Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"The Audio Service is not running" + error msg 0x8007000e


  • Please log in to reply
35 replies to this topic

#1 willis64

willis64

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 14 May 2018 - 07:52 PM

Hello and TIA!

 

Running 64bit, Win 7 Ultimate, Peruvian unauthentic copy despite them selling it as authentic.  I have run a handful of updated AV, registry fixer/cleaners, Anti-Malware and rootkit searchers to no result...  I've emptied wastebin, optimize/defragegged, cleaned up some stuff from the desktop uninstalled some stuff... No joy with that either

 

A number of issues relating to this error message are, I cannot open various files on my desktop or from start menu such as " Computer ", " Control Panel " etc... I can't run a restore either from a search result from start menu or from " rstrui " command, both get the above error too.  I have a " Not connected - no connections available " error message off the network icon at the bottom of my screen but I'm connecting just fine with a bunch of browser windows open... And my sound is out. Tried to restart it in Windows Audio Services. Borrowing from another members post:

 

 when I go to 'services' and try to Start the 'Windows Audio' Service, I get this exact message:

 

"Windows could not start the Windows Audio service on Local Computer. Error 0x8007000e: Not enough storage space is available to complete this operation."

 

I tried a boot in safe mode, same issues. 

 

I'd recently scanned for viruses/malware, no issues.

 

I can't do a System Restore, when I try I get this message:

"System restore does not appear to be functioning correctly on this system"

& again I get the error messsage: Error 0x8007000e

"Not enough storage space is available to complete this operation." "

 

I have exactly the same issue, I can't start sound back up for lack of storage space... The above member says he fixed it with ComboFix, but reading all the dire warnings about it has me scared to try it for worry of further wrecking my system. 

 

Thanks for listening, Will in Peru.



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,874 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:28 AM

Posted 15 May 2018 - 05:26 AM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy taking care to post the link of the snapshot in your next post.

   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.

    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course):
 
post-33068-0-86653600-1480692866_thumb.j

     Now, at the top, click File > Publish Snapshot.

     Click Yes > then Copy to Clipboard

Now, once you are back in the forum topic you are posting in, click the ADD REPLY or REPLY TO THIS TOPIC button. Right-click in the empty space of the Reply box and click Paste. Then, click Add Reply below the Reply box.

Louis



#3 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 15 May 2018 - 03:59 PM

http://speccy.piriform.com/results/tv5gnAwVhphPEJaHIjsjngx


Ok sir, above is the screenshot from speccy, below notepad log from Mini-ToolBox:
 
MiniToolBox by Farbar  Version: 17-06-2016
Ran by Rafa (administrator) on 15-05-2018 at 15:54:56
Running from "C:\Users\Rafa\Desktop"
Windows 7 Ultimate  (X64)
Model:  Manufacturer: 
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (05/15/2018 03:32:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:32:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:32:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:32:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 02:32:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
Error: (05/15/2018 02:32:01 PM) (Source: ESENT) (User: )
Description: wuaueng.dll (1080) SUS20ClientDataStore: Unable to read the header of logfile C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Error -546.
 
 
System errors:
=============
Error: (05/15/2018 01:59:14 PM) (Source: Service Control Manager) (User: )
Description: The SBSD Security Center Service service depends the following service: wscsvc. This service might not be installed.
 
Error: (05/15/2018 01:59:13 PM) (Source: Service Control Manager) (User: )
Description: The Intel® HD Graphics Control Panel Service service depends on the System Event Notification Service service which failed to start because of the following error: %%1068 = The dependency service or group failed to start.
 
Error: (05/15/2018 01:59:13 PM) (Source: Service Control Manager) (User: )
Description: The System Event Notification Service service depends on the COM+ Event System service which failed to start because of the following error: %%0 = The operation completed successfully.
 
Error: (05/15/2018 01:59:13 PM) (Source: Service Control Manager) (User: )
Description: The Windows Audio service terminated with the following error: %%-2147024882 = Not enough storage is available to complete this operation.
 
Error: (05/15/2018 12:40:55 AM) (Source: Service Control Manager) (User: )
Description: The SBSD Security Center Service service depends the following service: wscsvc. This service might not be installed.
 
Error: (05/15/2018 12:40:47 AM) (Source: Service Control Manager) (User: )
Description: The Intel® HD Graphics Control Panel Service service depends on the System Event Notification Service service which failed to start because of the following error: %%1068 = The dependency service or group failed to start.
 
Error: (05/15/2018 12:40:47 AM) (Source: Service Control Manager) (User: )
Description: The System Event Notification Service service depends on the COM+ Event System service which failed to start because of the following error: 
%%0 = The operation completed successfully.
 
Error: (05/15/2018 12:40:46 AM) (Source: Service Control Manager) (User: )
Description: The Windows Audio service terminated with the following error: %%-2147024882 = Not enough storage is available to complete this operation.
 
Error: (05/14/2018 11:49:38 PM) (Source: Application Popup) (User: )
Description: \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (05/14/2018 11:47:34 PM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
 
Microsoft Office Sessions:
=========================
Error: (05/15/2018 03:32:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:32:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:32:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:32:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 03:02:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 02:32:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
Error: (05/15/2018 02:32:01 PM) (Source: ESENT)(User: )
Description: wuaueng.dll1080SUS20ClientDataStore: C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log-546
 
CodeIntegrity Errors:
===================================
  Date: 2018-05-15 13:59:06.053
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-15 13:59:06.053
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-15 00:40:33.927
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-15 00:40:33.911
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-14 23:49:38.233
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-14 23:49:38.233
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-14 18:41:47.490
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-14 18:41:47.474
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-14 18:34:31.708
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2018-05-14 18:34:31.677
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
=========================== Installed Programs ============================
µTorrent (HKCU\...\uTorrent) (Version: 3.5.3.44396 - BitTorrent Inc.)
Active@ ISO Burner 3.0 (HKLM-x32\...\{3B756F35-2504-429A-B36C-EA0961B6A2C0}_is1) (Version: 3.0 - LSoft Technologies Inc)
Advanced SystemCare 11 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 11.3.0 - IObit)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.4.2338 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.42 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
Driver Booster 5 (HKLM-x32\...\Driver Booster_is1) (Version: 5.4.0 - IObit)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Free File Viewer 2014 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2014.2.16.0 - Bitberry Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.139 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{FA1BBF34-E994-4310-95D7-BE93092B8E61}) (Version: 7.3.1.4507 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4889 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
IObit Malware Fighter 6 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 6.0 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 7.4.0.8 - IObit)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 59.0.3 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.3 (x64 en-US)) (Version: 59.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.7.0 - Mozilla)
Mozilla Thunderbird 52.7.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 52.7.0 (x86 en-US)) (Version: 52.7.0 - Mozilla)
OpenOffice 4.1.3 (HKLM-x32\...\{EEA30AEB-8BA7-465B-85D4-098BB99733E7}) (Version: 4.13.9783 - Apache Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.82.317.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8339 - Realtek Semiconductor Corp.)
SafeZone Stable 1.51.2220.53 (HKLM-x32\...\SafeZone 1.51.2220.53) (Version: 1.51.2220.53 - Avast Software) Hidden
Smart Defrag 5 (HKLM-x32\...\Smart Defrag_is1) (Version: 5.8.5 - IObit)
SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.21.9613 - SoftEther VPN Project)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.6.1 - Sophos Limited)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Spybot Anti-Beacon (HKLM-x32\...\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1) (Version: 1.6 - Safer-Networking Ltd.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1230 - SUPERAntiSpyware.com)
Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.12.29.0 - File.org)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
 
=========================Memory info: ===================================
Percentage of memory in use: 39%
Total physical RAM: 8073.47 MB
Available physical RAM: 4911.12 MB
Total Virtual: 16145.09 MB
Available Virtual: 12762.22 MB
 
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:488.18 GB) (Free:141.46 GB) NTFS
2 Drive d: (DATOS) (Fixed) (Total:443.23 GB) (Free:256.85 GB) NTFS
 
========================= Users: ========================================
User accounts for \\RAFA-PC
 
Administrator            Guest                    Guillermo                
Rafa                     
 
 
**** End of log ****

Edited by hamluis, 15 May 2018 - 05:05 PM.


#4 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 15 May 2018 - 04:09 PM

Thanks in advance for anything you can do Louis! Hopefully, I've done as instructed correctly. According to speccy, it's seems there's not enough storage to do anything... how I'm up and online....?

 

TIA, Will.



#5 hamluis

hamluis

    Moderator


  • Moderator
  • 55,874 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:28 AM

Posted 15 May 2018 - 05:13 PM

First suggestion:  Immediately uninstall all...yes, all...IObit applications...then run the chkdsk /r command and follow that with the sfc /scannow command.
 
Registry cleaner - Wikipedia, the free encyclopedia - http://en.wikipedia.org/wiki/Registry_cleaner

Registry Cleaner FAQ, PC Support - http://pcsupport.about.com/od/registry-cleaner/a/registry-cleaner-faq.htm

Registry Cleaner, Animal - http://www.bleepingcomputer.com/forums/t/526247/tune-up-utilities-2014-problem/?p=3303494

 

Chkdsk Command, Windows 7, Aura - http://www.bleepingcomputer.com/forums/t/582646/cyclic-redundancy-error/?p=3759189

 

Run sfc scannow command prompt, Aura - http://www.bleepingcomputer.com/forums/t/579699/missing-uxthemedll-file/?p=3736491

 

Louis



#6 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 15 May 2018 - 08:40 PM

Ok, IObit gone, seems you're saying I may as well remove all those registry cleaner/fixers too? I had IObit as it seemed highly recommended for a guy on a budget... What would you suggest I replace it with when the time comes? Also, I see Glasswire firewall is listed on this site. I had just installed it when all this started, so un-installing it was the 1st thing I did. If it's here I'm assuming it's vetted as a good firewall?

 

Ok, I'm off to get some things done before the downtime needed for chldsk and sfc scan... See you after.

 

Thanks Louis! Will.



#7 hamluis

hamluis

    Moderator


  • Moderator
  • 55,874 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:28 AM

Posted 15 May 2018 - 08:49 PM

There is not one IObit product I am aware...that is worth installing on a computer system, IMO.

 

When you have something installed...that truly has a negative or neutral impact...there is no need to replace any of it with something else.

 

If you want an opinion about firewalls that is more knowledgeable/valid than mine...I suggest you visit the BC Firewalls forum.  I've found that the Windows Firewall works quite well for me...just as well as the various other firewalls which I have tried.  The only thing differentiating firewalls that I've taken notice of...is the amount of detail and user reports/alarms, etc. that any user chooses to bother with.

 

Louis



#8 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 16 May 2018 - 12:23 AM

Thanks for your answer. But certainly one should be running some sort of AV/anti-malware, no?

 

So I've run chkdsk, no problem, however, attempting to run scannow gave me this error message: " windows resource protection could not start the repair service ", just to be sure I ran chkdsk again and tried scannow after and got the same result. I have all the same issues as stated above :(

 

What to do now sir?

 

Will.



#9 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 16 May 2018 - 02:45 PM

Hi Will,

 

Who said anything about not running an AV/antimalware?  You've got Avast as an AV and other antimalware programs installed that aren't IObit or what Louis and I would consider unnecessary if not outright junk--programs like reg cleaners and optimizers. In general they are built on computing myths and make guesses to fix what might be a problem.  They are good at sales--creating a need that isn't there, like selling ice to people in the arctic.  "If it ain't broke, don't fix it."  That being said, you can learn some things from these programs, but running them as a form of general maintenance is really not needed.  Even if you installed them to try to fix this problem it may have actually made things worse.

 

And I don't think malware is the problem.  My research indicates that this may well be a problem with the Windows Management Instrumentation.  The not enough storage error is one of Windows' strange ways of being misleading--it can mean in this case that WMI is not running in your user profile and so can't read the info about your various drives. 

 

Before we proceed with this fix, please back up any important files you may have.

 

1. Open a CMD prompt as administrator by going to Start, All programs, Accessories, right click Command Prompt and choose Run as Administrator.

 

2.  Type the following:  net localgroup administrators username /add

In place of username, substitute the name of the user profile you are logging in to--if that is Rafa, then type in or copy and paste the following bold text:

net localgroup administrators Rafa /add

Press Enter.  Note that CMD prompt is unforgiving of typing errors so it must be exactly what is in bold and the same spacing for it to work.

 

3.  Still in CMD prompt, type in net localgroup Administrators /add networkservice then press Enter.

 

4.  Now net localgroup Administrators /add localservice then press Enter.

 

5.  Exit the CMD prompt and reboot your computer.  Let us know how this works.

 

Also, I see you went ahead and ran Combofix--I wish you had stuck with your original intention of leaving it alone.  Once we get you up and running again I'll help you with uninstalling it--but don't bother with it right now.

 

 

 

 


The thing about people

is they change

when they walk away.--Mipso


#10 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 16 May 2018 - 07:04 PM

Papakid, thanks for clarifying that :)

 

So I've got between 5 and 6 hundred Gig of stuff to back up, I already took care of over 100 G before running out of portable memory, meaning I have to go out and buy something that can take 400 G plus in one shot as I can't open my Downloads folder and pick want I want from the expendable stuff. Going to have to look around as higher capacity portable memory is neither easy to find here or cheap.

 

1st thing tomorrow, then we'll give it a shot after backed-up.

 

Thanks! Will.

 

PS: King Crimson, YEAH!!! :)



#11 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 16 May 2018 - 07:51 PM

Good luck with the backups, Will.  I'm not thrilled to hear you don't have access to your downloads folder--may be more to your problem.

 

A few more questions for you that you can answer at your convenience.  How long have you had this computer?  How long has the problem been happening?  Do you  remember installing anything around that time--was it the Glasswire Firewall?  Just out of curiosity, where on this site did you see Glasswire?  Was it an advertisement?  If so, we don't vet all of those.  We try to get add servers to not show software of dubious quality but some still get thru.  Not saying that Glasswire is or isn't, I've never heard of it.  But then I've been on a sort of hiatus for quite a while and during that time have given up on third party firewalls and all of the AV's except MSE.  I'll research it and we will work on doing a clean removal of it if need be.

 

Yeah, always great to work with someone who appreciates K.C. :guitar: 


The thing about people

is they change

when they walk away.--Mipso


#12 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 17 May 2018 - 10:24 AM

Ok, looking at the paperwork I've found, I've had this puter from July 2015. There have been issues with USB ports working right, and causing blue-screens. This seemed to be a hardware problem, but getting through all the bullbleep they throw up at you where you bought it in and the downtime involved made it not worth pursuing as it's worked fine in all other regards up to now.

 

As to problems starting, a week, maybe 10 days ago now, I first noticed not being allowed access to things like common, temp etc files in my win. user side. I thought this was a permissions issue and reset the permissions, things didn't change. I had dled Glasswire somewhere ( it passed AV scans ) a week or so before so I decided to run it to see if there was suspicious activity while online. Things got worse afterward so I un-installed it updated all the AV and anti-malware I had and ran it to find nothing. Around this time, IIRC, is when I started not being able to access/open files and computer, control panel, etc... As well, my drive is partitioned and on D side most of the desktop icons there are opaqued and don't do anything. I have saved on D drive my favorite music and video - this includes an entire discography of KC by the way :( ! -  and these file icons are not even visible anymore. It appears that the data is still there though from the amount of used/free space shown on drive volume. I then tried the reg-fix clean tools, no joy there either.

 

Once I have some portable memory I hope that taking the drive somewhere and slaving it to another will show the missing stuff on D and I'll be able to copy it over.

 

As to where I saw Glasswire here on BC, I remember seeing it on a sidebar to the right while browsing all over the website just after signing up as a member. Precisely where? I couldn't tell you at this point mate, sorry. If I see it again, I'll make note of where.

 

In the meantime, I hope today to find the memory I need and copy off the things I want. This being Peru, it's very hard to find tech that isn't less a year old and costs twice what it sells for in the 1st world.

 

Cheers, Will. 



#13 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 17 May 2018 - 05:37 PM

I just thought of something that may have bearing on this: https://blog.cloudflare.com/announcing-1111/

 

So I configured my DNS service to this domain name service. This was 2 to 3 weeks ago and I was looking for any issues directly afterward but didn't notice anything until the above stuff came up, I guess that would have been a week later but I'm not sure there is any connection.

 

Cheers, Willis.



#14 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 18 May 2018 - 01:17 PM

Thanks for the additional info. As far as DNS, you may have issues with it, but I don't think changing services is causing the bulk of your main issues--still think that's an unhealthy WMI.  We should focus on getting that back up to speed, which will make troubleshooting other problems easier then if needed look at DNS.  For example, WMI working correctly should allow Speccy to generate a proper log.  I would even suggest that you might not want to wait til after your backups are all complete before running the fix I posted earlier.  One, it might solve or help with your folder access issues and, two, I don't think it will adversely affect your hard drive itself, so if bad things happen you can always get your data by slaving the drive to another computer.  If the data itself is already corrupted, then you will be mostly SOL anyway as far as getting everything back unless you can afford expensive data recovery services.

 

And to clarify a bit, I don't think your lack of sound and other major problems are a malware issue, but it is still possible you have or had a malware problem.  In other words, I think we can troubleshoot and fix the worse problems you are experiencing without looking to remove malware, and then we can look for signs of malware later if it seems appropriate.  I say this because you are using utorrent--probably 90% of people who come here with infections are using such file sharing programs to download cracks and keygens, which are almost always bundled with malware, or because it gives more remote access to your system, among other things.

 

As an aside, I've looked some more at Glasswire and they seem to be pretty legit.  It might still have some responsibility for what happened to your system, but not because it is dodgy software.  If you saw it in a sidebar, it was probably an ad you saw before you joined BC.  Which version did you run, free or one of the paid ones?  If the latter, did you get a legit version from an official download site?

 

Entire KC discography?  That's pretty impressive.  If you are in the DGM club it's even more so.  The general release albums I've had all of them in one form of media or another.  My first was an 8-track of In the Court...the others I've had on either that or vinyl or CD--for some reason never bought them on prerecorded cassette.

 

 


The thing about people

is they change

when they walk away.--Mipso


#15 willis64

willis64
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 18 May 2018 - 10:18 PM

Ok man, I'll give it a whirl later tonight.  utorrent is my go to after I get a bad movie here. We don't have A Blockbuster on every other corner and cable options here are a joke, either crammed with so much crap offerings or too expensive for the service you get. Most people just get a DVD off the vendor on the corner when you want to see a movie. About a quarter of the time it's bolloxed for one reason or another. Enter utorrent. I learned years ago about the perils of cracked proggies so I stay away from them. But that open connection...

 

The Glasswire was the free version, pretty sure I Dled it off the homesite, if there's any doubt I generally won't take something otherwise.

 

I bought vinyl for over 3 decades amassing >< 5,000 lps and over a 1,000 45's in that time, now in the care of a friend in California. My first KC lp was Starless and Bible Black. I had a project to convert all my vinyl to digital, but life happened... Was turned on to the KC discography while trading stuff.

 

Will get back to you after I run the WMI fix.

 

Thanks, cheers, Will.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users