i'm not on the computer that keeps crashing. it's un-usable.
* i downloaded CCleaner (from FileHippo) and ran it.
about a minute or 2 later, i got this ERROR:
WINDOWS EXPLORER HAS ENCOUNTERED A PROBLEM and has to close.
(i also got another ERROR: "DrWatson Postmortem has encountered a problem and needs to close"
-- more specifc's:
right after the CCleaner download, i updated SPYBOT definitions. that went fine.
when i tried updating SPYWARE BLASTER, i got a message saying i should upgrade to a new version of the app.
it said to TURN S BLASTER OFF ("dis-able" all protection), UNINSTALL the app- then to download the updated one.
i disabled SpyW Blaster.
* and when i CLICKED CONTROL PANEL, i got the EXPLORER shutting down alert.
i clicked HELP AND SUPPORT, which gave me the DrWATSON ERROR.
** i was completely frozen, so held the power button down, until the computer shut off.
i tried running an earlier SYSTEM RESTORE point, which didn't take.
i managed to boot in SAFE MODE, got a point from several days earlier (when i didn't have any trouble) -- but it didn't help at all.
(i re-booted a few times, and got these terrible freezes about 4 or 5 times.)
WHAT DO I DO?
- can i "un-do" CCleaner? (i got an alert during the process, that it was not reversible.)
(i'm not ready to update Spybot S&D, or Spyware Blaster on this machine- i'm not sure if that contributed to, or caused the problem.)
Sounds frustrating.
When you got the first Windows Explorer error, did you clk on "more info" or something like that & write down the error details?
Do you remember what you were doing when you rec'd the error? Opening a folder, file, etc.?
Check your Event Viewer (this assumes you're using XP). Go to Start...Run...and type in "eventvwr.msc" (without the quotes) and press Enter. In the left hand pane will be categories. Click on each one in turn while viewing the messages in the right hand pane. Dbl click on any Error message for specific details. There will be 3 buttons, upper rt corner: "up arrow", "down arrow", and clking the 3rd button will copy the info to the clipboard, which you can paste into a notepad. Please let us know what error messages that correspond to the time of the explorer crash.
As to CCleaner, do you remember which "build" (not version) that you downloaded? There a 3 > http://www.ccleaner.com/download/builds
The "Slim" build does not contain a toolbar. I've never downloaded it from filehippo, but during the install, did uncheck or have the option to uncheck the toolbar?
When you "ran" CCleaner, there are "Windows" & "Applications" tabs. Those boxes that were ticked & cleaned cannot be "un-done", but can't see how that would cause these crashes.
Did you tick any of the boxes under "Windows">"Advanced"?
If you choose (hopefully not) the "Registry" options, you are given a choice to create a backup.
I am not the best troubleshooter when it comes to OS crashes, so I am asking questions that might provide more info for others to look over.
In the meanwhile, I wouldn't upgrade to the new SpywareBlaster on this other box until this gets sorted. Have no idea whether it's related, but this is the first major upgrade to SpywareBlaster in a loong while.
FYI on System Restore & Symantec/Norton products > http://bertk.mvps.org/html/symantecdoc1.html
Symantec Doc ID: 2005113009323013 > http://service1.symantec.com/SUPPORT/sharedtech.nsf/pfdocs/2005113009323013
i did a successful system restore, using SAFE MODE. (corrine explained to me how to do that once. THANK YOU CORRINE)
* GOOGLING, i found this:
http://www.computing.net/windowsxp/wwwboard/forum/160899.html
...and other references to my symptoms that make it sound like an INFECTION - possibly"AceBot Trojan Virus"
(a couple things happened that made me think the FileHippo download might have been wonky. one was, toward the end, i got a cookie request from YAHOO.COM: i've turned off PREFETCH, remember; i'm not supposed to be getting cookies like that.)
- FILEHIPPO
* ccleaner.com's link took me to FileHippo- and i downloaded the "LATEST" one, which is at the VERY TOP on the page, as a LARGE LINK (on top of smaller links for earlier versions -- unless they've changed it since last night, you can find the version by checking that page. (i'm scared to go back.)
* i remember having an option for the CCLEANER TOOLBAR, and didn't download it.
(i'll try to get the exact BUILD for you, if i can get it off the app itself without crashing.)
*** THIS is what happened (i'll try to be more explicit):
i went to FILEHIPPO (via the CCLEANER.com link), and did a downloard.
i'd accidentally left TEA-TIMER on, which i sometimes turn off for downloads.
- i clicked SAVE, and it saved to my DESKTOP.
i launched and it asked if i wanted it to run after installation. i clicked YES. it loads, does a check- then CCLEANER
gave me a list of things it was going to "PERMANENTLY DELETE" (which all looked harmless, to have deleted)- and when i clicked "GO AHEAD" i got the "ARE YOU SURE? THIS CANNOT BE REVERSED!" etc. box.
i clicked, YES.
it does its' thing.
- immediately afterwards, i launched SPYBOT S&D. i got UPDATES, and it went fine.
- right after THAT, i launched SPYWARE BLASTER.
when i clicked for updates, i got a message: THERE's A NEW VERSION.
SB's directions were to LAUNCH SB, DISABLE all protection, UNINSTALL THE APP (via the control panel)- and THEN visit their page, to download the new version.
...around this time (reading instructions), i noticed i was SUDDENLY running SLOWLY; i pulled up TASK MANAGER to check "under the hood."
nothing strange- except for "dot1xcfg.exe" -- i wasn't familiar with that one. but it was ON and using resources, so i copied the name (i've since GOOGLED and it looks fine.)
* when i clicked START - CONTROL PANEL, i didn't GET the control panel.
instead, after a few seconds i got the: "WINDOWS EXPLORER HAS ENCOUNTERED A PROBLEM and has to close."
i immediately started poking around TASK MANAGER.( "explorer.exe" was still listed in there as working.)
a few "DO YOU WANT A REPORT SENT TO MICROSOFT?" alerts came on, i clicked NO.
i clicked in TASK MANAGER, so i could scroll the contents, clicked on specific things to highlight them, to see if they "turned on" to use resources.
THEN, i get the "DrWatson Postmortem has encountered a problem and needs to close"
THAT's when my cursor FROZE.
i let the computer sit like that a while, to see if the problem would resolve on its' own -- it didn't.
***
(OH: ALL DURING THIS TIME, Win Media Player was on, playing music, functioning normally. don't recall when i turned it on, but it was after the download.)
all i think to do was HOLD DOWN THE POWER BUTTON. which shut me down.
***
i re-launched. it went fine.
i clicked CONTROL PANEL, and got the "WINDOWS EXPLORER DOESN'T LIKE YOU ANYMORE message. (that's what it FELT LIKE it said, anyway.
i opened task manager, and got the DR WATSON ERROR.
THIS TIME, i was able to click and DRAG the WATSON ALERT from my LCD screen to my closer LAPTOP screen.
it WORKED -- but it created a trail of about 100 WATSON ALERT windows in between, on both screens.
shortly after, my CURSOR FROZE. i hold down POWER, it shuts off. i BOOT again.
the EXACT SAME THING happens, this time when i CLICK HELP and SUPPORT: i didn't bother to read the WATSON ALERT this time, i try and close it -- and IT WON'T CLOSE.
i power down, boot back, try SYSTEM RESTORE.
it goes through all the steps- says it needs to reboot, i allow it. it reboots normally; SYSTEM RESTORE doesn't work (i get the alert i'd normally get, at the proper stage.)
at some point, i freeze again (forget the specifics). i shut down, launch again.
instead of hitting F8 for safemode, i accidentally click CONTROL-F8, which doesn't work, and makes my computer go "CHEEP CHEEP CHEEP... CHEEP CHEEP CHEEP"
computer starts. i START - RUN - MSCONFIG - my way to the "SAFEMODE" startup option.
i CHECK it, relaunch is normal, i choose a restore point -- it normally re-boots, says SYSTEM RETORE WORKED!
... then, i clicked CONTROL PANEL or HELP and SUPPORT, i forget which, and the same thing happened all over again.
***
i'm going to go on my computer with the crashing, run EVENT VIEWER- and also try to run NORTON, SPYBOT and HJT scans in SAME MODE (since this was recommended in the pages i GOOGLED, re the ACEBOT infection)
-- if i have problems, IS THERE A WAY TO RE-BOOT (or shut down), short of holding the POWER BUTTON DOWN?
i keep doing that, i may trash my OS.
:help:
PS
the problem computer, runs XP PRO
FileHippo is a legit download for CCleaner. My question concerning which build was to get at whether you inadvertantly added a toolbar in the install process. Sounds like you didn't. Looking in Add/Remove for Yahoo Toolbar or Companion could give you an idea as well.
Turning off Fx prefetch through an about:config tweak was for troubleshooting that re-occuring cookie. I see no reason for it being off, or what advantage it would do for you now.
Important answers are did you "clean" with CCleaner in the default, or did you add check marks to the "Advanced" section or use the "Registry" section. Doing those actions would get a person in trouble if they weren't familiar w/ what the consequences were.
An outside idea is unchecking (if it's checked) a setting in CCleaner>Options>Settings>
Add "Run CCleaner" option to Recycle Bin context menu
Add "Open CCleaner..."option to Recycle Bin context menu
I don't remember what the actual default checkmarks are in CCleaner, but if the Windows Prefetch was checked and cleaned, you could see possibly see a slow down with the next 1-2 boots...some of the "slowness" you experienced?
I've run many versions of CCleaner for years and not had problems with the Cleaning section.
The error ID(s) info will help us help you.
Luckily, you already ran an HJT log before this and nothing was showing. Not to say this AceBot thingy couldn't be happening, but Dr. Watson is a legit Windows process too.
Can't answer your most important question about shutting down differently.
Good luck.
*sorry this is so long.
i'm not sure when i'll crash again, i'm posting quickly.
i was aware of CRASHING at around 10.00pm 2.29.2008- i'm including data for errors around that time, and ALSO a couple warning and errors i got, earlier (probably not related, but i might be helpful info.)
* EVENT VIEWER - APPLICATION:
2.29.2008 - 10.06.03 - Application Error - Category: None - Event ID: 1000 - Users: N/A - Computer:LAPPY2
Faulting application explorer.exe, version 6.0.2900.3156, faulting module kernel32.dll, version 5.1.2600.3119, fault address 0x00009d92.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
**
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 2/29/2008
Time: 10:06:03 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module kernel32.dll, version 5.1.2600.3119, fault address 0x00009d92.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 6b 65 72 6e 65 in kerne
0038: 6c 33 32 2e 64 6c 6c 20 l32.dll
0040: 35 2e 31 2e 32 36 30 30 5.1.2600
0048: 2e 33 31 31 39 20 61 74 .3119 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 30 39 64 39 32 00009d92
0060: 0d 0a ..
--
ERROR: 9.59.pm
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/29/2008
Time: 9:59:25 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 72 77 ure drw
0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 64 62 67 68 65 6c 70 2e dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 32 39 35 64 295d
--
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 2/29/2008
Time: 9:59:15 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module kernel32.dll, version 5.1.2600.3119, fault address 0x00009d92.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 6b 65 72 6e 65 in kerne
0038: 6c 33 32 2e 64 6c 6c 20 l32.dll
0040: 35 2e 31 2e 32 36 30 30 5.1.2600
0048: 2e 33 31 31 39 20 61 74 .3119 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 30 39 64 39 32 00009d92
0060: 0d 0a ..
**
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/29/2008
Time: 9:36:58 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 72 77 ure drw
0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 64 62 67 68 65 6c 70 2e dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 32 39 35 64 295d
-- Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 2/29/2008
Time: 9:36:50 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module kernel32.dll, version 5.1.2600.3119, fault address 0x00009d92.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 6b 65 72 6e 65 in kerne
0038: 6c 33 32 2e 64 6c 6c 20 l32.dll
0040: 35 2e 31 2e 32 36 30 30 5.1.2600
0048: 2e 33 31 31 39 20 61 74 .3119 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 30 39 64 39 32 00009d92
0060: 0d 0a ..
--
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/29/2008
Time: 8:42:50 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 72 77 ure drw
0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 64 62 67 68 65 6c 70 2e dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 32 39 35 64 295d
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 2/29/2008
Time: 8:42:44 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module kernel32.dll, version 5.1.2600.3119, fault address 0x00009d92.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 6b 65 72 6e 65 in kerne
0038: 6c 33 32 2e 64 6c 6c 20 l32.dll
0040: 35 2e 31 2e 32 36 30 30 5.1.2600
0048: 2e 33 31 31 39 20 61 74 .3119 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 30 39 64 39 32 00009d92
0060: 0d 0a ..
-- -- THIS IS LAST ENTRY BEFORE 1st CRASH at 8.42pm:
Event Type: Information
Event Source: Automatic LiveUpdate Scheduler
Event Category: Scheduler Events
Event ID: 101
Date: 2/29/2008
Time: 7:09:34 PM
User: NT AUTHORITY\SYSTEM
Computer: LAPPY2
Description:
Information Level: success
The next run has been scheduled to occur at approximately 10:51 PM.
-- -- --
-- ( I DON'T RECALL THIS ERROR, at 2.23pm)
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 2/29/2008
Time: 2:23:02 PM
User: N/A
Computer: LAPPY2
Description:
Faulting application gimp-2.4.exe, version 0.0.0.0, faulting module msvcrt.dll, version 7.0.2600.2180, fault address 0x000378c0.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 67 69 6d ure gim
0018: 70 2d 32 2e 34 2e 65 78 p-2.4.ex
0020: 65 20 30 2e 30 2e 30 2e e 0.0.0.
0028: 30 20 69 6e 20 6d 73 76 0 in msv
0030: 63 72 74 2e 64 6c 6c 20 crt.dll
0038: 37 2e 30 2e 32 36 30 30 7.0.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 33 37 38 63 30 000378c0
0058: 0d 0a ..
*** *** ( END OF APP ERRORS for 2.29.2008, in EV VIEWER )
HAVING NO OBVIOUS PROBLEMS, computer is ON for me to check EVENT VIEWER.
"SYSTEM" in Ev VIEWER:
Event Type: Error
Event Source: iaStor
Event Category: None
Event ID: 9
Date: 3/1/2008
Time: 10:30:21 PM
User: N/A
Computer: LAPPY2
Description:
The device, \Device\Ide\iaStor0, did not respond within the timeout period.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 05 00 01 00 6a 00 ......j.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 .....
- another (i have no problems)
Event Type: Error
Event Source: iaStor
Event Category: None
Event ID: 9
Date: 3/1/2008
Time: 10:23:44 PM
User: N/A
Computer: LAPPY2
Description:
The device, \Device\Ide\iaStor0, did not respond within the timeout period.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 05 00 01 00 6a 00 ......j.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 .....
- WARNING (i had no obvious problems)
Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 3/1/2008
Time: 10:23:44 PM
User: N/A
Computer: LAPPY2
Description:
An error was detected on device \Device\Harddisk0\D during a paging operation.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: d5 11 00 00 00 00 00 00 Õ.......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 09 00 00 00 00 @.......
0040: 09 20 0a 12 40 03 20 40 . ..@. @
0048: 00 78 00 00 0a 00 00 00 .x......
0050: 00 00 00 00 a8 3f 30 89 ....¨?0
0058: 00 00 00 00 78 3d 30 89 ....x=0
0060: 00 00 00 00 49 0c 89 04 ....I..
0068: 28 00 04 89 0c 49 00 00 (...I..
0070: 3c 00 00 00 00 00 00 00 <.......
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........
** SYSTEM - on 2.29.08, COINCIDED WITH CRASH !
Event Type: Error
Event Source: iaStor
Event Category: None
Event ID: 9
Date: 2/29/2008
Time: 9:58:16 PM
User: N/A
Computer: LAPPY2
Description:
The device, \Device\Ide\iaStor0, did not respond within the timeout period.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 05 00 01 00 6a 00 ......j.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 .....
** SYSTEM WARNING
Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 2/29/2008
Time: 9:58:16 PM
User: N/A
Computer: LAPPY2
Description:
An error was detected on device \Device\Harddisk0\D during a paging operation.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 84 2b 00 00 00 00 00 00 +......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 09 00 00 00 00 @.......
0040: 13 20 0a 12 80 01 20 40 . ... @
0048: 00 10 00 00 0a 00 00 00 ........
0050: 00 c0 bb 87 b0 a4 35 89 .À»°¤5
0058: 00 00 00 00 08 a0 34 89 ..... 4
0060: 00 00 00 00 67 3f 74 01 ....g?t.
0068: 2a 00 01 74 3f 67 00 00 *..t?g..
0070: 08 00 00 00 00 00 00 00 ........
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........
- system
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 2/29/2008
Time: 9:53:47 PM
User: NT AUTHORITY\SYSTEM
Computer: LAPPY2
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
- system
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 2/29/2008
Time: 9:53:24 PM
User: LAPPY2\Administrator
Computer: LAPPY2
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
- system
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 2/29/2008
Time: 9:53:16 PM
User: NT AUTHORITY\SYSTEM
Computer: LAPPY2
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
- system
Event Type: Error
Event Source: iaStor
Event Category: None
Event ID: 9
Date: 2/29/2008
Time: 9:47:17 PM
User: N/A
Computer: LAPPY2
Description:
The device, \Device\Ide\iaStor0, did not respond within the timeout period.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 05 00 01 00 6a 00 ......j.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 .....
- system warning
Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 2/29/2008
Time: 9:47:17 PM
User: N/A
Computer: LAPPY2
Description:
An error was detected on device \Device\Harddisk0\D during a paging operation.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 8c 54 00 00 00 00 00 00 T......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 09 00 00 00 00 @.......
0040: 11 20 0a 12 40 03 20 40 . ..@. @
0048: 00 10 00 00 0a 00 00 00 ........
0050: 00 00 00 00 88 38 33 89 ....83
0058: 00 00 00 00 58 36 33 89 ....X63
0060: 00 00 00 00 17 94 8d 01 ......
0068: 28 00 01 8d 94 17 00 00 (.....
0070: 08 00 00 00 00 00 00 00 ........
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........
- system
Event Type: Error
Event Source: iaStor
Event Category: None
Event ID: 9
Date: 2/29/2008
Time: 6:49:43 PM
User: N/A
Computer: LAPPY2
Description:
The device, \Device\Ide\iaStor0, did not respond within the timeout period.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 05 00 01 00 6a 00 ......j.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 .....
- i ran CCleaner in default.
it's not on my drive any more...(?)
system restore may have nuked it.
- in START - ALL PROGRAMS, i have a tab for CCleaner HOMEPAGE, that gets me to that page in IE if i click it -- but NO CCLEANER app.
:thud:
no crashing, so far at least (fingers crossed).
seems like everything's back to normal.
WHAT HAPPENED?
...all i can figure out is, SYSTEM RESTORE worked -- but i needed to reboot a second time, to be able to tell.
I'M CONFUSED.
(CCleaner didn't help with that ning mysterious-o cookie, btw)
Phew, well hopefully that's over. I'm not qualified to give a speculation given your error reports.
I battled crashes for months on a particular "issue", and at best the Event Viewer gave me clues.
I call it the "It's Your Fault!" log.
For me searching on the "faulting module" or error code numbers gave me clues to what others had done to resolve it.
QuoteI'M CONFUSED.
Welcome to the world of computers.
Restoring back to an earlier point will remove system "changes", "updates", and sometimes programs. It's best to use the Add/Remove Programs for uninstalling a suspected problem program before restoring to an earlier point, but sometimes you don't have that option when you are crashing.