HD Problem:
Navyguy
Avira antivirus,
Spybot and Hive Cleanup and all the programs work well together and
are up to date.
Recently, while updating Spybot the step for passive Immunization
wouldn’t complete. I tried powering off and using the Task Manager to
close the session but when I did so it can back with
Application failed to initialize properly (0xc000012d). Click ok to
terminate application – I clicked ok and nothing happened.
I clicked for Spybot update and it came back with:
The application or DLL C: Windows\system32\SETUPAPI.dll is not a valid
Windows image. Please check against your installation diskette.
Error – unable to launch restat.exe
I click tried clicking the Recovery button on Spybot and it gave me
the following
Failed to load C: \Program files\Spybot – Search_Destroy\DelZip179.dll
I tried clicking Word to see if other parts of the computer were
acting erratic and it gave me the following
Microsoft Word has not been installed for the current user. Please run
setup to install the application.
I clicked Word again and it gave me this
Word failed to start correctly last time. Starting Word in Safe Mode
will help you correct or isolate a startup problem in order to
successfully start the program. Some functionality may be disabled in
this mode.
Do you wan to start Word in Safe Mode? Yes/No I clicked no
All to no avail as the computer seemed hung up so I pressed the reset
button but nothing happened (perhaps I didn’t press it long enough?).
In any case, I powered off the system and waited a minute before
powering it back up and when I did I received a
“ Stream write error during registry back up message”.
I then uninstalled Spybot thinking it was corrupted and downloaded a
fresh version and installed it.
I ran a Spybot Search and Destroy scan with no threats found then ran
the immunization again but again it failed to complete with 103361
items unprotected. The computer hung up again and I reset it by
pressing the reset button until powered off.
When I brought it back up it went into checking the file system.
Type of file sys is NTFS
One of your disks needs to be checked for consistency etc ,……. And it
didn’t respond it any key to return to a normal boot. I also tried
going into Safe Mode but it just hung up but when hitting the Esc
button it somehow returned me to a normal boot selection.
So my question is this, is my HD fried or is it recoverable and how do
I do it? I do have some spares if it’s necessary to replace it but
I’ll loose all my links as I don’t have a decidcated only the ability
to put folders on disk (Nero). Any thoughts or suggestions would be
appreciated.
Thanks,
Robert
Jan Alter
news:7f317eb3-9096-4cc0...@v17g2000prc.googlegroups.com...
Thanks,
Robert
Hi Robert,
Start by downloading the hdd maker's utility program to test if the disk is
OK.Most hdd makers offer a free diagnostic utility free.
It can be run from a floppy or CD after downloading an ISO and burning it
to disk.
If the disk tests out OK I would run memtest86 to see if the RAM is
contiguous and there are no faults. If the problem turns out to be RAM and
you have two chips installed try removing one of them to see if things
change. If not, then change out one chip for the other and see if there's a
difference in operation.
If the RAM checks out OK then I'd continue to investigate if there is a
viral infection, rootkit, trojan, etc.
I personally use Malwarebytes rather than Spybot, but have heard good
thoughts about Spybot.
Any anti-virus program can miss one or more viruses so you might want to
consider a different anti-virus program. You could also remove the disk and
attach it to another computer and check it with that computer's anti-virus
program while also removing any important data that you want to keep if it
is still accesible.
Additionally, to try to get the disk running back with Windows, if the hdd
and RAM are OK and you found a virus problem you can try running a Repair
install from the XP installation disk.
Good luck,
--
Jan Alter
bea...@verizon.net
glee
news:7f317eb3-9096-4cc0...@v17g2000prc.googlegroups.com...
>Avira antivirus,
>Spybot and Hive Cleanup and all the programs work well together and
>are up to date.
>
>Recently, while updating Spybot the step for passive Immunization
>close the session but when I did so it can back with
>
>Application failed to initialize properly (0xc000012d). Click ok to
>
>I clicked for Spybot update and it came back with:
>
>The application or DLL C: Windows\system32\SETUPAPI.dll is not a valid
>Windows image. Please check against your installation diskette.
>
>
>I click tried clicking the Recovery button on Spybot and it gave me
>the following
>
>
>I tried clicking Word to see if other parts of the computer were
>acting erratic and it gave me the following
>
>Microsoft Word has not been installed for the current user. Please run
>setup to install the application.
>
>I clicked Word again and it gave me this
>
>Word failed to start correctly last time. Starting Word in Safe Mode
>will help you correct or isolate a startup problem in order to
>successfully start the program. Some functionality may be disabled in
>this mode.
>
>Do you wan to start Word in Safe Mode? Yes/No I clicked no
>
>All to no avail as the computer seemed hung up so I pressed the reset
>In any case, I powered off the system and waited a minute before
>powering it back up and when I did I received a
>
>
>I then uninstalled Spybot thinking it was corrupted and downloaded a
>fresh version and installed it.
>
>I ran a Spybot Search and Destroy scan with no threats found then ran
>the immunization again but again it failed to complete with 103361
>items unprotected. The computer hung up again and I reset it by
>pressing the reset button until powered off.
>
>When I brought it back up it went into checking the file system.
>
>Type of file sys is NTFS
>
>didn�t respond it any key to return to a normal boot. I also tried
>going into Safe Mode but it just hung up but when hitting the Esc
>button it somehow returned me to a normal boot selection.
>
>So my question is this, is my HD fried or is it recoverable and how do
>I�ll loose all my links as I don�t have a decidcated only the ability
>to put folders on disk (Nero). Any thoughts or suggestions would be
>appreciated.
How much free space do you have on the C: drive (assuming you have
Windows installed on C:)?
The "Stream Write" error is likely coming from some program that is
starting with Windows, not from Windows itself.
I assume you meant to write "restart.exe", NOT "restat.exe"
Restart.exe is a name used by some legitimate programs, but it is also a
name used by some malware.
--
Glen Ventura
MS MVP Oct. 2002 - Sept. 2009
CompTIA A+
http://dts-l.net/
Navyguy
It seems to boot normally, However when starting Word, an activation
window pops up which of course shouldn't. I checked for updates and
I’ve run an Avira Anti-virus full system scan as well as Spybot Search
and Destroy and both came up clean. However, it failed to complete the
passive immunization once again. In addition, the computer will not
let me do a System Restore. I thought doing a Defrag might help if the
files were corrupted but it said that I didn’t need to so I didn’t do
that. In passing, I normally check for updates every three days, and
make a restore point each time. When last time it let me try, it
showed no restore points!
I did upgrade my RAM awhile ago to its maximum which I forget now what
it is 1072? I do seem to remember having a HD software utility of some
kind. I’ll check these things out and report back with further
developments. I do hope it’s not the RAM however.
Thanks Guys,
Robert
glee
Asking a second time:
How much free space do you have on the C: drive (assuming you have
Windows installed on C:)?
--
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
>
> - Show quoted text -
I apoligize, I meant to include that in my previous message and just
forgot. I have a total of 127 Gb with 109Gb free.
Thanks,
Robert
Navyguy
I used Seagtes Seatools utility program to do a long generic scan of
the system and it came back with
PATA/SATA Model # Firmwarmware Revision
Drive Status
5RX9FJY4 ST3160815A
3AA Long Generic - Pass
I then tried to download and run memtest86 but I must be doing
something wrong. I dont get any kind of diagnosic page at all. Is it
dot org ?
Robert
Navyguy
Thanks,
Robert
Paul
>
> I then tried to download and run memtest86 but I must be doing
> something wrong. I dont get any kind of diagnosic page at all. Is it
> dot org ?
>
> Robert
Memtest86+ comes from memtest.org . Actually, there are two development
streams for the program, and memtest.org hosts one of them.
Scroll half way down the memtest.org web page, to find the downloads.
The floppy version, contains a floppy formatter. You *do not* just
copy it to an existing floppy. There is a special install procedure.
http://memtest.org/download/4.10/memtest86+-4.10.floppy.zip
The install.bat is a short installer script. It uses this command,
to do the actual writing: "rawrite -f memtestp.bin"
It will erase the floppy (as it is just overwriting sectors on it).
So make sure you don't need anything on that floppy, before
running the installer.
The contents of the floppy are now rather unique. There is no
file system on the floppy. You can't "list" the floppy. If
you do that, Windows will ask you if you want to format it.
And that's because Windows can't see a file system.
When you later boot the computer with that floppy, again, it's
a relatively unique situation. The memtest program is loaded,
as if it is the operating system. It takes control of the machine,
but isn't an operating system, because it doesn't offer any services
to other programs. It likely uses some kind of "VESA mode" to operate
the screen. The screen runs 640x480.
The program will run forever, if you don't attempt to stop it. It
has a pass counter, to count how many times all the tests got run.
The program doesn't seem to be that good as a "pure stress test",
and my personal opinion is, running it for hundreds of hours,
wouldn't prove much of anything. One or two passes are plenty.
I feel the main value of the program, is detecting "stuck-at"
faults, where a memory bit refuses to change state. I don't
feel it's quite as good for transient faults. Prime95 or one
of the other available stress testers, might be better for
that.
Press the escape key, to initiate a reboot at the end of testing.
Remove the floppy, before the BIOS POST screen starts to render.
Then, you'll be booting back into Windows.
Naturally, the floppy diskette isn't going to boot, unless
the floppy drive is in the boot order. I leave my BIOS
boot order set to: floppy, CDROM, hard drive so that
as soon as removable media is installed, the computer
will boot from it. If you have different preferences
than that, you may need to enter the BIOS to set up
a boot order that includes the floppy.
Paul
Navyguy
then clicked fix memtest86 download which opened another window, and I
clicked to download the memtest86 download tool, which finally gave me
RegGenie. I ran the scan and it gave me the following.
Application path entries - 4 errors
Application uninstall entries – 61 errors
COM/Active X entries – 422 errors
Empty Key entries – 217 errors
File Association entries – 17 errors
File/Folder paths entries – 3 errors
Invalid class entries – 14 errors
Shared DLL’s – 19 errors
Sound/Audio entries – 3 errors
Type Library entries – 4 errors
Thoughts/Suggestions?
Robert
glee
>I went to www dot memtest86 dot org and clicked memtest86 download, I
>then clicked fix memtest86 download which opened another window, and I
>clicked to download the memtest86 download tool, which finally gave me
>RegGenie. I ran the scan and it gave me the following.
You went to the wrong web address. A couple of us now have given you
the web address to go to, and that's not where you went. memtest86 dot
org is NOT a valid site....it is a placeholder page full of advertising.
You clicked on a download link for a snake-oil "registry cleaner".
Uninstall that junk immediately.
Go to http://www.memtest.org/#downiso as we already explained. If you
want to make a bootable CD, download the Pre-Compiled Bootable ISO
(.zip) file to your hard drive, then unzip the ISO and use an ISO image
burning application to make a bootable CD from the ISO file. If you
don't know how to do that, seek assistance from someone local who does.
If you have a floppy drive and want to make a bootable floppy instead,
download the Pre-Compiled package for Floppy (DOS - Win), and save the
.zip file to your hard drive. Unzip all the contents of the .zip to a
folder on your hard drive, insert a blank floppy disk in your floppy
drive, and double-click the "install.bat" file in the folder where you
unzipped. Follow the instructions on-screen to make the floppy and boot
from it. If you don't know how to do that, seek assistance from someone
local who does.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
>
> news:81928745-1c46-4291...@j18g2000prn.googlegroups.com...
>
> >I went to www dot memtest86 dot org and clicked memtest86 download, I
> >then clicked fix memtest86 download which opened another window, and I
> >clicked to download the memtest86 download tool, which finally gave me
> >RegGenie. I ran the scan and it gave me the following.
> > snip
>
> You went to the wrong web address. A couple of us now have given you
> the web address to go to, and that's not where you went. memtest86 dot
> org is NOT a valid site....it is a placeholder page full of advertising.
> You clicked on a download link for a snake-oil "registry cleaner".
> Uninstall that junk immediately.
>
> want to make a bootable CD, download the Pre-Compiled Bootable ISO
> (.zip) file to your hard drive, then unzip the ISO and use an ISO image
> burning application to make a bootable CD from the ISO file. If you
> don't know how to do that, seek assistance from someone local who does.
>
> If you have a floppy drive and want to make a bootable floppy instead,
> download the Pre-Compiled package for Floppy (DOS - Win), and save the
> .zip file to your hard drive. Unzip all the contents of the .zip to a
> folder on your hard drive, insert a blank floppy disk in your floppy
> drive, and double-click the "install.bat" file in the folder where you
> unzipped. Follow the instructions on-screen to make the floppy and boot
> from it. If you don't know how to do that, seek assistance from someone
> local who does.
> --
> Glen Ventura
> MS MVP Oct. 2002 - Sept. 2009
> CompTIA A+http://dts-l.net/
I believe I understand the procedures but I first need to purchase
some CD - R/RW disks to burn a CD. In passing, I also tried to follow
your second set of instructions to determine which I preferred but it
didnt reconize my D: drive and would only except A or B.
Thanks,
Robert
glee
>some CD - R/RW disks to burn a CD. In passing, I also tried to follow
>your second set of instructions to determine which I preferred but it
>didnt reconize my D: drive and would only except A or B.
My second procedure described using their program to make a bootable
floppy disk. An internal floppy drive will be either drive A: or B:.
What drive is your D: drive??
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
>
> news:1e3864f2-6037-45fc...@z20g2000pra.googlegroups.com...
> On Nov 28, 6:55 am, "glee" <gle...@spamindspring.com> wrote:
>
>
>
>
>
> > "Navyguy" <maginee...@yahoo.com> wrote in message
>
> >news:81928745-1c46-4291...@j18g2000prn.googlegroups.com...
>
> >> >I went to www dot memtest86 dot org and clicked memtest86 download,
> >> >I
> >> >then clicked fix memtest86 download which opened another window, and
> >> >I
> >> >clicked to download the memtest86 download tool, which finally gave
> >> >me
> >> >RegGenie. I ran the scan and it gave me the following.
> >> > snip
>
> >> You went to the wrong web address. A couple of us now have given you
> >> the web address to go to, and that's not where you went. memtest86
> >> dot
> >> org is NOT a valid site....it is a placeholder page full of
> >> advertising.
> >> You clicked on a download link for a snake-oil "registry cleaner".
> >> Uninstall that junk immediately.
>
I guess I'm not understanding this procedure as clearly as I thought
but I still think I can do this with a little help and and
clarification for my part. In addition, there is no one else I can
turn this problem over to which is why I came here for assistance.
Please just bear with me.
When I went to buy a CD-R-RW at Radio Shack the only thing I could see
were R and RW's and the sales person said that she had never heard of
or seen a CD-R-RW. I confess I dont know much about buying these as I
hardly use them but I obviously need to go back and get the correct
one this time.
In any case, when trying to do the first prcedure it gave me the
folowing message
Sorry, your compilation cannot be written on this kind of disc. Please
insert a disc of the correct type or modify the settings of your
complilation to make it compatible with the current dic.
Disc required for complilation CD-R-RW
Disc type in the recorder DVD-RW
Regarding the second procedure; I expanded the install64 file, then
clicked on it ro run which opened up another box to create the floppy
disc. I press enter to continue and it comes back with:
rawwrite dd for windows version 0.5
Written by John Newbigin <j...@it.swin.edu.au>
This program is covered by the GPL . See copying .txt for details
Error opening output file : 2 The system cannot find the file
specified
Done!
To run Memtest86+, leave the floppy in the drive and reboot.
Press any key to continue.....
When I click install and Run, it asks "Enter tarket diskette drive
and I enter D: (DVD drive) and it comes back with
Drive was 'D" must be A or B
Installation failed
Press any key to continue
Then I tried selecting A and inserted a disc and it says:
Please insert a formatted diskette into drive A: and press enter
Can't figure out how many sectors /track for this diskette.
Installation failed!
Press any key to continue,....
Ok, I realize that I need the right kind of CD which I will do
tomorrow, but I always thought to install a program you click install
which is what I did. However there are two installs so which one do I
pick? The only problem I see is that I choose the wrong kind of CD.
Any helpful thoughts or suggestions would be appreciated.
Thanks,
Robert
Navyguy
I created the bootable CD and ran Memtest twice and each time it came
back with
Pass complete, no errors, press Esc to exit. So what do I do now to
resolve the problem as posted?
Thoughts/Suggestions?
Thanks,
Robert
Hot-Text
Reinstall XP, SP1
and start live over!
Navyguy
I looked up the codes on the link you provided and according to my
computer it's functioning normally. Well, obviously not and I had
thought I might have to format/reinstall a new hd but having run and
passed Memtest doesn't it confirm that my files aren't corrupted? Also
if it's as cut and dry as that then why did they have me run the
Memtest at all? Could it be something else that fixable?
Suggestions/Thoughts?
Robert
Paul
Doing a quick search, a lot of those messages come from files
that are really damaged. And the damage may be caused by malware.
I'd probably give it a scan first, to see if it's something detectable.
I wasn't able to find examples of other means of causing invalid executables
like the errors you're seeing ("is not a valid Windows image").
The virus definitions on this are dated Nov 27, 2010. Download size ~200MB.
http://rescuedisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.iso
That is an offline virus scanner. ("Offline" means, WinXP is not running,
and the computer is booted with some other OS.) When you use your ISO9660
program, to prepare and burn a bootable CD disc with that, then boot the
computer with it, your computer runs the Gentoo Linux operating system
on the CD. A dedicated application on the CD, and running under Linux, can
then scan Windows partitions, looking for viruses. That's the CD I use,
if I'm getting "strange" behavior on the computer.
For that disc to work, you need a network setup that has working Internet
as soon as the CD is booted. My router supports DHCP and the setting up of
automatic IP addresses (and that is the way my Windows is configured).
When the Kaspersky disc boots, it tries to connect to their site, to get
virus definition updates. While the 200MB CD has definitions on it, there
are megabytes more of updates to download, and then the CD can run a scan for
you. The "drive letters" shown in the selection screen of that scanning
application, aren't your regular drive letters. My WinXP C: partition, is
actually at E: in the Gentoo Linux thing. So I have to click E: in there,
to get my WinXP partition scanned. If you don't have that many partitions
or that much data on the disk, you can just click all the drive letters,
and let it scan everything.
Paul
Navyguy
> Navyguy wrote:
> > On Dec 3, 5:51 pm, "Hot-Text" <hot-text.ath...@comcast.net> wrote:
> >>http://support.dell.com/support/edocs/systems/dim8200/codes.htm#1101572
>
> >> Reinstall XP, SP1
> >> and start live over!
>
> > I looked up the codes on the link you provided and according to my
> > computer it's functioning normally. Well, obviously not and I had
> > thought I might have to format/reinstall a new hd but having run and
> > passed Memtest doesn't it confirm that my files aren't corrupted? Also
> > if it's as cut and dry as that then why did they have me run the
> > Memtest at all? Could it be something else that fixable?
>
> > Suggestions/Thoughts?
>
> > Robert
>
> Doing a quick search, a lot of those messages come from files
> that are really damaged. And the damage may be caused by malware.
> I'd probably give it a scan first, to see if it's something detectable.
> I wasn't able to find examples of other means of causing invalid executables
> like the errors you're seeing ("is not a valid Windows image").
>
> The virus definitions on this are dated Nov 27, 2010. Download size ~200MB.
>
>
> That is an offline virus scanner. ("Offline" means, WinXP is not running,
> and the computer is booted with some other OS.) When you use your ISO9660
> program, to prepare and burn a bootable CD disc with that, then boot the
> computer with it, your computer runs the Gentoo Linux operating system
> on the CD. A dedicated application on the CD, and running under Linux, can
> then scan Windows partitions, looking for viruses. That's the CD I use,
> if I'm getting "strange" behavior on the computer.
>
> For that disc to work, you need a network setup that has working Internet
> as soon as the CD is booted. My router supports DHCP and the setting up of
> automatic IP addresses (and that is the way my Windows is configured).
> When the Kaspersky disc boots, it tries to connect to their site, to get
> virus definition updates. While the 200MB CD has definitions on it, there
> are megabytes more of updates to download, and then the CD can run a scan for
> you. The "drive letters" shown in the selection screen of that scanning
> application, aren't your regular drive letters. My WinXP C: partition, is
> actually at E: in the Gentoo Linux thing. So I have to click E: in there,
> to get my WinXP partition scanned. If you don't have that many partitions
> or that much data on the disk, you can just click all the drive letters,
> and let it scan everything.
>
>
> - Show quoted text -
Ok, I think I can follow this, and will give it a try. I'll post any
problems and/or the results.
Thanks,
Robert
Hot-Text
Just reinstall form I386 and it will be XP, SP1
"Navyguy" <magin...@yahoo.com> wrote in message
news:bdeed3f4-07a5-4197...@m20g2000prc.googlegroups.com...
Navyguy
> > On Dec 3, 5:51 pm, "Hot-Text" <hot-text.ath...@comcast.net> wrote:
> >>http://support.dell.com/support/edocs/systems/dim8200/codes.htm#1101572
>
> >> Reinstall XP, SP1
> >> and start live over!
>
> > I looked up the codes on the link you provided and according to my
> > computer it's functioning normally. Well, obviously not and I had
> > thought I might have to format/reinstall a new hd but having run and
> > passed Memtest doesn't it confirm that my files aren't corrupted? Also
> > if it's as cut and dry as that then why did they have me run the
> > Memtest at all? Could it be something else that fixable?
>
> > Suggestions/Thoughts?
>
> > Robert
>
> Doing a quick search, a lot of those messages come from files
> that are really damaged. And the damage may be caused by malware.
> I'd probably give it a scan first, to see if it's something detectable.
> I wasn't able to find examples of other means of causing invalid executables
> like the errors you're seeing ("is not a valid Windows image").
>
> The virus definitions on this are dated Nov 27, 2010. Download size ~200MB.
>
>
> That is an offline virus scanner. ("Offline" means, WinXP is not running,
> and the computer is booted with some other OS.) When you use your ISO9660
> program, to prepare and burn a bootable CD disc with that, then boot the
> computer with it, your computer runs the Gentoo Linux operating system
> on the CD. A dedicated application on the CD, and running under Linux, can
> then scan Windows partitions, looking for viruses. That's the CD I use,
> if I'm getting "strange" behavior on the computer.
>
> For that disc to work, you need a network setup that has working Internet
> as soon as the CD is booted. My router supports DHCP and the setting up of
> automatic IP addresses (and that is the way my Windows is configured).
> When the Kaspersky disc boots, it tries to connect to their site, to get
> virus definition updates. While the 200MB CD has definitions on it, there
> are megabytes more of updates to download, and then the CD can run a scan for
> you. The "drive letters" shown in the selection screen of that scanning
> application, aren't your regular drive letters. My WinXP C: partition, is
> actually at E: in the Gentoo Linux thing. So I have to click E: in there,
> to get my WinXP partition scanned. If you don't have that many partitions
> or that much data on the disk, you can just click all the drive letters,
> and let it scan everything.
>
>
> - Show quoted text -
I created the CD and booted from it and did exactly as you said it
would however when I tried to run it it hung up at the accepting the
license agreement where it ask to enter A to accept. I tried this
twice and each time it hung the computer up. Selecting P for booting
or R for powering off did nothing either nor did the ESC key or Ctrl-
Alt-Delete. So I pressed the reset button.
Should I just try reinstalling?
Robert
Navyguy
> DO not format
> Just reinstall form I386 and it will be XP, SP1
>
I dont quite know what you mean by l386, but I assume your suggesting
I use my reinstallation CD that came with the computer to reinstall
XP? Of course, this means I'll wipe out all my online links, is there
some way to save them?
Thanks,
Robert
Hot-Text
C:\WINDOWS\I386
and on
XP CD
D:\I386
Go here for Info and Help to reinstall form I386 and to XP, SP1
http://social.answers.microsoft.com/Forums/en-US/category/windowsxp
But do not format
Hot-Text
to keep your license agreement
Just reinstall form I386 and it will be XP, SP1
just try reinstalling
Paul
I worked on it for a while, and I can't get around /usr/sbin/EULA.
(I'm testing the KAV 10 rescue CD in Virtual PC, and couldn't
crack it enough, to bypass the EULA prompt.)
It's an executable shell script, that runs sometime during boot.
Even if you disable the GUI (using "nox" boot line option), it
still runs. It's a piece of crap.
What the script does, is
echo status:accepted > /var/log/eula.log
when you've accepted the EULA. I've been trying to find a way, to
get that far, and stop "EULA" program from running. But I haven't
succeeded yet.
Looking on the web, one suggestion was, that it was caused by the
type of keyboard used. If keyboard was USB, try a PS/2 keyboard.
But that isn't always an option on modern systems. A question would
be, whether your current keyboard works in the BIOS or not. If
it does, I'd be less inclined to believe it was a keyboard issue.
A second possibility, is the keymap used by the OS is wrong. But
I don't see anything other than a language choice at boot. So I
don't see how/if that could be modified. (If you edit the Gentoo
boot line in the Grub menu, you could try "setkmap=us" or the
like as an option.)
Kaspersky has a tool, for copying the CD to a USB stick. The potential
advantage of that, might be in making it easier to edit the files
the OS uses. The problem I was having with the CD, was even if
I used the "docache" boot line option, which is supposed to copy
the CD into RAM, the file system was still marked read only.
And I wasn't able to remount it rw.
"Using rescue2usb.exe"
http://support.kaspersky.com/faq/?qid=208282163
If the USB method resulted in raw files, you could edit the
EULA file, and just leave the line that does the
"echo status:accepted" thing.
So I didn't succeed in bypassing your problem. You'll need to
fix whatever the root problem is.
*******
With regard to your "links", I think you're referring to a bookmarks
file. Each browser will store that in a different place.
For example, for my copy of Firefox, it's here. The 12345678 thing is
a random string of eight characters, so you have to go to the Profiles
folder and look to see what is being used. The bookmarks are down there.
C:\Documents and Settings\MyUserName\Application Data\Mozilla\Firefox\Profiles\12345678.default
bookmarkbackups
bookmarks-2010-12-04.json 723KB
The real bookmarks are likely stored in one of those stupid SQL
files. (I have a tool for opening the SQL files, and I could
probably find where the store the things, given enough time.)
The ones in bookmarkbackups would be up to a day old.
Firefox has an "export" option, to convert the current bookmark
file into HTML, and save that as a file for later. And that's the
method I'd recommend for saving links. If you can't do that,
just save the entire 12345678.default folder :-) You can pour
the contents of that, back into your new OS, once Firefox is
installed again and run at least once, then shut down.
There are more ideas for "saving links", here. It seems to involve
Exporting in most cases. I don't see a recipe in all cases, for
working at the file level (like if your computer won't run).
Just backing up all the files, to another disk, would be a start.
Then you can work on the problem, gradually.
http://www.computerhope.com/issues/ch000524.htm
Kelly has a recipe here, for finding the Favorites.
http://www.kellys-korner-xp.com/xp_favorites.htm
Using regedit, you look in
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders
and in my case, that value is
C:\Documents and Settings\MyUserName\Favorites
If you look at the things in that folder, with another
OS, they look like text files (blah.url). And one link
is stored in each file.
HTH,
Paul
Navyguy
Ok, I went to the links which provided me with another link for pre-
installing procedures and installing XP and will try doing that. Will
post again with results.
Thanks
Robert
glee
HOLD ON! You are getting some really poor advice here! Your issues
should not require a reinstall of Windows! I suggest you do not follow
those procedures except as a last resort when other avenues have been
exhausted.
One of the advantages of community help is also one of its
disadvantages....you get a lot of suggestions. Unfortunately not all
should be acted upon or are even relevant to your issues.
Your problem with Spybot Immunization may simply be a Spybot issue, as
reported on their forums in the past. Changing a setting in Spybot, to
"Skip system accounts during IE immunization", may fix you issue.
Uninstalling Spybot and reinstalling from a fresh download might also
help. It may also be a permissions issue.
Your issue with Word and Office programs may also be a Permissions issue
or a problem with your security settings. Reinstalling Office is
another option that might help.
Your problem running the Kaspersky Anti-virus from bootable CD as Paul
suggested is common with bootable AV discs when used on older Dell
computers, due to incompatibility with their network adapters. I
sometimes have better luck using the BitDefender Rescue CD instead in
those cases.
All in all, you issues have been forgotten and this thread has taken a
life of its own that is no longer even cognizant of your original
problems.
MyNews
glee
news:op.vnaxbnbsq9wti0@hot-text...
I'm right here, are you blind? Exactly what is the relevance of your
question?
I stopped using the Microsoft web forums almost as soon as I started,
because I find them a poor substitute for the discontinued newsgroups.
I work on other forums such as aumha.net, which have much better
implementation and usually more appropriate replies. A fair number of
Microsoft MVPs did not migrate to their web forums, and most of them
were not re-awarded in the past year or two.
--
Glen Ventura
MS MVP Oct. 2002 - Sept. 2009
CompTIA A+
MyNews
Navyguy
>
> and in my case, that value is
>
> C:\Documents and Settings\MyUserName\Favorites
>
> If you look at the things in that folder, with another
> OS, they look like text files (blah.url). And one link
> is stored in each file.
>
> HTH,
>
> - Show quoted text -
I havent done anything as yet as I wanted to consider what to do
before I proceeded. It seems however that I'll have to reinstall but I
wanted to consider your other options for saving 'My 'Favorite" links
before doing so. I was going to create a folder in My Documents and
create a Word file and simply copy/paste each link to there and then
burn a CD but it would take forever and I was hoping for a faster way.
So I will go through each link you've provided, plus the pre-
installation check list prior to installing XP I found via the other
link you gave me:
http://www.microsoft.com/windowsxp/using/setup/winxp/install.mspx
I appreciate your time and effort in helping me resolve this problem,
are there any further thoughts/suggestions?
Thanks
Robert
glee
>
>I havent done anything as yet as I wanted to consider what to do
>before I proceeded. It seems however that I'll have to reinstall but I
>wanted to consider your other options for saving 'My 'Favorite" links
>before doing so. I was going to create a folder in My Documents and
>create a Word file and simply copy/paste each link to there and then
>burn a CD but it would take forever and I was hoping for a faster way.
>So I will go through each link you've provided, plus the pre-
>installation check list prior to installing XP I found via the other
>link you gave me:
>
>http://www.microsoft.com/windowsxp/using/setup/winxp/install.mspx
>
>I appreciate your time and effort in helping me resolve this problem,
>are there any further thoughts/suggestions?
>
>Thanks
>Robert
>
Your problem with Spybot Immunization may simply be a Spybot issue, as
reported on their forums in the past. Changing a setting in Spybot, to
"Skip system accounts during IE immunization", may fix you issue.
Did you not see my earlier reply stating this?
Do you really believe you need to reinstall Windows because of something
as simple as an Immunization failure in Spybot, which is frequently
reported on their forums?
Kaspersky and some other bootable CDs have an incompatibility with many
Dell network adapters, causing them to freeze when you try to boot with
the CD. This is also well documented in forums. I explained this also,
in my earlier reply.
--
Glen Ventura
MS MVP Oct. 2002 - Sept. 2009
CompTIA A+
Paul
If you're saving the Favorites from Internet Explorer, I'd just
copy all the link files into a folder. They should already be
in a folder. It really depends, on whether Windows is still
running or not, as to how easy that will be. I'd use one of
my maintenance CDs (an alternate OS that can read/write to
NTFS), and make the copy there and save my Favorites that way.
If the computer was still running, and Internet Explorer can start,
you can do a nice job with the File : Import and Export function.
It will create a single web page (HTML type) with all the
favorites in it.
File : Import and Export
Export Favorites
(It should already be highlighting the word "Favorites")
Click Next
Pick a file name for the Exported Bookmarks file
Next
Finish
Now, copy that file (I called mine bookmark_fav.html) to
a safe place. You can also open that page in a web browser,
and you should see all your links.
*******
On the Kaspersky CD malfunction front, I made some progress.
I wasn't even working on your particular problem - I've been
working on stinking Linux for the last two weeks. I'd just
booted a distro, and the screen was all weird colors and
I couldn't see anything. I did some searching, and found a
way to recover the screen. And the same method, gives a
way to get around the EULA and pressing the letter "A".
Now, this is only going to work, if your keyboard isn't
completely dead. If this is a problem with the keyboard
being recognized in XWindows, then it'll be pretty hard
to make any progress. And then, we'll have to stop here.
To test the "completely dead keyboard" theory, when the
EULA screen comes up, try pressing the Caps Lock key. In
the Linux world, if they didn't configure the keyboard properly,
the Caps Lock won't light the LED on the keyboard. My
keyboard has three LEDs. One glows green, when I press
Caps Lock. If Linux can't run the keyboard at all, I
can hammer on the Caps Lock all day long, and there is
no response from the LED. If none of the LEDs that
are controlled by modifier keys work, then you know
that Linux isn't looking at the keyboard at all. And then
we're screwed. If your Caps Lock works, then turn it
off and you can try this next thing.
It turns out, there are a number of modifier key combos,
for messing around. These are the ones I know about.
Control-Alt-delete (Well, that's a Windows one. You
probably know that one.)
Control-Alt-backspace (Linux for "kill the Xserver". That
causes the GUI to start over again.
And is completely useless, for achieving
control of the computer. The EULA will
likely reappear. So this one is no good.)
Now the juicy ones. These use the function keys on the keyboard,
as well as the two modifier keys control and alt.
Control-Alt-F1 (Linux, for switching from Xserver GUI
... to some console text windows. Those
Control-Alt-F6 windows are places you can run commands.)
Control-Alt-F7 (This one flips back to Xserver GUI, so you
can see whether your hack worked or not.)
OK, so this is the recipe I tried. I can't test your problem,
because I don't know right now, exactly what's wrong with the
keyboard.
What I did first, was try the six different key combinations.
A working console command window appeared on my computer,
when I tried Control-Alt-F4. But it could be any of the
six possible values, that gives you a window to work in.
If you see a flashing cursor in the upper left corner, and
that is all, then move to the next key combo and try again.
Like an MSDOS command window, you can type stuff in there.
You'll see the prompt "Kavrescue # " or something similar.
Your typing will go to the right of the hash. This is the
first command. It does a "process status" and gets the
names of all the programs running in Linux. Grep is a
text filter, that is only going to output lines with the
word EULA in them.
ps aguwwwx | grep EULA
That lists all the programs running on the computer. We need
the info about the EULA holding the screen hostage.
In response, one of the lines will have this on it. This
is the program that needs killing.
/tmp/eulaterm -maximized -e /usr/sbin/EULA
Now, if you look over on the far left of that line, you'll
see something like
root 15705 0.0 1.1
The 15705 number is the PID or process identifier. We'll need
that number in a second, to "hammer" that process.
Now, we need to acknowledge that we read the EULA and accept
the license terms. This is the line I extracted from the bash
script. You type this in, and this fakes the approval.
echo status:accepted > /var/log/eula.log
Next, we're going to kill that white window. Using the number
we got from the ps aguwwwx command above, we do this. The
-9 parameter, is the flavor of killing.
kill -9 15705
(The 9 equals SIGKILL, as seen in the list here.)
http://compute.cnr.berkeley.edu/cgi-bin/man-cgi?signal.h+3
And that's it. Now, press Control-Alt-F7 to return to the
green colored GUI environment (the environment they want
you to use). If the recipe worked, the white window should
be gone. If the white window is not gone, you can try
the recipe one more time, checking to see if the /tmp/eulaterm
perhaps got a new PID number or something. And try and kill
the new one.
If the white window is gone, the next step is clicking the
button to get fresh virus definitions. And then, selecting
the partitions to be scanned.
Have fun :-)
Paul
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
As you have stated all the issues has been forgotten with trying all
these tests and many red herrings have resulted which have nothing to
do with the problem as posted. If you read my posts I have tried
reinstalling Spybot which did nothing whatsoever. So this is what I'm
going to do I'm going to try re-installing Spybot again and also Word
and see if that changes anything.
Thanks for your help,
Robert
Paul
There is a description of how Spybot immunizes here.
http://answers.yahoo.com/question/index?qid=20081128102729AAjVe6X
The question I'd be asking in your situation, is how do you
get errors like "is not a valid Windows image", based on the
areas of your computer that the immunize function seems to access ?
I think there is more involved than Spybot. Perhaps it's actually
related to other software you're using ? I.e. Spybot did something,
and another AV tool took offense ? Or, it's malware of some sort.
Paul
Navyguy
>
> - Show quoted text
This is what I've done, I unistalled and reinstalled Word and it seems
to work ok now. I also uninstalled and reinstalled Spybot but again it
hung up 3/4 through passive immunization with 58303 items unprotected,
136043 protected and a total of 194043 total.
I read the link what Spybot actually does but the thing is that I've
had Spybot for years and this 'just happened' and now will not
function normally.
Also, when I finished doing everything, the computer got hung up again
during logoff procedures, so I had to reset it which I really hate to
do because it might damage it but there was no other way to power it
down.
Thoughts/Suggestions? and please lets stick to the problem at hand,...
Robert
Paul
If you haven't attempted to fix anything, in a WinXP session, are
you able to shut down the computer then ? Or is it hanging
on any attempt to shut down. Like, say you boot, wait 30 seconds,
then select shutdown. Does it shutdown OK then ?
Paul
glee
>> > all
>> > these tests and many red herrings have resulted which have nothing
>> > to
>> > do with the problem as posted. If you read my posts I have tried
>> > reinstalling Spybot which did nothing whatsoever. So this is what
>> > I'm
>> > going to do I'm going to try re-installing Spybot again and also
>> > Word
>> > and see if that changes anything.
>>
>> > Thanks for your help,
>> > Robert
>>
>> There is a description of how Spybot immunizes here.
>>
>> http://answers.yahoo.com/question/index?qid=20081128102729AAjVe6X
>>
>> The question I'd be asking in your situation, is how do you
>> get errors like "is not a valid Windows image", based on the
>> areas of your computer that the immunize function seems to access ?
>> I think there is more involved than Spybot. Perhaps it's actually
>> related to other software you're using ? I.e. Spybot did something,
>> and another AV tool took offense ? Or, it's malware of some sort.
>>
>to work ok now. I also uninstalled and reinstalled Spybot but again it
>hung up 3/4 through passive immunization with 58303 items unprotected,
>136043 protected and a total of 194043 total.
>
>I read the link what Spybot actually does but the thing is that I've
>had Spybot for years and this 'just happened' and now will not
>function normally.
>
>Also, when I finished doing everything, the computer got hung up again
>during logoff procedures, so I had to reset it which I really hate to
>do because it might damage it but there was no other way to power it
>down.
>
>Thoughts/Suggestions? and please lets stick to the problem at hand,...
>
As I mentioned earlier, Spybot has a setting, "Skip system accounts
during IE immunization," that you need to enable, and then see if there
is any improvement:
http://forums.spybot.info/project.php?issueid=132
I haven't used Spybot in years, and don't find it at all useful in the
current environment, so I can't tell you precisely where the setting is
located. You may have to enable "Advanced" settings to see it....I
don't know.
Navyguy
It seems to be doing both. At times it will shut down normally and
others it won't. Also, sometimes I'll do updates on the administrator
account and then logofff and restart the computer to use the User
account and sometimes it hangs there as as well.
Robert
Navyguy
>
> - Show quoted text -
I went into the Advanced Mode, then Settings but I couldn't find
anything like 'Skip system accounts during IE immunization to enable.
Given that this doesnt seem to be working, even after installing it
twice is there another malware program similar to Spybot that I could
use that you would recommend? Bearing in mind that I'm live on a fixed
marginal income and cant afford to buy anything.
Thanks,
Robert
glee
>
>It seems to be doing both. At times it will shut down normally and
>others it won't. Also, sometimes I'll do updates on the administrator
>account and then logofff and restart the computer to use the User
>account and sometimes it hangs there as as well.
If the "User" account is a limited account, that is, it is not in the
Administrators group and does not have admin privileges, that may
account for Spybot's failure to Immunize if you are trying to Immunize
from the Limited User account.
Is the Administrator account a user account you created with admin
rights, or are you using the built-in Administrator account (which you
should NOT be using)?
Are there any errors in Event Viewer that correspond to the hangs you
are seeing?
Control Panel> Administrative Tools> Event Viewer
Tim Meddick
==
Cheers, Tim Meddick, Peckham, London. :-)
"glee" <gle...@spamindspring.com> wrote in message
news:idoell$aha$1...@news.eternal-september.org...
glee
news:idof25$ikr$1...@speranza.aioe.org...
> Sorry, but why should the OP "NOT be using" the Administrator account?
The built-in Administrator account should not be used except in
troubleshooting scenarios. A user account in the Administrators group
should be created for general administration such as installing
programs, and so forth.
It's common sense. Any account used regularly runs the risk of
corruption. If you corrupt the built-in Administrator account, you have
no way to log on with admin privileges and repair anything.
If you create a user account with admin privileges and it becomes
corrupt, you have the hidden Administrator account available for
troubleshooting and repair, and for creating a new user account with
admin privileges.
Also, if you use the built-in Administrator account as the only account
with admin privileges, and then later decide to add another user account
with admin privileges, the built-in account will be removed from the
log-in screen and a Registry edit must be done to return it to the
log-in screen.
glee
>On Dec 8, 6:04 am, "glee" <gle...@spamindspring.com> wrote:
>>
>> As I mentioned earlier, Spybot has a setting, "Skip system accounts
>> during IE immunization," that you need to enable, and then see if
>> there
>> is any improvement:http://forums.spybot.info/project.php?issueid=132
>>
>> I haven't used Spybot in years, and don't find it at all useful in
>> the
>> current environment, so I can't tell you precisely where the setting
>> is
>> located. You may have to enable "Advanced" settings to see it....I
>> don't know.
>
>anything like 'Skip system accounts during IE immunization to enable.
>Given that this doesnt seem to be working, even after installing it
>twice is there another malware program similar to Spybot that I could
>use that you would recommend? Bearing in mind that I'm live on a fixed
>marginal income and cant afford to buy anything.
You could go to the Spybot forums and ask where the setting is that was
mentioned in the link I gave you, by PepiK, the writer of Spybot.
I haven't found Spybot useful in years. You can get nearly as good an
"immunization" by installing the free version of SpywareBlaster,
manually updating it, then having it "Enable all protection" and then
close the app. About once a week, start SpywareBlaster, run its update,
then "Enable all protection" again to add the new items.
SpywareBlaster:
http://www.javacoolsoftware.com/spywareblaster.html
If you uninstall Spybot, first turn off (uncheck) Tea Timer and
SDHelper, "un-immunize" your system, then uninstall it.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
I have a User account with limited privileges and an Administrator
account with full privileges. I only use the Administrator account for
downloads, updates and the like. I Use the user account for surfing
the internet.
I checked the Event Viewer and this is what it gave me:
Application Log Application error records 512 .0 KB
Security Log Security Audit Records 512.0 KB
System Log System Error Records 512.0 KB
Internet Explorer Log Custom Log Error Records –
In application: there’s various errors for application hangings,
warnings for WinMgmt, crypt32 errors, application errors, ESENT,
warnings for MSiInstaller, Microsoft Office 10 errors, SNL
HiveManager warnings, Avira Antivir warning, ASP.NET2.050727.0
warning, LoadPerf errors.
In System there’s an sr error on the 24th and 26th of last month, and
a DCOM on the 24th of last month, then a W32Time error, which was on
the 29th of last month. There’s quite a few recently which have to do
with Service Control Manager and still others with warnings of
avgntflt, and on the 27th of last month Tcpip,
Security had no errors
I use to have Spywareblaster some time ago but was told I should
remove it. Actually, until this situation came about I was perfectly
happy with what I had and it performed well and now its all this,.....
Thoughts/Suggestions
Robert
MyNews
Nil
microsoft.public.windowsxp.general:
> You can not run Avira Antivir with installing Software like
> AntiSpyware!
Poppycock. You absolutely can. Where did you ever get such an idea?
MyNews
Nil
microsoft.public.windowsxp.general:
> You not running Avira Antivir like us are you!
Please phrase that as a question.
MyNews
Here your question there is so Software can not be install with a Antivirus
running you know that do you?
Nil
microsoft.public.windowsxp.general:
> Nil Nil I did not ask a question!
>
> Here your question there is so Software can not be install with a
> Antivirus running you know that do you?
Please phrase that as a question that makes sense.
glee
news:idp436$g9h$1...@speranza.aioe.org...
> You can not run Avira Antivir with installing Software like
> AntiSpyware!
Excuse me? If you're saying you can't run Avira and anti-spyware
software together, you are dead wrong.
MyNews
?Here your question
there is so
Software can not be install
with a Antivirus running
you know that do you?
http://en.wiktionary.org/wiki/so
On the Internet:
SO, a short form for the internet question and answer site!
glee
>On Dec 8, 9:18 am, "glee" <gle...@spamindspring.com> wrote:
>> "Navyguy" <maginee...@yahoo.com> wrote in message
>>
>> news:2ba74d24-e550-4d1a...@22g2000prx.googlegroups.com...
>>
>>
>> >It seems to be doing both. At times it will shut down normally and
>> >others it won't. Also, sometimes I'll do updates on the
>> >administrator
>> >account and then logofff and restart the computer to use the User
>> >account and sometimes it hangs there as as well.
>>
>> If the "User" account is a limited account, that is, it is not in the
>> Administrators group and does not have admin privileges, that may
>> account for Spybot's failure to Immunize if you are trying to
>> Immunize
>> from the Limited User account.
>>
>> Is the Administrator account a user account you created with admin
>> rights, or are you using the built-in Administrator account (which
>> you
>> should NOT be using)?
>>
>> Are there any errors in Event Viewer that correspond to the hangs you
>> are seeing?
>> Control Panel> Administrative Tools> Event Viewer
>
>
>
>account with full privileges. I only use the Administrator account for
>downloads, updates and the like. I Use the user account for surfing
>the internet.
>
>
>I checked the Event Viewer and this is what it gave me:
>
>Application Log Application error records 512 .0 KB
>Security Log Security Audit Records 512.0 KB
>System Log System Error Records 512.0 KB
>Internet Explorer Log Custom Log Error Records –
>
>
>
>
>In application: there’s various errors for application hangings,
>warnings for WinMgmt, crypt32 errors, application errors, ESENT,
>warnings for MSiInstaller, Microsoft Office 10 errors, SNL
>HiveManager warnings, Avira Antivir warning, ASP.NET2.050727.0
>warning, LoadPerf errors.
>
>In System there’s an sr error on the 24th and 26th of last month, and
>a DCOM on the 24th of last month, then a W32Time error, which was on
>the 29th of last month. There’s quite a few recently which have to do
>with Service Control Manager and still others with warnings of
>avgntflt, and on the 27th of last month Tcpip,
>
>Security had no errors
>
>I use to have Spywareblaster some time ago but was told I should
>remove it. Actually, until this situation came about I was perfectly
>happy with what I had and it performed well and now its all this,.....
I can't imagine any reason for someone to tell you to remove
SpywareBlaster on a WinXP system, other than they don't know what they
are talking about.
You need to look for errors listed in Event Viewer that occurred on the
date and time of one of your shutdown failures. Just listing the types
of errors whether or not they correspond to those shutdown failures
doesn't help us.
MyNews
glee
> No I said you can not install anti-spyware and run Avira at the same
> time!
>
Sure you can....
MyNews
"glee" <gle...@spamindspring.com> wrote in message
news:idpn7r$n0d$1...@speranza.aioe.org...
Bill in Co
That would be like expecting blood out of a turnip.
Nil
microsoft.public.windowsxp.general:
> It makes sense.
Nope, you still make less sense than a chicken tonic spasm coat. Try
again.
MyNews
it means that you cannot get something from a person,
especially money,
that they don't have.
But Bill in Co I know you mint this:
http://www.urbandictionary.com/define.php?term=squeeze%20blood%20out%20of%20a%20turnip
glee
>
>>> No I said you can not install anti-spyware and run Avira at the same
>>> time!
>>>
>>
>> Sure you can....
>
> offense!
I never said anything like that in this thread.
MyNews
If your Doctor gaveling you chicken tonic spasm coat,
it may be more sensitive in side effects then cyclobenzaprine
it's time to get a new doctor do you thank?
"Nil" <redn...@REMOVETHIScomcast.net> wrote in message
news:Xns9E49324...@130.133.4.11...
Navyguy
>
> - Show quoted text -
I again cheked the Event Viewer for the last time I had to reset the
cvomputer (yesterday) it gave the following error
Type Source
Error Service Control Manager
When I checked the properties of the error it said Event I.D. 7023
In addition whether Spybot or Spywareblaster, the point is that Spybot
should work after I've uninstalled it and re-installed it. I shouldn't
have to go to Spybots forum for anything because I never had to before
and it worked fine. 'Something' has happened to my computer which is
causing Spybot not to function and to act erratically. That is the
root of this problem. Some have suggested it may be a RAM problem and
I've run Memtest twice and passed. Also, I was able to boot normally
today.
Robert
Paul
http://www.eventid.net/display.asp?eventid=7023&source=
The <name of the service> service terminated with the
following error: <error description>
What was <name of the service> ?
What was <error description> ?
If you look in the Event Viewer window, at the top level you can see
Event Viewer (Local)
Application
Secutiry
System
You can right-clock on one of the three items, and select "Save As",
and save the entire log to a file. Possible saving formats
include CSV (comma separated) or TXT (tab separated). You should be
able to copy and paste the stuff you need, out of one of those
files, if you want to post some entries.
They aren't the best looking files in the world, but it'll save
you having to type the stuff. You could also have copied and
pasted the text, out of the individual entries. Saving them all
as a file, might speed up the copy and paste part of it.
Paul
Harden Thicke
"MyNews" <myn...@comcast.net> wrote in message
news:idp436$g9h$1...@speranza.aioe.org...
Harden Thicke
"MyNews" <myn...@comcast.net> wrote in message
news:idpi6g$dmu$1...@speranza.aioe.org...
MyNews
For this is not HBO
"Harden Thicke" <har...@hthicke.invalid> wrote in message
news:idqma2$37t$1...@news.eternal-september.org...
glee
>cvomputer (yesterday) it gave the following error
>
>
>Type Source
>Error Service Control Manager
>
>When I checked the properties of the error it said Event I.D. 7023
>
>
>In addition whether Spybot or Spywareblaster, the point is that Spybot
>should work after I've uninstalled it and re-installed it. I shouldn't
>have to go to Spybots forum for anything because I never had to before
>and it worked fine. 'Something' has happened to my computer which is
>causing Spybot not to function and to act erratically. That is the
>root of this problem. Some have suggested it may be a RAM problem and
>I've run Memtest twice and passed. Also, I was able to boot normally
>today.
That still is not the error details. Open Event Viewer, find the errors
that correspond with the Time and Date of your shutdown hangs or other
failures, double click one of those errors in the list to bring up the
Properties. On the right side of the Event Properties will be 3
buttons: an Up arrow, a Down arrow, and a picture of two staggered
pieces of paper. Click the 3rd button....it will copy all the error
details to the clipboard.
Open a reply to this message and paste the info from the clipboard into
the body of your reply here.
Do that for all the errors that correspond to a shutdown hang or other
issue you are having, and let us know what the issue was for each
corresponding error you list.
You wrote: "I shouldn't have to go to Spybot's forum for anything
because I never had to before and it worked fine."
Are you kidding? Everyone here in this forum has an issue with
something in XP, yet they all ran XP for a long time before an issue
came up. According to your logic no one should post anything anywhere,
because it "used to work fine". My car stopped going into gear when I
put it in Drive. I shouldn't need to go to a transmission shop because
I never had to before and it worked fine. ;-)
The fact that you reinstalled Spybot doesn't mean anything. First of
all, uninstalling may not have removed all its files or settings.
Secondly, even if the issue is caused by a change made in XP that is
affecting Spybot, the people in the Spybot forums are more likely to be
aware of what might cause the error or incompatibility, since it may be
exclusive to the proper working of Spybot.
Navyguy
I did as you said and I clicked the 3rd button with the two pieces of
paper. I didn't know how to access the clipboard any other way so I
opened Word and clicked Edit> Office Clipboard and then I selected
paste all. This is what it gave me. It doesn't look like what I think
your asking for so perhaps I didn't do this correctly?
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
User: N/A
Computer: DRAGON
Description:
Date: 12/8/2010
Time: 2:17:19 AM
The Application Management service terminated with the following
error:
The specified module could not be found.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
If the above is satisfactory then I can do the same for other errors
but I can't say for certain what they are associated with except that
most of the errors occurred this month. However I'm willing to do
what's neccessary if I can and with help and instructions.
Robert
Paul
http://www.theeldergeek.com/application_management.htm
"Application Management Service
Used when you modify an application i.e. Add/Remove."
So then the question is, what module ?
The specified module could not be found.
Maybe that is some installer or uninstaller script ?
You might also look at the time reported in that event,
and think back to what you were doing at the time.
Paul
Navyguy
>
> - Show quoted text -
Hmmmm, the only thing I can think of is that it may be either when I
was uninstalling Spybot and/or Microsoft Small Business (Word) because
those are the only programs I've removed but I didn't get any errors
when doing so.
Robert
glee
>was uninstalling Spybot and/or Microsoft Small Business (Word) because
>those are the only programs I've removed but I didn't get any errors
>when doing so.
>
The Event Viewer error: "Application Management service terminated with
the following error: The specified module could not be found" is normal
in Windows XP Home, because the file Appmgmt.dll is not included with XP
Home. There is an incorrect Registry entry in XP Home that causes this
Event error to appear every time you use Add or Remove Programs in
Control Panel. It is not really an error, does not affect anything, and
is totally UNRELATED to your described issues.
Adding or removing a program may generate Event ID 7023
http://support.microsoft.com/kb/328213
You need to find the errors in Event Viewer that correspond in date and
time to your supposed shutdown issue. You said you can't always shut
down correctly. The next time it happens, write down the time and date,
then start the computer back up and find the corresponding error in
Event Viewer, based on the date and time you wrote down.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
>
> You need to find the errors in Event Viewer that correspond in date and
> time to your supposed shutdown issue. You said you can't always shut
> down correctly. The next time it happens, write down the time and date,
> then start the computer back up and find the corresponding error in
> Event Viewer, based on the date and time you wrote down.
> --
> Glen Ventura
> MS MVP Oct. 2002 - Sept. 2009
>
> - Show quoted text -
Ok I'll do that and will look through the Event Viewer again to see if
I can discover anything.
Thanks
Robert
Navyguy
>
> > - Show quoted text -
>
> Ok I'll do that and will look through the Event Viewer again to see if
> I can discover anything.
>
> Thanks
>
> - Show quoted text -
I went back and looked at all the errors in Applications and Systems
and put them on the clipboard:
These are the System Errors:
Event Type: Warning
Event Source: avgntflt
Event Category: None
Event ID: 18
Date: 12/6/2010
Time: 3:38:12 AM
User: N/A
Computer: DRAGON
Description:
TIMEOUT<logonui.exe> C:\WINDOWS\system32\msctf.dll
Data:
0000: 00 00 00 00 02 00 5a 00 ......Z.
0008: 00 00 00 00 12 00 07 80 .......
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 11/29/2010
Time: 2:35:01 AM
User: N/A
Computer: DRAGON
Description:
The time provider NtpClient is configured to acquire time from one or
more time sources, however none of the sources are currently
accessible. No attempt to contact a source will be made for 14
minutes. NtpClient has no source of accurate time.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 11/27/2010
Time: 4:57:07 AM
User: N/A
Computer: DRAGON
Description:
TCP/IP has reached the security limit imposed on the number of
concurrent TCP connect attempts.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....'..
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 11/26/2010
Time: 7:10:06 AM
User: N/A
Computer: DRAGON
Description:
The System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'new' on the volume
'HarddiskVolume1'. It has stopped monitoring the volume.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 11/24/2010
Time: 7:11:59 PM
User: NT AUTHORITY\SYSTEM
Computer: DRAGON
Description:
The server {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} did not register
with DCOM within the required timeout.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 11/24/2010
Time: 6:58:30 PM
User: N/A
Computer: DRAGON
Description:
The System Restore filter encountered the unexpected error
'0xC000009A' while processing the file 'Configuration.ini' on the
volume 'HarddiskVolume1'. It has stopped monitoring the volume.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
These are the application errors, it it my belief that the problem
started with the last entries because of the date of last month.
Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 12/8/2010
Time: 3:18:46 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 86121004.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 38 36 31 32 31 30 30 34 86121004
0010: 0d 0a ..
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 12/8/2010
Time: 3:18:38 AM
User: N/A
Computer: DRAGON
Description:
Hanging application WINWORD.EXE, version 10.0.6612.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 57 49 4e 57 4f 52 WINWOR
0018: 44 2e 45 58 45 20 31 30 D.EXE 10
0020: 2e 30 2e 36 36 31 32 2e .0.6612.
0028: 30 20 69 6e 20 68 75 6e 0 in hun
0030: 67 61 70 70 20 30 2e 30 gapp 0.0
0038: 2e 30 2e 30 20 61 74 20 .0.0 at
0040: 6f 66 66 73 65 74 20 30 offset 0
0048: 30 30 30 30 30 30 30 0000000
Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 12/6/2010
Time: 3:36:45 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 1180947459.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 31 38 30 39 34 37 34 11809474
0010: 35 39 0d 0a 59..
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 12/6/2010
Time: 3:35:51 AM
User: N/A
Computer: DRAGON
Description:
Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 38 re.exe 8
0020: 2e 30 2e 36 30 30 31 2e .0.6001.
0028: 31 38 37 30 32 20 69 6e 18702 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 12/6/2010
Time: 3:23:38 AM
User: N/A
Computer: DRAGON
Description:
Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/
static/trustedr/en/authrootseq.txt> with error: This operation
returned because the timeout period expired.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/28/2010
Time: 9:59:54 PM
User: N/A
Computer: DRAGON
Description:
Hanging application nero.exe, version 7.9.6.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 6e 65 72 6f 2e 65 nero.e
0018: 78 65 20 37 2e 39 2e 36 xe 7.9.6
0020: 2e 30 20 69 6e 20 68 75 .0 in hu
0028: 6e 67 61 70 70 20 30 2e ngapp 0.
0030: 30 2e 30 2e 30 20 61 74 0.0.0 at
0038: 20 6f 66 66 73 65 74 20 offset
0040: 30 30 30 30 30 30 30 30 00000000
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/26/2010
Time: 7:12:51 AM
User: N/A
Computer: DRAGON
Description:
Faulting application rstrui.exe, version 5.1.2600.5512, faulting
module srrstr.dll, version 5.1.2600.5512, fault address 0x00009836.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 72 73 74 ure rst
0018: 72 75 69 2e 65 78 65 20 rui.exe
0020: 35 2e 31 2e 32 36 30 30 5.1.2600
0028: 2e 35 35 31 32 20 69 6e .5512 in
0030: 20 73 72 72 73 74 72 2e srrstr.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 30 set 0000
0058: 39 38 33 36 0d 0a 9836..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 11/26/2010
Time: 7:12:45 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 743385702.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 37 34 33 33 38 35 37 30 74338570
0010: 32 0d 0a 2..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/26/2010
Time: 7:12:30 AM
User: N/A
Computer: DRAGON
Description:
Faulting application rstrui.exe, version 5.1.2600.5512, faulting
module srrstr.dll, version 5.1.2600.5512, fault address 0x00009836.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 72 73 74 ure rst
0018: 72 75 69 2e 65 78 65 20 rui.exe
0020: 35 2e 31 2e 32 36 30 30 5.1.2600
0028: 2e 35 35 31 32 20 69 6e .5512 in
0030: 20 73 72 72 73 74 72 2e srrstr.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 30 set 0000
0058: 39 38 33 36 0d 0a 9836..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 11/26/2010
Time: 7:12:23 AM
User: N/A
Computer: DRAGON
Description:
Fault bucket 743385702.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 37 34 33 33 38 35 37 30 74338570
0010: 32 0d 0a 2..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/26/2010
Time: 7:12:18 AM
User: N/A
Computer: DRAGON
Description:
Faulting application rstrui.exe, version 5.1.2600.5512, faulting
module srrstr.dll, version 5.1.2600.5512, fault address 0x00009836.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 72 73 74 ure rst
0018: 72 75 69 2e 65 78 65 20 rui.exe
0020: 35 2e 31 2e 32 36 30 30 5.1.2600
0028: 2e 35 35 31 32 20 69 6e .5512 in
0030: 20 73 72 72 73 74 72 2e srrstr.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 30 set 0000
0058: 39 38 33 36 0d 0a 9836..
Event Type: Error
Event Source: ESENT
Event Category: General
Event ID: 490
Date: 11/24/2010
Time: 11:58:40 PM
User: N/A
Computer: DRAGON
Description:
svchost (876) An attempt to open the file "C:\WINDOWS
\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb" for
read / write access failed with system error 32 (0x00000020): "The
process cannot access the file because it is being used by another
process. ". The open file operation will fail with error -1032
(0xfffffbf8).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Microsoft Office 10
Event Category: None
Event ID: 2001
Date: 11/24/2010
Time: 10:39:27 PM
User: N/A
Computer: DRAGON
Description:
Rejected Safe Mode action : Microsoft Word.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Microsoft Office 10
Event Category: None
Event ID: 2001
Date: 11/24/2010
Time: 8:22:48 PM
User: N/A
Computer: DRAGON
Description:
Rejected Safe Mode action : Microsoft Word.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 11/24/2010
Time: 7:36:35 PM
User: N/A
Computer: DRAGON
Description:
Fault bucket 1229456033.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 32 32 39 34 35 36 30 12294560
0010: 33 33 0d 0a 33..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/24/2010
Time: 7:36:28 PM
User: N/A
Computer: DRAGON
Description:
Faulting application spybotsd.exe, version 1.6.2.46, faulting module
kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 70 79 ure spy
0018: 62 6f 74 73 64 2e 65 78 botsd.ex
0020: 65 20 31 2e 36 2e 32 2e e 1.6.2.
0028: 34 36 20 69 6e 20 6b 65 46 in ke
0030: 72 6e 65 6c 33 32 2e 64 rnel32.d
0038: 6c 6c 20 35 2e 31 2e 32 ll 5.1.2
0040: 36 30 30 2e 35 37 38 31 600.5781
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 31 32 et 00012
0058: 61 66 62 0d 0a afb..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/24/2010
Time: 7:36:28 PM
User: N/A
Computer: DRAGON
Description:
Faulting application spybotsd.exe, version 1.6.2.46, faulting module
kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 70 79 ure spy
0018: 62 6f 74 73 64 2e 65 78 botsd.ex
0020: 65 20 31 2e 36 2e 32 2e e 1.6.2.
0028: 34 36 20 69 6e 20 6b 65 46 in ke
0030: 72 6e 65 6c 33 32 2e 64 rnel32.d
0038: 6c 6c 20 35 2e 31 2e 32 ll 5.1.2
0040: 36 30 30 2e 35 37 38 31 600.5781
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 31 32 et 00012
0058: 61 66 62 0d 0a afb..
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/24/2010
Time: 6:58:20 PM
User: N/A
Computer: DRAGON
Description:
Faulting application sdupdate.exe, version 1.6.0.12, faulting module ,
version 0.0.0.0, fault address 0x00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 64 75 ure sdu
0018: 70 64 61 74 65 2e 65 78 pdate.ex
0020: 65 20 31 2e 36 2e 30 2e e 1.6.0.
0028: 31 32 20 69 6e 20 20 30 12 in 0
0030: 2e 30 2e 30 2e 30 20 61 .0.0.0 a
0038: 74 20 6f 66 66 73 65 74 t offset
0040: 20 30 30 30 30 30 30 30 0000000
0048: 30 0d 0a 0..
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/24/2010
Time: 4:36:14 PM
User: N/A
Computer: DRAGON
Description:
Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 38 re.exe 8
0020: 2e 30 2e 36 30 30 31 2e .0.6001.
0028: 31 38 37 30 32 20 69 6e 18702 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/24/2010
Time: 3:47:02 PM
User: N/A
Computer: DRAGON
Description:
Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 38 re.exe 8
0020: 2e 30 2e 36 30 30 31 2e .0.6001.
0028: 31 38 37 30 32 20 69 6e 18702 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000
Thoughts/Suggetions?
Robert
Navyguy
>
> Event Type: Warning
> Event Source: Tcpip
> Event Category: None
> Event ID: 4226
> Date: 11/27/2010
> Time: 4:57:07 AM
> User: N/A
> Computer: DRAGON
> Description:
> TCP/IP has reached the security limit imposed on the number of
> concurrent TCP connect attempts.
>
> Data:
> 0000: 00 00 00 00 01 00 54 00 ......T.
> 0008: 00 00 00 00 82 10 00 80 ....'..
> 0010: 01 00 00 00 00 00 00 00 ........
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
>
> Event Type: Error
> Event Source: sr
> Event Category: None
> Event ID: 1
> Date: 11/26/2010
> Time: 7:10:06 AM
> User: N/A
> Computer: DRAGON
> Description:
> The System Restore filter encountered the unexpected error
> '0xC000009A' while processing the file 'new' on the volume
> 'HarddiskVolume1'. It has stopped monitoring the volume.
>
> Data:
> 0000: 06 00 00 00 04 00 4e 00 ......N.
> 0008: 00 00 00 00 01 00 00 c0 .......À
> 0010: 00 00 00 00 00 00 00 00 ........
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
>
> Event Type: Error
> Event Source: DCOM
> Event Category: None
> Event ID: 10010
> Date: 11/24/2010
> Time: 7:11:59 PM
> User: NT AUTHORITY\SYSTEM
> Computer: DRAGON
> Description:
> The server {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} did not register
> with DCOM within the required timeout.
>
>
> Event Type: Error
> Event Source: sr
> Event Category: None
> Event ID: 1
> Date: 11/24/2010
> Time: 6:58:30 PM
> User: N/A
> Computer: DRAGON
> Description:
> The System Restore filter encountered the unexpected error
> '0xC000009A' while processing the file 'Configuration.ini' on the
> volume 'HarddiskVolume1'. It has stopped monitoring the volume.
>
> Data:
> 0000: 04 00 00 00 04 00 4e 00 ......N.
> 0008: 00 00 00 00 01 00 00 c0 .......À
> 0010: 00 00 00 00 00 00 00 00 ........
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
>
> These are the application errors, it it my belief that the problem
> started with the last entries because of the date of last month.
>
> Event Type: Error
> Event Source: Application Hang
> Event Category: None
> Event ID: 1001
> Date: 12/8/2010
> Time: 3:18:46 AM
> User: N/A
> Computer: DRAGON
> Description:
> Fault bucket 86121004.
>
> Data:
> 0000: 42 75 63 6b 65 74 3a 20 Bucket:
> 0008: 38 36 31 32 31 30 30 34 86121004
> 0010: 0d 0a ..
>
> Event Type: Error
> Event Source: Application Hang
> Event Category: (101)
> Event ID: 1002
> Date: 12/8/2010
> Time: 3:18:38 AM
> User: N/A
> Computer: DRAGON
> Description:
> Hanging application WINWORD.EXE, version 10.0.6612.0, hang module
> hungapp, version 0.0.0.0, hang address 0x00000000.
>
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 48 61 6e 67 ion Hang
> 0010: 20 20 57 49 4e 57 4f 52 WINWOR
> 0018: 44 2e 45 58 45 20 31 30 D.EXE 10
>
> read more »- Hide quoted text -
>
> - Show quoted text -
I thought I should also relate that since Spybot doesnt seem to be
working normally with the passive immunization today I downloaded
Spywareblaster but found that it won't let me download updates and
gave me this message:
The server may be temporarily unavailable or there may be a conflict
with firewall (Windows) software installed on your pc. The update file
may have gotten corrupted during download.
I tried several times at different times of the day with the same
message.
Robert
Paul
>
> I thought I should also relate that since Spybot doesnt seem to be
> working normally with the passive immunization today I downloaded
> Spywareblaster but found that it won't let me download updates and
> gave me this message:
>
> The server may be temporarily unavailable or there may be a conflict
> with firewall (Windows) software installed on your pc. The update file
> may have gotten corrupted during download.
>
> I tried several times at different times of the day with the same
> message.
>
> Robert
Did you see my posting a while back, where I gave a possible
recipe for using the Kaspersky offline scanner (I came up with a
method to defeat the EULA screen). Any time you find AV software
is not able to get updates over the Internet, that means
you're infected. (Or for that matter, lots of other
strange behaviors, can have the same root cause.)
(The section at the bottom, if your keyboard is working...)
Paul
glee
news:idv24k$o8h$1...@news.eternal-september.org...
Or, far simpler, he could try a different offline AV disc. His Dell
network adapter is likely causing the freeze he's getting with
Kaspersky...it's a fairly well know issue with older Dells and some
Linux bootable AV discs, such as Avira and Kaspersky. I've had the best
luck in such situations, using the BitDefender rescue disc instead:
http://download.bitdefender.com/rescue_cd/
Using The BitDefender Rescue Cd -
http://forum.bitdefender.com/index.php?s=b4c46f52a01a945d6e873890a87c6085&showtopic=16602
Paul
Well, I generally promote, what I've tested for myself. And the
Kav CDs run here for me.
I test ISO9660's in VPC2007, to save on the cost of burning CDs.
When I ran the following file a while back (it is based on Knoppix 5.1),
it froze and won't accept input. This is consistent with the Knoppix CD
of the same vintage. Later Knoppix revisions run pretty good, but the
platform trimmings have changed a bit. Now, I might be able to drop down to
single user, and try again, purely for the hell of it. But then, the
recipe could end up just as tortured, as the other one I wrote up.
BitDefenderRescueCD_v2.0.0_3_08_2009.iso
The Kaspersky CDs pass the VPC2007 test. I've also tested a couple
versions of them, as real CDs, as I've used them on machines
other than my main machine.
Since I haven't actually seen BitDefender run yet, I'm a bit
more hesitant to recommend it. I know -- there is a big difference
between virtual and real environments. I've spent the last
couple weeks experimenting with just that (I've tested six distros).
Trying to figure out why certain things don't work as well as they should.
But I also don't plan on burning a CD, for every piece of
free software I happen to see.
So that leaves me with my standard test case. If it
survives VPC2007, software like Linux distros or
offline scanners, make it to my "short list". If
the function they offer is worthwhile, I'll burn a
CD. My CD stack right now, is 6" high. Those are the
ones I use regularly.
(I tried out VirtualBox, as an alternative to VPC2007, but it
has a few rough edges.)
There is another one he could try. That was a product
by F-secure.com that consisted of just the scanning
program (plus it downloaded definitions). The last
time I used that, was a couple years ago. It never
detected anything (but at the time, I wasn't throwing
a copy of EICAR on, just to see if it was actually
doing something). This appears to be the current incarnation.
It's now using Knoppix as a base, and as long as it isn't
5.1 , then it'll likely pass my acid test.
http://www.f-secure.com/en_EMEA-Labs/security-threats/tools/rescue-cd
( A database for it. Some of the files appear current, so this
isn't a stale download. You edit this in a hex editor, tear
the shell script off the front, at just the right place, and then
it opens in 7ZIP. That's if you want to open it in advance in
Windows, rather than waiting to fire up the Linux CD and check
it out. )
http://download.f-secure.com/latest/fsdbupdate9.run
I think I'll download the CD for that one and give it a whirl.
From there, it goes downhill. I remember years ago, running
the Trend Micro online scanner. There were so many error
messages, I could never tell whether it was doing anything :-)
It was a veritable train wreck.
Paul
Navyguy
>
> Paul
The EULA problem has been resolved by me uninstalling Windows Small
Business (Word/Excel) and reinstalling them and accepting the EULA and
it hasn't re-appeared since. I thought I noted this on one of my
replies.
Robert
Navyguy
> "Paul" <nos...@needed.com> wrote in message
>
> news:idv24k$o8h$1...@news.eternal-september.org...
>
>
>
>
>
> > Navyguy wrote:
>
> >> I thought I should also relate that since Spybot doesnt seem to be
> >> working normally with the passive immunization today I downloaded
> >> Spywareblaster but found that it won't let me download updates and
> >> gave me this message:
>
> >> The server may be temporarily unavailable or there may be a conflict
> >> with firewall (Windows) software installed on your pc. The update
> >> file
> >> may have gotten corrupted during download.
>
> >> I tried several times at different times of the day with the same
> >> message.
>
> >> Robert
>
> > Did you see my posting a while back, where I gave a possible
> > recipe for using the Kaspersky offline scanner (I came up with a
> > method to defeat the EULA screen). Any time you find AV software
> > is not able to get updates over the Internet, that means
> > you're infected. (Or for that matter, lots of other
> > strange behaviors, can have the same root cause.)
>
> > (The section at the bottom, if your keyboard is working...)
>
>
> Or, far simpler, he could try a different offline AV disc. His Dell
> network adapter is likely causing the freeze he's getting with
> Kaspersky...it's a fairly well know issue with older Dells and some
> Linux bootable AV discs, such as Avira and Kaspersky. I've had the best
> luck in such situations, using the BitDefender rescue disc instead:http://download.bitdefender.com/rescue_cd/
>
>
> --
> Glen Ventura
> MS MVP Oct. 2002 - Sept. 2009
>
> - Show quoted text -
This is what I did, I checked the links you gave me for how to use the
BitDefender CD first but it was rather hard to follow and I didn't see
anything that was of help. In any case, I created a BitDefender CD
and I loaded it so that it would boot off the CD. BitDefender came up
and automatically searched for updates then it automatically did a
full scan of my system with no threats detected.
After it was finished I tried removing the disc but it wouldn't let
me. I believe I selected home when a dialog box appeared and I
selected logoff thinking it would take me back to logging off the
computer, but instead it asked for my name and password and at that
point it hung up on the name and password screen. I tried pressing
Esc, and Ctrl-Alt-Del but nothing I did seemed to have any effect. So
again(ugh) I had to press the reset button to get out of it. The
computer came back up with no apparent problems/issues except that the
Spywareblaster icon had disappeared from my desktop however the
program was still there and I made a new icon.
So, if my computer is indeed infected then BitDefender should have
detected it, correct?
All the programs seem to be working normally, except for the passive
immunization of Spybot not completing, and of Spywareblaster not being
able to update. I apologize if I didn't mention that I had resolved
the Word EULA issue by reinstalling it again and accepting the
agreement on the Admin account. However I had tried this previously
and it didn't work but this last time it did.
Thoughts/Suggestions?
Robert
Paul
I got the old version of BitDefender working this morning.
You change the boot line to the following, to prevent
input freeze-up in VPC 2007 (and perhaps on some real
systems too).
knoppix i8042.noloop
Once in there, open a Terminal window and run
/usr/sbin/network-setup
The nice thing about that menu based thing, is you
have more options than just DHCP over ethernet. There is
even some kind of option for PPP over a modem.
Due to the age of that CD, it claimed the "free license" had
expired. But for the first time, I got it to fire up and
accept input.
BitDefenderRescueCD_v2.0.0_3_08_2009.iso
*******
The Aug 2010 version of BitDefender booted OK, and didn't need a
custom boot line. It connected to the network OK, and downloaded
about 18MB of files or so (I wasn't watching it that carefully).
In VPC2007, the screen ended up too small, and I needed to use a
custom xorg.conf , kill the "X" server process, drop to single
user terminal, issue "startx", and then I had a 1152x864 sized
virtual window for the scanner to run. The key ingredients of
a custom xorg.conf (for VPC 2007) are things like:
HorizSync 31.5 - 75.0
VertRefresh 50.0 - 100.0
Modeline "1152x864_50.00" 66.25 1152 1208 1320 1488 864 867 871 892 -hsync +vsync
DefaultDepth 16
SubSection "Display"
Depth 16
Modes "1152x864_50.00"
EndSubSection
That gets around problems with the S3 graphics chip emulated
in VPC 2007 (no 24 bit graphics mode, low max clock for VGA).
I keep a copy of the custom xorg.conf file on the virtual hard drive,
for issues like this (that's part of the work I've done over
the last two weeks).
That wouldn't have stopped a real user like Navyguy, as it's
an issue with VPC 2007 and not so much with real computers.
And BitDefender detected the EICAR file I left on the virtual
hard drive, so it passed the most simple minded test.
Which means, some day, if I need it, I'd actually burn a CD
with it :-)
Paul
glee
Testing them in VPC tells you exactly nothing about compatibility issues
with the various hardware encountered in the field. Because one of them
works on your system, or in VPC on your system, only tests the
usefulness of the app on systems where it runs. You're not testing it
on assorted hardware.
Also, testing an old version (in this case, well over a year old) is a
waste of your time. Improvements made in later versions aren't just to
the scanning engine and defs....bugs are fixed and driver compatibility
is also improved.
As I said a couple of times, I and many others have tested most of the
rescue CDs in the field on dozens of different machines with different
hardware. Some will freeze on certain model laptops, and on many dell
computers. Newer versions of the various rescue CDs have improved their
driver compatibility. This is well documented in support forums for
some of the rescue CDs, moderated by the authors of the CDs.
glee
On Dec 10, 10:43 pm, "glee" <gle...@spamindspring.com> wrote:
> "Paul" <nos...@needed.com> wrote in message
>
> news:idv24k$o8h$1...@news.eternal-september.org...
>>
>> > recipe for using the Kaspersky offline scanner (I came up with a
>> > method to defeat the EULA screen). Any time you find AV software
>> > is not able to get updates over the Internet, that means
>> > you're infected. (Or for that matter, lots of other
>> > strange behaviors, can have the same root cause.)
>>
>> > (The section at the bottom, if your keyboard is working...)
>>
>> >http://groups.google.com/group/microsoft.public.windowsxp.general/msg...
>>
>> Or, far simpler, he could try a different offline AV disc. His Dell
>> network adapter is likely causing the freeze he's getting with
>> Kaspersky...it's a fairly well know issue with older Dells and some
>> Linux bootable AV discs, such as Avira and Kaspersky. I've had the
>> best
>> luck in such situations, using the BitDefender rescue disc
>instead:http://download.bitdefender.com/rescue_cd/
>>
>> Using The BitDefender Rescue Cd
>-http://forum.bitdefender.com/index.php?s=b4c46f52a01a945d6e873890a87c...
>>
>
>BitDefender CD first but it was rather hard to follow and I didn't see
>anything that was of help. In any case, I created a BitDefender CD
>and I loaded it so that it would boot off the CD. BitDefender came up
>and automatically searched for updates then it automatically did a
>full scan of my system with no threats detected.
>After it was finished I tried removing the disc but it wouldn't let
>me. I believe I selected home when a dialog box appeared and I
>selected logoff thinking it would take me back to logging off the
>computer, but instead it asked for my name and password and at that
>point it hung up on the name and password screen. I tried pressing
>Esc, and Ctrl-Alt-Del but nothing I did seemed to have any effect. So
>again(ugh) I had to press the reset button to get out of it. The
>computer came back up with no apparent problems/issues except that the
>Spywareblaster icon had disappeared from my desktop however the
>program was still there and I made a new icon.
>
>So, if my computer is indeed infected then BitDefender should have
>detected it, correct?
>
>All the programs seem to be working normally, except for the passive
>immunization of Spybot not completing, and of Spywareblaster not being
>able to update. I apologize if I didn't mention that I had resolved
>the Word EULA issue by reinstalling it again and accepting the
>agreement on the Admin account. However I had tried this previously
>and it didn't work but this last time it did.
Sorry, I should have told you how to Exit when done, and given you the
link to the manual that explains its use:
http://download.bitdefender.com/rescue_cd/Old/bd_rescue_cd.pdf
The way you're supposed to exit the BitDefender CD when the scan is
completed and closed, is to right-click the BitDefender desktop, and on
the menu that appears, click EXIT. Then you wait for the GUI to close,
and on the black screen a message will soon appear telling you to remove
the CD and restart.
You computer is almost definitely not infected, if you passed the
BitDefender rescue CD scan. We can TRY again to get back on track with
your original issues. I have some instructions for you to follow
exactly, if you can bear with me and avoid trying the other myriad
suggestions that may be posted by others, until we are done.
I'm going to give you one thing at a time, since you have more than one
issue, based on the Spybot and SpywareBlaster problems, and other issues
evident from your Event Viewer log. If I give instructions for all at
once, I think you will become confused....so we need to do a back and
forth through a few messages.
First: I assume you are using Internet Explorer as your default web
browser. Go to Control Panel> Internet Options> Connections tab ....OR
from within Internet Explorer, click its Tools menu> Internet Options>
Connections tab.
On the Connections tab, click the "LAN Settings" button near the bottom
right.
In the LAN Settings window that appears, in the "Proxy Server" section
on the bottom half, there is a check box for "Use a proxy server for
your LAN.." Make sure there is NO check in that box. There should be
NO checks in ANY boxes in the LAN Settings in a normal broadband setup.
Remove all check marks, and click OK, then back in the main Internet
Properties window, click Apply.
IMPORTANT: Tell me if any of those boxes in LAN Settings had check marks
in them when you looked.
While still in Internet Properties, click the Advanced tab at the top.
In the list there, scroll ALL the way down to the "Security" heading,
and put a check in the box for "Empty temporary Internet files folder
when browser is closed" and click Apply.
Now click the General tab at the top of Internet properties.
In the "Browsing History" section, click the Settings button. In the new
window, use the box of numbers in the Temporary Internet Files section
to set the Disk Space To Use to 50. Click OK. This brings you back to
the General tab.
If you have Internet Explorer 7, in Browsing History, click the Delete
button. Then click the "Delete Files" button for "Temporary Internet
Files" and click OK in the confirmation message that pops up. When it's
done deleting files, click Close, then click OK to close Internet
Options.
If you have Internet Explorer 8, in Browsing History, click the Delete
button. In the Delete Browsing History box that appears, put a check in
ALL the boxes EXCEPT Passwords, and click the Delete button.
Close Internet Explorer if it was open.
Now open SpywareBlaster, go to its Update section and try to update.
Post back with your results.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
I will be glad to follow ONLY your instructions to resolve this issue.
I did as you said to the letter and it may be worth noting that In the
Temporary Internet Files and History settings I had already had the
disk space to use as 50. However when I tried to download updates from
Spywareblaster it gave me the same message as before.
I wont do anything until your next set of instructions.
Robert
glee
Please answer BOTH these questions I asked you to answer in my last
post:
- In the LAN Settings window, in the "Proxy Server" section, were any of
the boxes checkmarked when you went there?
- Are they all unchecked now?
Open Spybot, switch the Mode to Advanced Mode, then go to Tools>
Resident, and UNcheck the boxes for both SDHelper and Tea Timer. Close
Spybot.
Open SpywareBlaster, and click on "Updates" on the left side, then click
the "Options" link.
Select "Use a direct connection to the Internet."
Also make sure the box for "Use Alternative Download Method" is
UNchecked.
Close SpywareBlaster.
Reboot.
Start SpywareBlaster and try the Updates again.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
None of the boxes in the Lan settings were checked and I left them
that way and closed the window. So all boxes are UN-checked.
I had uninstalled Spybot in favor of Spywareblaster per your
recommendation and I didn't want a conflict of anti-malware programs.
So I reinstalled it but suprisingly while going through the
installation procedures after checking for updates, I was able to
complete the immunization and passive immunization process.
IN any case, I did as you requested and unchecked the SDhelper and Tea
Timer and closed Spybot.
I then open Spywareblaster>Updates>options but it already had the
settings you described including the ' Use Alternate Download Method'
being UNchecked. I closed Spywareblaster, rebooted, started
Spywareblaster again and checked for updates but it gave me the same
message as before.
The server may be temporarily unavailable or there may be a conflict
with firewall (Windows) software installed on your pc. The update file
may have gotten corrupted during download.
Another thing I've noticed is that of late when loggin off it has that
window that pops up for ending the session but then it comes back and
says not responding and I have to click iot again to end the session.
It may or may not have anything to do with this problem but I thought
you should know.
Robert
glee
>that way and closed the window. So all boxes are UN-checked.
>
>I had uninstalled Spybot in favor of Spywareblaster per your
>recommendation and I didn't want a conflict of anti-malware programs.
>So I reinstalled it but suprisingly while going through the
>installation procedures after checking for updates, I was able to
>complete the immunization and passive immunization process.
>
>IN any case, I did as you requested and unchecked the SDhelper and Tea
>Timer and closed Spybot.
>
>I then open Spywareblaster>Updates>options but it already had the
>settings you described including the ' Use Alternate Download Method'
>being UNchecked. I closed Spywareblaster, rebooted, started
>Spywareblaster again and checked for updates but it gave me the same
>message as before.
>
>The server may be temporarily unavailable or there may be a conflict
>with firewall (Windows) software installed on your pc. The update file
>may have gotten corrupted during download.
>
>Another thing I've noticed is that of late when loggin off it has that
>window that pops up for ending the session but then it comes back and
>says not responding and I have to click iot again to end the session.
>It may or may not have anything to do with this problem but I thought
>you should know.
>
Apparently there's an issue in the recent update from Avira Anti-virus
...which I believe is what you said you are using... causing
SpywareBlaster to fail to update, as well as other issues in other apps.
It is described here:
http://www.wilderssecurity.com/showthread.php?t=288444
http://www.wilderssecurity.com/showthread.php?t=288444&page=2
There is a workaround described here:
http://www.wilderssecurity.com/showthread.php?t=288615
<quote>
It is possible to disable the buggy component of Avira AntiVir Personal,
and continue using the rest of the product (until a fix is made
available by Avira).
1. Open Avira AntiVir Personal. (There is likely an icon on your
desktop, or in your system tray by the clock.)
2. Click the "Configuration" link on the main screen. This opens the
configuration panel.
3. Check the "Expert mode" option.
4. Click on General > Security.
5. *Uncheck* the option titled "Protect files and registry entries from
manipulation".
6. Click the "OK" button.
7. Reboot your computer.
After a reboot, you should now be able to use SpywareBlaster (and any
other affected applications) without issues.
</quote>
Exactly what does it say in the box you are referring to, that pops up
when you try to log off? I don't know what box you mean.
Navyguy
>
> There is a workaround described here:http://www.wilderssecurity.com/showthread.php?t=288615
>
> <quote>
>
> It is possible to disable the buggy component of Avira AntiVir Personal,
> and continue using the rest of the product (until a fix is made
> available by Avira).
>
> 1. Open Avira AntiVir Personal. (There is likely an icon on your
> desktop, or in your system tray by the clock.)
> 2. Click the "Configuration" link on the main screen. This opens the
> configuration panel.
> 3. Check the "Expert mode" option.
> 4. Click on General > Security.
> 5. *Uncheck* the option titled "Protect files and registry entries from
> manipulation".
> 6. Click the "OK" button.
> 7. Reboot your computer.
>
> After a reboot, you should now be able to use SpywareBlaster (and any
> other affected applications) without issues.
>
> </quote>
>
> Exactly what does it say in the box you are referring to, that pops up
> when you try to log off? I don't know what box you mean.
>
> --
> Glen Ventura
> MS MVP Oct. 2002 - Sept. 2009
I read the links you provided and then followed your procedures and
Spywareblaster updated beautifully!@! Everything seems to be working
normally now. I do have one last question for you however. Which anti-
malware program to keep? Should I uninstall Spybot again and keep
Spywareblaster? I seem to remember you saying that there might be
leftovers of Spybot even if I uninstalled it, so which ever I choose
can you tell me how to completely remove it or is the Add/Remove
enough?
The sign off Window problem I now believe was associated with the
above problem and in any case hasn't re-appeared. If it does or I
encounter other problems I will start a new thread.
I appreaciate all your time and effort in walking me through this to
resolve the problem.
Thank you very much
Robert
glee
>Spywareblaster updated beautifully!@! Everything seems to be working
>normally now. I do have one last question for you however. Which anti-
>malware program to keep? Should I uninstall Spybot again and keep
>Spywareblaster? I seem to remember you saying that there might be
>leftovers of Spybot even if I uninstalled it, so which ever I choose
>can you tell me how to completely remove it or is the Add/Remove
>enough?
>
>The sign off Window problem I now believe was associated with the
>above problem and in any case hasn't re-appeared. If it does or I
>encounter other problems I will start a new thread.
>
>I appreaciate all your time and effort in walking me through this to
>resolve the problem.
Be aware that turning off the Avira option, "Protect files and registry
entries from manipulation," is a temporary workaround, until Avira comes
up with an update to fix the issue it's causing in XP. Eventually it
should be turned back on....the problem is they likely won't let you
know when it's been fixed. So, you will have to try re-enabling the
setting after a week or so, and see if it causes problems again. If it
does, disable it again and try again in another week. If the problem is
gone, then they apparently fixed it with an update, and you can leave it
enabled.
To test it, you would enable the setting in Avira, and see if it
interferes with SpywareBlaster update anymore.
You can have both SpywareBlaster and SpyBot installed with no problems.
I just don't find SpyBot particularly useful. It has two "resident"
modules....SDHelper and Tea Timer. Tea Timer can cause a lot of
problems, preventing other apps from updating or working properly, or
even installing properly. SDHelper isn't a problem in most cases.
I always recommend disabling Tea Timer, as do most handlers in malware
removal forums.
If you decide to uninstall SpyBot (as I said, there's no reason to, but
do disable Tea Timer), just uninstall normally, reboot, and if it left a
folder in Program Files, delete it. That should be good enough.
I do have more things you should do to clean up some issues that are
evident from your Event Viewer logs. It's pretty much just some
maintenance/cleanup stuff and adjusting a setting....but I have to go
right now, as I have an appointment. I'll post back in a few hours,
with some further instructions.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
>
> news:c657cc90-ea08-4d81...@n2g2000pre.googlegroups.com...
>
>
>
>
>
> >On Dec 11, 9:17 pm, "glee" <gle...@spamindspring.com> wrote:
>
> >> Apparently there's an issue in the recent update from Avira
> >> Anti-virus
> >> ...which I believe is what you said you are using... causing
> >> SpywareBlaster to fail to update, as well as other issues in other
> >> apps.
> >> It is described
I'll be glad to follow further instructions to clean up the computer
and I wont do anything until I hear from you again.
With regards to Spybot and Spywareblaster if you feel that Spybot
doesn't offer anything worthwhile or useful then I would prefer to
delete it to keep my computer as lean and clean as I can.
Robert
Nil
microsoft.public.windowsxp.general:
> With regards to Spybot and Spywareblaster if you feel that Spybot
> doesn't offer anything worthwhile or useful then I would prefer to
> delete it to keep my computer as lean and clean as I can.
I keep Spybot installed for its one feature that I like, Immunize. It
updates your hosts file and browser's block-the-bad-guy lists once a
week. Otherwise I don't depend on it for anything, and I've never used
its resident protection programs.
glee
>
>I'll be glad to follow further instructions to clean up the computer
>and I wont do anything until I hear from you again.
>
>With regards to Spybot and Spywareblaster if you feel that Spybot
>doesn't offer anything worthwhile or useful then I would prefer to
>delete it to keep my computer as lean and clean as I can.
I agree with Nil. Keeping SpyBot for its Immunization and similar
features can be helpful.....just turn off the Resident protection
features....particularly Tea Timer!
I'll be back in a while.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
ok, I'll keep Spybot, but again, I will not and have not done anything
until I hear from you.
Robert
glee
>ok, I'll keep Spybot, but again, I will not and have not done anything
>until I hear from you.
Your Event Viewer logs showed some issues with System Restore. You said
recently in this thread that you were finally able to create a restore
point, but you had some problems prior to that. To prevent future
issues, let's adjust the System Restore settings, and clear out some old
restore points. At the same time, let's clean up the temporary files.
This link shows how to adjust the disk space allotted to SR:
How to Adjust the amount of disk space System Restore uses to hold
restore points:
http://bertk.mvps.org/html/diskspace.html
Right click on My Computer and select Properties > System Restore tab.
Select the monitored drive (the C: drive usually) to be adjusted and
click Settings.
Move the slider to the left to reduce the size of the Disk Space used to
hold restore points.
Adjust your slider to just over 1GB.... make it between 1000MB and
1500MB on the slider, for the C: drive.
Note: Reducing the Store size will purge the oldest restore points on a
First In Firsts Out (FIFO) bases and leave as many recent restore points
as the new size will allow.
If there are any other drives listed besides the C: drive (assuming the
C: is the system/boot drive), they do not need to be included in System
Restore.
This link tells you how to stop monitoring them in System Restore:
How to disable a monitored drive:
http://bertk.mvps.org/html/drivedisable.html
OEM computers like a Dell will usually have a D: drive (actually a
partition on the same hard drive) that is for system recovery to factory
state....such drives do not need to be monitored by SR.
Once that is done, you should only see the C: drive being monitored by
System Restore, in that settings window.
Now start Disk Cleanup: Click Start> All Programs> Accessories> System
Tools> Disk Cleanup
Select the C: drive, click OK, and wait for it to complete its scan.
Now, put checks in the boxes for Downloaded Program Files, Temporary
Remote Desktop Files, Setup Log Files, Offline Files, Web
Client/Publisher Temporary Files, and Catalog Files for the Content
Indexer. You may not see all of those....just checkmark the ones you
have listed.
Do not checkmark the box for Compress Old Files....you do not need to do
that with all the free space you have available.
We will manually empty the Recycle Bin later, so you don't have to
checkmark that one either.
Now click OK, and wait while it deletes the files, then it will close
automatically.
How to Use the Disk Cleanup Utility
http://www.theeldergeek.com/disk_cleanup_utility.htm
Now open check the Recycle Bin on the desktop to make sure there is
nothing there you want to restore, because we will be emptying it soon.
Next, go here and download ATF-Cleaner.exe, and save it to your Desktop:
http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25
(There is a red download link near the middle of the web page)
Double-click ATF-Cleaner on your desktop, click to checkmark the Select
All box.
If you do not want to delete all your web browser Cookies, uncheck the
Cookies box.
Click the Empty Selected button, and wait while it deletes the files.
When it's done, click the Exit button.
You can use ATF-Cleaner and Disk Cleanup periodically...perhaps once a
month. You should ideally use them right after starting or restarting
the computer, rather than in the middle or the end of a computing
session.
That should clean up the system a bit, and hopefully prevent further
issues with System Restore.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
>
> Now open check the Recycle Bin on the desktop to make sure there is
> nothing there you want to restore, because we will be emptying it soon.
>
> (There is a red download link near the middle of the web page)
>
> Double-click ATF-Cleaner on your desktop, click to checkmark the Select
> All box.
> If you do not want to delete all your web browser Cookies, uncheck the
> Cookies box.
> Click the Empty Selected button, and wait while it deletes the files.
> When it's done, click the Exit button.
>
> You can use ATF-Cleaner and Disk Cleanup periodically...perhaps once a
> month. You should ideally use them right after starting or restarting
> the computer, rather than in the middle or the end of a computing
> session.
>
> That should clean up the system a bit, and hopefully prevent further
> issues with System Restore.
> --
> Glen Ventura
> MS MVP Oct. 2002 - Sept. 2009
> CompTIA A+http://dts-l.net/
This is what I did I right clicked on my computer and selected
properties>system restore tab but I didn’t have to select any drive as
it only showed C: drive and there was no settings that I could see,
however it showed the slider. The only position the slider accepted
within the range you indicated was either 200MB or 1752MB (1%) because
it wouldn't let me put it between them so I left it at 1752MB.
When running Disk Cleanup, I checked all the boxes that applied (it
had an Offline Web Pages but not Offline Files) so I didnt click it.
In passing, after doing the ATF-Cleaner, I tried to click and drag my
Excel icon to the quick lauch toolbar but it kept opening it instead
of letting me drag it ( this is a problem I've noticed that my mouse
seems to have gotten overly sensitive and wont let me click and drag
or if it does when I let go of the mouse the highlighted section
disappears. This happens repeatedly, so perhaps I need a new mouse?).
In any case, I unlocked the toolbar thinking it may help but somehow
my taskbar flipped during this process and now it's at the top! Can
you please tell me how I can put it back to the bottom of the screen?
As I understand it, the only thing I need do now is check if Avira has
fixed the problem by restoring the settings, if not then *Uncheck*
the option titled "Protect files and registry entries from
manipulation" until they fix the problem. correct?
Robert
glee
>
>This is what I did I right clicked on my computer and selected
>properties>system restore tab but I didn’t have to select any drive as
>it only showed C: drive and there was no settings that I could see,
>however it showed the slider. The only position the slider accepted
>within the range you indicated was either 200MB or 1752MB (1%) because
>it wouldn't let me put it between them so I left it at 1752MB.
>
>When running Disk Cleanup, I checked all the boxes that applied (it
>had an Offline Web Pages but not Offline Files) so I didnt click it.
>
>In passing, after doing the ATF-Cleaner, I tried to click and drag my
>Excel icon to the quick lauch toolbar but it kept opening it instead
>of letting me drag it ( this is a problem I've noticed that my mouse
>seems to have gotten overly sensitive and wont let me click and drag
>or if it does when I let go of the mouse the highlighted section
>disappears. This happens repeatedly, so perhaps I need a new mouse?).
>In any case, I unlocked the toolbar thinking it may help but somehow
>my taskbar flipped during this process and now it's at the top! Can
>you please tell me how I can put it back to the bottom of the screen?
>
>As I understand it, the only thing I need do now is check if Avira has
>fixed the problem by restoring the settings, if not then *Uncheck*
>the option titled "Protect files and registry entries from
>manipulation" until they fix the problem. correct?
For the System Restore slider, 1752MB is close enough....good.
The next time you run Disk Cleanup, put a check in the box for Offline
Web Pages also...unless it already shows there are 0KB there.
Assuming your mouse works normally in other aspects and you have it set
to open with a double-click rather than a single-click, the problem may
be due to a faulty mouse.....they do wear out.
For the taskbar moving to the top, first make sure it is unlocked, then
put the mouse pointer in a blank part of the taskbar, click and hold the
left mouse button, and drag it down to the bottom center. You won't see
anything move till you are almost at the bottom, then the taskbar will
suddenly jump there. When it does move where you want it, you can
release the mouse button. Now you can Lock the Taskbar again.
Navyguy
> "Navyguy" <maginee...@yahoo.com> wrote in message
Since I had to go back to the Admin account I went back into Disk
Cleanup and checked the Offline Web Pages as it had 25kb. I was able
to move the task bar per your instructions and locked it.
As far as my mouse, I apologize, I should have realized when moving
the icons it would open them because I have it set for single click (I
have torn wrist cartilages in both wrists along the multiple other
injuries). I should of changed it to double click to move them and
then back to single click but would that also effect it when trying to
copy/past in Word?
What happens is that I click and drag to highlight the text but when I
release the mouse button the highlight disappears or in other cases it
moves bits of the text. It's become so frustrating that I just cut/
paste. Another example of this is when I save a link and when I try to
drag it to a favorites folder it ends up in another as I'm dragging
it.
I don't mean to keep adding to this thread which is already quite long
and perhaps I should start another just for the mouse issue or perhaps
as I said I need a new mouse?
Again, I wish to thank you for all your patience and good advice in
helping me to resolve my computer problem. I appreciate it very much.
Robert
MyNews
For Glen is one of the Best!
But some time We get it his way!
It's good to see he help you out with good Info!
Only in have to go all thou the thread and make Notes!
Like to see Glen notes, But it would take out the Fun in Looking for info
in all the thread !
glee
>
>Since I had to go back to the Admin account I went back into Disk
>Cleanup and checked the Offline Web Pages as it had 25kb. I was able
>to move the task bar per your instructions and locked it.
>As far as my mouse, I apologize, I should have realized when moving
>the icons it would open them because I have it set for single click (I
>have torn wrist cartilages in both wrists along the multiple other
>injuries). I should of changed it to double click to move them and
>then back to single click but would that also effect it when trying to
>copy/past in Word?
>
>What happens is that I click and drag to highlight the text but when I
>release the mouse button the highlight disappears or in other cases it
>moves bits of the text. It's become so frustrating that I just cut/
>paste. Another example of this is when I save a link and when I try to
>drag it to a favorites folder it ends up in another as I'm dragging
>it.
>
>I don't mean to keep adding to this thread which is already quite long
>and perhaps I should start another just for the mouse issue or perhaps
>as I said I need a new mouse?
>
>Again, I wish to thank you for all your patience and good advice in
>helping me to resolve my computer problem. I appreciate it very much.
I don't use the single-click option and have never played with it, so
perhaps you should start a new thread on the issues you are having with
that.
Remember though, when you use the single-click option, just placing the
mouse cursor over something highlights (selects) it, so experiment with
that.
I haven't got time right now to experiment for you with single-clicks
and dragging, text-highlighting and so forth. Start a new thread and
someone who uses single-click may have all your answers. If not, I'll
try to test it later this week.