Replies

satrow,

Follow the HTG articles linked to find out how to show the ‘devices’ loaded by Rollback (and the phantom scanner) and disable them from loading using their Properties/Boot tabs.

I didn’t find any HTG articles linked.

Your BSODs post -removal of RX drivers were due to the continued triggering of the driver loading process at each boot (which failed with a presumed File not found), what I’m suggesting is that you remove them via DM and then seek out and disable any RX triggers using Autoruns before rebooting.

I did that. Autoruns found three checked entries for “Horizon,” which is the vendor of Rollback Rx. I unchecked them, presumably disabling them. In DM I found only one entry, that of “Shieldm,” which is set to start automatically. I disabled it.

If this is what you are advising me to do, I will go ahead and reboot. If anything I’ve said is not correct, please let me know. I will not reboot until you give me the “all-clear.”

Thank you!

Frank

I’m very confused:

Those 4x drivers are NOT RX’s versions of Windows drivers, they belong to RX and are not replacing anything belonging to Windows.

You told me that those drivers are Rollback Rx’s, I agree, but when I tried to remove them previously, Windows BSOD’d. It was because of that, that I supposed them to be Rx’s replacements for Windows drivers of the same name. So, if they belong to Rx, why does Windows BSOD when I remove them?

If you can track them down in Device Manager (you’ll probably need to enable hidden devices), you should see a dropdown option to change the startup type from the Properties/Boot tabs for each driver; change them all to Disabled.

Maybe I’m not reading you right. How can I track .sys files in Device Manager? Rollback Rx isn’t a device. What device would they be part of? Do you mean I should use DM to locate the legacy scanner? If so, it does not show up in DM even with hidden devices showing. I did find “shieldm” under “Non-PlugnPlay Drivers” but it’s a Microsoft driver. Its properties are: Provider: Windows Win 7 DDK provider. / Version: 6.1.7600.16385 built by: WinDDK / Copyright: Microsoft Corporation. All rights reserved.” I’m pretty sure that disabling “shieldm” is not what you mean. I did this once before and it resulted in a BSOD.

Then use Autoruns to track down and disable any other triggers for RX: http://technet.microsoft.com/en-us/s…/bb963902.aspx

How would I use Autoruns to recognize, track down or disable triggers for Rx?

I do a full system image backup and a restore point after every change I make to this PC since these BSODs started. However, it has not guaranteed that I can get my OS back. Before I consider implementing any of these recommendations, could you please clear up the confusion in my questions above? This is all way over my head.

Frank

Ok, I understand that. I am also rather conservative regarding the option of having to reinstall all my apps.
I hope that strategy can fix your issues :).

Thank you! I’ll reply with my results.

Frank

I would probably go one of two ways, now:
1. Try a Windows repair install.
2. Backup all your data and perform a Windows clean install.

Thank you, but I’ve already unsuccessfully tried a Windows repair install and have committed myself to not doing a clean install because I will lose my programs, settings, etc. (see my reply #18 above). The repair install fails because Windows sees some spurious information about a legacy scanner being installed and cannot proceed because of it. I have scoured the computer and the registry but have not found the source of that phantom information, so I can’t complete the repair install.

What I plan to do is this: satrow has enabled me to identify four “sys” files that belong to Rollback Rx. (See message #9 at http://windowssecrets.com/forums/showthread//157197-Windows-Updates-cause-BSOD?p=924409&viewfull=1#post924409) In the next day or two I will get genuine Windows copies of these files from a friend’s Windows 64-bit OS. I’ll then replace the Rollback files on my PC with the Windows files and (cross my fingers) reboot. If successful, I’ll try to install a Windows Update. If this works I’ll try more — up to the 27 now available to me — and reboot. If successful, I’ll forget about uninstalling Rollback Rx; I’ll just rename it and consider myself very lucky.

Frank

Have you tried something like Revo Uninstaller? If you do, proceed with care, and examine each proposed registry removal individually. It may be your way out of this.

I have used Revo Uninstaller, Comodo Programs Manager uninstaller module, and IObit Uninstaller. Removing the corrupted program is not an option, as doing this takes away operating system files that are needed to boot into Windows. The Rollback Rx program is the culprit here, because it substitutes its own versions of a number of “sys” files for the proper Windows versions during its installation. The program is corrupted, though, and can’t be correctly uninstalled because uninstalling it does not replace the original Windows “sys” files when it is removed, thereby causing the Windows booting procedure to fail.

Frank

Latest: At the Rollback Rx’s vendor’s advice I was told to uninstall Rollback Rx from my computer and install their latest version, which I did, and rebooted. Result: BSOD! Nothing I could do would get my PC to boot again (system restore, restore from backup, using the Windows Install disc, repair, command line, fixmbr, fixboot, etc.). Analysis: The Rollback Rx vendor has no idea what my problem or its solution is, so the answer does not lie with them.

I resolved not to give up and reinstall Windows, thereby losing all my valuable programs and settings, acquired over three years with much care and fine-tuning. To get professional help with this situation I took the PC to a local PC repair shop, explained the situation, and left it with them. A day later I got the news: they could not fix the problem. This exercise cost me $50, but at least I know now that no one can do more than I already did.

As a last resort, I downloaded an updated release (1.6) of my backup/restore program (I had been using 1.0) and tried another restore from backup. Hooray! It worked!

Bottom line: I am now back online with the latest version of my computer and software, as it was just before the Rollback Rx uninstall/reinstall operation. Although I am happy to be here, the original problem still exists: I can’t uninstall Rollback Rx or install Windows Updates without crashing.

Does anyone have any other ideas? Thank you!

Frank D

Frank, the more data I see from your PC, the worse it looks.

Go with Rollback support on how to use it correctly or how to fully uninstall it.[/quote]
I intend to do that as soon as possible.

Then step back and take a long hard look at your other installs; uninstall any duplications, especially any that duplicate Windows’ built-in functions (W7’s defrag is fine, 3rd party auto-starting defraggers can cause problems, including BSODs),

Yes, I do have many duplicate programs installed on my PC. I’m ashamed to admit that in almost every case, it boils down to “hoarding” — I like to acquire “goodies” that I may find a future use for. However, I do not use them. For example, I never use third-party defragging programs, because I don’t believe that defragging does any good for a Win7 PC. Yes, I should — and will — get rid of them, now that you bring them to my attention.

how many pdf viewers do you really need?;

In this case, what you take to be PDF viewers are in fact PDF converters, both to and from various other formats. They, like video and DVD converters, are so numerous because they are paid versions obtained for free, and there is no certainty as to which specific tool will do what, at the time it is needed with a particular file or document. Each has strengths and limitations. The only “pure” PDF viewer that I have on my PC and use is PDF-XViewer. All the rest are either converters or printers.

it’s only going to take one or two false positives from ‘optimizing’ tools or your anti-malware apps to make a real mess of Windows – these may not break it immediately but they’re likely to make any future troubleshooting very complicated.

I understand your concern. The only optimizer I actually use and have used since WinXP days is Advanced SystemCare, the free version, nothing fancy, doing the most basic of chores. All the rest were acquired as freebies from giveaway sites but never used. I’m very cautious about letting a do-it-all type program actually do it all. Now that you mention them I’ll get rid of them too.

Try right-clicking on a blank area of your Desktop, then on a few different file-types and on a folder or two – do you really need all those shell handle options/softwares?

I’m trying to understand which ones you mean. :confused:

Pare it back some and get it cleaned up so you only have what’s really needed to keep it safe and lightweight; easy in use, easy to troubleshoot.[/QUOTE]
Here we get into a gray area, where the simplicity of the pristine operating system is balanced against its personalization and usability with the use of add-ons and “gadgets.” I’m afraid I am of the latter persuasion. For example, my Firefox currently has about 61 add-ons (!) and it works as smoothly as any tool can possibly work. I tend to treat my OS with the same view. It should do what I want.

In the present instance, where Rollback Rx seems to be the culprit, it is because I was trying it out — it is a respected program that serves as a more powerful substitute for Windows System Restore. It was only when I had a system crash that it became both inoperative and yet remained, unknown to me, involved in the operation of the OS. I erroneously took its subsequent not working as a sign that it was not having any effects on my system, but I see that I was wrong. Knowing now what the culprit is I intend to work with the vendor toward removing it cleanly from my computer.

Thank you for your concerns and your help.

Frank

P.S. I just uninstalled all system care programs other than Advanced SystemCare and uninstalled all non-MS defrag programs. I ran a System Restore and my PC rebooted uneventfully.

As you advised, I’ve attached a copy of my Autoruns.arn (zipped) to this message.

Frank

I see now that I was wrong when I said that Rollback Rx had been uninstalled. It is still installed. After the crash I had in August, I incorrectly thought I had uninstalled it, and just didn’t think to look for it again. Regardless, I hadn’t run it since then and didn’t realize that its drivers were still present and in force.

I am now gun-shy after my previous uninstall of Rollback Rx and the system crash that occurred as a result (see message #12 above). I have sent a message to Horizon DataSys, vendors of Rollback Rx, and have received a confirmation e-mail from them with a ticket number and assurance that I will be contacted ASAP.

In the meantime I will not try to install any Windows Updates on my PC, and will create System Restore points and system backups after every significant event in case I run into further trouble.

Thank you for your continuing help in this case.

Frank

There should be a maintenance setting, whereby you can disable Rollback while you update Windows or other software. You could try using that then allow Windows to update, if all goes well after a second test reboot, you should be good to go.

Or, just uninstall Rollback, it’s your choice – you need a mix of security software that doesn’t get in the way too much, yet still keeps your data safe.

First: Rollback Rx was not an installed program at this time. I recall uninstalling it back in August, about a month after I started using it, but there must have been components still lingering on. I really don’t know.

Next: More bad news:

I used Comodo Programs Manager to uninstall Rollback Rx (even though the program was NOT installed there were obviously remnants in the Shield folder in C:Programs(386) and tried to run a System Restore. But, as soon as I started it . . .

Disaster! A BSOD saying STOP: 0x0000007A appeared. When I rebooted a black screen appeared and told me that there was no operating system found. I used my Hiren’s Boot Disc and it verified that there was no OS. I used my Windows Installation DVD and verified again that there was no OS. I tried the usual Repair option but it failed. Likewise the System Restore option. Finally, I inserted my backup program’s boot disc and did the inevitable: I restored my previous full system image backup, which was done last night.

Result: I am back in business again, but now I’m unsure of what to do next. Is my only option to contact Rollback and ask them what to do? Or is there some other option?

Frank

Do you currently have any Comodo security products installed?

Yes, I have Comodo Programs Manager installed.

I just loaded the program and checked, and I see that Rollback Rx is still shown as installed. :o: Silly question, but should I do the obvious and uninstall it?

Frank

Satrow,

That wasn’t it.

When I rebooted I got the BSOD! The info at the bottom was STOP: 0x0000007B[/B]. I tried two more times and got the same results. I then tried to boot into Safe Mode and again got the same BSOD! At this point I knew I had asked for trouble. My main concern now was to get those three files back where they were.

I could have booted with the Windows Install DVD and done a System Restore, but on a whim I restarted with Hiren’s Boot CD and went into the Mini-XP mode. I renamed the shieldf.sys and shieldm.sys back to their original names (I hadn’t deleted them) and used the Search function to retrieve the shield.sys file from the Recycle Bin and copied it back to the WindowsSystem32drivers folder. When I rebooted, all was well again, but it wasn’t a pleasant experience.

What I said about Rollback Rx is still true, but apparently that driver is still required by the OS.

So I’m back to where I was at the top of this thread.

Frank

Frank, it looks like shield.sys is part of Rollback RX from http://horizondatasys.com/en/products_and_solutions.aspx?ProductId=1

What these programs do is block any changes to Windows – they must be disabled before running Windows Update.

Satrow,

Bingo! :rolleyes: Thank you for your detective work.

I had installed Rollback Rx, about three months ago, tried it out for about a month, didn’t like it for its invasive behavior, and uninstalled it completely — or so I thought. I guess this is just a leftover piece of trash the uninstaller didn’t take with it. Now that I know what it is I will delete it.

While looking for shield.sys I found two other files, shieldf.sys and shieldm.sys and in Properties found that they belonged to Horizon also. I disabled them pending a reboot, which I will do immediately.

Frank

Satrow,

I found that the owner of shield.sys is Microsoft, and after googling a bit that it is listed as “safe.”

I wouldn’t want to go about trying to disable a Microsoft system file, because of what unintended consequences might follow.

I’ve zipped up the Minidumps folder from Windows and attached it to this post.

I appreciate your and Jerry’s follow-up.

Frank

Jerry,

I didn’t have that option, since there were no restore points at that time. I had unknowingly wiped out all my previous RPs by restoring from an image backup that didn’t include restore points, and I couldn’t get SR to create any RPs, even after trying three or four repair options. But I’ve got SR working now, so I will follow your suggestion in the future.

Frank