also @ TechSpot: Study suggests majority of Windows 8 users ignore Metro apps

[Reopened per member] DCOM and userenv errors

Discussion in 'Virus and Malware Removal' started by Gouge, Mar 17, 2012.

  1. Gouge TechSpot Enthusiast Posts: 128

    I found this "solution" on another forum. It makes no sense to me and might not really be a solution as I can see no action to change anything. Anyway, I thought that it might mean more to you.
    ________________________________________________
    Using Regedit, navigate to the following registry value
    HKLM\System\CurrentControlSet\
    Services\WSearch
    In the right panel, double-click ImagePath.
    The Edit String dialog box is displayed. Leave this dialog box open. If Svchost.exe is displayed in the Value data box, then under the service name, navigate to the Parameters folder and then double-click ServiceDll.
    Click Start, and then click My Computer.
    Using the information displayed in the Value data box of the Edit String dialog box, navigate to the program.
    Right-click the program name, and then click Properties.
    The Properties dialog box for the program is displayed.
    To determine who the vendor is for this service, refer to the Version tab.
    You can also find the path to the executable file in this tool.
    ___________________________________________________

    BTW I looked in the Value Data box and Svchost was not there. All I had was "%systemroot%\system32\SearchIndexer.exe /Embedding"
  2. Bobbye Helper on the Fringe Posts: 16,406   +16

    My apology for the delay. I had urgent matters to attend to and for once, put my problems ahead of those on the board.

    I have no idea what you were trying to accomplish with the registry edit. A vendor can be found in the device Manager. The Search Indexer can be found simply by using Windows explorer to access the Local Drive. Doing a right click on the Local Drive> Properties> the Search indexer can be unchecked-or check there.

    Please tell me what system problems remain now and we'll finish up. The thread has been watched. I got notice of your reply.
  3. Gouge TechSpot Enthusiast Posts: 128

    The problem is still as it was.

    My PC will suddenly re-boot, even if I am away from the m/c. The Error log appears to show that a DCOM error occurs at the point of re-boot, although it doesn't happen at every DCOM error.

    Regarding the registry edit post - I was researching what solutions others have proposed for the problem.

    Update

    PC crashed again last night. Looked at Error Log and there were 4 DCOM errors - all relating to WSearch. I recall seeing somewhere on the system that the 3rd or 4th DCOM error enforces a re-boot, but I can't recall where.
  4. Gouge TechSpot Enthusiast Posts: 128

    I've sorted the problem.:)

    I used regedit to find what the executable file was associated with WSearch. It was the indexing service for Windows Search 4.0. Evidently this has caused a lot of conflicts and was introduced as a KB update by Microsoft. I tried to disable in "Services" but still had DCOM errors, so I uninstalled Windows Search 4.0 and I've had no more DCOM errors all day.:cool: I can still use the Search facility from the Start menu.

    I'll use the same approach to determine any other DCOM errors if they arise.
  5. Bobbye Helper on the Fringe Posts: 16,406   +16

    Please let me know if this recurs. The DCOM errors you were getting weren't just for WSearch. I prepared instructions on using a Clean Boot to try and troubleshoot the cause. I'll save it and close the thread. If you need it reopened for those instructions, please start a Conversation.

    Be careful with the Regedits. They are not without risks and the registry should be backed up before making any change. You should note that Tune Up Utilities has a registry cleaner within the program.
    =====================================
    Removing all of the tools we used and the files and folders they created
    • Uninstall ComboFix and all Backups of the files it deleted
    • Click START> then RUN
    • Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
      [IMG]
    • Download OTCleanIt by OldTimer and save it to your Desktop.
    • Double click OTCleanIt.exe.
    • Click the CleanUp! button.
    • Select Yes when the "Begin cleanup Process?" prompt appears.
    • If you are prompted to Reboot during the cleanup, select Yes.
    • The tool will delete itself once it finishes.
    -----
    Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.

    Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
    ------------------------------------------
    • You should now set a new Restore Point and remove the old restore points to prevent infection from any previous Restore Points.
    • Go to Start > All Programs > Accessories > System Tools
    • Click "System Restore".
    • Choose "Create a Restore Point" on the first screen then click "Next".
    • Give the Restore Point a name> click "Create".
    • Go back and follow the path to > System Tools.
    • Choose Disc Cleanup
    • Click "OK" to select the partition or drive you want.
    • Click the "More Options" Tab.
    • Click "Clean Up" in the System Restore section to remove all previous Restore Points except the newly created one.
    Empty the Recycle Bin