BleepingComputer.com: Am i infected i don't know . . .

Hi !

I am using Windows Professional on which i was using F-Secure till now, but it stopped one fine day and would not start manually even. I tried reinstalling but it gave an internal error. At present i am using trial version of Kasperski. I did not understand the reason for F-secure stopping immediately.

Well after two days of using Kasperski i am now having problems with my Winamp. It would not start, so i tried reinstalling but it gave an error: The application failed to initialize properly (0xc0000034). Click on OK to terminate the application.

Also in guest account if i click start then go to internet explorer it says Access Denied.

Well i have MBAM so i tried quick scan. It did not give any errors.

I also tried BitDefender online scan and Trend Micro House Call. Even they did not point out any errors.

I know somwhere something is wrong, but what i have no idea.

Please guide me. Thanks

Lokesh

This post has been edited by boopme: 22 May 2010 - 04:09 PM

Hello. I am moving you to the XP forum as I think this is a storage controller driver issue.

Let's try the following.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file.

When scanning is done, Edit/Select All...then File/Save Selected Items. Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Louis

Louis

I started BlueScreenView.exe

But no scan started, it just shows 0 crashes in the bottom left corner. The File/Save Selected Items option is grayed out.

Lokesh

The fact that there are no STOP error messages...indicates that you don't have a driver problem or your system is not preparing messages for STOP errors. A STOP error results in a BSOD and I don't see where you have such. Soooo...BlueScreenView may have nothing to work with.

System manufacturer and model?

How much RAM installed?

Is XP current with critical updates?

<<...application failed to initialize properly (0xc0000034)>>

This error message occurs with various applications and I can't pinpoint a cause.

I suggest two things:

a. Uninstall the application for which the error appears...then reinstall/update same.

b. Run the sfc /scannow command, following the directions provided.

How To Use Sfc.exe To Repair System Files - http://www.bleepingcomputer.com/forums/topic43051.html

I would also suggest that you take a look in Event Viewer and review the errors (not warnings, not information items) listed. Please read and follow the directions for reviewing Event Viewer items.

Post the detail (Source, Event, and detail) for the last 5 errors listed in Event Viewer. The detail for each line item can be seen by double-clicking that line item.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/topic40108.html

Louis

These are the last 5 errors from event viewer :

1. Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3017
Date: 5/24/2010
Time: 12:11:34 AM
User: N/A
Computer: CHINTS
Description:
Cannot update Last Counter value of SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib key. The error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 00 00 45 0e 00 00 ....E...

2. Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3009
Date: 5/24/2010
Time: 12:11:34 AM
User: N/A
Computer: CHINTS
Description:
Installing the performance counter strings for service WmiApRpl (%2) failed. The Error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 00 00 f6 13 00 00 ....ö...

3. Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3017
Date: 5/23/2010
Time: 11:02:10 AM
User: N/A
Computer: CHINTS
Description:
Cannot update Last Counter value of SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib key. The error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 00 00 45 0e 00 00 ....E...

4. Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3009
Date: 5/23/2010
Time: 11:02:10 AM
User: N/A
Computer: CHINTS
Description:
Installing the performance counter strings for service WmiApRpl (%2) failed. The Error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 00 00 f6 13 00 00 ....ö...

5. Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3017
Date: 5/23/2010
Time: 12:27:18 AM
User: N/A
Computer: CHINTS
Description:
Cannot update Last Counter value of SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib key. The error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 00 00 45 0e 00 00 ....E...

Now about sfc.exe /scannow command

When i run the command i get :

Files that are required for Windows to run properly must be copied to the DLL Cache.

Insert your Windows XP Professional Service Pack 3 CD now.

As per the instructions in the article mentioned by you i would need to download the Service Pack 3 and then extract in C: drive which would allow me to point SFC to the files needed.

I am presently downloading Service Pack 3, would then run SFC.EXE /SCANNOW and then get back to you.

So far thanks for the help !!

Lokesh

This post has been edited by Lokeshm: 23 May 2010 - 02:42 PM

Well i downloaded SP3 and extracted using the following command:

CODE
"%userprofile%\Desktop\WindowsXP-KB936929-SP3-x86-ENU.exe" -x:C:\xpsp3

After it said extraction complete i ran

sfc /scannow

But it still says :

Files that are required for Windows to run properly must be copied to the DLL Cache.

Insert your Windows XP Professional Service Pack 3 CD now.

How do i point SFC to the folder where i extracted the files ?

Well...those instructions may not necessarily work...for good reason.

Typically...slipstreaming a MS Genuine XP CD with the appropriate SP...using nLite...will yield satisfactory results either running the sfc /scannow command or using a slipstreamed XP CD for repair purposes. That is the method I would suggest.

http://www.bleepingcomputer.com/tutorials/slipstreaming-windows-xp-to-create-bootable-cd/

I have tried this i386 folder trick (because I saw people suggesting it) a couple of times with no success with that method.

Louis

Well i had to go out of town for some official work.

I will get back and try your suggestion hamluis.

Hoping to reach home soon. .

I ran the sfc /scannow command. It finished without giving any messages. What should I do next ?

What SP is reflected on the disk you used to run sfc /scannow?

What SP is reflected on your system?

System manufacturer and model?

Louis

I forgot to mention i had used the Xp Professional disk service pack 2 to repair install prior to running the sfc /scannow command.

Now my pc has Service pack two and i am now running Automatic Updates to upgrae to service pack three.

Did i do something wrong ?

Well...a repair install and running sfc /scannow...accomplish the same thing, as far as system files go.

What SP was installed on the system...prior to this repair install?

System manufacturer and model?

I suspect that you have corrupted system files by your efforts.

Louis

FWIW: Looking back over previous threads you have posted...I find it odd that these same instructions/information items...were previously given you about a year ago.

This post has been edited by hamluis: 30 May 2010 - 09:03 AM

Prior to repair install i had Windows Service Pack 3 installed.

System Manufacturer is Hewlett-Packard

Model : HP Compaq dx6100 MT(PK079PA).

I had no memory of these instructions being given to me a year ago. Maybe my RAM is corrupted :-)

Now i'll check my earlier posts . .

This post has been edited by Lokeshm: 01 June 2010 - 09:56 PM

You might review this thread, http://www.bleepingcomputer.com/forums/topic202618.html .

FWIW: In general...instructions for repair installs, etc...are not written to cover any system where recovery/restore disks/partitions exist. These are OEM systems (HP, Toshiba, etc.) where the manufacturer has changed the rules for repairing Windows problems or reinstalling the O/S. In these cases...unless the user deletes all pre-existing partitions and subsequently does a clean install of XP using a MS Genuine XP CD...instructions provided for repair/reinstall may fail.

In all other cases...efforts to repair/reinstall the O/S...are totally dependent on the recovery/restore disks/partitions.

Louis

This post has been edited by hamluis: 02 June 2010 - 09:37 AM