Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Crash With Dos Page


  • Please log in to reply
15 replies to this topic

#1 JXBlack

JXBlack

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 25 April 2008 - 11:12 PM

I have been plagued by a frequent crash of my Desktop running WinXP Sp2. It automatically re boots and just as it's crashing it shows a full DOS page that flashes by so fast it can't be read. I have copied the evemt viewers details for my last crash and I hope some one can help me find a solution. Thanks

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 4/25/2008
Time: 4:15:48 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
The NMSAccess service failed to start due to the following error:
The system cannot find the file specified.
_________________________________
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 4/25/2008
Time: 4:15:37 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
_______________________________
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 4/25/2008
Time: 4:15:37 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
--------------------------------
Event Type: Error
Event Source: ati2mtag
Event Category: CPLIB
Event ID: 52225
Date: 4/25/2008
Time: 4:15:01 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
CPLIB :: Open Session - Failed to load the library
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 33 00 00 00 01 cc 00 c0 3....╠.└
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
_______________________________
Event Type: Error
Event Source: sptd
Event Category: None
Event ID: 4
Date: 4/25/2008
Time: 4:14:24 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Driver detected an internal error in its data structures for .

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 52 00 ......R.
0008: 00 00 00 00 04 00 04 c0 .......└
0010: c6 00 00 00 00 00 db ba Ă.....█║
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
_______________________________
Event Type: Error
Event Source: sptd
Event Category: None
Event ID: 4
Date: 4/25/2008
Time: 4:14:24 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Driver detected an internal error in its data structures for .

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 52 00 ......R.
0008: 00 00 00 00 04 00 04 c0 .......└
0010: c6 00 00 00 00 10 68 ba Ă.....h║
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
______________________________

BC AdBot (Login to Remove)

 


m

#2 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 26 April 2008 - 03:43 AM

These are related to the service and drivers related to:
1. Your CD Burning or Data Backup application.
2. Your external time synchronization.
3. Ati video card.

Have you recently installed or updated one of them?

#3 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 26 April 2008 - 05:02 AM

Not that I am aware of??? This has been going on for at least 4 months.

#4 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 26 April 2008 - 07:29 AM

1.Could you name the first application, identify the service and startup entry of the first one? You should temporarily disable the service and configure the application not to start with windows.

2. You should temporarily turn off external time synchronization and remove it from the scheduled tasks.

3. Then update your Ati driver.

If you give some specifications of your system and name the applications you are using I can help you with that.

#5 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 26 April 2008 - 04:51 PM

Thanks for your reply.

#1 Sorry to say I can't remember what the first application was>
#2 The only shedule tasks I am aware of is a nightly AVG up date. Do you mean I should stop this ?
#3 My Display Manager says I have a Radeon X300/X550 Display Adapter. Would it be appropriate to intall the Catalyst Software Suite from this Web Site http://game.amd.com/us-en/drivers_catalyst...p=xp/radeonx-xp

I have added below a copy of Belarc Advvisor for my computer, I hope this is helpful.
________________________________________________________________________________________________

Belarc Advisor
The license associated with the Belarc Advisor product allows for free personal use only. Use on multiple computers in a corporate, educational, military or government installation is prohibited. See the license agreement for details. The information on this page was created locally on your computer by the Belarc Advisor. Your computer profile was not sent to a web server. Click here for more info.

About Belarc

System Management Products

Your Privacy



In page Links:

Installed Hotfixes

Software Licenses

Software Versions



System Security Status
CIS Benchmark Score
Score
1.88 of 10 (details...)


Virus Protection
OK
Up-to-date


Microsoft Security Updates
Alert!
16 missing



Computer Profile Summary
Computer Name: Users-0cdaea86a (in WORKGROUP)
Profile Date: Sunday, April 27, 2008 5:43:02 AM
Advisor Version: 7.2x
Windows Logon: daddy

Click here for Belarc's System Management products, for large and small companies.

Operating System System Model
Windows XP Professional Service Pack 2 (build 2600) MICRO-STAR INTERNATIONAL CO., LTD MS-7125 1.0
Enclosure Type: Desktop
Processor a Main Circuit Board b
1.80 gigahertz AMD Athlon 64
256 kilobyte primary memory cache Board: MICRO-STAR INTERNATIONAL CO., LTD MS-7125 1.0
Bus Clock: 201 megahertz
BIOS: Phoenix Technologies, LTD 6.00 PG 11/28/2005
Drives Memory Modules c,d
243.96 Gigabytes Usable Hard Drive Capacity
25.93 Gigabytes Hard Drive Free Space

GC3620U IWP345E SCSI CdRom Device [CD-ROM drive]
PIONEER DVD-RW DVR-109 [CD-ROM drive]
SCSIVAX DVD/CD-ROM SCSI CdRom Device
SONY CD-RW CRX160E [CD-ROM drive]
3.5" format removeable media [Floppy drive]

MAXTOR 6L080L4 [Hard drive] (80.05 GB) -- drive 0, s/n 664202002579, rev A93.0500, SMART Status: Healthy
Maxtor 6Y160M0 [Hard drive] (163.93 GB) -- drive 1, s/n Y48F0E0E, rev YAR511W0, SMART Status: Healthy 1536 Megabytes Installed Memory

Slot 'A0' has 256 MB
Slot 'A1' has 256 MB
Slot 'A2' has 512 MB
Slot 'A3' has 512 MB
Local Drive Volumes


c: (NTFS on drive 1) 52.43 GB 3.60 GB free
d: (NTFS on drive 1) 52.43 GB 7.61 GB free
e: (NTFS on drive 1) 59.06 GB 9.31 GB free
h: (NTFS on drive 0) 12.41 GB 3.03 GB free
i: (NTFS on drive 0) 67.64 GB 2.37 GB free
Network Drives
None detected
Users (mouse over user name for details) Printers
local user accounts last logon
Administrator 10/25/2007 7:40:21 AM (admin)
daddy 4/27/2008 5:25:05 AM (admin)
Michael 12/7/2007 6:53:14 PM
user 1/22/2008 2:08:41 PM (admin)
local system accounts
ASPNET never
Guest never
HelpAssistant never
SUPPORT_388945a0 never

DISABLED Marks a disabled account; LOCKED OUT Marks a locked account

Fax Lexmark 4200 Series Printer on Fax Lexmark 4200 Series
Generic / Text Only on FILE:
HP DeskJet 840C/841C/842C/843C on USB001
HP DeskJet 840C/841C/842C/843C on USB002
Lexmark 4200 Series on USB003
Microsoft Office Document Image Writer Driver on Microsoft Document Imaging Writer Port:
Controllers Display
Standard floppy disk controller
NVIDIA nForce4 Serial ATA Controller (2x)
Primary IDE Channel [Controller]
Secondary IDE Channel [Controller]
Standard Dual Channel PCI IDE Controller RADEON X300/X550 Series [Display adapter]
RADEON X300/X550 Series Secondary [Display adapter]
DELL P1130 [Monitor] (19.7"vis, s/n 6D253237504M, March 2002)
Bus Adapters Multimedia
SCSI/RAID Host Controller
VAX347S SCSI Controller
Standard Enhanced PCI to USB Host Controller
Standard OpenHCD USB Host Controller Bluetooth Audio
Realtek AC'97 Audio
Communications Other Devices

1394 Net Adapter
Bluetooth LAN Access Server Driver
Dhcp Server: none responded
Physical Address: 00:0A:3A:6B:F8:A0
Marvell Yukon 88E8053 PCI-E Gigabit Ethernet Controller
Physical Address: 00:11:09:C9:64:1D
NVIDIA nForce Networking Controller
primary Auto IP Address: 192.168.1.3 / 24
Gateway: 192.168.1.1
Dhcp Server: 192.168.1.1
Physical Address: 00:11:09:DA:19:C1

Networking Dns Servers: 202.188.0.133
202.188.1.5
VIA OHCI Compliant IEEE 1394 Host Controller
Acronis True Image Backup Archive Explorer
Acronis TrueImage Backup Archive Explorer
Bluetooth Bus Enumerator
BLUETOOTH USB + EDR ADAPTER CLASS 2 v2.0
USB 2820 Video #2
Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
PS/2 Compatible Mouse
NVIDIA Network Bus Enumerator
Generic USB Hub
USB Printing Support
USB Root Hub (2x)
Virus Protection [Back to Top]
AVG 7.5.524 Version 7.5.524
Realtime File Scanning On

Missing Microsoft Security Hotfixes [Back to Top]
These required security hotfixes (using the 04/08/2008 Microsoft Security Bulletin Summary) were not found installed. Note: CIS benchmarks require that Critical and Important severity security hotfixes must be installed.
Q816093 - Critical (details...)
Q937894 - Moderate (details...)
Q941202 - Critical (details...)
Q941568 - Critical (details...)
Q941569 - Critical (details...)
Q941644 - Critical (details...)
Q941693 - Important (details...)
Q943055 - Critical (details...)
Q943460 - Critical (details...)
Q943485 - Important (details...)
Q944338 - Critical (details...)
Q945553 - Important (details...)
Q946026 - Critical (details...)
Q947864 - Critical (details...)
Q948590 - Critical (details...)
Q948881 - Critical (details...)
Installed Microsoft Hotfixes [Back to Top]
.NET Framework 2.0
no verification data KB917283 on 7/25/2006 (details...)
no verification data KB922770 on 11/27/2006 (details...)
no verification data KB928365 on 8/28/2007 (details...)
Internet Explorer
no verification data SP2 (SP2)
Microsoft .NET Framework 2.0
no verification data KB917283 on 8/28/2007 (details...)
no verification data KB922770 on 8/28/2007 (details...)
no verification data KB928365 on 8/28/2007 (details...)
MSXML4SP2
no verification data KB927978 on 11/27/2006 (details...)
no verification data KB936181 on 8/28/2007 (details...)
Windows Media Format 11 SDK
no verification data KB929399 (details...)
SP0
passed verification KB929399 on 8/28/2007 (details...)
Windows Media Format SDK
SP0
no verification data KB891122 on 2/3/2006 (details...)
passed verification KB902344 on 2/3/2006 (details...)
Windows Media Player 10
no verification data KB911565 (details...)
no verification data KB917734_WMP10 (details...)
SP0
passed verification KB911565 on 2/15/2006 (details...)
passed verification KB917734_WMP10 on 7/25/2006 (details...)
Windows Media Player 11
no verification data KB936782_WMP11 (details...)
no verification data KB939683 (details...)
SP0
passed verification KB939683 on 9/4/2007 (details...)
SP2
passed verification KB936782_WMP11 on 8/28/2007 (details...)
Windows Media Player 6.4
no verification data KB925398_WMP64 (details...)
SP0
passed verification KB925398_WMP64 on 12/27/2006 (details...)
Windows Media Player
SP0
passed verification KB911564 on 2/15/2006 (details...)
Windows XP
no verification data KB923689 (details...)
SP-1
passed verification KB909520 on 2/3/2006 (details...)
SP0
passed verification KB923689 on 12/27/2006 (details...)
SP3
passed verification KB873339 on 2/3/2006 (details...)
passed verification KB885250 on 2/3/2006 (details...)
passed verification KB885835 on 2/3/2006 (details...)
passed verification KB885836 on 2/3/2006 (details...)
passed verification KB886185 on 2/3/2006 (details...)
passed verification KB887472 on 2/3/2006 (details...)
passed verification KB887742 on 2/3/2006 (details...)
passed verification KB887797 on 2/3/2006 (details...)
passed verification KB888113 on 2/3/2006 (details...)
passed verification KB888302 on 2/3/2006 (details...)
passed verification KB890046 on 2/3/2006 (details...)
passed verification KB890859 on 2/3/2006 (details...)
passed verification KB891781 on 2/3/2006 (details...)
passed verification KB893066 on 2/3/2006 (details...)
passed verification KB893756 on 2/3/2006 (details...)
passed verification KB893803V2 on 2/3/2006 (details...)
passed verification KB894391 on 2/3/2006 (details...)
passed verification KB896344 on 2/3/2006 (details...)
passed verification KB896358 on 2/3/2006 (details...)
passed verification KB896422 on 2/3/2006 (details...)
passed verification KB896423 on 2/3/2006 (details...)
passed verification KB896424 on 2/3/2006 (details...)
passed verification KB896428 on 2/3/2006 (details...)
passed verification KB898461 on 2/3/2006 (details...)
passed verification KB899587 on 2/3/2006 (details...)
passed verification KB899589 on 2/3/2006 (details...)
passed verification KB899591 on 2/3/2006 (details...)
passed verification KB900485 on 4/26/2006 (details...)
passed verification KB900725 on 2/3/2006 (details...)
passed verification KB900930 on 2/3/2006 (details...)
passed verification KB901017 on 2/3/2006 (details...)
passed verification KB901214 on 2/3/2006 (details...)
passed verification KB902400 on 2/3/2006 (details...)
passed verification KB904706 on 2/3/2006 (details...)
passed verification KB905414 on 2/3/2006 (details...)
passed verification KB905749 on 2/3/2006 (details...)
passed verification KB905915 on 2/3/2006 (details...)
passed verification KB908519 on 2/3/2006 (details...)
passed verification KB908531 on 4/17/2006 (details...)
passed verification KB910437 on 2/3/2006 (details...)
passed verification KB911280 on 7/25/2006 (details...)
passed verification KB911562 on 4/17/2006 (details...)

Windows XP
SP3 (continued)
passed verification KB911567 on 4/15/2006 (details...)
passed verification KB911927 on 2/15/2006 (details...)
passed verification KB912812 on 4/17/2006 (details...)
passed verification KB912919 on 2/3/2006 (details...)
passed verification KB913446 on 2/15/2006 (details...)
passed verification KB913580 on 5/10/2006 (details...)
passed verification KB914388 on 7/24/2006 (details...)
passed verification KB914389 on 7/24/2006 (details...)
passed verification KB916281 on 7/24/2006 (details...)
passed verification KB916595 on 7/24/2006 (details...)
passed verification KB917159 on 7/24/2006 (details...)
passed verification KB917344 on 7/24/2006 (details...)
passed verification KB917422 on 8/27/2006 (details...)
passed verification KB917953 on 7/24/2006 (details...)
passed verification KB918118 on 2/17/2007 (details...)
passed verification KB918439 on 7/24/2006 (details...)
passed verification KB918899 on 8/27/2006 (details...)
passed verification KB919007 on 10/4/2006 (details...)
passed verification KB920213 on 11/27/2006 (details...)
passed verification KB920214 on 8/27/2006 (details...)
passed verification KB920670 on 8/27/2006 (details...)
passed verification KB920683 on 8/27/2006 (details...)
passed verification KB920685 on 10/4/2006 (details...)
passed verification KB920872 on 10/4/2006 (details...)
passed verification KB921398 on 8/27/2006 (details...)
passed verification KB921503 on 8/28/2007 (details...)
passed verification KB921883 on 8/27/2006 (details...)
passed verification KB922582 on 10/4/2006 (details...)
passed verification KB922616 on 8/27/2006 (details...)
passed verification KB922760 on 11/27/2006 (details...)
passed verification KB922819 on 11/27/2006 (details...)
passed verification KB923191 on 11/27/2006 (details...)
passed verification KB923414 on 11/27/2006 (details...)
passed verification KB923694 on 12/27/2006 (details...)
passed verification KB923980 on 11/27/2006 (details...)
passed verification KB924191 on 11/27/2006 (details...)
passed verification KB924270 on 11/27/2006 (details...)
passed verification KB924496 on 11/27/2006 (details...)
passed verification KB924667 on 2/17/2007 (details...)
passed verification KB925454 on 12/27/2006 (details...)
passed verification KB925486 on 10/4/2006 (details...)
passed verification KB925902 on 4/7/2007 (details...)
passed verification KB926255 on 12/27/2006 (details...)
passed verification KB926436 on 2/17/2007 (details...)
passed verification KB927779 on 2/17/2007 (details...)
passed verification KB927802 on 2/17/2007 (details...)
passed verification KB927891 on 7/7/2007 (details...)
passed verification KB928090 on 2/17/2007 (details...)
passed verification KB928255 on 2/17/2007 (details...)
passed verification KB928843 on 2/17/2007 (details...)
passed verification KB929123 on 7/7/2007 (details...)
passed verification KB929338 on 4/7/2007 (details...)
passed verification KB929969 on 1/24/2007 (details...)
passed verification KB930178 on 7/7/2007 (details...)
passed verification KB930916 on 7/7/2007 (details...)
passed verification KB931261 on 7/7/2007 (details...)
passed verification KB931784 on 7/7/2007 (details...)
passed verification KB931836 on 2/17/2007 (details...)
passed verification KB932168 on 7/7/2007 (details...)
passed verification KB933360 on 9/4/2007 (details...)
passed verification KB933566 on 7/7/2007 (details...)
passed verification KB933729 on 11/7/2007 (details...)
passed verification KB935839 on 7/7/2007 (details...)
passed verification KB935840 on 7/7/2007 (details...)
passed verification KB936021 on 8/28/2007 (details...)
passed verification KB937143 on 8/28/2007 (details...)
passed verification KB938127 on 8/28/2007 (details...)
passed verification KB938828 on 8/28/2007 (details...)
passed verification KB938829 on 8/28/2007 (details...)
passed verification KB939653 on 11/7/2007 (details...)
passed verification KB944653 on 1/16/2008 (details...)

Click here to see all available Microsoft security hotfixes for this computer.

[installed security hotfix] Marks a security hotfix (using the 04/08/2008 Microsoft Security Bulletin Summary)
[failing installed security hotfix] Marks a security hotFix that fails verification (a security vulnerability)
verifies OK Marks a hotfix that verifies correctly
fails verification Marks a hotfix that fails verification (note that failing hotfixes need to be reinstalled)
Unmarked hotfixes lack the data to allow verification

Click here for Belarc's System Management products, for large and small companies.

Software Licenses [Back to Top]

Adobe Systems - Adobe Photoshop CS 514297022079241512725490
Belarc - Advisor 754ecc24
BoilSoft - EZMerge ECG51-DWCEOR-23328
Microsoft - Internet Explorer 55274-648-2323245-23925 (Key: JHJBY-RFR88-8F8G4-TPG8M-4Q67Y)
Microsoft - Office Professional Edition 2003 73931-640-0000106-57392 (Key: GWH28-DGCMP-P6RC4-6J4MT-3HFDY)
Microsoft - WebFldrs XP 12345-111-1111111-87535
Microsoft - Windows XP Professional 55274-648-2323245-23925 (Key: JHJBY-RFR88-8F8G4-TPG8M-4Q67Y)
Osen Kusnadi - OsenXPSuite2005 OSEN-EDU-1E211-116BA-AC947-XPSUITE
Ulead Systems - Ulead DVD MovieFactory 4.0 SE 783A2-64000-07434842
Software Versions (mouse over * for details, click * for location) [Back to Top]
ABBYY (BIT Software) - FineReader Version 4.0.2.156 *
ABBYY Software House Install Version 4, 3, 0, 1 *
Acronis MediaBuilder Version 9,3,0,68 *
Acronis Scheduler 2 Version 1,0,0,240 *
Acronis Scheduler Helper Version 1,0,0,240 *
Acronis True Image Version 10,0,0,4942 *
Acronis True Image Version 3.3 build 444 *
Add Remove Pro *
Adobe Acrobat Reader Version 5.0.0.0 *
Adobe ImageReady ™ CS Version 8.0x117 *
Adobe LM Service Version 2.65.10.2 *
Adobe Photoshop CS CS *
Ahead Software AG - Nero MediaHome Version 1, 4, 0, 7 *
Ahead Software Gmbh NeroCheck Version 1, 0, 0, 2 *
Albert L Faber - CDex Application Version 1.51 *
Alcohol 120% Version 1.9 *
Alcohol Soft Development Team Version 1.4 *
Alexander Roshal - WinRAR archiver Version 3.60.1.0 *
Allok 3GP PSP MP4 iPod Video Converter Version 1, 0, 0, 1 *
Almico Software (www.almico.com) - SpeedFan Version 4.29 Final *
An avi bitrate calculator. *
Anwendung Launcher Version 1, 0, 0, 1 *
Any Video Converter Application Version 2, 2, 2, 1 *
Any Video Converter Application Version 2, 5, 9, 1 *
Apple Inc. - iTunes Version 7.5.0.20 *
Apple Inc. - QuickTime QuickTime 7.3 *
Apple Mobile Device Service Version 1, 14, 0, 0 *
Apple Software Update Version 2.0.2.92 *
Applian FLV Player *
Application mpeg_encode Version 1, 0, 0, 1 *
Ares Chat Server Version 2 *
Ares p2p for windows Version 2.0 *
Asiamajor Inc. - V-Gear LiveShow Version 1, 0, 1, 0 *
ATI External Event Utility for WindowsNT and Windows9X Version 6.14.10.4124.01 *
ATI Smart Version 5.13.0024 *
ATI Technologies Inc. - Catalyst Control Centre Version 1.11.0.0 *
ATI Technologies Inc. - Catalyst Control Centre Version 1.2.2172.2043 *
Audacity *
autogk.net - Auto Gordian Knot Version 2.40 *
Avant Browser Version 10.0 *
Avi2Dvd *
avic.exe *
Azureus Version 3.0.0.0 *
Belarc, Inc. - Advisor Version 7.2x *
BitTorrent *
BitTorrent, Inc. - ÁTorrent Version 1.8.0.9363 *
Broadcom Corporation. - Bluetooth Software 4.0.1.2401 Version 4.0.1.2401 *
BT Engine *
Change the FourCC of your avi files. *
Choose Language *
Cinematronics - 3D Pinball Version 5.1.2600.2180 *
clone.AD - avi.NET Version 2.5.6.0 *
CloneAD 2007 - index.NET Version 1.1.5.0 *
Combined Community Codec Pack Version 1.0.1.0 *
ConeXware, Inc. - PowerArchiver 2007 Version 10.01 *
ContentCopier Version 1, 0, 0, 0 *
CyberLink - PowerProducer Version 3.07.3510 *
CyberLink Corp. - CLDMA Version 1, 0, 0, 2502 *
CyberLink Corp. - PowerDirector Version 5.00.2309 *
CyberLink Corp. - PowerDVD Version 6.00.1102 *
CyberLink Corp. CLDMA Version 1.00.6813 *
Cyberlink PowerCinema Version 1.00.1122 *
DAMN NFO Viewer Version 2.0.1 BETA 2 *
David Harris - Pegasus Mail for Windows Version 4.3.1.0 *
Default Settings (ZoomPlayer) *
Deluge Version 0.5.8.9 *
DeskSoft - EarthView Version 3.7.1 *
DigiCell Application Version 1.12.00.00 *
DivX Converter Version 6, 5, 1, 1 *
DivX for Windows Installer, L:EN;DE;FR;JA, DivX Codec 6.7.0, DivX Converter 6.5.1, DivX Player 6.6.0, DivX Web Player 1.3.1, DivX Content Uploader 1.2.1 Version 6.7.0.17 *
DivX Inc. - DrDivXOSS Version 2.0.0 *
DivXNetworks Inc. - Config App. Version 2, 0, 0, 1 *
DivXNetworks, Inc. - DivX EKG Version 1.0.0.0 *
DMC - Brain Teasers Version 1.02 *
DT Soft Ltd. - DAEMON Tools Version 4.09.0.0 *
DVD Shrink Version 3.2.0.15 *
EA SPORTS FIFA Manager 08 - Database Editor Version 8, 0, 7, 1 *
eCOSM - MailWasher Version 3.3 *
FairUse Wizard 2 *
FastStone Image Viewer *
Fax Setup Utility *
FIFA MANAGER 08 *
FileJoiner Application Version 1, 0, 0, 1 *
Forte Agent Version 1.8 *
FuzzyPWM Application Version 2, 0, 0, 7 *
Gabest - Media Player Classic Version 6, 4, 9, 1 *
Gabest - submux Application Version 2, 0, 23, 0 *
Gabest - Subresync Version 2, 0, 23, 0 *
Genesis Kiith Zio Matrix - AllToAVI v4 Version 4.51.0122 *
Google Earth Version 4.2.198.2451 *
GRISOFT, s.r.o. - AVG 7.5 Anti-Virus System Version 7.5.0.420 *
GRISOFT, s.r.o. - AVG Anti-Virus system Version 7.5.0.522 *
GSpot Codec Information Appliance Version 2, 6, 0, 161 *
HervÚ Thouzard - UnzipThemAll Version 1.00.0004 *
Honest Technology - TV Plus Version 2, 0, 0, 6 *
ImTOO AVI MPEG Converter Version 2,1,55,1003 *
ImTOO CD Ripper Version 1, 0, 33, 916 *
ImTOO DVD Ripper Version 3, 0, 5, 906 *
ImTOO MP4 Video Converter Version 3.1.33.0608 *
ImTOO MPEG Encoder Version 2,1,55,1003 *
ImTOO RM Converter Version 2,1,55,1003 *
ImTOO WMA MP3 Converter Version 2, 1, 41, 906 *
Inkjet Printer Version 1.0.0.0 *
Inno Setup Version 0.0.0.0 *
iTunes Art Importer Version 1.0.1634.10594 *
jv16 PowerTools Version 1.0.0.0 *
KIEPG.exe *
Lexmark Fax Solutions *
Lexmark International Inc. - AIO exe Version 1.0.3.5 *
Lexmark International, Inc. - MarkVision for Windows (32 bit) Version 9.41 *
Lexmark Photo Editor Version 0.1.25.0 *
LIGHTNING UK! - DVD Decrypter Version 3.5.4.0 *
LIGHTNING UK! - ImgBurn Version 2.3.2.0 *
Locate32 Version 3.0 build 7.1060 *
Macromedia Director Version 7.0.2 *
Macrovision Corporation - InstallShield ® Version 10.50 *
Make Torrent *
Marek Jasinski - www.freeCommander.com - freeCommander Version 2005.09a *
Microsoft ® Windows Script Host Version 5.6.0.8820 *
Microsoft Application Error Reporting Version 11.0.6555 *
Microsoft Clip Organizer Version 11.0.5510 *
Microsoft Corporation - DirectShow Private * Microsoft Corporation - DirectX 8.1 Sample Version 8.11 *
Microsoft Corporation - Internet Explorer Version 6.00.2900.2180 *
Microsoft Corporation - Office Source Engine Version 11.0.5525 *
Microsoft Corporation - Windows Installer - Unicode Version 3.1.4000.1823 *
Microsoft Corporation - Windows Movie Maker Version 2.1.4026.0 *
Microsoft Corporation - Windows« NetMeeting« Version 3.01 *
Microsoft Corporation - Zone.com Version 1.2.626.1 *
Microsoft Data Access Components Version 3.525.1117.0 *
Microsoft Office 2003 Version 11.0.5614 *
Microsoft Office Document Imaging Version 11.0.1897.0 *
Microsoft Office InfoPath Version 11.0.5531 *
Microsoft Office Outlook Version 11.0.5510 *
Microsoft Office Picture Manager Version 11.0.5510 *
Microsoft Office Save My Settings/Profile Wizard Version 11.0.5510 *
Microsoft« .NET Framework Version 2.0.50727.832 *
Microsoft« Visual FoxPro« Version 6.0.8167.0 *
Mijenix Corporation - PowerDesk Version 5, 0, 0, 1 *
Mijenix Corporation - Size Manager Version 4, 0, 8, 1 *
MindVision Software - Installer VISE Version 3.6.1 *
MozBackup *
Mozilla - Sunbird Version 0.8 *
Mozilla Corporation - Firefox Version 1.5.0.12 *
Mozilla Corporation - Firefox Version 2.0.0.13 *
Mozilla Corporation - Thunderbird Version 1.5.0.14 *
MRU-Blaster Scheduler Version 1.01.0001 *
MRU-Blaster v1.5 Version 1.05.0009 *
Mystik Media - Blaze Media Pro Installation *
Mystik Media - Blaze Media Pro Version 7.00 *
Nero AG - Cover Designer Version 2, 4, 0, 51 *
Nero AG - InfoTool Application Version 3, 0, 7, 0 *
Nero BackItUp Version 2, 0, 0, 0 *
Nero Burning ROM Version 7, 0, 0, 0 *
Nero CD - DVD Speed Version 4, 0, 7, 0 *
Nero DriveSpeed Version 3, 0, 2, 0 *
Nero Home Version 1, 0, 0, 1 *
Nero ImageDrive Version 3.0.0.1 *
Nero PhotoSnap image editor Version 1, 2, 0, 7 *
Nero Photosnap Viewer Version 1, 2, 0, 7 *
Nero Recode 2 Version 2, 2, 7, 2 *
Nero ShowTime Version 2, 1, 0, 5 *
Nero SoundTrax Version 2, 0, 0, 0 *
Nero StartSmart Version 3, 0, 0, 0 *
Nero Suite Installer Version 1,0,0,4 *
Nero Wave Editor Version 3, 0, 0, 0 *
NeroVision Version 4,0,0,1 *
Nokia - PC Suite Version 6, 80, 53, 3 *
Nokia - Text Message Editor Version 1, 0, 0, 0 *
Nokia Application Installer Version 3, 0, 0, 0 *
Nokia Contacts Editor Version 1,0 *
Nokia Lifeblog Version 2.1.123 *
Nokia Multimedia Player Version 1, 1, 0, 0 *
Nokia N73 Marketing Application Version 1.0.0.29 *
Nokia. - PC Connectivity Solution Version 6.0 *
NokiaMusicManager Version 6, 0, 1, 0 *
none - burnatonce Version 0.99.0005 *
NVIDIA« NVMixer Version 1.0.451 *
OGMCalc Application Version 0, 2, 0, 1 *
OLReg Application Version 1.00.1022 *
OLReg Application Version 4.00.1012 *
Ontrack Data International - PowerDesk Version 4, 0, 8, 1 *
Ontrack Data International, Inc. - EasyUpdate Version 2, 0, 1, 0 *
Ontrack Data International, Inc. - PowerDesk Pro Version 5.0.1.2 *
Ontrack Data International, Inc. - PowerDesk Version 5, 0, 0, 0 *
Ontrack Data International, Inc. - PowerDesk Version 5.0.0.0 *
Ontrack Data International. - PowerDesk Version 4, 0, 8, 1 *
Openwares - Application LiveUpdate Version 1, 0, 0, 1 *
Panel Version 5, 3, 4, 100 *
Pegasys Inc. - TMPGEnc Version 2.524.63.181 *
Photo2video Application Version 1, 0, 0, 1 *
Piriform Ltd - CCleaner Version 2, 5, 0, 555 *
Playlist Editor *
Printer Driver Uninstall Version 1.0.3.0 *
PSP Video Manager *
QUALCOMM Incorporated - Eudora Version 6.0.3.0 *
Rashid Hoda - Duplicate File Finder Version 1.1 *
Reset V-Gear LiveShow *
RichVideo Module Version 2.0.0929 *
River Past Corporation - Video Cleaner Pro Version 7, 1, 0, 61114 *
Rocket Division Software - StarWind Version 2.6.1 Build 0x20050401 *
Safer Networking Limited - Secure Shredder Version 1.9.0.0 *
Safer Networking Limited - Spybot - Search & Destroy Version 1, 5, 2, 0 *
Safer Networking Limited - SpyBot-S&D Version 1, 5, 2, 0 *
scar5 Software - Simple File Shredder Version 3.2 *
SetDLC.exe *
SetTool Version 1, 0, 7, 1060 *
Sid Meier's Antietam *
Skype Version 2.5 *
Smart Projects - IsoBuster Version 2.2.0 *
SMPlayer *
Sonix - CameraMonitor Application Version 1, 0, 1, 5 *
Speedbit Stream Accelerator Service Version 1, 1, 7, 9 *
SpywareBlaster Version 4.00 *
StatsReader Version 2, 1, 0, 0 *
Sun Microsystems, Inc. - Java™ 2 Platform Standard Edition 5.0 Update 9 Version 5.0.90.3 *
Sun Microsystems, Inc. - Java™ Platform SE 6 U5 Version 6.0.50.13 *
SystemRestore Application Version 2, 0, 0, 1 *
Systweak Inc - Advanced System Optimizer Version 1.0.0.0 *
Systweak Inc - Advanced System Optimizer Version 2, 0, 1, 0 *
Systweak Inc. - Advanced System Optimizer Version 1.0.0.0 *
Systweak Inc. - Advanced System Optimizer Version 2, 0, 1, 0 *
t1 Application Version 1, 0, 0, 1 *
Tamar Solutions 2005 - Chase.IP.2005 Version 1.0.2448.29670 *
TextAloud *
Time Information Services Ltd. - Report Viewer Version 8.00 *
ToniArts - EasyCleaner Version 2.0.6 *
TrackerChecker Version 1.0.2402.37599 *
TreeCardGames.com - 123 Free Solitaire Version 5.5 *
TrueCrypt Version 3.1a *
TSM-Soft - Alarm Clock v1.1 Version 1.1.0.0 *
TSM-Soft - Diary Book Version 1.9 *
Ulead DVD MovieFactory Version 4.0.0.0 *
Ulead Systems ULCDRSvr Version 1, 0, 0, 4 *
Uniblue Systems Ltd - ProcessLibrary.com Quick Access Version 1.1 *
Updatedb Version 3.0 build 7.1060 *
UpdateMonitor Application Version 1, 0, 0, 3 *
vidccleaner Application Version 1, 0, 0, 1 *
VideoLAN Team - VLC media player Version 0.8.6.0 *
WinAVI Video Converter *
WinAVIcmd *
Wizards to adjust .NET Framework security, assign trust to assemblies, and fix broken .NET applications. Version 1.0.5000.0 *
www.explorerxp.com - ExplorerXP Application Version 1, 0, 5, 0 *
ZoomPlayer Version 1.0.0.0 *
* Click to see where software is installed.
a. Megahertz measurement may be inaccurate if other programs were busy during last analysis.
b. Data may be transferred on the bus at one, two, or four times the Bus Clock rate.
c. Memory slot contents may not add up to Installed Memory if some memory is not recognized by Windows.
d. Memory slot contents is reported by the motherboard BIOS. Contact system vendor if slot contents are wrong.
e. This may be the manufacturer's factory installed product key rather than yours.
Copyright 2000-7, Belarc, Inc. All rights reserved.
Legal notice. U.S. Patents 6085229, 5665951 and Patents pending.

#6 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 26 April 2008 - 08:39 PM

Thanks for your reply.

#3 My Display Manager says I have a Radeon X300/X550 Display Adapter. Would it be appropriate to intall the Catalyst Software Suite from this Web Site http://game.amd.com/us-en/drivers_catalyst...p=xp/radeonx-xp



BIOS: Phoenix Technologies, LTD 6.00 PG 11/28/2005


RADEON X300/X550 Series Display adapter][


1. Go to Start -> Control Panel -> Date And Time Properties -> under Internet Time tab remove the check mark next to Automatically synchronize with an Internet time server.

2. You can download the latest display driver you mentioned above from: http://support.dell.com/support/downloads/...;l=en&s=gen.

3. I recommend you to update your BIOS too. You have still a 2005 version. it may not be compatible with the latest applications.

3. You should configure Nero not to startup with window. You can do it via System Configuration Utility: Start > run > type msconfig press Enter. Under tab Startup remove the check mark next to startup entry related to Nero. Confirm and restart if needed. After boot you get a notification that you have used System Configuration Utility to run the diagnostic mode of windows startup, you should select to remain in diagnostic mode.

4. Then go to services to disable the services related to Nero:
  • Please go to start-right click My computer and select mange
  • Expand Services and Applications and highlight services
  • Locate the service from the service list.
  • Double-click the service, under General tab startup: disable service status: Stop
.

#7 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 27 April 2008 - 12:15 PM

Thank you very much for your advice. I am going to do exactly as you suggested after I back up some of my files. I will revert back tomorrow as to the results.

#8 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 27 April 2008 - 12:47 PM

1. In place of Configuration utility you may use Spybot - Search & Destroy to uncheck the startup items:

Run it under Mode select Advanced Mode then down the left side expand tools and select system startup. In the right pane uncheck the items.

Note: Don't do anything with the Winlogon (dll) items.

2. At the first glance yesterday I searched and couldn't spot the the source of sptd error on your software list. But I see it now:

DT Soft Ltd. - DAEMON Tools Version 4.09.0.0 *

Please repeat the step 3 for this one too, or if you don't use the application uninstall it as two of the errors are related to this software.

Edited by farbar, 27 April 2008 - 01:46 PM.


#9 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 29 April 2008 - 08:33 AM

Thank you for your replies.

#1 I successfully stopped the time Sync and updated the ATI drivers.
#2 I un checked Nero under startup but I couldn't find and reference to Nero in the "Services and Applications " area.
#3 I don't understand your instrctions on the Spybot program?I don't know where advanced mode is.
#4. I un installed Daemon Tools but the folder for D-Tools is still in the Program Files folder and I suspect the program is still lurking about.

#10 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 29 April 2008 - 12:47 PM

Well done,

#2 I un checked Nero under startup but I couldn't find and reference to Nero in the "Services and Applications " area.


Search for a reference to this NMSAccess. Never mind if you could not find it as far as you don't use Nero abd it is not running at startup.


#3 I don't understand your instructions on the Spybot program? I don't know where advanced mode is.


When you run Spybot there are 4 menu items: File, Mode, Language and Help. Under Mode menu is Advanced Mode.


#4. I un installed Daemon Tools but the folder for D-Tools is still in the Program Files folder and I suspect the program is still lurking about.


you may remove the D-Tools under Program Files to make sure everything is removed.


Did you mange to update your BIOS ? You have a Dell desktop and you should be able to find an update to your BIOS on the Dell site.

#11 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 29 April 2008 - 08:42 PM

#1 I found NSMAccess listed under under services and it said stopped. Can I still use Nero or do I need another burner?

#2 Hurray, I found Mode on Spybot. I unchecked Acronis which I don't use and 2 references to Nero. I have taken the liberty of appending the entire start up list below. If you see anything else I can do without, please advise.

#3 Neither Daemon Tools or D-Tools is shown in the Windows add/remove list. I will remove the D-Tools.exe and the *.dll files that are still listed in my C:\Program Files.

#4. I don't have a Dell. This machine was built for me by a local dealer here in Kuala Lumpur. When I see him I will ask him about an updated BIOS.

Thanks again for all your help. Here is the Startup list from Spybot.

____________________________________________________________________________________________



--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2007-10-07 SDShred.exe (1.0.1.2)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2008-03-18 unins001.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2008-04-16 Includes\Adware.sbi
2008-04-24 Includes\AdwareC.sbi
2008-04-24 Includes\Cookies.sbi
2007-12-26 Includes\Dialer.sbi
2008-04-24 Includes\DialerC.sbi
2008-04-24 Includes\HeavyDuty.sbi
2008-03-19 Includes\Hijackers.sbi
2008-04-24 Includes\HijackersC.sbi
2008-02-27 Includes\Keyloggers.sbi
2008-04-24 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-04-22 Includes\Malware.sbi
2008-04-24 Includes\MalwareC.sbi
2008-03-26 Includes\PUPS.sbi
2008-04-24 Includes\PUPSC.sbi
2008-04-24 Includes\Revision.sbi
2008-01-09 Includes\Security.sbi
2008-04-24 Includes\SecurityC.sbi
2008-04-16 Includes\Spybots.sbi
2008-04-24 Includes\SpybotsC.sbi
2008-04-16 Includes\Spyware.sbi
2008-04-24 Includes\SpywareC.sbi
2007-11-06 Includes\Tracks.uti
2008-04-24 Includes\Trojans.sbi
2008-04-24 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, Acronis Scheduler2 Service (DISABLED)
command: "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
file: C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
size: 149024
MD5: 08038A72C74659FCA7E3E02E005CBAA6

Located: HK_LM:Run, AcronisTimounterMonitor (DISABLED)
command: C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
file: C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
size: 1945960
MD5: 6A2E5796F994BEA4094D7B6E78C2AE22

Located: HK_LM:Run, AVG7_CC
command: C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
file: C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
size: 579584
MD5: 25A49E5BFF4E6424FA5E27C81269041D

Located: HK_LM:Run, EverioService
command: "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"
file: C:\Program Files\CyberLink\PCM4Everio\EverioService.exe
size: 151552
MD5: 478FEF5411B5D211698B98886639E1F0

Located: HK_LM:Run, iTunesHelper
command: "C:\Program Files\iTunes\iTunesHelper.exe"
file: C:\Program Files\iTunes\iTunesHelper.exe
size: 267048
MD5: 29ABA5DBAF0ADBFF426E7229412D6411

Located: HK_LM:Run, NeroFilterCheck (DISABLED)
command: C:\WINDOWS\system32\NeroCheck.exe
file: C:\WINDOWS\system32\NeroCheck.exe
size: 155648
MD5: 3E4C03CEFAD8DE135263236B61A49C90

Located: HK_LM:Run, NVMixerTray
command: "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
file: C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
size: 131072
MD5: 37FFF683AEE7F09F5F7087138192BF02

Located: HK_LM:Run, Openwares LiveUpdate
command: C:\Program Files\LiveUpdate\LiveUpdate.exe
file: C:\Program Files\LiveUpdate\LiveUpdate.exe
size: 61440
MD5: 93CF2B93F02E52CD6FFFA567249F3F73

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
file: C:\Program Files\QuickTime\QTTask.exe
size: 286720
MD5: 45E5DB49800F1BF5BD39BDB8CC501E66

Located: HK_LM:Run, snppro
command: C:\WINDOWS\vsnppro.exe
file: C:\WINDOWS\vsnppro.exe
size: 339968
MD5: 4CB77D9AFF6A8621EC6E17818E7DBE4C

Located: HK_LM:Run, SoundMan
command: SOUNDMAN.EXE
file: C:\WINDOWS\SOUNDMAN.EXE
size: 577536
MD5: 4CEDEDC946AA577364FCB9CCF14E2494

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
file: C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
size: 144784
MD5: 836DC47E6CAD975304D1D3EB2F516A1C

Located: HK_LM:Run, TrueImageMonitor.exe
command: C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
file: C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
size: 1169776
MD5: C063C5671451ACEF7BD09CC9F3323652

Located: HK_LM:Run, UIUCU
command: C:\DOCUME~1\daddy\LOCALS~1\Temp\UIUCU.EXE -CLEAN_UP
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, AVG7_Run
where: .DEFAULT...
command: C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
file: C:\PROGRA~1\Grisoft\AVG7\avgw.exe
size: 219136
MD5: B331EF4C7437F5093D703340678469EB

Located: HK_CU:Run, AVG7_Run
where: PE_C_ADMINISTRATOR...
command: C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
file: C:\PROGRA~1\Grisoft\AVG7\avgw.exe
size: 219136
MD5: B331EF4C7437F5093D703340678469EB

Located: HK_CU:RunOnce, NeroHomeFirstStart (DISABLED)
where: PE_C_ADMINISTRATOR...
command: C:\Program Files\Common Files\Ahead\Lib\NeroScoutOptions.exe
file: C:\Program Files\Common Files\Ahead\Lib\NeroScoutOptions.exe
size: 208896
MD5: 2A95C0B1EF7404453BC9B6ADC7FB198C

Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
where: PE_C_MICHAEL...
command: "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
size: 94208
MD5: F0A034864DD865C624F0236DCB53B777

Located: HK_CU:Run, QuickTime Task
where: PE_C_MICHAEL...
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 286720
MD5: 45E5DB49800F1BF5BD39BDB8CC501E66

Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
where: PE_C_USER...
command: "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
size: 94208
MD5: F0A034864DD865C624F0236DCB53B777

Located: HK_CU:Run, AVG7_Run
where: S-1-5-19...
command: C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
file: C:\PROGRA~1\Grisoft\AVG7\avgw.exe
size: 219136
MD5: B331EF4C7437F5093D703340678469EB

Located: HK_CU:Run, AVG7_Run
where: S-1-5-20...
command: C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
file: C:\PROGRA~1\Grisoft\AVG7\avgw.exe
size: 219136
MD5: B331EF4C7437F5093D703340678469EB

Located: HK_CU:Run, PowerArchiver Tray
where: S-1-5-21-1547161642-343818398-839522115-1005...
command: C:\Program Files\PowerArchiver\PASTARTER.EXE
file: C:\Program Files\PowerArchiver\PASTARTER.EXE
size: 140328
MD5: B5A3CA29A7108A970FE928F7D7057A05

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-1547161642-343818398-839522115-1005...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2097488
MD5: A9A5DB6AC3721BE698B996913693D73F

Located: HK_CU:Run, ToDoList
where: S-1-5-21-1547161642-343818398-839522115-1005...
command: C:\Other Programs\To Do Reminder\ToDoList.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, AVG7_Run
where: S-1-5-18...
command: C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
file: C:\PROGRA~1\Grisoft\AVG7\avgw.exe
size: 219136
MD5: B331EF4C7437F5093D703340678469EB

Located: Startup (common), Bluetooth.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\Belkin\Bluetooth Software\BTTray.exe
file: C:\Program Files\Belkin\Bluetooth Software\BTTray.exe
size: 577597
MD5: 17A07494347ABB2AED3E39048A96E7BD

Located: Startup (common), CoreCenter.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\MSI\Core Center\CoreCenter.exe
file: C:\Program Files\MSI\Core Center\CoreCenter.exe
size: 916992
MD5: F95320285BFC042BAD8A5D67232E7351

Located: Startup (common), DigiCell.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\MSI\DigiCell\DigiCell.exe
file: C:\Program Files\MSI\DigiCell\DigiCell.exe
size: 1345024
MD5: DCAEB4B560A08B589FE8F0637A0942F3

Located: Startup (user), Locate32 Autorun.lnk
where: C:\Documents and Settings\daddy\Start Menu\Programs\Startup...
command: C:\Program Files\Locate\Locate32.exe
file: C:\Program Files\Locate\Locate32.exe
size: 946176
MD5: AE50120AD36FE29E448DC972B212E56A

Located: WinLogon, AtiExtEvent
command: Ati2evxx.dll
file: Ati2evxx.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

#12 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 30 April 2008 - 04:04 AM

#1 I found NSMAccess listed under under services and it said stopped. Can I still use Nero or do I need another burner?


The reason it gave an error was that the file which was needed to run the service was missing.
If you need to use Nero, you have to uninstall and then reinstall Nero. After uninstalling clean all the temporary folders and remove the folder related to Nero under program files. Then reinstall Nero.

Here I remind you that you don't need all Nero components and you may install the components you need. When installing it gives you the option to customize the installation.

You have also many old versions of softwares on your system that you can remove, and sometimes you should, for security reasons like the older Java versions.

The applications you don't use any more you can uninstall and get rid of . But all it is said doesn't have much to do with the errors you got as they are specific to the applications I mentioned.


#2 Hurray, I found Mode on Spybot. I unchecked Acronis which I don't use and 2 references to Nero. I have taken the liberty of appending the entire start up list below. If you see anything else I can do without, please advise.


I see applications you don't need to run at startup. You see the tabs above this page under bleepingcomputer.com. Under Startup List tab you copy and paste the .exe file of the startup entry and press search. It gives you information about the entry and whether or not it is needed to run at start up.

#3 Neither Daemon Tools or D-Tools is shown in the Windows add/remove list. I will remove the D-Tools.exe and the *.dll files that are still listed in my C:\Program Files.


You have uninstalled Daemon Tools (D-Tools), as you said in your previous post, it does not show up in the Add/Remove list. But removing the folder takes care of the leftovers.

Please let me know:

1. How do you maintain your computer? (Cleaning the windows and Internet temporary folders and other left overs? and other stuff).
2. After doing these step do you still get errors?

Edited by farbar, 30 April 2008 - 04:08 AM.


#13 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 01 May 2008 - 08:08 AM

Thank you for your reply.

#1 I have uninstalled Nero and deleted it's folder. I am downloading Nero Ultra 8.4 and I will try a custom install. I burn a lot of dvd's. I use Nero for the following:
A. I burn bin/cue files.
B. I burn multiple *avi (DivX) using Nero Express on to a DVD disk.
C. Occasionally I convert and burn a DVD.
#2 Can you tell me which Java I should keep?
#3 I will review my long list of applications and try to un install those I no longer need.
#4 I have reviewed the Start Up list as you suggested and unchecked a few that SpyBot said were not reguired. I have a bunch of *.dll files listed under start up but I suppose they are all okay. Bleeping Computer search has no info on them.
#5. I run a progran called CCleaner at least twicw a week and I run registry cleaners Easy Clean and Advanced System Optimizer about twice a month. Can you suggest something better?

I am happy to say that since I have been following your instructions I have not had a single crash reboot.

Thanks Again.

#14 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,660 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:03:38 AM

Posted 01 May 2008 - 10:45 AM

#2 Can you tell me which Java I should keep?

#3 I will review my long list of applications and try to un install those I no longer need.

#4 ...I have a bunch of *.dll files listed under start up but I suppose they are all okay.

#5. I run a progran called CCleaner at least twicw a week and I run registry cleaners Easy Clean and Advanced System Optimizer about twice a month. Can you suggest something better?

I am happy to say that since I have been following your instructions I have not had a single crash reboot.
Thanks Again.


1. As a general rule: Keep the latest version and uninstall the older one(s). So you keep: Sun Microsystems, Inc. - JavaÖ Platform SE 6 U5 Version 6.0.50.13 and you uninstall version 5. I would do the same for other applications.

2. The winlogon (dll) files listed are necessary to the system to be able to boot. Unless infected by the malware one should not do anything with those dll files and entries, when you do you do it under supervision or take the risc of not being able to boot at all.

2. CCleaner and Tony Arts Easy Cleaner are good enough. I personally use CCleaner and it does the job for me. I would not use Advanced System Optimizer or any other optimizer. I have used it a short while and abandoned using it.

3. After you are finished with uninstalling and cleaning defragment your C drive.

4. Glad to hear you have had no crash any more. You would not have on those errors any more. Should it happen it may be related to other applications. in that case, like you have done it already, report the error and we will help you.

5. If your system runs fine make a clean restore point. It empties the System Volume Information folder.

To make a clean restore point: go to start-right click My Computer-select properties- under system restore tab- check turn off system restore on all drives. Click apply. By doing this you loose all your restore points. Reboot and don't forget to uncheck ôturn off system restore on all drives" to create a clean restore point.

#15 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 01 May 2008 - 10:46 PM

Perhaps I spoke too soon?? I had a reboot crash in the middle of last night. I don't know if the DOS page popped up as I was sleeping at the time of the reboot. I usually run a couple of Bit Torrents all night long. I only had one entry on the events viewer and it is shown below. I will make a clean system restore after I re install a good Nero.

----------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 5/2/2008
Time: 5:17:45 AM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Error code 100000d1, parameter1 00021000, parameter2 00000002, parameter3 00000000, parameter4 ba178ec9.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 32 31 30 30 30 2c 20 021000,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 61 31 37 00, ba17
0050: 38 65 63 39 8ec9


Thanks again
_______________________________




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users