BleepingComputer.com: FREQUENT CRASHING

I have already been through malware troubleshooting with boopme in "Am I infected" forum.

I have been re-directed to XP forum.

I have had a recent onset of new problems, as follows:

Recently, past 3weeks, my computer has been exhibiting new behaviors.

First, I started getting a windows error message popup when I opened firefox. "windows cannot find the file, path, etc. You may not have access, etc" I only have one user, full privileges. I would also generate this error message sometimes by clicking a website link. I traced this error to an Adobe extension in firefox, ADOBE DLM, which I disabled, no more error messages.

My CD/DVD burner began to have difficulty reading DVD backup discs, mostly pictures. Sometimes, if I leave the disc in the player and reboot, the player will recognize the disc. Inconsistent. Disc is not corrupt, I think.

Microsoft backgammon game will generate an error message "Zone datafile has encountered a problem" Again, inconsistent.

Firefox will crash and restart browser.

Firefox will crash all the way to a Windows reboot.

Windows will crash from vid player.

Windows will crash from picture viewer.

System restore shows no restore points, even though when I first discovered this phenomenon, I created a restore point. It no longer exists.

etc.

Apparently, not a malware issue.
Any suggestions?

Thanks.

Check the last five errors (most recent) noted in Event Viewer.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/topic40108.html

System manufacturer and model?

Louis

This post has been edited by hamluis: 09 May 2010 - 06:57 AM

Toshiba satellite A25-s307
Windows XP Home
2G RAM

Last 5 Errors:

Application- source: crypt 32

System- source: DCOM and service control manager

Please post the detail of the Event Viewer errors, if you are going to post any info.

It is the details that provide the clues.

You can see the detail for any line item by simply double-clicking on that line item as it exists in EV.

Pertinent data from the columnar headings in EV: Source, Category, Event (ID).

Might as well also try the following.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file.

When scanning is done, Edit/Select All...then File/Save Selected Items. Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Have you tried uninstalling and then reinstalling Firefox?

Louis

OK. Last 5 application error details:

Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 5/9/2010
Time: 10:07:40 AM
User: N/A
Computer: TOSHIBA-USER
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 5/9/2010
Time: 1:49:36 AM
User: N/A
Computer: TOSHIBA-USER
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 5/9/2010
Time: 1:49:24 AM
User: N/A
Computer: TOSHIBA-USER
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 5/8/2010
Time: 11:34:02 AM
User: N/A
Computer: TOSHIBA-USER
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 5/8/2010
Time: 11:34:00 AM
User: N/A
Computer: TOSHIBA-USER
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Last 5 System errors:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/7/2010
Time: 4:23:19 PM
User: NT AUTHORITY\SYSTEM
Computer: TOSHIBA-USER
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/7/2010
Time: 6:59:30 AM
User: TOSHIBA-USER\ADMIN
Computer: TOSHIBA-USER
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/7/2010
Time: 6:59:03 AM
User: TOSHIBA-USER\ADMIN
Computer: TOSHIBA-USER
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/7/2010
Time: 6:58:14 AM
User: TOSHIBA-USER\ADMIN
Computer: TOSHIBA-USER
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 5/7/2010
Time: 6:57:40 AM
User: N/A
Computer: TOSHIBA-USER
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
Fips
HWiNFO32
intelppm
IPSec
kl1
KLIF
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
SASDIFSV
SASKUTIL
Tcpip
vsdatant

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.





-The link http://www.nirsoft.net/utils/blue_screen_view.html, would not connect, timed out, problem loading page error.

-I just now uninstalled firefox using add/remove, and reinstalled the program, latest version.

Thank you for your help.

Info on DCOM, Event ID 10005 Errors

Suggested Fix, Event ID 8, Crypt32 Error.

Event ID 7026, Service Control Manager...just guessing here. Vsdatant.sys is one of the drivers listed as not loading, this is a driver for ZA firewall. If you have that installed, I suggest uninstalling it, then reinstalling.

I would also like for you to manually go to both the Windows Update website...and the main Microsoft.com website...just testing. Also...see if you can update your installed AV program.

You might try the BlueScreen link again, it's important.

Louis

OK

besides spending the day on turbotax issues...

I have also visited both microsoft update websites and updated...

Bluescreenview link still does not work. I have tried from every angle, with same "problem loading page" message.
I visited the webpage raw, and tried to link that way, no luck.
Perhaps it is a really really busy server?

I just checked event viewer and see recent errors of the same kind as usual.
But, my computer has not crashed from any program status in roughly 24+ hours despite tax program efforts up the wazoo, to put it mildly, today.

I have also uninstalled and reinstalled several software programs.
Firefox browser
IE..which was disabled
and my printer, Lexmark, software.

I hesitate to uninstall/reinstall zonealarm software due to licensing key which might expire, or otherwise confuse me.

any thoughts?
Thanks.

<<I hesitate to uninstall/reinstall zonealarm software due to licensing key which might expire, or otherwise confuse me.>>

I don't understand. Don't you have the key written down somewhere, if you have a paid version? I've not heard of a license expiring...in the time it takes to uninstall/reinstall a program.

Are the browsers working properly?

Did you attempt to update your AV program installed?

Louis

Yup, I have the key. I can do that uninstall/reinstall.

Browsers seem to be working, still no crashes for awhile.

Zonelabs security suite is my AV, and yes, it has been updated.

thanks again

Still crashing.
IE and Firefox both crash.
I uninstalled and reinstalled Firefox, IE, and Zonelabs security suite. Updated all, including Windows.
Disabled some more add-ons in Firefox.

Updated Ashampoo burning studio and attempted some backups. I expect I may have to format HD.
First backup had an error, no longer recognized by the drive.

I installed bluescreenview.

Event viewer still showing crypt32 error, but not since 8:30 this AM. Several crashes since then.

You know...sometimes it's just best to do a clean install...sometimes running chkdsk /r is all that's needed.

It's the old "humpty-dumpty" principle of life...no matter what you do, things will never be as they were, way back then before you installed all of your programs and whatever else may have fouled the system up.

I suggest that you run tests on your hard drive...and your RAM...as a prelude to moving forward. It helps to know that key components are capable of doing their job.

Bootable Hard Drive Diagnostics - Vox - http://usasma.vox.com/library/post/bootabl...iagnostics.html

Memtest86+ - Advanced Memory Diagnostic Tool - http://www.memtest.org/#downiso

How to write a CD-DVD image or ISO - http://www.bleepingcomputer.com/tutorials/write-a-cd-dvd-image-or-iso/

Systems are not supposed to crash an infinite number of times in a day or week.

Louis

Thanks Louis
I just completed a memtest run. No errors in my mem.

system crashed on a reboot.

I am not psyched for clean install, it's an old machine.
I will explore VOX and disc-imaging options.

IMO...old machines are those which are most in need of clean installs and routine system maintenance.

Louis

Louis...thanks again


I visited Vox and followed procedure as best I could.
No Toshiba check-ware available, according to website.

I proceeded with hitachi-ware, as suggested on site.

I was able to run from boot disc, but no problems were discovered.

EDIT: I ran chkdsk with no results.

Does anyone have any ideas?
What about bluescreenview?
No clues from that software?

This post has been edited by senseless: 25 May 2010 - 10:25 PM