not checked or verified.
(its possible that it will bork your comp)

Please read then run this MS fixit from this link, no Fixit no: so not sure if you have previously used it
https://www.google.co.uk/url?sa=t&rc...BznnXgHcXYD1JA

AFTER running the above
REBOOT (sorry)

then goto system > advanced > enviromental settings
should look like the following.

system variables
pathext
cmd vbs js jse wsf wsh msc

User variables
temp & tmp
%userprofile% appdata local temp

Do you have a W7 disc, not the system image?

Roy

Hi Roy

I've run the fix it tool, posted results below.

Went into System, Environmental variables: the path text is different from yours. But the usual variables seem the same.

I don't have and never had a windows 7 disc. I don't want to put the laptop back to factory settings as I'll lose MS Office.

Have changed the registry after re-booting and gone back in but only state is staying the same. Ref count is at 5

Hi Roy

I tried an experiment: disconnecting the laptop from the computer, changing the registry and re-booting. The numbers have still reverted (as gif). I'm not sure if this is meaningful.

Hi LevelBest,
Im wondering what malware that troubleshooter found, what does it say in the detail report.

Did Office not install on a seperate partition, usually Q.

Roy

Hi Roy

There was no Q drive installed. I found the reports in the temp folder. Not sure which bits you need or how to make them legible. I don't know if the following helps.....

If we're still pursuing a virus angle, would it be worth running Microsoft safety scanner?

Hello Roy

Does the results from the scan help in tracking down possible cause of PSO? It says in the report that the WSCAPI system file does not exist and WSCSVC Disabled.

LevelBest