carolinacharlie
Posts: 16 +0
This began happening a few hours after my father used my laptop to "check his e-mail and stuff" and of course now my system is totally fracked up!
When booting up in normal mode, Vista comes up normally but within a few minutes any running program freezes and I get the eternal spinning blue circle in place of my cursor. The only way to shot down the computer at that point is to remove the battery and unplug the laptop. I still get the same behavior even when disabling all of the non-Windows services on start-up through msconfig. Safe mode works fine, no hanging there.
The problem is that I can only run the programs outlined in the 8-step process in safe mode -- in normal mode, the system hangs before any logs can be generated.
Anyway, I'm pasting the logs from safe mode below. If the logs must be generated in normal mode, I can keep trying -- the time it takes for Vista to get stuck varies, and I might be able to get all of the logs generated eventually.
Thanks in advance for any guidance you can provide.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5438
Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 7.0.6002.18005
1/1/2011 5:51:54 PM
mbam-log-2011-01-01 (17-51-54).txt
Scan type: Quick scan
Objects scanned: 147002
Time elapsed: 30 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit quick scan 2011-01-01 18:23:07
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 ST920042 rev.3.AD
Running: 0whouzlx.exe; Driver: C:\Users\CHARLI~1\AppData\Local\Temp\kwaiapod.sys
---- Disk sectors - GMER 1.0.15 ----
Disk \Device\Harddisk0\DR0 sector 61: copy of MBR
Disk \Device\Harddisk0\DR0 sector 62: copy of MBR
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
---- EOF - GMER 1.0.15 ----
DDS (Ver_10-12-12.02) - NTFSx86 NETWORK
Run by Charlie Reece at 18:24:19.43 on Sat 01/01/2011
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_20
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3581.2979 [GMT -5:00]
AV: Trend Micro Internet Security *Disabled/Updated* {48929DFC-7A52-A34F-8351-C4DBEDBD9C50}
SP: Trend Micro Internet Security *Disabled/Updated* {F3F37C18-5C68-ACC1-B9E1-FFA9963AD6ED}
FW: Trend Micro Personal Firewall *Disabled* {70A91CD9-303D-A217-A80E-6DEE136EDB2B}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\Charlie Reece\Downloads\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=2080201
uWindow Title = Internet Explorer provided by Dell
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
mRun: [<NO NAME>]
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: DisableCAD = 1 (0x1)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Notify: psfus - c:\windows\system32\psqlpwd.dll
LSA: Notification Packages = scecli psqlpwd
================= FIREFOX ===================
FF - ProfilePath - c:\users\charli~1\appdata\roaming\mozilla\firefox\profiles\wt74y5dz.default\
FF - component: c:\users\charlie reece\appdata\roaming\mozilla\firefox\profiles\wt74y5dz.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}\platform\winnt_x86-msvc\components\WeaveCrypto.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\users\charlie reece\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\users\charlie reece\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\charlie reece\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Stylish: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8} - %profile%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
FF - Ext: URL Lister: urllister@binnyva.com - %profile%\extensions\urllister@binnyva.com
FF - Ext: Firefox Sync: {340c2bbc-ce74-4362-90b5-7c26312808ef} - %profile%\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}
============= SERVICES / DRIVERS ===============
R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\drivers\tmlwf.sys [2010-12-31 142352]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2008-2-1 179712]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2009-5-28 4233728]
S2 AbsoluteNotifier;Absolute Notifier;c:\program files\absolute software\absolute notifier\AbsoluteNotifierService.exe [2010-10-8 10408]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 rpcnetp;rpcnetp;c:\windows\system32\rpcnetp.exe [2009-8-22 17408]
S2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2010-12-31 51792]
S2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2010-12-31 36432]
S2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\drivers\tmwfp.sys [2010-12-31 235024]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files\steam\steamapps\common\dragon age origins\bin_ship\daupdatersvc.service.exe --> c:\program files\steam\steamapps\common\dragon age origins\bin_ship\DAUpdaterSvc.Service.exe [?]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2009-8-29 21504]
S3 OEM04Vfx;Creative Camera OEM004 Video VFX Driver;c:\windows\system32\drivers\OEM04Vfx.sys [2008-2-1 7424]
S3 OEM04Vid;Creative Camera OEM004 Driver;c:\windows\system32\drivers\OEM04Vid.sys [2008-2-1 234720]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 AESTFilters;Andrea ST Filters Service;c:\windows\system32\AEstSrv.exe [2008-1-31 73728]
S4 TmPfw;Trend Micro Personal Firewall;c:\progra~1\trendm~1\intern~2\TmPfw.exe [2010-12-31 488768]
S4 tmproxy;Trend Micro Proxy Service;c:\program files\trend micro\internet security\TmProxy.exe [2010-12-31 648456]
=============== Created Last 30 ================
2011-01-01 21:44:50 -------- d-----w- c:\users\charli~1\appdata\roaming\Malwarebytes
2011-01-01 21:44:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-01 21:44:46 -------- d-----w- c:\progra~2\Malwarebytes
2011-01-01 21:44:43 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-01 21:44:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-31 16:07:39 -------- d-----w- c:\windows\system32\log
2010-12-31 15:57:26 66320 ----a-w- c:\windows\system32\drivers\tmtdi.sys
2010-12-31 15:57:26 59472 ----a-w- c:\windows\system32\drivers\tmactmon.sys
2010-12-31 15:57:26 51792 ----a-w- c:\windows\system32\drivers\tmevtmgr.sys
2010-12-31 15:57:26 36432 ----a-w- c:\windows\system32\drivers\tmpreflt.sys
2010-12-31 15:57:26 249424 ----a-w- c:\windows\system32\drivers\tmxpflt.sys
2010-12-31 15:57:26 235024 ----a-w- c:\windows\system32\drivers\tmwfp.sys
2010-12-31 15:57:26 163408 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2010-12-31 15:57:26 142352 ----a-w- c:\windows\system32\drivers\tmlwf.sys
2010-12-31 15:57:26 1331512 ----a-w- c:\windows\system32\drivers\vsapint.sys
2010-12-30 01:59:04 -------- d-----w- c:\progra~2\MFAData
2010-12-27 23:44:35 92424 ----a-w- c:\program files\mozilla firefox\32bit\ncfg.exe
2010-12-27 23:44:35 480784 ----a-w- c:\program files\mozilla firefox\32bit\vsapiins.exe
2010-12-27 23:44:35 218376 ----a-w- c:\program files\mozilla firefox\32bit\TmEngDrv.dll
2010-12-27 23:44:35 1991944 ----a-w- c:\program files\mozilla firefox\32bit\TISSuprt.exe
2010-12-27 23:44:35 156936 ----a-w- c:\program files\mozilla firefox\32bit\libexpat.dll
2010-12-27 23:44:35 1332112 ----a-w- c:\program files\mozilla firefox\32bit\TSRemove.exe
2010-12-27 23:44:35 124168 ----a-w- c:\program files\mozilla firefox\32bit\TmDbg32.dll
2010-12-27 23:28:05 -------- d-sh--w- C:\found.001
2010-12-26 03:31:47 -------- d-sh--w- C:\found.000
2010-12-24 19:33:31 23694 ----a-w- c:\windows\system32\win32k2.sys
2010-12-24 19:33:26 -------- d-----w- c:\program files\MEDA MP3 Splitter
2010-12-24 05:01:51 -------- d-----w- c:\users\charli~1\appdata\roaming\EAC
2010-12-24 05:01:51 -------- d-----w- c:\users\charli~1\appdata\roaming\AccurateRip
2010-12-24 05:01:48 -------- d-----w- c:\program files\Exact Audio Copy
2010-12-23 01:05:18 -------- d-----w- c:\program files\NCH Software
2010-12-19 17:41:21 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-19 17:41:21 -------- d-----w- c:\progra~2\Spybot - Search & Destroy
2010-12-16 19:46:52 -------- d-----w- c:\users\charli~1\appdata\roaming\Absolute Software
2010-12-16 00:12:06 66048 ----a-w- c:\program files\windows mail\wabmig.exe
2010-12-16 00:12:06 515584 ----a-w- c:\program files\windows mail\wab.exe
2010-12-16 00:12:06 33280 ----a-w- c:\program files\windows mail\wabfind.dll
2010-12-16 00:12:03 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-12-16 00:12:01 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-16 00:12:01 352768 ----a-w- c:\windows\system32\taskschd.dll
2010-12-16 00:12:01 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-16 00:12:01 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-16 00:12:01 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-16 00:12:00 81920 ----a-w- c:\windows\system32\consent.exe
2010-12-14 00:05:56 159744 ----a-w- c:\program files\mozilla firefox\plugins\npqtplugin7.dll
2010-12-09 16:11:14 -------- d-----w- c:\windows\pss
==================== Find3M ====================
2011-01-01 21:30:19 17408 ----a-w- c:\windows\system32\rpcnetp.exe
2011-01-01 21:06:56 57752 ----a-w- c:\windows\system32\rpcnet.dll
2011-01-01 21:06:56 17408 ----a-w- c:\windows\system32\rpcnetp.dll
2010-11-29 22:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 22:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-12 18:46:58 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2010-10-31 02:50:15 29184 ----a-w- c:\windows\system32\CtLoJack.dll
2010-10-28 15:44:56 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-10-28 13:27:47 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-10-28 13:20:12 2048 ----a-w- c:\windows\system32\tzres.dll
2010-10-21 20:08:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-10-21 18:30:50 389632 ----a-w- c:\windows\system32\html.iec
2010-10-20 17:41:28 78336 ----a-w- c:\windows\system32\ieencode.dll
============= FINISH: 18:25:06.51 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume3
Install Date: 1/31/2008 5:50:16 PM
System Uptime: 1/1/2011 4:30:05 PM (2 hours ago)
Motherboard: Dell Inc. | |
Processor: Intel(R) Core(TM)2 Duo CPU T7500 @ 2.20GHz | Microprocessor | 2194/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 174 GiB total, 22.6 GiB free.
D: is FIXED (NTFS) - 10 GiB total, 2.636 GiB free.
F: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP190: 12/24/2010 12:45:36 AM - Scheduled Checkpoint
RP191: 12/31/2010 11:08:33 AM - Device Driver Package Install: Trend Micro Network Service
RP192: 12/31/2010 11:08:59 AM - Device Driver Package Install: TrendMicro Network Service
RP193: 12/31/2010 11:09:22 AM - Device Driver Package Install: Trend Micro Network Service
==== Installed Programs ======================
µTorrent
3ivx MPEG-4 5.0.3 (remove only)
7-Zip 4.65
Absolute Notifier
Adobe AIR
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Photoshop Elements 6.0
Adobe Premiere Elements 4.0
Adobe Premiere Elements 4.0 Templates
Adobe Reader 8.2.5
Advanced Audio FX Engine
Advanced Video FX Engine
Adventure Tools
Amazon MP3 Downloader 1.0.10
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Audible Download Manager
Bejeweled 2 Deluxe
Bonjour
Broadcom Management Programs
Browser Address Error Redirector
CCleaner
Character Builder
Consumer Complete Care Services Agreement
CutePDF Writer 2.8
Defraggler
Dell DataSafe Online
Dell Driver Download Manager
Dell Getting Started Guide
Dell Support Center (Support Software)
Dell Touchpad
Dell Webcam Center
Dell Webcam Manager
Ditto
Dropbox
Exact Audio Copy 1.0beta1
Fallout 3 - Game of the Year Edition
ffdshow [rev 3055] [2009-08-16]
Fingerprint Reader Suite 5.6
Flickr Uploadr 3.2.1
FlipShare
FolderSize.Win32 1.0.7.0
Freespace 2
Google Talk Plugin
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel PROSet Wireless
Intel(R) PROSet/Wireless WiFi Software
iPhone Configuration Utility
iTunes
Java Auto Updater
Java(TM) 6 Update 20
Java(TM) SE Runtime Environment 6
Laptop Integrated Webcam Driver (1.03.01.1011)
Live! Cam Avatar Creator
Live! Cam Avatar v1.0
Malwarebytes' Anti-Malware
MEDA MP3 Splitter 2.0.1
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Games for Windows - LIVE Redistributable
Microsoft Silverlight
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
MobileMe Control Panel
Mozilla Firefox (3.6.6)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Music, Photos & Videos Launcher
mWMI
nrg2iso
NVIDIA Display Control Panel
NVIDIA Drivers
NVIDIA PhysX
OGA Notifier 2.0.0048.0
OpenOffice.org 3.2
OSU-gt RC8
Picaboo X
Picasa 3
Planescape Torment
Product Documentation Launcher
QualxServ Service Agreement
QuickSet
QuickTime
Roxio Creator Audio
Roxio Creator BDAV Plugin
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler
Roxio MyDVD DE
Roxio Update Manager
Safari
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Sid Meier's Civilization V
SigmaTel Audio
Sonic Activation Module
Steam
System Requirements Lab
Trend Micro Internet Security
Trend Micro PC-cillin Internet Security
Uninstall Startup Inspector
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
User's Guides
VLC media player 1.0.1
WIDCOMM Bluetooth Software 6.0.1.3100
Windows Media Player Firefox Plugin
==== Event Viewer Messages From Past Week ========
12/31/2010 9:58:04 AM, Error: Service Control Manager [7031] - The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/31/2010 9:53:05 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
12/31/2010 9:48:01 AM, Error: EventLog [6008] - The previous system shutdown at 9:45:07 AM on 12/31/2010 was unexpected.
12/31/2010 9:43:15 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B68-F52A-11D8-B9A5-505054503030}
12/31/2010 9:41:15 AM, Error: EventLog [6008] - The previous system shutdown at 9:34:09 AM on 12/31/2010 was unexpected.
12/31/2010 8:59:04 PM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.0.195 for the Network Card with network address 001DE072DD7B has been denied by the DHCP server 172.17.1.1 (The DHCP Server sent a DHCPNACK message).
12/31/2010 8:58:09 PM, Error: EventLog [6008] - The previous system shutdown at 2:01:21 PM on 12/31/2010 was unexpected.
12/31/2010 12:10:50 PM, Error: EventLog [6008] - The previous system shutdown at 11:44:45 AM on 12/31/2010 was unexpected.
12/31/2010 11:40:25 AM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
12/31/2010 11:33:42 AM, Error: EventLog [6008] - The previous system shutdown at 11:25:25 AM on 12/31/2010 was unexpected.
12/31/2010 11:09:38 AM, Error: Service Control Manager [7030] - The Trend Micro Proxy Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
12/31/2010 11:09:33 AM, Error: Service Control Manager [7030] - The Trend Micro Personal Firewall service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
12/31/2010 11:05:26 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: An instance of the service is already running.
12/31/2010 11:04:54 AM, Error: Service Control Manager [7022] - The Trend Micro Central Control Component service hung on starting.
12/31/2010 10:38:40 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: spldr Wanarpv6
12/31/2010 10:37:43 AM, Error: EventLog [6008] - The previous system shutdown at 10:32:48 AM on 12/31/2010 was unexpected.
12/31/2010 10:36:55 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
12/31/2010 10:36:52 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume .
12/31/2010 1:18:10 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wcncsvc with arguments "" in order to run the server: {375FF000-DD27-11D9-8F9C-0002B3988E81}
12/31/2010 1:18:10 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
12/30/2010 9:59:44 PM, Error: EventLog [6008] - The previous system shutdown at 9:55:05 PM on 12/30/2010 was unexpected.
12/30/2010 9:59:24 PM, Error: Application Popup [877] - There was error [DATABASE OPEN FAILED] processing the driver database.
12/29/2010 8:12:56 PM, Error: EventLog [6008] - The previous system shutdown at 8:04:46 PM on 12/29/2010 was unexpected.
12/29/2010 8:04:47 PM, Error: BTHUSB [17] - The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
12/27/2010 9:49:59 PM, Error: iaStor [9] - The device, \Device\Ide\iaStor0, did not respond within the timeout period.
12/27/2010 9:49:21 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
12/27/2010 9:21:26 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wcncsvc with arguments "" in order to run the server: {375FF001-DD27-11D9-8F9C-0002B3988E81}
12/27/2010 9:17:31 PM, Error: EventLog [6008] - The previous system shutdown at 7:28:21 PM on 12/27/2010 was unexpected.
12/27/2010 7:24:30 PM, Error: EventLog [6008] - The previous system shutdown at 6:47:31 PM on 12/27/2010 was unexpected.
12/27/2010 6:37:56 PM, Error: Service Control Manager [7001] - The Trend Micro Proxy Service service depends on the Trend Micro TDI Driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/27/2010 6:37:15 PM, Error: EventLog [6008] - The previous system shutdown at 6:35:15 PM on 12/27/2010 was unexpected.
12/27/2010 6:30:17 PM, Error: EventLog [6008] - The previous system shutdown at 6:22:17 PM on 12/27/2010 was unexpected.
12/27/2010 6:04:25 PM, Error: Microsoft-Windows-PrintSpooler [19] - The print spooler failed to share printer CutePDF Writer with shared resource name CutePDF Writer. Error 2114. The printer cannot be used by others on the network.
12/27/2010 5:55:20 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx tmtdi Wanarpv6
12/27/2010 5:53:44 PM, Error: EventLog [6008] - The previous system shutdown at 5:49:28 PM on 12/27/2010 was unexpected.
12/27/2010 5:35:01 PM, Error: EventLog [6008] - The previous system shutdown at 5:00:34 PM on 12/27/2010 was unexpected.
12/26/2010 9:53:30 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume OS.
12/26/2010 9:22:16 AM, Error: EventLog [6008] - The previous system shutdown at 10:46:31 PM on 12/25/2010 was unexpected.
12/26/2010 6:58:50 PM, Error: EventLog [6008] - The previous system shutdown at 5:45:52 PM on 12/26/2010 was unexpected.
12/26/2010 5:35:57 PM, Error: Microsoft-Windows-Kernel-General [5] - {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\COMPONENTS' was corrupted and it has been recovered. Some data might have been lost.
12/26/2010 5:31:21 PM, Error: Microsoft-Windows-Kernel-General [5] - {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\SYSTEM' was corrupted and it has been recovered. Some data might have been lost.
12/26/2010 4:50:29 PM, Error: EventLog [6008] - The previous system shutdown at 4:39:52 PM on 12/26/2010 was unexpected.
12/26/2010 4:36:57 PM, Error: EventLog [6008] - The previous system shutdown at 4:02:44 PM on 12/26/2010 was unexpected.
12/26/2010 3:56:52 PM, Error: EventLog [6008] - The previous system shutdown at 2:35:07 PM on 12/26/2010 was unexpected.
12/26/2010 2:20:17 PM, Error: EventLog [6008] - The previous system shutdown at 12:34:23 PM on 12/26/2010 was unexpected.
12/26/2010 11:59:28 AM, Error: EventLog [6008] - The previous system shutdown at 10:17:05 AM on 12/26/2010 was unexpected.
12/26/2010 10:03:13 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Base Filtering Engine service, but this action failed with the following error: An instance of the service is already running.
12/26/2010 10:02:25 AM, Error: Service Control Manager [7034] - The Windows Search service terminated unexpectedly. It has done this 3 time(s).
12/26/2010 10:01:46 AM, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
12/26/2010 10:01:13 AM, Error: Service Control Manager [7031] - The Windows Firewall service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/26/2010 10:01:13 AM, Error: Service Control Manager [7031] - The Diagnostic Policy Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/26/2010 10:01:13 AM, Error: Service Control Manager [7031] - The Base Filtering Engine service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/25/2010 3:01:13 PM, Error: EventLog [6008] - The previous system shutdown at 2:55:23 PM on 12/25/2010 was unexpected.
12/25/2010 2:51:34 PM, Error: EventLog [6008] - The previous system shutdown at 2:42:28 PM on 12/25/2010 was unexpected.
12/25/2010 10:41:20 PM, Error: Microsoft-Windows-Kernel-General [5] - {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.
12/25/2010 10:15:41 PM, Error: Service Control Manager [7031] - The Windows Firewall service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
12/25/2010 10:15:41 PM, Error: Service Control Manager [7031] - The Diagnostic Policy Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
12/25/2010 10:15:41 PM, Error: Service Control Manager [7031] - The Base Filtering Engine service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
12/25/2010 1:55:08 PM, Error: EventLog [6008] - The previous system shutdown at 1:49:48 PM on 12/25/2010 was unexpected.
12/25/2010 1:43:44 PM, Error: EventLog [6008] - The previous system shutdown at 1:36:45 PM on 12/25/2010 was unexpected.
1/1/2011 4:37:13 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service iPod Service with arguments "" in order to run the server: {063D34A4-BF84-4B8D-B699-E8CA06504DDE}
1/1/2011 4:32:45 PM, Error: Service Control Manager [7001] - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:31:21 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: spldr tmtdi Wanarpv6
1/1/2011 4:31:21 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:31:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/1/2011 4:31:16 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/1/2011 4:31:14 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
1/1/2011 4:31:11 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/1/2011 4:31:03 PM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\IWMSSvc.dll Error Code: 21
1/1/2011 4:31:03 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/1/2011 4:30:38 PM, Error: EventLog [6008] - The previous system shutdown at 4:27:54 PM on 1/1/2011 was unexpected.
1/1/2011 4:30:22 PM, Error: volmgr [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
1/1/2011 4:25:17 PM, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
1/1/2011 4:25:17 PM, Error: Service Control Manager [7024] - The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).
1/1/2011 4:25:17 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
1/1/2011 4:25:17 PM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/1/2011 4:25:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/1/2011 4:25:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/1/2011 4:19:45 PM, Error: EventLog [6008] - The previous system shutdown at 4:10:40 PM on 1/1/2011 was unexpected.
1/1/2011 4:06:09 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx tmlwf tmtdi Wanarpv6
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The WebDav Client Redirector Driver service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The WebClient service depends on the WebDav Client Redirector Driver service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:05:31 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1/1/2011 4:05:31 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1/1/2011 4:04:58 PM, Error: EventLog [6008] - The previous system shutdown at 4:01:02 PM on 1/1/2011 was unexpected.
1/1/2011 3:52:33 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service PcCtlCom with arguments "-Service" in order to run the server: {5F9DCAF1-2A98-4135-AEFF-8C76B1D7C52C}
1/1/2011 3:51:10 PM, Error: EventLog [6008] - The previous system shutdown at 3:47:07 PM on 1/1/2011 was unexpected.
1/1/2011 3:41:11 PM, Error: EventLog [6008] - The previous system shutdown at 3:16:56 PM on 1/1/2011 was unexpected.
==== End Of File ===========================
When booting up in normal mode, Vista comes up normally but within a few minutes any running program freezes and I get the eternal spinning blue circle in place of my cursor. The only way to shot down the computer at that point is to remove the battery and unplug the laptop. I still get the same behavior even when disabling all of the non-Windows services on start-up through msconfig. Safe mode works fine, no hanging there.
The problem is that I can only run the programs outlined in the 8-step process in safe mode -- in normal mode, the system hangs before any logs can be generated.
Anyway, I'm pasting the logs from safe mode below. If the logs must be generated in normal mode, I can keep trying -- the time it takes for Vista to get stuck varies, and I might be able to get all of the logs generated eventually.
Thanks in advance for any guidance you can provide.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5438
Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 7.0.6002.18005
1/1/2011 5:51:54 PM
mbam-log-2011-01-01 (17-51-54).txt
Scan type: Quick scan
Objects scanned: 147002
Time elapsed: 30 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit quick scan 2011-01-01 18:23:07
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 ST920042 rev.3.AD
Running: 0whouzlx.exe; Driver: C:\Users\CHARLI~1\AppData\Local\Temp\kwaiapod.sys
---- Disk sectors - GMER 1.0.15 ----
Disk \Device\Harddisk0\DR0 sector 61: copy of MBR
Disk \Device\Harddisk0\DR0 sector 62: copy of MBR
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
---- EOF - GMER 1.0.15 ----
DDS (Ver_10-12-12.02) - NTFSx86 NETWORK
Run by Charlie Reece at 18:24:19.43 on Sat 01/01/2011
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_20
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3581.2979 [GMT -5:00]
AV: Trend Micro Internet Security *Disabled/Updated* {48929DFC-7A52-A34F-8351-C4DBEDBD9C50}
SP: Trend Micro Internet Security *Disabled/Updated* {F3F37C18-5C68-ACC1-B9E1-FFA9963AD6ED}
FW: Trend Micro Personal Firewall *Disabled* {70A91CD9-303D-A217-A80E-6DEE136EDB2B}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\Charlie Reece\Downloads\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=2080201
uWindow Title = Internet Explorer provided by Dell
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
mRun: [<NO NAME>]
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: DisableCAD = 1 (0x1)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Notify: psfus - c:\windows\system32\psqlpwd.dll
LSA: Notification Packages = scecli psqlpwd
================= FIREFOX ===================
FF - ProfilePath - c:\users\charli~1\appdata\roaming\mozilla\firefox\profiles\wt74y5dz.default\
FF - component: c:\users\charlie reece\appdata\roaming\mozilla\firefox\profiles\wt74y5dz.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}\platform\winnt_x86-msvc\components\WeaveCrypto.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\users\charlie reece\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\users\charlie reece\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\charlie reece\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Stylish: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8} - %profile%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
FF - Ext: URL Lister: urllister@binnyva.com - %profile%\extensions\urllister@binnyva.com
FF - Ext: Firefox Sync: {340c2bbc-ce74-4362-90b5-7c26312808ef} - %profile%\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}
============= SERVICES / DRIVERS ===============
R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\drivers\tmlwf.sys [2010-12-31 142352]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2008-2-1 179712]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2009-5-28 4233728]
S2 AbsoluteNotifier;Absolute Notifier;c:\program files\absolute software\absolute notifier\AbsoluteNotifierService.exe [2010-10-8 10408]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 rpcnetp;rpcnetp;c:\windows\system32\rpcnetp.exe [2009-8-22 17408]
S2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2010-12-31 51792]
S2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2010-12-31 36432]
S2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\drivers\tmwfp.sys [2010-12-31 235024]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files\steam\steamapps\common\dragon age origins\bin_ship\daupdatersvc.service.exe --> c:\program files\steam\steamapps\common\dragon age origins\bin_ship\DAUpdaterSvc.Service.exe [?]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2009-8-29 21504]
S3 OEM04Vfx;Creative Camera OEM004 Video VFX Driver;c:\windows\system32\drivers\OEM04Vfx.sys [2008-2-1 7424]
S3 OEM04Vid;Creative Camera OEM004 Driver;c:\windows\system32\drivers\OEM04Vid.sys [2008-2-1 234720]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 AESTFilters;Andrea ST Filters Service;c:\windows\system32\AEstSrv.exe [2008-1-31 73728]
S4 TmPfw;Trend Micro Personal Firewall;c:\progra~1\trendm~1\intern~2\TmPfw.exe [2010-12-31 488768]
S4 tmproxy;Trend Micro Proxy Service;c:\program files\trend micro\internet security\TmProxy.exe [2010-12-31 648456]
=============== Created Last 30 ================
2011-01-01 21:44:50 -------- d-----w- c:\users\charli~1\appdata\roaming\Malwarebytes
2011-01-01 21:44:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-01 21:44:46 -------- d-----w- c:\progra~2\Malwarebytes
2011-01-01 21:44:43 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-01 21:44:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-31 16:07:39 -------- d-----w- c:\windows\system32\log
2010-12-31 15:57:26 66320 ----a-w- c:\windows\system32\drivers\tmtdi.sys
2010-12-31 15:57:26 59472 ----a-w- c:\windows\system32\drivers\tmactmon.sys
2010-12-31 15:57:26 51792 ----a-w- c:\windows\system32\drivers\tmevtmgr.sys
2010-12-31 15:57:26 36432 ----a-w- c:\windows\system32\drivers\tmpreflt.sys
2010-12-31 15:57:26 249424 ----a-w- c:\windows\system32\drivers\tmxpflt.sys
2010-12-31 15:57:26 235024 ----a-w- c:\windows\system32\drivers\tmwfp.sys
2010-12-31 15:57:26 163408 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2010-12-31 15:57:26 142352 ----a-w- c:\windows\system32\drivers\tmlwf.sys
2010-12-31 15:57:26 1331512 ----a-w- c:\windows\system32\drivers\vsapint.sys
2010-12-30 01:59:04 -------- d-----w- c:\progra~2\MFAData
2010-12-27 23:44:35 92424 ----a-w- c:\program files\mozilla firefox\32bit\ncfg.exe
2010-12-27 23:44:35 480784 ----a-w- c:\program files\mozilla firefox\32bit\vsapiins.exe
2010-12-27 23:44:35 218376 ----a-w- c:\program files\mozilla firefox\32bit\TmEngDrv.dll
2010-12-27 23:44:35 1991944 ----a-w- c:\program files\mozilla firefox\32bit\TISSuprt.exe
2010-12-27 23:44:35 156936 ----a-w- c:\program files\mozilla firefox\32bit\libexpat.dll
2010-12-27 23:44:35 1332112 ----a-w- c:\program files\mozilla firefox\32bit\TSRemove.exe
2010-12-27 23:44:35 124168 ----a-w- c:\program files\mozilla firefox\32bit\TmDbg32.dll
2010-12-27 23:28:05 -------- d-sh--w- C:\found.001
2010-12-26 03:31:47 -------- d-sh--w- C:\found.000
2010-12-24 19:33:31 23694 ----a-w- c:\windows\system32\win32k2.sys
2010-12-24 19:33:26 -------- d-----w- c:\program files\MEDA MP3 Splitter
2010-12-24 05:01:51 -------- d-----w- c:\users\charli~1\appdata\roaming\EAC
2010-12-24 05:01:51 -------- d-----w- c:\users\charli~1\appdata\roaming\AccurateRip
2010-12-24 05:01:48 -------- d-----w- c:\program files\Exact Audio Copy
2010-12-23 01:05:18 -------- d-----w- c:\program files\NCH Software
2010-12-19 17:41:21 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-19 17:41:21 -------- d-----w- c:\progra~2\Spybot - Search & Destroy
2010-12-16 19:46:52 -------- d-----w- c:\users\charli~1\appdata\roaming\Absolute Software
2010-12-16 00:12:06 66048 ----a-w- c:\program files\windows mail\wabmig.exe
2010-12-16 00:12:06 515584 ----a-w- c:\program files\windows mail\wab.exe
2010-12-16 00:12:06 33280 ----a-w- c:\program files\windows mail\wabfind.dll
2010-12-16 00:12:03 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-12-16 00:12:01 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-16 00:12:01 352768 ----a-w- c:\windows\system32\taskschd.dll
2010-12-16 00:12:01 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-16 00:12:01 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-16 00:12:01 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-16 00:12:00 81920 ----a-w- c:\windows\system32\consent.exe
2010-12-14 00:05:56 159744 ----a-w- c:\program files\mozilla firefox\plugins\npqtplugin7.dll
2010-12-09 16:11:14 -------- d-----w- c:\windows\pss
==================== Find3M ====================
2011-01-01 21:30:19 17408 ----a-w- c:\windows\system32\rpcnetp.exe
2011-01-01 21:06:56 57752 ----a-w- c:\windows\system32\rpcnet.dll
2011-01-01 21:06:56 17408 ----a-w- c:\windows\system32\rpcnetp.dll
2010-11-29 22:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 22:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-12 18:46:58 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2010-10-31 02:50:15 29184 ----a-w- c:\windows\system32\CtLoJack.dll
2010-10-28 15:44:56 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-10-28 13:27:47 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-10-28 13:20:12 2048 ----a-w- c:\windows\system32\tzres.dll
2010-10-21 20:08:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-10-21 18:30:50 389632 ----a-w- c:\windows\system32\html.iec
2010-10-20 17:41:28 78336 ----a-w- c:\windows\system32\ieencode.dll
============= FINISH: 18:25:06.51 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume3
Install Date: 1/31/2008 5:50:16 PM
System Uptime: 1/1/2011 4:30:05 PM (2 hours ago)
Motherboard: Dell Inc. | |
Processor: Intel(R) Core(TM)2 Duo CPU T7500 @ 2.20GHz | Microprocessor | 2194/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 174 GiB total, 22.6 GiB free.
D: is FIXED (NTFS) - 10 GiB total, 2.636 GiB free.
F: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP190: 12/24/2010 12:45:36 AM - Scheduled Checkpoint
RP191: 12/31/2010 11:08:33 AM - Device Driver Package Install: Trend Micro Network Service
RP192: 12/31/2010 11:08:59 AM - Device Driver Package Install: TrendMicro Network Service
RP193: 12/31/2010 11:09:22 AM - Device Driver Package Install: Trend Micro Network Service
==== Installed Programs ======================
µTorrent
3ivx MPEG-4 5.0.3 (remove only)
7-Zip 4.65
Absolute Notifier
Adobe AIR
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Photoshop Elements 6.0
Adobe Premiere Elements 4.0
Adobe Premiere Elements 4.0 Templates
Adobe Reader 8.2.5
Advanced Audio FX Engine
Advanced Video FX Engine
Adventure Tools
Amazon MP3 Downloader 1.0.10
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Audible Download Manager
Bejeweled 2 Deluxe
Bonjour
Broadcom Management Programs
Browser Address Error Redirector
CCleaner
Character Builder
Consumer Complete Care Services Agreement
CutePDF Writer 2.8
Defraggler
Dell DataSafe Online
Dell Driver Download Manager
Dell Getting Started Guide
Dell Support Center (Support Software)
Dell Touchpad
Dell Webcam Center
Dell Webcam Manager
Ditto
Dropbox
Exact Audio Copy 1.0beta1
Fallout 3 - Game of the Year Edition
ffdshow [rev 3055] [2009-08-16]
Fingerprint Reader Suite 5.6
Flickr Uploadr 3.2.1
FlipShare
FolderSize.Win32 1.0.7.0
Freespace 2
Google Talk Plugin
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel PROSet Wireless
Intel(R) PROSet/Wireless WiFi Software
iPhone Configuration Utility
iTunes
Java Auto Updater
Java(TM) 6 Update 20
Java(TM) SE Runtime Environment 6
Laptop Integrated Webcam Driver (1.03.01.1011)
Live! Cam Avatar Creator
Live! Cam Avatar v1.0
Malwarebytes' Anti-Malware
MEDA MP3 Splitter 2.0.1
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Games for Windows - LIVE Redistributable
Microsoft Silverlight
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
MobileMe Control Panel
Mozilla Firefox (3.6.6)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Music, Photos & Videos Launcher
mWMI
nrg2iso
NVIDIA Display Control Panel
NVIDIA Drivers
NVIDIA PhysX
OGA Notifier 2.0.0048.0
OpenOffice.org 3.2
OSU-gt RC8
Picaboo X
Picasa 3
Planescape Torment
Product Documentation Launcher
QualxServ Service Agreement
QuickSet
QuickTime
Roxio Creator Audio
Roxio Creator BDAV Plugin
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler
Roxio MyDVD DE
Roxio Update Manager
Safari
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Sid Meier's Civilization V
SigmaTel Audio
Sonic Activation Module
Steam
System Requirements Lab
Trend Micro Internet Security
Trend Micro PC-cillin Internet Security
Uninstall Startup Inspector
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
User's Guides
VLC media player 1.0.1
WIDCOMM Bluetooth Software 6.0.1.3100
Windows Media Player Firefox Plugin
==== Event Viewer Messages From Past Week ========
12/31/2010 9:58:04 AM, Error: Service Control Manager [7031] - The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/31/2010 9:53:05 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
12/31/2010 9:48:01 AM, Error: EventLog [6008] - The previous system shutdown at 9:45:07 AM on 12/31/2010 was unexpected.
12/31/2010 9:43:15 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B68-F52A-11D8-B9A5-505054503030}
12/31/2010 9:41:15 AM, Error: EventLog [6008] - The previous system shutdown at 9:34:09 AM on 12/31/2010 was unexpected.
12/31/2010 8:59:04 PM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.0.195 for the Network Card with network address 001DE072DD7B has been denied by the DHCP server 172.17.1.1 (The DHCP Server sent a DHCPNACK message).
12/31/2010 8:58:09 PM, Error: EventLog [6008] - The previous system shutdown at 2:01:21 PM on 12/31/2010 was unexpected.
12/31/2010 12:10:50 PM, Error: EventLog [6008] - The previous system shutdown at 11:44:45 AM on 12/31/2010 was unexpected.
12/31/2010 11:40:25 AM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
12/31/2010 11:33:42 AM, Error: EventLog [6008] - The previous system shutdown at 11:25:25 AM on 12/31/2010 was unexpected.
12/31/2010 11:09:38 AM, Error: Service Control Manager [7030] - The Trend Micro Proxy Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
12/31/2010 11:09:33 AM, Error: Service Control Manager [7030] - The Trend Micro Personal Firewall service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
12/31/2010 11:05:26 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: An instance of the service is already running.
12/31/2010 11:04:54 AM, Error: Service Control Manager [7022] - The Trend Micro Central Control Component service hung on starting.
12/31/2010 10:38:40 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: spldr Wanarpv6
12/31/2010 10:37:43 AM, Error: EventLog [6008] - The previous system shutdown at 10:32:48 AM on 12/31/2010 was unexpected.
12/31/2010 10:36:55 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
12/31/2010 10:36:52 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume .
12/31/2010 1:18:10 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wcncsvc with arguments "" in order to run the server: {375FF000-DD27-11D9-8F9C-0002B3988E81}
12/31/2010 1:18:10 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
12/30/2010 9:59:44 PM, Error: EventLog [6008] - The previous system shutdown at 9:55:05 PM on 12/30/2010 was unexpected.
12/30/2010 9:59:24 PM, Error: Application Popup [877] - There was error [DATABASE OPEN FAILED] processing the driver database.
12/29/2010 8:12:56 PM, Error: EventLog [6008] - The previous system shutdown at 8:04:46 PM on 12/29/2010 was unexpected.
12/29/2010 8:04:47 PM, Error: BTHUSB [17] - The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
12/27/2010 9:49:59 PM, Error: iaStor [9] - The device, \Device\Ide\iaStor0, did not respond within the timeout period.
12/27/2010 9:49:21 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
12/27/2010 9:21:26 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wcncsvc with arguments "" in order to run the server: {375FF001-DD27-11D9-8F9C-0002B3988E81}
12/27/2010 9:17:31 PM, Error: EventLog [6008] - The previous system shutdown at 7:28:21 PM on 12/27/2010 was unexpected.
12/27/2010 7:24:30 PM, Error: EventLog [6008] - The previous system shutdown at 6:47:31 PM on 12/27/2010 was unexpected.
12/27/2010 6:37:56 PM, Error: Service Control Manager [7001] - The Trend Micro Proxy Service service depends on the Trend Micro TDI Driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/27/2010 6:37:15 PM, Error: EventLog [6008] - The previous system shutdown at 6:35:15 PM on 12/27/2010 was unexpected.
12/27/2010 6:30:17 PM, Error: EventLog [6008] - The previous system shutdown at 6:22:17 PM on 12/27/2010 was unexpected.
12/27/2010 6:04:25 PM, Error: Microsoft-Windows-PrintSpooler [19] - The print spooler failed to share printer CutePDF Writer with shared resource name CutePDF Writer. Error 2114. The printer cannot be used by others on the network.
12/27/2010 5:55:20 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx tmtdi Wanarpv6
12/27/2010 5:53:44 PM, Error: EventLog [6008] - The previous system shutdown at 5:49:28 PM on 12/27/2010 was unexpected.
12/27/2010 5:35:01 PM, Error: EventLog [6008] - The previous system shutdown at 5:00:34 PM on 12/27/2010 was unexpected.
12/26/2010 9:53:30 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume OS.
12/26/2010 9:22:16 AM, Error: EventLog [6008] - The previous system shutdown at 10:46:31 PM on 12/25/2010 was unexpected.
12/26/2010 6:58:50 PM, Error: EventLog [6008] - The previous system shutdown at 5:45:52 PM on 12/26/2010 was unexpected.
12/26/2010 5:35:57 PM, Error: Microsoft-Windows-Kernel-General [5] - {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\COMPONENTS' was corrupted and it has been recovered. Some data might have been lost.
12/26/2010 5:31:21 PM, Error: Microsoft-Windows-Kernel-General [5] - {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\SYSTEM' was corrupted and it has been recovered. Some data might have been lost.
12/26/2010 4:50:29 PM, Error: EventLog [6008] - The previous system shutdown at 4:39:52 PM on 12/26/2010 was unexpected.
12/26/2010 4:36:57 PM, Error: EventLog [6008] - The previous system shutdown at 4:02:44 PM on 12/26/2010 was unexpected.
12/26/2010 3:56:52 PM, Error: EventLog [6008] - The previous system shutdown at 2:35:07 PM on 12/26/2010 was unexpected.
12/26/2010 2:20:17 PM, Error: EventLog [6008] - The previous system shutdown at 12:34:23 PM on 12/26/2010 was unexpected.
12/26/2010 11:59:28 AM, Error: EventLog [6008] - The previous system shutdown at 10:17:05 AM on 12/26/2010 was unexpected.
12/26/2010 10:03:13 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Base Filtering Engine service, but this action failed with the following error: An instance of the service is already running.
12/26/2010 10:02:25 AM, Error: Service Control Manager [7034] - The Windows Search service terminated unexpectedly. It has done this 3 time(s).
12/26/2010 10:01:46 AM, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
12/26/2010 10:01:13 AM, Error: Service Control Manager [7031] - The Windows Firewall service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/26/2010 10:01:13 AM, Error: Service Control Manager [7031] - The Diagnostic Policy Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/26/2010 10:01:13 AM, Error: Service Control Manager [7031] - The Base Filtering Engine service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/25/2010 3:01:13 PM, Error: EventLog [6008] - The previous system shutdown at 2:55:23 PM on 12/25/2010 was unexpected.
12/25/2010 2:51:34 PM, Error: EventLog [6008] - The previous system shutdown at 2:42:28 PM on 12/25/2010 was unexpected.
12/25/2010 10:41:20 PM, Error: Microsoft-Windows-Kernel-General [5] - {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.
12/25/2010 10:15:41 PM, Error: Service Control Manager [7031] - The Windows Firewall service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
12/25/2010 10:15:41 PM, Error: Service Control Manager [7031] - The Diagnostic Policy Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
12/25/2010 10:15:41 PM, Error: Service Control Manager [7031] - The Base Filtering Engine service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
12/25/2010 1:55:08 PM, Error: EventLog [6008] - The previous system shutdown at 1:49:48 PM on 12/25/2010 was unexpected.
12/25/2010 1:43:44 PM, Error: EventLog [6008] - The previous system shutdown at 1:36:45 PM on 12/25/2010 was unexpected.
1/1/2011 4:37:13 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service iPod Service with arguments "" in order to run the server: {063D34A4-BF84-4B8D-B699-E8CA06504DDE}
1/1/2011 4:32:45 PM, Error: Service Control Manager [7001] - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:31:21 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: spldr tmtdi Wanarpv6
1/1/2011 4:31:21 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:31:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/1/2011 4:31:16 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/1/2011 4:31:14 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
1/1/2011 4:31:11 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/1/2011 4:31:03 PM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\IWMSSvc.dll Error Code: 21
1/1/2011 4:31:03 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/1/2011 4:30:38 PM, Error: EventLog [6008] - The previous system shutdown at 4:27:54 PM on 1/1/2011 was unexpected.
1/1/2011 4:30:22 PM, Error: volmgr [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
1/1/2011 4:25:17 PM, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
1/1/2011 4:25:17 PM, Error: Service Control Manager [7024] - The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).
1/1/2011 4:25:17 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
1/1/2011 4:25:17 PM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/1/2011 4:25:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/1/2011 4:25:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/1/2011 4:19:45 PM, Error: EventLog [6008] - The previous system shutdown at 4:10:40 PM on 1/1/2011 was unexpected.
1/1/2011 4:06:09 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx tmlwf tmtdi Wanarpv6
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The WebDav Client Redirector Driver service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The WebClient service depends on the WebDav Client Redirector Driver service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:06:06 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/1/2011 4:05:31 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1/1/2011 4:05:31 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1/1/2011 4:04:58 PM, Error: EventLog [6008] - The previous system shutdown at 4:01:02 PM on 1/1/2011 was unexpected.
1/1/2011 3:52:33 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service PcCtlCom with arguments "-Service" in order to run the server: {5F9DCAF1-2A98-4135-AEFF-8C76B1D7C52C}
1/1/2011 3:51:10 PM, Error: EventLog [6008] - The previous system shutdown at 3:47:07 PM on 1/1/2011 was unexpected.
1/1/2011 3:41:11 PM, Error: EventLog [6008] - The previous system shutdown at 3:16:56 PM on 1/1/2011 was unexpected.
==== End Of File ===========================