BleepingComputer.com: Symsetsymwithaddr64

Hi all,
I am having a problem with my PC. It keeps crashing and restarting with an error message from the “savedump.exe”:
“The procedure entry point SymsetSymWithAddr64 could not be located in the dynamic link library dbghelp.dll”
Does anyone know how to solve this problem? I tried restoring the PC but it is refusing to go to any restore point in any month other than September!
Thank you.

The first thing to do being that you cannot perform a System Restore is to boot in safe mode and choose last known good configutration.

If that isn't successful, do you have a Windows XP installation cd?

If you did you could use it to replace missing or damaged system files.

To do that you would place the Windows CD in the cd drive and boot to safe mode with command prompt.

Type the following in the command prompt:

sfc /scannow

Make sure that you leave a space between the sfc and the /.

Windows will then check that all operating system files are in place and original.

I tried to wade through this KB article but it gave me a huge headache!

http://support.microsoft.com/default.aspx?...kb;en-us;189780

The gist that I got from it was this was supposed to happen!

I'm presuming that this is caused by an application other than Windows. If so, I'd check your Event Viewer for Applications crashes around the time that the crashes occurred. If it's not in the Application log, then it may be in the System log. Here's a link on how to do it: http://www.bleepingcomputer.com/forums/topic40108.html

Thank you Enthusiast and usamsa..
I tried rebooting with last known good configutration... it did not solve the problem.. I will try the CD later.
For usamsa, here is what i got from the Event Viewer:

Applications:
Warning:
The description for Event ID ( 19011 ) in Source ( MSSQL$PINNACLESYS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: (SpnRegister) : Error 1355.

System:
Error:
The Tecnomatix License Manager service terminated unexpectedly. It has done this 1 time(s).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The Webroot Spy Sweeper Engine service failed to start due to the following error:
The system cannot find the file specified.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The General Purpose USB Driver (adildr.sys) service failed to start due to the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Warning:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

There was no errors or warnings for the security part.

Notes:
Tecnomatix is a simulation software I instaled on mu PC long time ago (2003) and I don't use it these days.
Webroot Spy Sweeper was uninstalled recently from my PC.

I would suggest running an av scan from safe mode if possible.

Also use some on line scans as well: (you must use Internet Explorer for these and accept installation of ActiveX components when prompted)

Windows Live Onecare Free Scan
http://safety.live.com/site/en-us/default.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Ewido Online scan
http://www.ewido.net/en/onlinescan/


Trojan scans –
Sygate Trojanscan
http://scan.sygatetech.com/pretrojanscan.html

Windows Security Trojanscan
http://windowsecurity.com/trojanscan
See instructions for it here:
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Parasite scan from Aumha:
http://www.aumha.org/a/noads.php
or here:
http://www.aumha.org/win5/a/noads2.htm

Run as many of the above as your patience allows.

Let them fix what they find when possible.

then insert your Windows CD and run scannow

Was the date for Event ID ( 19011 ) from before or after you uninstalled Technomax and Webroot, and what did you use to uninstall them?

The "TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts" is worrisome because what is it exactly that is trying to access the Internet? - Trojans?

So make sure the Trojan scans are some of the online scans you do.

Thanx Enthusiast…
I will try what you have suggested (although I have McAfee Antispyware enabled).
Regarding the Event ID(19011), I never run Event Viewer before so I don’t know if it occurred before uninstalling Webroot. However, on this occasion it occurred after uninstalling Webroot. Regarding Tecnomatix it is still on my PC I haven’t installed it.
By the way, I have BitComet (sharing software) and it is always on 24/7 (when the pc is not crashing)!

It seems to me that you've got several programs on your system that aren't doing what they should do.

The Tecnomatix shouldn't be doing anything without your permission
The WebRoot Spysweeper should be gone, since you uninstalled it.
I am not familiar with MySQL, but the error message seems to indicate a problem with it.

Finally, quite a lot of the software available over P2P is laden with viruses and spyware. Since your's is on 24/7 I think that antivirus and antispyware scans are in order.

I'm not familiar with McAfee (and don't like it), but it is supposed to be fairly good at preventing viruses. I have no clue about it's anti-spyware abilities tho'.

Hi Enthusiast,
I did the scans and found some spywares…
I could not run the scan now!! Maybe because the CD I got is different from the one used to install MS XP on my PC (I bought the pc with the operating system already installed).

What specifically did the scans find?

Hi Enthusiast,
The results of the scans were low and medium risk spywares (mostly cookies). Sorry I don’t remember the names apart from one called WhenU.

Cookies are not what is wrong with yiur computer.

Shut down Bearshare (or any other P2P) so your maximum tcip connections should not be exceded and see if number of events decilne or dissappear.

Where is the Windows CD for THIS computer or the factory restore disks?

I have solved most of the error events used to appear in the Even Viewer. The ones that left are the following Warnings:

The description for Event ID ( 19011 ) in Source ( MSSQL$PINNACLESYS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: (SpnRegister) : Error 1355.

TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


The first one is related to Pinnacle Studio and the second one is related to the p2p software.
Now, when the pc crashes, no events associated with the crash appears in the Even Viewer when it is run directly after the crash!

I did not get the Windows CD when I bought the PC! There were some CDs. I will check them now to see what I can find!

I've just checked.. I've got the product recovery cd... it doesn't say what software it contains...
The constructions says:
insert the cd and turn the pc on while pressing the C key and follow the instructios.

The Recovery cd will restore the operating system and software on the computer to exactly the state it was when it was new.

You will have to redo all updates you have done since you got the computer new and install all software you added again.

If that is what you want to do back up all your data so it can be restored.

Do you still have Pinnacle installed?

Is your computer crashing?

Yes, I still got Pinnacle installed...
yes, the system continues to crash.
Note: I may not consider the recovery if it requires reinstalling all the updates and softwares (unless it is the last option). It will take a great deal of time, and there is some important software I don’t have on CDs