Author Topic: Computer Crashing?  (Read 23237 times)

0 Members and 1 Guest are viewing this topic.

Offline deew

  • Full Member
  • ***
  • Posts: 50
    • View Profile
Re: Computer Crashing?
« Reply #30 on: March 08, 2011, 12:37:13 AM »
You forgot to tell me about uninstalling the ESET files or not.  I still have it open.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20213
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Computer Crashing?
« Reply #31 on: March 08, 2011, 12:52:50 AM »
Hi, deew.

The ESET log said that it could not clean the files.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline deew

  • Full Member
  • ***
  • Posts: 50
    • View Profile
Re: Computer Crashing?
« Reply #32 on: March 08, 2011, 01:11:17 AM »
Corrine, here's the fresh RSTT log.  My computer crashed twice yesterday.  So far today, it's been okay.

~~~

Logfile of random's system information tool 1.08 (written by random/random)
Run by hdw4 at 2011-03-07 21:07:17
Microsoft Windows XP Professional Service Pack 3
System drive C: has 45 GB (63%) free of 71 GB
Total RAM: 2558 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:07:32 PM, on 3/7/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\hdw4\My Documents\Misc\DL's\2011 dl\RSIT.exe
C:\Program Files\Trend Micro\hdw4.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=stonicus
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startup
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Unknown owner - E:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 5574 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-12-06 118842]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-20 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2004-08-10 59392]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2005-03-22 339968]
"IntelMeM"=C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe [2003-09-03 221184]
"RealTray"=C:\Program Files\Real\RealPlayer\RealPlay.exe [2005-09-06 26112]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-07-27 81920]
"ISUSPM Startup"=c:\progra~1\common~1\instal~1\update~1\isuspm.exe [2004-07-27 221184]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"MMTray"=C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe [2004-09-14 131072]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-11-13 981904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-02-23 3451496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
C:\WINDOWS\system32\dla\tfswctrl.exe [2004-12-06 127035]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [2005-02-23 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe [2004-09-14 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray]
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe [2004-09-14 131072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QBReminderFlash]
C:\Program Files\Intuit\QuickBooks 2005\Atom\QBReminder.exe [2004-11-11 26112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2005-09-06 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
C:\PROGRA~1\COMMON~1\MICROS~1\WORKSS~1\wkcalrem.exe [1999-09-04 53317]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Pagis Schedule Monitor.lnk]
C:\PROGRA~1\ScanSoft\Pagis\Monitor.exe  []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
C:\PROGRA~1\COMMON~1\Intuit\QUICKB~1\QBUpdate\qbupdate.exe  []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^hdw4^Start Menu^Programs^Startup^reminder-ScanSoft Product Registration.lnk]
C:\PROGRA~1\ScanSoft\Pagis\Ereg\REMIND32.EXE  []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-06-03 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\waol.exe"="C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-03-06 15:30:22 ----SHD---- C:\RECYCLER
2011-03-06 14:40:48 ----A---- C:\ComboFix.txt
2011-03-05 15:54:45 ----A---- C:\Boot.bak
2011-03-05 15:54:38 ----RASHD---- C:\cmdcons
2011-03-05 15:50:07 ----A---- C:\WINDOWS\zip.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\SWSC.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\SWREG.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\sed.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\PEV.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\NIRCMD.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\MBR.exe
2011-03-05 15:50:07 ----A---- C:\WINDOWS\grep.exe
2011-03-05 15:49:34 ----D---- C:\WINDOWS\ERDNT
2011-03-05 15:37:46 ----D---- C:\Qoobox
2011-03-04 15:13:36 ----D---- C:\rsit
2011-03-02 17:14:43 ----ASH---- C:\hiberfil.sys
2011-03-02 17:10:52 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-03-02 17:10:51 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-03-02 17:10:49 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-03-02 17:10:49 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-03-02 17:10:48 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-03-02 17:10:48 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-03-02 17:10:48 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-03-02 17:10:45 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-03-02 17:10:16 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-03-02 17:09:41 ----D---- C:\Program Files\AVAST Software
2011-03-02 17:09:41 ----D---- C:\Documents and Settings\All Users\Application Data\AVAST Software
2011-02-11 11:43:56 ----A---- C:\WINDOWS\system32\csrsrv.dll
2011-02-11 11:43:25 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2011-02-11 11:43:25 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2011-02-11 11:43:25 ----A---- C:\WINDOWS\system32\ntdll.dll
2011-02-11 11:43:07 ----A---- C:\WINDOWS\system32\lsasrv.dll

======List of files/folders modified in the last 1 months======

2011-03-07 21:07:32 ----D---- C:\WINDOWS\Prefetch
2011-03-07 21:07:24 ----D---- C:\Program Files\Trend Micro
2011-03-07 21:07:14 ----D---- C:\WINDOWS\Internet Logs
2011-03-07 21:06:45 ----A---- C:\WINDOWS\ModemLog_Intel(R) 537EP V9x DF PCI Modem.txt
2011-03-07 21:06:44 ----D---- C:\WINDOWS
2011-03-07 21:06:18 ----D---- C:\WINDOWS\Temp
2011-03-07 21:06:03 ----D---- C:\WINDOWS\Registration
2011-03-07 21:05:37 ----SD---- C:\WINDOWS\Tasks
2011-03-07 21:04:05 ----RD---- C:\Program Files
2011-03-07 21:03:01 ----D---- C:\Program Files\YCPlus
2011-03-07 19:55:15 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2011-03-07 19:37:23 ----D---- C:\WINDOWS\system32\FxsTmp
2011-03-07 16:40:24 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-03-07 16:40:24 ----D---- C:\WINDOWS\system32\CatRoot2
2011-03-06 15:58:05 ----D---- C:\Documents and Settings\All Users\Application Data\CanonIJPLM
2011-03-06 14:40:53 ----D---- C:\WINDOWS\system32\drivers
2011-03-06 14:36:39 ----A---- C:\WINDOWS\system.ini
2011-03-06 14:34:36 ----D---- C:\WINDOWS\system32\drivers\etc
2011-03-06 14:30:28 ----D---- C:\WINDOWS\system32
2011-03-06 14:26:18 ----D---- C:\WINDOWS\AppPatch
2011-03-06 14:26:14 ----D---- C:\Program Files\Common Files
2011-03-06 14:18:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-03-05 17:12:39 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2011-03-05 17:12:31 ----D---- C:\Program Files\SpywareBlaster
2011-03-05 15:54:46 ----RASH---- C:\boot.ini
2011-03-05 12:17:08 ----D---- C:\Program Files\Mozilla Firefox
2011-03-02 18:04:20 ----A---- C:\WINDOWS\win.ini
2011-03-02 17:53:15 ----D---- C:\Documents and Settings\All Users\Application Data\CanonIJ
2011-03-01 00:53:08 ----D---- C:\WINDOWS\system32\CatRoot
2011-03-01 00:36:04 ----D---- C:\Program Files\Bible Seeker
2011-02-28 12:42:35 ----D---- C:\WINDOWS\system32\config
2011-02-28 12:41:33 ----D---- C:\WINDOWS\system32\wbem
2011-02-28 12:40:24 ----HD---- C:\WINDOWS\inf
2011-02-28 12:38:55 ----RSHD---- C:\WINDOWS\system32\dllcache
2011-02-28 12:38:55 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-14 01:34:45 ----A---- C:\WINDOWS\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 drvmcdb;drvmcdb; C:\WINDOWS\system32\drivers\drvmcdb.sys [2004-12-01 87488]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-01-26 20576]
R0 srescan;srescan; C:\WINDOWS\system32\ZoneLabs\srescan.sys [2008-04-21 51648]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-02-23 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 BANTExt;Belarc SMBios Access; C:\WINDOWS\System32\Drivers\BANTExt.sys [2008-02-27 3840]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\system32\DRIVERS\omci.sys [2002-11-08 17217]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-07-14 5627]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-07-14 23545]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2008-11-13 353680]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2005-09-06 8552]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-02-23 102232]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-11-23 40480]
R2 MxlW2k;MxlW2k; C:\WINDOWS\system32\drivers\MxlW2k.sys [2005-09-10 26372]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-12-06 25883]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-12-06 34843]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-12-06 4123]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-12-06 2239]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-12-06 86586]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-12-06 15227]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-12-06 6363]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-12-06 98714]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-12-06 100603]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-03-30 1035264]
R3 atinewp2;ATI eHomeWonder, WDM Video CODEC; C:\WINDOWS\system32\DRIVERS\atinewp2.sys [2004-07-28 485888]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-14 155648]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntelC51;IntelC51; C:\WINDOWS\system32\DRIVERS\IntelC51.sys [2004-03-06 1233525]
R3 IntelC52;IntelC52; C:\WINDOWS\system32\DRIVERS\IntelC52.sys [2004-03-06 647929]
R3 IntelC53;IntelC53; C:\WINDOWS\system32\DRIVERS\IntelC53.sys [2004-06-16 61157]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mohfilt;mohfilt; C:\WINDOWS\system32\DRIVERS\mohfilt.sys [2004-03-06 37048]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 STHDA;High Definition Audio Driver (WDM) - SigmaTel CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2005-03-31 180096]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 VFILT;Outpost Firewall Kernel Driver; \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\2000\FILTNT.SYS []
S3 ADBLOCK.DLL;Outpost Firewall PlugIn (ADBLOCK.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\ADBLOCK.DLL []
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CONTENT.DLL;Outpost Firewall PlugIn (CONTENT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\CONTENT.DLL []
S3 DNSCACHE.DLL;Outpost Firewall PlugIn (DNSCACHE.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\DNSCACHE.DLL []
S3 FTPFILT.DLL;Outpost Firewall PlugIn (FTPFILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\FTPFILT.DLL []
S3 HTMLFILT.DLL;Outpost Firewall PlugIn (HTMLFILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\HTMLFILT.DLL []
S3 HTTPFILT.DLL;Outpost Firewall PlugIn (HTTPFILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\HTTPFILT.DLL []
S3 IMAPFILT.DLL;Outpost Firewall PlugIn (IMAPFILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\IMAPFILT.DLL []
S3 MAILFILT.DLL;Outpost Firewall PlugIn (MAILFILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\MAILFILT.DLL []
S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NAL;Nal Service ; \??\C:\WINDOWS\system32\Drivers\iqvw32.sys []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NNTPFILT.DLL;Outpost Firewall PlugIn (NNTPFILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\NNTPFILT.DLL []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 pmxscan;PrimaScan USB Kernel; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 POP3FILT.DLL;Outpost Firewall PlugIn (POP3FILT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\POP3FILT.DLL []
S3 PROTECT.DLL;Outpost Firewall PlugIn (PROTECT.DLL); \??\E:\Program Files\Agnitum\Outpost Firewall 1.0\kernel\PROTECT.DLL []
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-03-30 360448]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-02-23 42184]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2004-09-28 195584]
R2 ehSched;Media Center Scheduler Service; C:\WINDOWS\eHome\ehSched.exe [2004-08-10 102912]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-11-13 2405776]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-14 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-14 182768]
S2 OutpostFirewall;Outpost Firewall Service; E:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe /service []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-05-13 32768]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-09-15 38912]

-----------------EOF-----------------

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20213
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Computer Crashing?
« Reply #33 on: March 08, 2011, 06:41:36 PM »
Hi, deew.

One day isn't long enough to satisfy me that the problem is solved.  Although it could be a hardware problem, let's try disconnecting from E:\ to see if that is causing the crashes:

   1. Click Start, and then click My Computer.
   2. Right-click the icon for the mapped drive.
   3. Click Disconnect.

(Note: When you disconnect from a mapped drive, you remove the mapped drive letter that you assigned to the shared resource. You can still access the resource from My Network Places.)

If you  have questions on this, see How to connect and disconnect a network drive in Windows XP.

Surf the web as you normally would for a couple of days and let me know if this makes a difference.  Then we will look at finishing things up.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline deew

  • Full Member
  • ***
  • Posts: 50
    • View Profile
Re: Computer Crashing?
« Reply #34 on: March 08, 2011, 07:07:40 PM »
Corrine, when I right-click on E:\, there is no Disconnect choice on the Menu.  Also, my computer crashed again last night..

Offline R3D

  • Full Member
  • ***
  • Posts: 119
  • "Just once or twice is good for your soul", DE
    • View Profile
Re: Computer Crashing?
« Reply #35 on: March 08, 2011, 09:30:38 PM »
Hiya Corrine,

I do not see evidence, on the last log posted, that "E:" is a shared drive or a mapped resource.  Perhaps it was an old drive or flash drive?  The only app associated with that drive is the Outpost Firewall application.  I don't think they make a USB flash drive app, so I am not sure what "E:" is exactly...  Might be best to get rid of the Outpost app altogether if it is not working anyways, due to "E:" not being resident, heheheh...

Is Outpost working correctly?   :blink:

Offline R3D

  • Full Member
  • ***
  • Posts: 119
  • "Just once or twice is good for your soul", DE
    • View Profile
Re: Computer Crashing?
« Reply #36 on: March 08, 2011, 09:47:52 PM »
Quote
...Corrine, here the ESET log.  I noticed that it had E:\ listed.  That is the hard drive from my old computer I had someone add to this one.  I never use it, now that I've transferred all my music files to this HD.  Are all the threats in E:\?...

Found it....  It is an old drive, and that software should be cleaned from the system manually, if the uninstaller does not work...   :look: - just needed me seeing-goggles on.

Please forgive the double-de-double post...    :GRAFX:

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20213
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Computer Crashing?
« Reply #37 on: March 08, 2011, 09:54:21 PM »
R3D, you have hands-on to deew's computer?  [Edit Note:  Oh, never mind.  I had a duh moment.  You meant you didn't see E:\ in the logs. :lol: ]

Have you experienced the "crashes"?  It would help to know from you or deew what she is doing when the computer "crashes".  Also, is there a BSOD, a Stop Code?  I'm not into analyzing crash dumps, but do know people who specialize in that area.  



Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20213
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Computer Crashing?
« Reply #38 on: March 08, 2011, 09:58:14 PM »
Addendum:

As you will note, there are a lot of Services type entries in the event log, along with the harddisk error.

Copied from page 1 of this thread:

======System event log======

Computer Name: D6GNVF81
Event Code: 7000
Message: The Outpost Firewall Service service failed to start due to the following error:
The system cannot find the file specified.


Record Number: 7383
Source Name: Service Control Manager
Time Written: 20101118133158.000000-360
Event Type: error
User:

Computer Name: D6GNVF81
Event Code: 51
Message: An error was detected on device \Device\Harddisk0\D during a paging operation.

Record Number: 7341
Source Name: Disk
Time Written: 20101113033746.000000-360
Event Type: warning
User:

Computer Name: D6GNVF81
Event Code: 36
Message: The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Record Number: 7340
Source Name: W32Time
Time Written: 20101113020339.000000-360
Event Type: warning
User:

Computer Name: D6GNVF81
Event Code: 7026
Message: The following boot-start or system-start driver(s) failed to load:
VFILT

Record Number: 7307
Source Name: Service Control Manager
Time Written: 20101112122458.000000-360
Event Type: error
User:

Computer Name: D6GNVF81
Event Code: 7000
Message: The Outpost Firewall Service service failed to start due to the following error:
The system cannot find the file specified.


Record Number: 7305
Source Name: Service Control Manager
Time Written: 20101112122439.000000-360
Event Type: error
User:


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline deew

  • Full Member
  • ***
  • Posts: 50
    • View Profile
Re: Computer Crashing?
« Reply #39 on: March 09, 2011, 04:42:22 PM »
Corrine, I saw you mention what am I doing when the computer crashes.  It doesn't matter.  I can be online, offline or it could be in Sleep Mode when it happens.  There is no warning, no error message of any kind.  I only find out when I try to open a file or program and it doesn't work.  I can minimize files on the Taskbar and get to them any time as long as they are open, but if a program is running, such as a scan, when the crash occurs, the program stops.

Also, is there another way to disable the E:\ drive, since there was no Disconnect option on the right-click menu?

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20213
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Computer Crashing?
« Reply #40 on: March 09, 2011, 05:24:52 PM »
Hi, deew.

We don't know for certain if the old E:\ drive is causing the problems but if it is disconnected, that would narrow things down. 

You can try this from the above-linked Microsoft KB Article:

To disconnect a mapped drive:

   1. Click Start, and then click Run.
   2. In the Open box, type cmd.
   3. Type net use E: /delete


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline deew

  • Full Member
  • ***
  • Posts: 50
    • View Profile
Re: Computer Crashing?
« Reply #41 on: March 09, 2011, 05:44:30 PM »
I followed your instructions, but it said the network connection could not be found.

Offline R3D

  • Full Member
  • ***
  • Posts: 119
  • "Just once or twice is good for your soul", DE
    • View Profile
Re: Computer Crashing?
« Reply #42 on: March 10, 2011, 02:37:57 PM »
Sorry, I should clarify...

I think that the "E:" drive no longer exists, and it was not a mapped network resource.  It sounds like you used to have an "E:" drive, but that is long since gone, correct?  The only thing remaining are the references to it on the "C:" drive in the registry.  That being the case, any previous softwares that are pointing to the "E:" drive will not work, and should be removed or reinstalled on the "C:" drive to clear up those bad entries on the system.  Does that make sense?  :goodie:

EXAMPLE:  I had an issue like this when a friend had a system with two drives (C: and D:) and migrated all data to one larger drive (C:) thinking it would work just fine, but he had some of the software pointing to the second drive (where it was installed) and now that he has only one drive, it no longer worked quite like he expected.

Corrine, I do not have access to the system, just sounds like there may be slight miscommunication; thought I might be able to hep a bit.   :thumbsup:

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20213
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Computer Crashing?
« Reply #43 on: March 10, 2011, 09:32:13 PM »
Hi, deew.

I have been wanting to have you run System File Checker (SFC) to see if it will help but decided to try other avenues first.  The problem is that you posted earlier that you do not have the original installation CD.  If SFC needs to replace files, it asks for the CD.  There is a way around that though as the files should all be located in C:\i386 (or C:\Windows\i386).  

Please read these instructions through to the end before starting.

First, you need to locate C:\i386.  You need to be able to see hidden files.

To enable the viewing of Hidden files follow these steps:

   1. Close all programs so that you are at your desktop.
   2. Double-click on the My Computer icon.
   3. Select the Tools menu and click Folder Options.
   4. After the new window appears select the View tab.
   5. Put a checkmark in the checkbox labeled Display the contents of system folders.
   6. Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
   7. Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
   8. Remove the checkmark from the checkbox labeled Hide protected operating system files.
   9. Press the Apply button and then the OK button and shutdown My Computer.
  10. Now your computer is configured to show all hidden files.

Now to run the System File Checker tool to determine whether the issue(s) that you are experiencing are caused by one or more system files that are used by Windows. The System File Checker tool scans system files and replaces incorrect versions of the system files by using the correct versions.

To run the System File Checker tool, follow these steps:
  • Click Start, and then type cmd in the Start Search box.
  • Right-click cmd in the Programs list, and then click Run as administrator.
  • If you are prompted for an administrator password or confirmation, type your password or click Continue
  • At the command prompt, type the following line, and then press ENTER:
sfc /scannow (note the space before the backslash)
  • When the scan is complete, test to see whether the issue that you are experiencing is resolved.

Notes:  

1.  If SFC finds errors to repair, it will ask provide an "Insert CD" message which has only an OK and Cancel button.  Press OK, allowing it to fail. The next dialog will ask you to provide the location of the CD-ROM; just type in the full path of the i386 directory.

2.  IF SFC and it asks for your "Service Pack 3 Disk", you can extract the SP3 files as follows:
-- Download the standalone windows XP SP3 package from here: http://www.microsoft.com/downloads/details.aspx?FamilyId=5B33B5A8-5E76-401F-BE08-1E1555D4F3D4&displaylang=en
-- Save to your desktop
-- Then extract the files from the package by going to Start -> Run and entering the following shown in the code box (you can copy/paste it):
Code: [Select]
"%userprofile%\Desktop\WindowsXP-KB936929-SP3-x86-ENU.exe" -x:C:\xpsp3
This will place the service pack 3 updates in the i386 folder on C drive under the folder "xpsp3".  You can then point SFC to that folder for the desired files from SP3.

3.  If you need to cancel out of SFC to download SP3, don't worry, that's ok.  In fact, if SFC does find errors, I suggest you restart the computer and run it again.

Credit:  Some of the information for these instructions was compiled from the instructions at Bleeping Computer.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline deew

  • Full Member
  • ***
  • Posts: 50
    • View Profile
Re: Computer Crashing?
« Reply #44 on: March 15, 2011, 07:12:30 PM »
Corrine.  Sorry it’s taken me so long to get back to you.  I was out of town for a while.

My computer hasn’t crashed since last Wednesday, the 9th.  I don’t know what resolved the issue, at least so far, but all is well.  I didn’t run that SFC you posted about.  If my computer crashes again, I will run it and let you know the results. 

Bless you and thanks for all your wonderful help.  It is very much appreciated.

I’ll contact you in a few days aobut how things are going.