ISAKMP and SAs

Similar Questions

• Claire ISAKMP and IPSec in PIX Security Association

  Hello

  How do you delete the ISAKMP and IPSec security associations in a PIX? (As you do in the IOS using the commands 'clear' crypto..)

  Thank you------Naman

  The type of config mode:

  Claire ipsec his

  Claire isakmp his

  I hope this helps.

  Cody Rowland

  Infrastructure engineer

• Z210 and SAS HBA: those that will work?

  I have an Z210 with the processor E-1240 and 16 GB of RAM, Win7 64-bit.  I have a few hard drives SAS 15 K HP's and I want to install on this machine - but the Z210 has no integrated SAS controller. I discovered that there is an Avid Certified version of this computer, and it uses a controller LSI SAS SAS9200-8F to hang the external storage drives. LSI SAS9200 - 8 used to be available in a version of the internal interface (LSI SAS 9200-8i), but that is only apparently now deployed for IBM and there are no Windows 7 drivers.

  I want to install an INTERNAL SAS HBA. and I noticed that there is an older model, the LSI SAS3041e, which has drivers for Windows7 64-bit available. So, I think that this cheap SAS HBA could be a good candidate for my Z210.

  Has anyone any how SAS HBA in an Z210 properly installed? Specifically the SAS3041e LSA? I think that the issue could boil down to how you install drivers and access the HBA for the boot BIOS...

  DRM for your collective wisdom!

  Well, after much research, I decided that the LSI SAS3041-e (non-RAID) controller was a likely candidate. They are available on eBay for almost nothing.

  I just installed one in my Z210 and it was as easy as possible: Although the technical docs of LSI a several step process to load the drivers Windows 7 Pro 64-bit with Service Pack 1 installed, the drivers are already present in Windows 7 Pro. I plugged the controller, hooked to a pair of HP SAS 15 K disks and booted from the disc of Windows 7 HP system recovery.

  The controller immediately recognized Z210 installed the BIOS and I was off and running. Installation of Win 7 completed smoothly and when the machine finally started in a new Win 7 system, everything was fine and my two new hard drives SAS have been properly formatted and correctly recognized. You should be aware that you will need a pair of "bizarre" SATA cables to use these discs 'battleship-quality '. Cables have a conenctor unified at one end to connect the SAS drives, and the other end is a plain old SATA drive connector and a SATA power plug.

  Even if SAS 15 K drives are slightly slower than a disc of 6 GB/S SATA III, the practical speed difference is trivial, these drives have a superior quality construction regular SATA HD, I think.

• PowerEdge T110 II and SAS network

  Hello

  I have an old T110 II server for 2 years and I want to install a double extra port card Go like Broadcom Dell 5720 for installation of Hyper-V and a Perc H310 card that can be easily found in my country.  But neither one is listed for compatibility with this server.  It is possible to do or not?

  In addition, when I researched H310 it is not entered as a single integrated H310 different from that I intend to buy the Dell site which appears as a regular PCI card! Are they different models for H310?

  Barebone Dell servers here are advirtised to work with SAS disks, but are sold without controller Perc... :-)

  Any help or suggestion will be apreciated. Thank you

  Cgales,

  Unfortunately the H310 will not work in the T110 II. This is due to the designed H310 for use specifically in the most recent 12 generation servers. The T110, supported hardware raid controller would be the H200, or with the S300 software raid solution.

  The H310 has another model, which is designed for use in the model of blade servers.

  Let me know if this helps answer your question.

• HP SAS HBAS with IBM Storage and SAS SAN vs iSCSI SAN

  Hello, I am working on a project, and I have to add a SAN solution to my client infaestructure. My client already has a HP Server and we wanted to add another server, but an IBM one. I thought I'd add storage IBM (DS3200) that has two SAS interfaces. The problem is that the Distributor IBM says who does not know if the HP Server will be able to communicate with the SAS IBM storage. So, one possibility was to put on the server HP HP SAS HBA Controller. The second option is to put a SAS HBA Controller IBM. I think that the SAS is a standard, it doesn't matter what brand I use of HBA. Should not it works anyway?

  There is another option which adds instead of SAS one iSCSI storage. The problem is that I do not know the performance than the iSCSI storage. I want to put inside it's VM with Exchange Server (50 mailboxes), an ERP (for 50 users) with it's SQL Server, a computer file virtual, a virtual machine server with Active Directory.

  So, the questions are:

  1 - does anyone have experience with iSCSI storage to see if its performance if goog enough (I intend to use a dedicated to the iSCSI network gigabit switch)?

  2 does anyone know if I use different brands of servers (in this example an IBM and HP) with a SAS storage IBM? Who be it already done? The HP SAS HBA are compatible with the IBM iSCSI storage? IBM SAS HBA are compatible with HP servers?

  3. in the case of being able to do what I say to question 2, that do you suggest? Put a HP SAS HBA within the HP Server or upgrade an IBM SAS HBA inside HP Server?

  Of course the option I want to use is the addition of SAS IBM storage instead of using an iSCSI one, but I'm not sure of their compatibility between HP and IBM storage servers.

  Thanks in advance.

  In this case, the reason why I wouldn't use SAS is that your application requires this level of performance and the cost as not justified. You can configure iSCSI and direct savings in most important features such as snapshot, replication and dedup. If you were available to this solution with the DS3200 spend you 10K and that none of these features. Performance is very good, but you will find that the system is not yet warmed up with this load. The SAS Protocol can support high IO, but is not what provisions IO, is the number of disks and the RAID mode that defines your ability to e/s. I put 40 K terraced small IOPS / s on a single caching of 1 GB iSCSI target, so he can make the e/s. flow is not as high , but do you really need it. In the future you can profitable move to 10Gbe if you find insufficient bandwidth, which would be faster than the SAS 3 GB limit that is uneconomic to upgrade 3 + times.

  Kind regards

  Mike

  http://blog.laspina.ca/

  vExpert 2009

• If anyone has installed ESXi on an old post XW8400 and make use of the SAS RAID?

  So I dug up an old HP XW8400 Workstation, but it is missing some parts and I thought I'd see if anyone has this thing running with the SAS RAID, because most of the forums of discussion and problems seem to revolve around the SATA RAID. So is this still possible? I do not want to invest money and then have NOTHING to do...

  Well, you're lucky, because I had this question a long time ago, but I never thought that someone else would have taken the trouble but YES - it is supported - even if everybody out there seems to focus on the SATA RAID I took not stable worth, since I use SAS disks in my workstation , because they are MUCH faster and can support a flow MORE. I have ESXi 1483097 5.1 Build running with 2 450 GB SAS drives in a RAID 0 configuration, and the system just hums...

  It is an old machine, but I was surprised that he was able to follow with the latest versions of ESXi, that's why I don't bother throwing, so if someone is there looking into the purchase of a good workstation MARKET that supports ESXi 5.1 with dual Quad Core Xeon, 32 GB of RAM, and SAS RAID so you won't go wrong with this one. You will encounter a small problem though, but I guess I'll wait for others to try to run this configuration that I share this juicy tidbit, although it is relatively easy to overcome and all depends on how you run ESXi...

  I know if you tried and GB SAS...

• sequential writing very slow use SAS 6/iR (LSI 1068E) and readers of SAS 15 k RPM on ESXi, run fast on a native installation of Win 2008

  Hi gentlemen,

  I'm having a problem on a Dell PowerEdge 2950 (quad core 2.66 ghz, 18 GB of ram) with my SAS drives with a very low write speed. The tests ran inside a virtual Windows XP machine using virtual thick 32 GB drive. I tried a single seagate 15 k RPM 500 GB and got 26 MB s, 2 of them in raid-0 and still got dry 26 MB, then I tried a different SAS 2.5 inch 10 k rpm HP and still got the same s 26MB.

  This controller is a hardware raid, not the best around, but it's good for raid 1 and 0. Then I took off of ESXi machine and installed Windows 2008 re-usable. The disc written now 100 MB s sequentially on disk and using software raid 0 is 145 MB s. I'll configure hardware raid 0 tomorrow on Windows 2008 to check if the writing is a bit better.

  But anyway, there seems to be a huge difference between a virtual machine in ESXi and a native machine running on these drives. I'll install VMware workstation on top of Windows 2008 and run tests with a virtual disk again thick.

  It's very strange that all disks are capped at 26 MB s. The reading speed is also very low in raid 0. I get on Windows 2008 340 s MB, on ESXi I get 200.

  The controller is not write far cache I have now as there is no battery on board. Can use Windows 2008 write cache on hard drives without any kind of system requirements for me? But even with or without write caching, it's so fresh generals to let fall a sequential read 340 to 200 MB on a xeon quad core with 12 MB of cache and SAS controller?

  Thank you!

  You cannot directly compare a stand-alone OS and a virtual one. There is more than just the write cache, but it can make a difference of 10 times in some environments (depending on controller, cache size, number of axes etc.).

  If you search the forums you will find many many similar positions and invariably, the answer is battery and caching module.

  http://communities.VMware.com/docs/doc-5490

  Forum upgrade notice - we will be upgrading systems VMware communities between December 10-12, 2010. During this time, the system will be placed in READ ONLY mode.

• Can I mix SAS and SSD drives? PE2900

  Please forgive my ignorance; I've looked through the documentation but can't find the info I'm after.

  I have a PE2900; When we look at the config online I see comes with:

  GT281 1 Assembly, map, PERC5I, Serial Attached SCSI, 2900
   
  and SAS 15 k of the 4x146Gb discs.
   
  I want to mirror 2 drives SSD for the OS. I have the 1 x 8 SAS backplane with two cables between the 5 / I at the bottom of basket... I guess I have to buy a spare sata cable sas to replace the 2nd cable and to find carriers that contains the ssd?
   
  Is it possible on this machine?  All the world does? If so, how can I find the correct carrier? I can not chat w/dell as this system is way out of warranty and the store "parts & updates" is a joke.
   
  Thank you!

  Hello wilddoktor

  The PERC 5 / I do not officially SSD support, but it will probably work. PERC 6 is the first controller to SATA SSD support and the H700 supports SATA and SAS SSD.

  I would recommend that you try SATA SSD. In addition, none of our controllers support mix of technologies of discs in the same container/table, then you will probably not be able to put the SSD in the same table as non - SSD.

  Create a RAID 1 with SSD 2xSATA would probably work, and you should be able to keep your another Bay of SAS drives on the same controller. I only am not able to give a definite answer since SSD was not taken in charge with this controller, but maybe there is someone who has tested that sounds in.

  Thank you

• H200A PERC. SAS and SATA. Simple 2 extra HARD drives raid. Possible?

  Hello.
   
  Research in the server rack dell R210 II.
   
  Added records 2 x 300 GB SAS with a PERC H200A raid controller.
  The other two empty drive bays im looking to transfer courses two SATA 2.5 "HARD disk drives. Ive read you can mix SATA and SAS drives, is this true?
   
   
  I have two options to the raid configuration:
   
  the raid controller would be able to support two raid 1 RAID. 1 for the SAS drives and the other for the two SATA drives?   Operating system can see two disks.
   
  He would support a raid 1 for hard 1 & 2 discs.  Then with disk HARD 3 & 4 show the HARD drive directly on the server.  OS sees thre readers.  The drive in question and two others.
   
   
  I tried the dell chat, but could not get anywhere, as the helpdesk agent does not seem to know that you can google some caddy and buy the caddy to adapt to discs with no carts.

  [murmur] I'm wrong :), but I think the H200 supported not RAID, so if left unconfigured, the disks will be seen by the operating system as the person/no RAID disks.  Also, if I am wrong not :), the H200 supports a maximum of 2 virtual drives, so would not work two 1-disk RAID 0 and a RAID 1 (in fact, it probably won't allow you to create a single drive RAID 0 in all). [/whisper]

  http://FTP.Dell.com/manuals/all-products/esuprt_ser_stor_net/esuprt_dell_adapters/PowerEdge-RC-h200_User ' s%20Guide_en-us.pdf

  Sorry... I love you pc :)

• Love tunnel SAs negotiated, but do not survive.

  Background

  We have a stable P2P GRE + IPSec configuration to multiple rays using signatures rsa for authentication ISAKMP and EIGRP as the routing protocol. We are in transition to a love (DMVPN) configuration. GRE P2P tunnel interfaces are administratively shutdown, cryptographic cards on physical interfaces have been removed and the cryptographic database has been erased.

  Question

  When implement us the interfaces of tunnel love (Star), we are able to complete the ISAKMP phase I and II (briefly). However, ~ 1-1/2 minutes more, we see a message from debug on the hub, such as:

  13:56:49.601 Jul 21 EDT: IPSEC (cleanup_tun_decap_oce): Unlock and null to Tunnel0 tun_decap_oce 86742E48 of 86FB990C of ident

  ... and then the IPSec SAs are deleted, the tunnel down, IKE_PHASE2_DEL and IKE_PHASE1_DEL messages are generated and start with phase I ISAKMP negotiation.

  Anyone know what the 'CEO '?

  Highlights of debugging (ISAKMP and IPSec)

  13:55:13.188 Jul 21 EDT: ISAKMP: (2597): SA authentication status: authenticated
  13:55:13.236 Jul 21 EDT: ISAKMP: (2597): former State = new State IKE_R_MM5 = IKE_P1_COMPLETE
  13:55:13.356 Jul 21 EDT: IPSEC (create_sa): its created.
  13:55:13.356 Jul 21 EDT: IPSEC (create_sa): its created.
  13:55:13.356 Jul 21 EDT: % CRYPTO-5-SESSION_STATUS: Crypto tunnel is MOUNTED.  Peer : 500 Id: spoke.domain.null
  13:55:13.356 Jul 21 EDT: % DMVPN-7-CRYPTO_SS: Tunnel0- socket is in PLACE
  13:55:13.700 Jul 21 EDT: ISAKMP: (2597): former State = new State IKE_QM_R_QM2 = IKE_QM_PHASE2_COMPLETE
  13:56:49.601 Jul 21 EDT: IPSEC (cleanup_tun_decap_oce): Unlock and null to Tunnel0 tun_decap_oce 86742E48 of 86FB990C of ident
  13:56:49.601 Jul 21 EDT: IPSEC (delete_sa): deletion of the SA.
  13:56:49.601 Jul 21 EDT: IPSEC (delete_sa): deletion of the SA.
  13:56:49.601 Jul 21 EDT: % CRYPTO-5-SESSION_STATUS: tunnel Crypto is out of SERVICE.  Peer : 500 Id: spoke.domain.null
  13:56:49.601 Jul 21 EDT: ISAKMP: (2597): entry = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
  13:56:49.605 Jul 21 EDT: ISAKMP: (2597): entry = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

  Note: A more complete debug output is attached.

  General comments (sh crypto isakmp, ipsec crypto sh its)

  ISAKMP Security Association reached a State of QM_IDLE and active status. However, the SA is removed and a new is generated on the breast of ~ minute.

  IPSec security associations are negotiated on the hub and the spokes. However, only speak it a program package, and only the hub has decaps. Wireshark confirms that the hub does not all ESP packets on the wire. The IPSec SAs are deleted and the new spawn every minutes ~ 1-1/2.

  See the output of the command

  hub #sh cry ipsec profile
  Profile IPSEC DMVPN
  Life safety association: 4608000 Kbytes / 3600 seconds
  Answering machine-only (Y/N): N
  PFS (Y/N): Y
  Diffie-Hellman group: group2
  Transform sets = {eni-xfm-des: {esp - esp-sha-hmac}, eni-xfm-3des: {esp-3des esp-sha-hmac}}

  hub #sh cry map
  Card crypto isakmp-65536-"Head-Tunnel0-0" ipsec
  Profile name: DMVPN
  Life safety association: 4608000 Kbytes / 3600 seconds
  Answering machine-only (Y/N): N
  PFS (Y/N): Y
  Diffie-Hellman group: group2
  Transform sets = {eni-xfm-des: {esp - esp-sha-hmac}, eni-xfm-3des: {esp-3des esp-sha-hmac}}

  Card 'Head-Tunnel0-0' 65537-isakmp ipsec crypto
  Map is a PROFILE INSTANCE.
  Peer =.
  Extended IP access list
  access-list allow accord host host
  Current counterpart:
  Life safety association: 4608000 Kbytes / 3600 seconds
  Answering machine-only (Y/N): N
  PFS (Y/N): Y
  Diffie-Hellman group: group2
  Transform sets = {eni-xfm-des: {esp - esp-sha-hmac}, eni-xfm-3des: {esp-3des esp-sha-hmac}}
  Interfaces with card crypto Tunnel0-head - 0:Tunnel0

  HQ-edg01 #sh cry session detail
  Current state of the session crypto

  Interface: Tunnel0
  Duration: 00:00:10
  The session state: UP-ACTIVE
  Peer: port 500 fvrf: (none) ivrf: (none)
  Phase1_id: spoke.domain.null
  DESC: (none)
  ITS IKE: local remote 500 500 Active
  Capabilities: (None) connid:2682 life time: 23:59:47
  ITS IKE: local remote 500 500 inactive
  Capabilities: (None) connid:2681 life time: 0
  FLOW IPSEC: allowed host 47 host
  Active sAs: 2, origin: card crypto
  On arrival: dec #pkts'ed 6 drop 0 life (KB/s) 4517257/3589
  Outbound: #pkts enc'ed drop 0 0 life (KB/s) 4517258/3589

  Material & IOS

  C1811 (hub) - c181x-advipservicesk9 - mz.124 - 24.T
  c1711 (spoken) - c1700-advipservicesk9 - mz.124 - 15.T9

  Follow the relevant parts of crypto configurations DMVPN (hub / talk):

  crypto ISAKMP policy 3
  BA 3des
  Group 2
  life 86399

  ISAKMP crypto identity hostname

  Crypto ipsec transform-set eni-xfm-3des esp-3des esp-sha-hmac
  transport mode
  Crypto ipsec transform-set esp eni-xfm-des-esp-sha-hmac
  transport mode

  Profile of crypto ipsec DMVPN
  3600 seconds, life of security association set
  the value of the transform-set eni-xfm-des eni-xfm-3des
  PFS group2 Set

  interface Tunnel0
  IP 255.255.255.0
  Protection ipsec DMVPN tunnel profile

  Note: PNDH, love, and no other settings have been chiselled.

  Any help would be appreciated.

  Best regards
  Mike

  You are right your comment.

  The previous interface of p-BRMS (in your case) can get his information in to

  the tunnel endpoint database (packages of controls tunnel) even if the

  p BRMS tunnel is stopped.  It is also in the code a GRE packet

  destined to the router will search a mathc with a p-BRMS tunnel before

  Love tunnels. If the GRE tunnel packets were getting "caught".

  by p-BRMS tunnel and then dropped.

  If I really want a GRE tunnel to be 'down', I'll remove the "source of the tunnel...". ».

  If I have two tunnels upwards at the same time, I do what you do, give

  each of them a different tunnel key or a different source of tunnel.

  Hope this helps to understand what was going on.

  Mike.

  PS. You should be able to mark it as answered present.

• my XP is not booting (white screen) and crashes at isapnp.sys then in safe mode.

  My XP Home Edition is not booting (white screen) and crashes at isapnp.sys then in safe mode. Please help as soon as possible because I need this platform for school!

  What is your system brand and model?

  Describe your current antivirus and software anti malware situation: McAfee, Symantec, Norton, Spybot, AVG, Avira!, MSE, Panda, Trend Micro, CA, Defender, ZoneAlarm, PC Tools, Comodo, etc..

  The afflicted system has a CD/DVD drive work?

  You have a true bootable XP installation CD (it is not the same as any recovery CD provided with your system)?

  The symptom often means that your system is of a malicious software.

  With this particular symptom of hanging on isapnp.sys in Mode safe is to search for a driver of zero-byte length file in the c:\windows\system32\drivers folder.

  Of course, you have to boot the system on something in order to access the hard drive to find the suspicious file and get rid of it.

  If you have any installation CD bootable XP real where you start in the XP Recovery Console, or you are not sure what type of bootable CD, you have,
  make a CD of bootable XP Recovery Console or Hiren Boot CD and don't forget.

  There is no XP media needed to make a Hiren Boot CD or a bootable XP Recovery Console.  You can access the folder and check if
  There is this action suspect file and take.

  Once you're booted to the CD of your choice, navigate to the following folder (assuming that XP is installed on your C volume):

  c:\Windows\System32\Drivers

  Looking for a file that ends with an extension .sys and zero bytes in length.  The file can also have a curious name because she may have been generated at random.

  If you are in the XP Recovery Console, issue the following command in the c:\windows\system32\drivers folder:

  dir *.sys

  Files Scrolls one screen at a time.  Look at the list of files with .sys extensions and their lengths.  You don't need to
  worry about directories...  If you see a file with a .sys extension which is zero byte, it is suspect.

  If you use just the Mini XP Mode a Hiren boot CD (which works as Office XP), navigate to the folder of the my
  Computer desktop icon and locates the suspect files.

  You really want to remove the suspicious file once you get running and you run some scans for malware, but if you are
  not sure what is the suspicious file or if it might be necessary, just rename the suspicious file for now, in case you are not sure.

  For example, if you find zigxrtml.sys folder had a length of zero byte, rename it:

  Rename zigxrtml.sys zigxrtml.bad

  Renaming or removing the suspicious file to get the system running is not resolved the problem.  It is the symptom of the problem.

  The problem is your system is infected by malicious software and you should always follow up with a few scans to remove infections.

  Once your system is running, followed with MBAM and SAS to be sure that the affliction has really been removed.

  Reduce the risk of malware by running some scans.

  Download, install, update and do a full scan with these free malware detection programs can solve any problems:

  Malwarebytes (MMFA): http://malwarebytes.org/
  SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

  It can be uninstalled later if you wish.

  The scans by operating clean, restart, test your task manager and we can repair any other pending issues.

  Do, or do not. There is no test.

  I decided to implement the points for a new puppy instead of a pony!

• Bootsect.dat file is corrupt, NTLDR is missing/compressed on x 86 pc with Windows XP Home Edition Sp3 and Ie8

  I have a x 86 pc with Windows XP Home Edition SP3 and IE8.

  While preparing for a possible update for Win 7, I thought repartioning and "multiboot" my HARD drive.

  I tried to get WinXP operating as best I can.  I was also check out how to use the Windows Recovery Console to reinstall WinXP and transfer files to a clean reinstall.

  Found while searching "All boot paths" to Start\Run\msconfig\BOOT. INI that one boot path has been highlighted with errors indicating that "file is corrupt because playing a disc error has occurred" and that NTLDR is missing or corrupt.  In fact, it is blurred.  It points to "Recovery Console Microsoft Windows/cmdcon.  I've not used the Recovery Console, ever.

  I have a desktop Gateway 5310 S (detail) and no original XP disc, apparently.

  I have, but never used, a 4ea. set of recovery CD as of 12/05/05 I need to have created after purchase.

  I also had many, odd, problems that come and go, including worth displaying various websites, Yahoo Home Pages and E-mail that keep switch to compatibility mode or outright deletion.  The video and audio on Hulu and video-on-demand online services are always out of sync.  I have problems with editing posts on sites like this even if I can edit my profile fine pages.

  This particular set of problems started recently and very suddenly, from one day to the other.  It was after he worked actually pretty good for a change.

  I don't know how long the boot.ini file has been damaged, I actually discovered by chance.

  I can also not to reinstall some programs such as Family Tree Maker 2005 and 2008, when it was suggested to me by ancestry.com to uninstall/reinstall.

  I have the latest Java and Adobe Flash Player.  I've defragged and disc verified my discs.

  I used CCleaner to delete temp and unwanted files per day.  I ran Hitman Pro, MBAM, MBAR, MSE and SAS several times without detected virus or malware.

  And, as I mentioned above, I have problems with the editor of this site, right now.  Sometimes it just freezes and I have to leave to clear.  Other times it's duplicating entire sentences.  He also flip/flip flops between a Publisher full page and, as now, a half page window of the editor on the half left of the page.

  Suggestions from what people you can come would be greatly appreciated.  This gets really annoying.

  Thank you

  Vernon

  When you check the paths in the boot.ini file, and the recovery console is installed, you will always get an error message indicating that the startup path is not valid.

  If the recovery console is actually corrupted just to uninstall, you can reinstall or burn a cd with the recovery console.

  go here for instructions on deleting the recovery console.

  ===========

  Here's how to make a bootable xp recovery console cd

  Courtesy of JoseIbarra

  You need start by booting in XP using a CD Recovery Console, you can do (no XP media required) and run a chkdsk with error correction command enough times until it is clean and if it does not, you can create a new boot.ini file (this is usually one of two things).

  Here's how:

  Use the XP Recovery Console to check the file system on your HARD drive and fix the problems and then try to start your system - this may be all you need to do.  Or, you are welcome to just start trying things that might work.

  Boot into the Recovery Console Windows using an XP bootable installation CD.

  If you have no XP bootable media (or aren't sure you have) create a bootable XP Recovery CD of Console and do not forget what you have (no XP media required).

  This is not the same as recovery disks that might have come with the acquisition of the system store.

  You can make a bootable Recovery Console CD by downloading an ISO file and burn it to a CD.

  The ISO bootable image file you need to download is called:

  RC. ISO

  Download the ISO from here:

  http://www.thecomputerparamedic.com/?p=8    (courtesy of Daavee)

  Use a new CD and this simple and free program to burn your ISO file and create your bootable CD:

  http://www.ImgBurn.com/

  When you install ImgBurn, DO NOT install the Ask toolbar.

  Here are some instructions for ImgBurn:

  http://Forum.ImgBurn.com/index.php?showtopic=61

  It would be a good idea to test your bootable CD on a computer running.

  You may need to adjust the computer BIOS settings to use the CD-ROM drive as the first device to boot instead of the hard drive.  These adjustments are made before Windows tries to load.  If you miss it, you will need to restart the system again.

  When you start on the CD, follow the instructions:

  Press any key to boot from CD...

  Installing Windows... going to pronounce.

  Press 'R' to enter the Recovery Console.

  Select the installation that you want to access (usually 1: C:\WINDOWS)

  You may be asked to enter the password (usually empty).

  You should be in the folder C:\WINDOWS.  It's the same as the

  C:\Windows folder that you see in Solution Explorer.

  The Recovery Console allows base as file commands: copy, rename, replace, delete, chkdsk, fixboot, fixmbr, cd, etc.

  For a list of the commands in the Recovery Console, type help at the prompt of commands or read on here XP Recovery Console:

  http://www.Microsoft.com/resources/documentation/Windows/XP/all/proddocs/en-us/recovery_console_cmds.mspx?mfr=true

  A good idea before you start things must first verify the integrity of your file system by using the chkdsk command.

  In the command prompt window, run the chkdsk command on the drive where Windows is installed to try to fix any problems on the afflicted player.

  Running chkdsk is fine, even if he finds no problem.  It won't hurt anything to run it.

  Assuming your boot drive is C, run the following command:

  CHKDSK C: /r

  Let chkdsk finish to correct the problems, he could find.

  It may take a long time for chkdsk complete or they seem to be "stuck".  Be patient. If the HARD drive led blinks always, chkdsk is something.  Keep an eye on the amount of the percentage to be sure that it is still making progress.  It may even seem to go back sometime.

  You must run chkdsk/r again until it finds no error to correct.

  Remove the CD, and then type "exit" to exit the RC and restart the computer.

  You have not to set the BIOS to boot the disk HARD since the CD won't be.

  ===============

  as for the other problems:

  did you use Registry cleaners?

  These can damage your system

  You seem to be free of infection, it would seem that a part of your process cleaning has removed a necessary file.

  ===============

  Checkdisk with parameter/r should be run. and run it again until there is no error.

  ==========

  you are fully updated and patched to Microsoft updates?

• Process * \MCSHIELD. EXE the nest (428) contained code signed or corrupted and could not perform an operation with a McAfee driver.

  XP SP3 system

  I get warnings like this when Mcafee updates.

  Process * \MCSHIELD. EXE the nest (428) contained code signed or corrupted and could not perform an operation with a McAfee driver.

  Process * \SVCHOST. EXE the nest (1632) contained code signed or corrupted and could not perform an operation with a McAfee driver.

  Is this a problem Microsoft or Mcafee?

  Do I need to fix?

  In the McAfee forums, there are several similar positions such as:

  https://community.McAfee.com/message/241542

  I'll sue your question on in their community, as they already seem to know about it.

  I would also say that, unless you are very fond of McAfee or you are forced to use it, you plan to replace it with something that has a smaller footprint, uses less resources and doesn't have these problems - something like Microsoft Security Essentials, you can get here:

  http://Windows.Microsoft.com/en-us/Windows/Security-Essentials-download

  MSE completed with the free version of MBAM and SAS should permanently keep your clean enough unless you're a daredevil like me:

  Download, install, update and do a quick scan with these free malware detection programs (not at the same time) and remove all threats:

  Malwarebytes (MMFA): http://www.malwarebytes.org/products/malwarebytes_free
  SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

  SAS will probably report a lot of tracking cookies and you can just let him delete them.

  Even if you keep McAfee, I always supplement it with MBAM and SAS since no single AV program does seem to know everything.  If your McAfee of your system is clean, I would interpret that means - McAfee found nothing, says he knows.  It is prudent to use more than a reputable scanner to get more coverage.

  If you choose to spend (and you can't have both at the same time), you must be sure to use the uninstaller that you can get from here:

  http://service.McAfee.com/FAQDocument.aspx?LC=1033&ID=TS101331

  Your system will give you better performance.

• Boring and several taken up messages on my email address

  I get the same message hundreds of times per day at the rate of 4 or5 per minute. I'm with optusnet. The messages come from different addresses, but all use hotmail or yahoo. The message is always returned mail subsystem failure and delivery. I never sent messages at all. Sometimes I have a postmaster message hotmail or also a mail demon who say non-delivery. It takes me forever to delete individually these. What is a virus or a spam or what. Can anyone help me please with any ideas or advice

  Hello

  You can not have personally sent all messages that would entail. However, other people (spammers) could in fact send using your account or the construction of electronic message header when sending spam to make recipients think that the message came from your account. This second possibility could also occur if a virus on your PC (or on another PC who "knows" your email address) is looking to replicate itself via e-mail.

  If the first of these two possibilities is true then change your passwords of e-mail can break the ability of spammers to send from your account. If the latter is true, I'm afraid there is nothing you can do to stop spammers causing these messages to get back to you, other that get a new e-mail address. In case the third possibility is true, you should get your up-to-date malware protection and do a full scan. Also consider scan with MBAM and SAS, which are highly appreciated by the contributors of this forum.

  Tricky

• Red Shield saying that there is no antivirus running, open MSE program and he said he was running. MSE now turned Orange, cannot operate.

  Original title: security essentials says it works but the pc says that it is not

  I thought that my problem is solved and discussed the problems of configuration with Elizabeth.  It now appears that CCleaner or malware bytes and super anti-spyware has caused a problem with the security essentials.  Until it goes smoothly but tonight, I have a red shield telling me I have no antivirus running.  But if I opened it said it was running.  Orange yellow turned and I can't get working again.

  Can anyone give some advice please?  Thank you in advance.

  Okay, however, I'm running MSE in real time, MBAM and SAS in request mode.

  CCleaner is also installed.

  Everything works fine now, including MSE?