Expert: Lorry - 9/12/2009

Question
QUESTION: Hi Lorry

When I scan for viruses using McAfee, it stalls while scanning a file called meta4.exe. The computer also freezes up and I have to cut the power to the computer to reset or restart it. McAfee comes up with a message saying that my computer is not fully protected and there is a cross on the McAfee icon on the taskbar. However, when I reset or restart the computer, McAfee is enabled again. Before the computer stalls, McAfee has scanned about 50% of the files and no viruses were detected. Should I try and delete meta4.exe?

On another note when I am trying to copy the Thunderbird email folder in Windows Explorer to backup up the entire folder on to another computer, there is a data error saying “cyclic redundancy check”. I used to be able to copy it. However, it now comes up with the error message when copying the inbox. Perhaps there is a corrupted file on one of the emails that I downloaded in the last few weeks. Could this be the reason and if so, how would I find it?

Your help is appreciated,
Regards Richard.


ANSWER: Hi Richard,

By by chance did you install S.U.P.E.R., or Simplified Universal Player Encoder & Renderer? Most of the sites I checked mention that meta4.exe might be a part of the that program. To play it safe, even though you have McAfee installed, try the following:

Using Internet Explorer, go to:

http://security.symantec.com/sscv6/WelcomePage.asp

Click "Continue to Symantec Security Check", in the next window click No when asked if you want to close this window, that will bring you to a window where you should click Virus Detection.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

I would also suggest downloading Malwarebytes Anti-Malware 1.37 from:

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

Regarding the cyclic redundancy check error, check out the following sites:

http://www.computerhope.com/issues/ch000430.htm

http://ask-leo.com/how_do_i_fix_a_cyclic_redundancy_check_error_when_i_try_to_co

Hope this helps!
Lorry



---------- FOLLOW-UP ----------

QUESTION: Hi Lorry

Thanks for the letter.

A long time back I installed the SUPER software at http://www.erightsoft.com/SUPER.html . However, I have never had any problem with the virus scan before. Perhaps, I should uninstall and reinstall the software again. Do you think so?

I tried to run the virus scan at http://security.symantec.com/sscv6/WelcomePage.asp
The below message came up. I assume that it is automatically downloading and that I do not have to close out the other programs that I have open on my computer. Is that so? However, that was an hour ago and it still has not indicated that it has downloaded.
“Virus Detection requires ActiveX controls to check your computer for known threats.  
 Downloading ActiveX Controls...”

I have been using Lavasoft Ad-Aware to remove spyware and malware. I assume that would be as good as any. However, it comes up with a message that my definitions are about 150 days old. When I click update to download them, it says “error retrieving update”

If I remember right, I think I had a cyclic redundancy error message when trying to copy my “My Documents” folder a fair while back. I think it listed the file it was copying at the time and I managed to delete it and it worked. However, this would be difficult to find in this case as it just says it is copying the Inbox of my Thunderbird email so it could be a file in any of the messages that I received since I last backed up or copied my email folder. Perhaps, I could move all by messages in the Inbox to another folder in my email program and then try and back up the inbox again. If it copies with out the error message, I could then (in Windows Explorer) try and copy the folder with the newer email messages in it to the other computer. If it causes the error message, I could reopen Thunderbird and move a few messages at a time from the temporary folder to the Inbox and try again. When it worked, I would then by a process of elimination and moving messages back and forward be able to narrow down to what email is causing the problem.
If you think of an easier way, please let me know.

Perhaps I could try and run the Scandisc and Defrag first to see if that fixes the problem.

Your help is appreciated,
Regards Richard.


ANSWER: Hi Richard,

To run the free scan from Symantec, you must allow Active X to run. Before the scan starts, you have to click things two or three times, once it is scanning it is better and faster if you do not do anything else at the time.

Lavasoft Ad-Aware is a great program but it goes after adware only. Regarding this program, check out the following from:

http://www.lavasoft.com/mylavasoft/support/faqs/i-cannot-update-the-definitions-

Regarding Thunderbird, you are starting to think like me - that is what I would do.

If you haven't check the hard drive for problems in the last month, would strongly suggest that you do. The same with defragmenting.

hope this helps!
Lorry

---------- FOLLOW-UP ----------

QUESTION: Hi Lorry

Thanks for the letter.

From what you say I think the software at http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html would be better than the free version of Lavasoft Ad-Aware and therefore it would probably be best for me to uninstall Lavasoft Ad-Aware and install Malwarebytes Anti-Malware 1.37. Is that what you would suggest?

I scanned and defragged and now managed to back up the email without the cyclic redundancy check error.

I tried to run the virus detection again at http://security.symantec.com/sscv6/WelcomePage.asp and clicked  to Download ActiveX Controls. However, there is no sign of it downloading still. A webpage with the below comes up.
“Virus Detection requires ActiveX controls to check your computer for known threats.  
Downloading ActiveX Controls...”
I uploaded a screenshot of the page at http://advantagein.com/activex.JPG

Any suggestions are welcome.

Your help is appreciated,
Regards Richard


Answer
Hi Richard,

When you get to the page that you sent, click the bar that says,"This site might require the following ActiveX control: 'Symantec Corporation'. Click here to install". Without the ActiveX, it will not run.

Later,
Lorry

PS - Not sure how many follow-ups are allowed, if we are at the limit, just start another question.