22 replies to this topic

[systemmistress]

I was awakened by windows starting chord at 5:30 AM..[restart that I did not ask for].
with a "Report To Microsoft" box stating that my was recovering from a serious error and gave me the option to report to MS which I did not.

Then it gave me the location of the reports: C:\DOCUM...COMPAQ...\LOCAL_1....for both which I cannot find.
I did find a log which is in code and I cannot read it..it's in WINDOWS

I need to know what is wrong, I do suspect the harddrive is failing as it operates with lots of errors, but Defraggler did a preliminary check and said the HD is "OK".

I did not run CkeckDisk
I also did not yet back up my docs and/or drives. I wanted to wait until I got the 'bad stuff' remopved and replaced wirth "safe" stuff ala Secunia PSI. which I was in the middle of doing and had just finished.

Also MS downloaded 12 updates, 7 of which came on automatic, and the other 5 were manually done thru Windows Download Center or MS Download Center - whatever they now call it.

Thanx for any/all help..

I have a bad feeling about this..it was running so well [finally] since malware removal that Broni did for me.
Sandra

[rokytnji]

Durn Sandra. I am not Windows Proficient. Only use it for motorcycle tuning software.
I do not boot Windows but maybe a dozen times a year.

Quote

do suspect the harddrive is failing as it operates with lots of errors, but Defraggler did a preliminary check and said the HD is "OK".

Quote

did not run CkeckDisk

If you think the hard drive has errors. Then running a Check Disk has to be in the mix.

Quote

I have a bad feeling about this..it was running so well [finally] since malware removal that Broni did for me.

Does not sound good from here either. Maybe some malware got regenerated some how.
But I run Linux. So Windows Malware is not a big issue for me.Which translates into "I know absolutely nothing about Windows Malware".

[jram]

Open up command prompt... chkdsk... run chkdsk, it won't fix it but should tell you if anything is wrong.

Also if your restarting for no reason..

Right Click on My Computer

Click Properties

Select the Advanced tab

Click the Settings button under Startup and Recovery

Remove the check from the Automatically Restart checkbox




Next time it encounters a problem, it will give you an error message rather than restarting. Write down the error message, restart, and then look up the error message on google or in Microsoft's database.

[systemmistress]

I did not have any problems until MS put 12 updates on it last night!

It was running better than ever..faster than when I first got it.

I did look up the errors in Administrative Services, and checked on the internet..

One that was a problem and still is:
VSS Volume Shadow Copy..the system could not locate it. This is because my indexing service no longer runs.

For the above problem, MS saw fit to make it restart. Personally I do not think it's a problem..I just say.."oh, well - hell"...and go on. I know I've had this and rode it hard for 4 - almost 6 years with 1 system restore. soooooo......

BTW: I just ordered a booklet on Linux for people who can't even pronounce the word..
I am reaally fed up with windows. It seems to get worse by the month..It has gotten so that I hate "Download Tuesdays".

I will watch to see about restarts and if it continues...I will chg the setting.
Thanx again to both of you.
Sandra

[Broni]

Shadow Copy has nothing to do with indexing service.
It's used to take snapshots of your system, which can be used by various Windows components, like system restore, for instance.

I suggest, we take a look at your computer.

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

============================================================================

Please download VEW and save it to your Desktop: http://images.malwar...om/vino/VEW.exe

Double-click VEW.exe then under Select log to query, select:
Application
System

Under Select type to list, select:
Critical (Vista only)
Error

Click the radio button for Number of events
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

In Notepad, click Edit > Select all then Edit > Copy
Reply to this post, click in the reply window and press Ctrl+V on your keyboard to paste the log.

[rokytnji]

Quote

BTW: I just ordered a booklet on Linux for people who can't even pronounce the word..
I am reaally fed up with windows. It seems to get worse by the month..It has gotten so that I hate "Download Tuesdays".

Ummmm. This will sound funny coming from me.

Download Tuesdays may be easier for you to deal with than running Linux. It works OK for me because I don't have a Windows Mindset like a lot of long time Windows Users have. My sig explains a lot of this

Broni knows what I mean as he knows my history from the beginning when I powered up my first computer and the hard drive locked up. He has watched me grow from computer illiterate to a full time Linux User and Linux forum Moderator. Took a lot of time and patience. Like learning to fly a space ship only having riding a bicycle experience.

I am a tinkerer at heart and a cheapo to boot and also have patience when some thing does not work for me right then.

If thinking of running Linux. My best advice is to run off a live CD first to get acquainted. Find what works and what does not. Hardware vendors are hard wired Windows and Mac supporters. Hardware takes a bit of fiddling in Linux. I spend more time getting hardware to work than anything else using Linux. That is why I practice, practice,practice.

If later deciding you want to install. Then dual boot is best for new users.

Finishing off. You need to learn about partitioning, boot loaders and grub, how a terminal works and what commands to use to get the information you want.

Linux Mint (not the new Debian edition) and Ubuntu are usually good starting points. Minimum system requirements decide which Desktop Version to download as some Desktops are more Heavy resource intensive than others (something else to read about in that book)

GNU/Linux is a programmers operating system. Lately user friendliness Has improved greatly in the past few years. A lot of users just mouse click without having to open a terminal any more. Linux has different names to learn for applications.Pidgin for chat. Gimp for Photoshop. I could go on and on for

Oh yeah, Do what JRAM and Broni says

[Keeper]

Good advice on the Live CD. It was the way I started and learned a lot. Ubuntu was the first and Now I can't get rid of Puppy. Yes it's on an older computer, but for something different to play with and to top it off it's all free and Free is good...
Kenn....

[systemmistress]

Keeper, on 17 September 2010 - 01:23 AM, said:

Good advice on the Live CD. It was the way I started and learned a lot. Ubuntu was the first and Now I can't get rid of Puppy. Yes it's on an older computer, but for something different to play with and to top it off it's all free and Free is good...
Kenn....

Ubuntu is where I planned to start..BUT 1st..I need to learn the lingo as Rok says..


I am a fast learner [sometimes] hehe also being born blonde does not help any.

Thank you all for the advice...

I found out why it restarted [for no reason] updates from Avira triggers this, but not each time a scan is run. It has to do with updates rather.

I am now going to floow some direction...


My car broke down in a bad part of town yesterday..and I left it there..sounds like dirt in gas line to me [old: 1999 Ford Windstar LE] Maybe if I'm lucky some kidz will have dismantled it and carted it off!
LOL
Sandra

PS: If I could learn how to deal CRAPS at 41 years of age..maybe there is a chance for me with a different OS?

[systemmistress]

Broni, on 16 September 2010 - 11:13 PM, said:

Shadow Copy has nothing to do with indexing service.
It's used to take snapshots of your system, which can be used by various Windows components, like system restore, for instance.

I suggest, we take a look at your computer.

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

============================================================================

Please download VEW and save it to your Desktop: http://images.malwar...om/vino/VEW.exe

Double-click VEW.exe then under Select log to query, select:
Application
System

Under Select type to list, select:
Critical (Vista only)
Error

Click the radio button for Number of events
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

In Notepad, click Edit > Select all then Edit > Copy
Reply to this post, click in the reply window and press Ctrl+V on your keyboard to paste the log.

Broni:
I have XP sp3..does this matter?

I do not have any *.WER files, unbless sp3 changed that. I even did a search for this and nothing showed up.
Sandra

[systemmistress]

Broni, on 16 September 2010 - 11:13 PM, said:

Shadow Copy has nothing to do with indexing service.
It's used to take snapshots of your system, which can be used by various Windows components, like system restore, for instance.

I suggest, we take a look at your computer.

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

============================================================================

Please download VEW and save it to your Desktop: http://images.malwar...om/vino/VEW.exe

Double-click VEW.exe then under Select log to query, select:
Application
System

Under Select type to list, select:
Critical (Vista only)
Error

Click the radio button for Number of events
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

In Notepad, click Edit > Select all then Edit > Copy
Reply to this post, click in the reply window and press Ctrl+V on your keyboard to paste the log.

Vino's Event Viewer v01c run on Windows XP in English
Report run at 18/09/2010 11:04:33 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 17/09/2010 5:45:02 AM
Type: error Category: 12
Event: 470 Source: ESENT
Catalog Database (1056) Database C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb is partially attached. Attachment stage: 3. Error: -1032.

Log: 'Application' Date/Time: 17/09/2010 5:45:02 AM
Type: error Category: 1
Event: 490 Source: ESENT
svchost (1056) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Log: 'Application' Date/Time: 16/09/2010 12:07:25 PM
Type: error Category: 0
Event: 1001 Source: Application Hang
Fault bucket 2013464690.

Log: 'Application' Date/Time: 16/09/2010 12:06:50 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application thunderbird.exe, version 1.9.2.3889, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 16/09/2010 2:48:26 AM
Type: error Category: 0
Event: 5013 Source: VSS
Volume Shadow Copy Service error: Shadow Copy writer RemovableStorageManager called routine OpenNtmsSessionW which failed with status 0x800708ca (converted to 0x800423f4).

Log: 'Application' Date/Time: 15/09/2010 3:11:26 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application firefox.exe, version 1.9.2.3888, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 15/09/2010 12:02:07 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 15/09/2010 12:02:07 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 13/09/2010 2:45:11 AM
Type: error Category: 0
Event: 8193 Source: VSS
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007041d.

Log: 'Application' Date/Time: 12/09/2010 7:52:20 PM
Type: error Category: 0
Event: 11316 Source: MsiInstaller
Product: Vista Codec Package -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\Vista Codec Package.msi

Log: 'Application' Date/Time: 12/09/2010 7:51:11 PM
Type: error Category: 0
Event: 11316 Source: MsiInstaller
Product: Vista Codec Package -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\Vista Codec Package.msi

Log: 'Application' Date/Time: 12/09/2010 7:50:10 PM
Type: error Category: 0
Event: 11316 Source: MsiInstaller
Product: Vista Codec Package -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\Vista Codec Package.msi

Log: 'Application' Date/Time: 11/09/2010 10:05:26 AM
Type: error Category: 3
Event: 4118 Source: Avira AntiVir
EXCEPTION calling function <Scan> for the file C:\WINDOWS\system32\dbghelp.dll [ACCESS_VIOLATION Exception!! EIP = ] Please inform Avira and submit the appropriate file!

Log: 'Application' Date/Time: 11/09/2010 10:05:18 AM
Type: error Category: 3
Event: 4118 Source: Avira AntiVir
EXCEPTION calling function <Scan> for the file C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\T8PXAFYI\40S[1] [ACCESS_VIOLATION Exception!! EIP = 0x18be804] Please inform Avira and submit the appropriate file!

Log: 'Application' Date/Time: 11/09/2010 5:02:30 AM
Type: error Category: 0
Event: 12292 Source: VSS
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x8007000e].

Log: 'Application' Date/Time: 09/09/2010 9:14:23 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application firefox.exe, version 1.9.2.3888, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 09/09/2010 2:45:18 AM
Type: error Category: 0
Event: 8193 Source: VSS
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007041d.

Log: 'Application' Date/Time: 08/09/2010 10:46:12 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 08/09/2010 12:01:41 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application orca.exe, version 1.2.0.6, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 01/09/2010 6:20:14 PM
Type: error Category: 0
Event: 20 Source: Google Update
The event description cannot be found.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 18/09/2010 5:06:38 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: ftsata2

Log: 'System' Date/Time: 17/09/2010 6:09:43 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: ftsata2

Log: 'System' Date/Time: 16/09/2010 5:05:03 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: ftsata2

Log: 'System' Date/Time: 16/09/2010 5:01:57 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 16/09/2010 5:01:57 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 16/09/2010 5:01:57 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Agere Modem Call Progress Audio service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 16/09/2010 5:07:38 AM
Type: error Category: 102
Event: 1003 Source: System Error
Error code 00000050, parameter1 e36ee018, parameter2 00000000, parameter3 f39094d6, parameter4 00000001.

Log: 'System' Date/Time: 16/09/2010 5:05:58 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 16/09/2010 5:05:56 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 3:31:34 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 3:31:33 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 12:08:29 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 12:07:03 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 9:03:34 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 9:03:33 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 8:47:46 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 8:47:41 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 14/09/2010 11:08:37 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 14/09/2010 11:08:33 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 14/09/2010 9:57:47 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Vino's Event Viewer v01c run on Windows XP in English
Report run at 18/09/2010 11:04:33 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 17/09/2010 5:45:02 AM
Type: error Category: 12
Event: 470 Source: ESENT
Catalog Database (1056) Database C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb is partially attached. Attachment stage: 3. Error: -1032.

Log: 'Application' Date/Time: 17/09/2010 5:45:02 AM
Type: error Category: 1
Event: 490 Source: ESENT
svchost (1056) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Log: 'Application' Date/Time: 16/09/2010 12:07:25 PM
Type: error Category: 0
Event: 1001 Source: Application Hang
Fault bucket 2013464690.

Log: 'Application' Date/Time: 16/09/2010 12:06:50 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application thunderbird.exe, version 1.9.2.3889, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 16/09/2010 2:48:26 AM
Type: error Category: 0
Event: 5013 Source: VSS
Volume Shadow Copy Service error: Shadow Copy writer RemovableStorageManager called routine OpenNtmsSessionW which failed with status 0x800708ca (converted to 0x800423f4).

Log: 'Application' Date/Time: 15/09/2010 3:11:26 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application firefox.exe, version 1.9.2.3888, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 15/09/2010 12:02:07 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 15/09/2010 12:02:07 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 13/09/2010 2:45:11 AM
Type: error Category: 0
Event: 8193 Source: VSS
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007041d.

Log: 'Application' Date/Time: 12/09/2010 7:52:20 PM
Type: error Category: 0
Event: 11316 Source: MsiInstaller
Product: Vista Codec Package -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\Vista Codec Package.msi

Log: 'Application' Date/Time: 12/09/2010 7:51:11 PM
Type: error Category: 0
Event: 11316 Source: MsiInstaller
Product: Vista Codec Package -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\Vista Codec Package.msi

Log: 'Application' Date/Time: 12/09/2010 7:50:10 PM
Type: error Category: 0
Event: 11316 Source: MsiInstaller
Product: Vista Codec Package -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\Vista Codec Package.msi

Log: 'Application' Date/Time: 11/09/2010 10:05:26 AM
Type: error Category: 3
Event: 4118 Source: Avira AntiVir
EXCEPTION calling function <Scan> for the file C:\WINDOWS\system32\dbghelp.dll [ACCESS_VIOLATION Exception!! EIP = ] Please inform Avira and submit the appropriate file!

Log: 'Application' Date/Time: 11/09/2010 10:05:18 AM
Type: error Category: 3
Event: 4118 Source: Avira AntiVir
EXCEPTION calling function <Scan> for the file C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\T8PXAFYI\40S[1] [ACCESS_VIOLATION Exception!! EIP = 0x18be804] Please inform Avira and submit the appropriate file!

Log: 'Application' Date/Time: 11/09/2010 5:02:30 AM
Type: error Category: 0
Event: 12292 Source: VSS
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x8007000e].

Log: 'Application' Date/Time: 09/09/2010 9:14:23 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application firefox.exe, version 1.9.2.3888, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 09/09/2010 2:45:18 AM
Type: error Category: 0
Event: 8193 Source: VSS
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007041d.

Log: 'Application' Date/Time: 08/09/2010 10:46:12 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 08/09/2010 12:01:41 PM
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application orca.exe, version 1.2.0.6, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Log: 'Application' Date/Time: 01/09/2010 6:20:14 PM
Type: error Category: 0
Event: 20 Source: Google Update
The event description cannot be found.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 18/09/2010 5:06:38 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: ftsata2

Log: 'System' Date/Time: 17/09/2010 6:09:43 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: ftsata2

Log: 'System' Date/Time: 16/09/2010 5:05:03 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: ftsata2

Log: 'System' Date/Time: 16/09/2010 5:01:57 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 16/09/2010 5:01:57 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 16/09/2010 5:01:57 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Agere Modem Call Progress Audio service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 16/09/2010 5:07:38 AM
Type: error Category: 102
Event: 1003 Source: System Error
Error code 00000050, parameter1 e36ee018, parameter2 00000000, parameter3 f39094d6, parameter4 00000001.

Log: 'System' Date/Time: 16/09/2010 5:05:58 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 16/09/2010 5:05:56 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 3:31:34 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 3:31:33 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 12:08:29 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 12:07:03 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 9:03:34 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 9:03:33 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 8:47:46 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 8:47:41 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 14/09/2010 11:08:37 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 14/09/2010 11:08:33 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 14/09/2010 9:57:47 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

[systemmistress]

Broni, on 16 September 2010 - 11:13 PM, said:

Shadow Copy has nothing to do with indexing service.
It's used to take snapshots of your system, which can be used by various Windows components, like system restore, for instance.

I suggest, we take a look at your computer.

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

============================================================================

Please download VEW and save it to your Desktop: http://images.malwar...om/vino/VEW.exe

Double-click VEW.exe then under Select log to query, select:
Application
System

Under Select type to list, select:
Critical (Vista only)
Error

Click the radio button for Number of events
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

In Notepad, click Edit > Select all then Edit > Copy
Reply to this post, click in the reply window and press Ctrl+V on your keyboard to paste the log.

==================================================
Dump File : Mini091610-01.dmp
Crash Time : 9/16/2010 5:05:03 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0xe36ee018
Parameter 2 : 0x00000000
Parameter 3 : 0xf39094d6
Parameter 4 : 0x00000001
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini091610-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

[Broni]

I can see only one BSOD report, so I wouldn't worry much about it unless it happens again.

Make sure, your Windows updates are current.

Let's see, if your system files are OK.

Go Start>Run ("Start Search" in Vista/7), type in:
sfc /scannow
Click OK (hold CTRL, and SHIFT, hit Enter in Vista/7).
Have Windows CD/DVD handy (with Vista/7, most likely, you won't need it).
If System File Checker (sfc) will find any errors, it may ask you for the CD/DVD (rarely in Vista/7 case).

P. S. Try not to use "Reply with quote" button as it's just clogging the topic.

[systemmistress]

Broni,

There was only one BSOD EVER on this machine...but something is really messed up.

In the log that was created by the second program you had me download..and the log is listed first, I found these:

Log: 'System' Date/Time: 15/09/2010 9:03:33 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 15/09/2010 8:47:46 AM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 15/09/2010 8:47:41 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 14/09/2010 11:08:37 PM
Type: error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Aavmker4 aswTdi ftsata2

Log: 'System' Date/Time: 14/09/2010 11:08:33 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The avast! Standard Shield Support service failed to start due to the following error: The system cannot find the file specified.


These are Service Control Manager information telling us that AVAST is still in this computer somewhere.

I did edit the Registry to remove 3 or 4 AVAST entries and I did it according to the way MS tells us to do it.

I am going to look and see if those entries are still there, perhaps from the crash the machine reverted to a saved backup, or restore point when the AVAST stuff was still in there. I need to make new backups and restore point after I delete these old and troublesome entries..

What is the fasy=test way to delete entries from Registry?

Thanx for your help..you know I appreciate what you do for me.
Sandra

[Broni]

I strongly recommend, you leave registry alone. You're more likely to create new problems, than fix anything.

Let's go back a little...
You need to clearly state, what your actual issues are.
One by one and we'll go from there.

[systemmistress]

Hi Broni,
1. Avast! is still causing problems..apparently it's still in my Registry.


2. There is a new nVidia drivers download and I was reading up, on page 32 Known Issues with XP, AMD K& & AMD K8 have problems with write-cachiing and causes crashes. see:
http://us.download.n...lease_Notes.pdf page 32

I really think that is what is causing it, as I was watching a YouTube Video and each time I do, my computer either locks up, and or restarts like a minor crash.
Do notr forget, we got rid of lots of garbage and log files when we cleaned the machine up during malware removal..so ... They are never BSOD's, but none the less crashes as each time, FF & TB always have to reinstall the updates.

Maybe the new NVidia drivers will help.

Let me know if you think I should download and install them..:
Link: http://www.nvidia.co...hql-driver.html

[Maybe I can save up, after I get my vehicle fixed, for a new computer. I also have another HP Pavilion to work with..]
Thank you very much.
Sandra

[systemmistress]

Broni,
I also found this:

Log: 'Application' Date/Time: 11/09/2010 10:05:26 AM
Type: error Category: 3
Event: 4118 Source: Avira AntiVir
EXCEPTION calling function <Scan> for the file C:\WINDOWS\system32\dbghelp.dll [ACCESS_VIOLATION Exception!! EIP = ] Please inform Avira and submit the appropriate file!

Log: 'Application' Date/Time: 11/09/2010 10:05:18 AM
Type: error Category: 3
Event: 4118 Source: Avira AntiVir
EXCEPTION calling function <Scan> for the file C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\T8PXAFYI\40S[1] [ACCESS_VIOLATION Exception!! EIP = 0x18be804] Please inform Avira and submit the appropriate file!

Which I am reporting right now to AVIRA, my antivirus software people.

I will let u know what happens.
Thanx
S

[Broni]

First off all, leave Event Viewer alone for now.
Every computer, even healthy one will have some errors listed there.
We look there only, if we're trying to solve some particular problem and we want to see, if there are any errors related to the problem.

For now, we'll focus on your issues only.

Quote

1. Avast! is still causing problems..apparently it's still in my Registry.

You always have to be specific. What problems?
We'll check, if anything from Avast is alive and kicking, as soon, as I know what the symptoms are.
I assume, Avira is your current AV program?
...and seriously, leave registry alone!

Quote

I really think that is what is causing it, as I was watching a YouTube Video and each time I do, my computer either locks up, and or restarts like a minor crash.

What browser?
Your video driver may/may not be a culprit here.
We'll find out, when you provide more details.

Finally, what do you mean by this:

Quote

FF & TB always have to reinstall the updates

[systemmistress]

1. You always have to be specific. What problems?
We'll check, if anything from Avast is alive and kicking, as soon, as I know what the symptoms are.
I assume, Avira is your current AV program?
...and seriously, leave registry alone!

I use AVIRA - and get report logs with 11-17 Errors in them:


2. There is a new nVidia drivers download and I was reading up, on page 32 Known Issues with XP, AMD K& & AMD K8 have problems with write-cachiing and causes crashes. see:
http://us.download.n...lease_Notes.pdf page 32

I am not able to copy from the PDF I read, but I will try to transpose the text:

There is a conflict which exists that causes known crashes in AMD K7 & AMD K8 computers. They know about this and it is not resolved.
However, there is a new nVidia driver download that is now available - [they do not yet know if this will fix the problem - it is new and no feedback yet]

Should I download this update?

3.Browsers I use:
Firefox & Internet Explorer..they both crash - and when I try to close them BOTH. There is no pattern sometimes they close fine and sometimes one or both crash..this causes Updates to be re-installed.
In the last 3 days, Thunderbird and Firefox have gotten updates which I let be installed by the Automatic Function.
When they crash, apparently they lose information and have to reinstall the updates because the crash makes them go back to earlier version.

Internet Explorer has not had any recent updates - just one security update from MS. This browser does not need to have it reinstalled because that is the way it is..I do not know why it is different from Firefox and Thunderbird...but it is.

I will send all the Avira Repot Logs if you want them, they enumerate each and every error.

There are three logs for each scan, and Avira scans my computer each morning at 3AM.
There are no viruses or malware that it finds, just lots of warnings and errors.

I have not run CCleaner or the trash removal program because I think the logs are important right now, as long as I am having problems.

Thank you

PS I have not touched the registry since you warned me.
S

[systemmistress]

Broni:

Here is the notes on the AMK K8 problems with nVidia...and a fix:

Release 256 Graphics Drivers for Windows - Version 258.96 RN-W25896-02v01 | 28
Known Product Limitations
problem is geometric structures that incorrectly disappear and re‐appear as the scene
shifts.
Poor Quality S-Video Output on Some TVs
NVIDIA drivers differentiate an S‐video TV from a composite TV by searching for 75‐
Ohm loads on the chrominance and luminance lines. If the driver detects only one such
load, it assumes that it has a composite TV and drives both chroma and luma onto that
line. This approach allows both types of TV to display in color.
Unfortunately, some S‐video TVs do not apply the correct load to both lines, causing the
driver to detect an S‐video TV as a composite. The driver, in turn, sends the lower quality
signal to the S‐video TV. To work around this problem, use the Control Panel to override
the Auto‐select feature. This can be done following these steps:
1 In the Settings tab of the Display Properties Control Panel, click Advanced.
2 In the nView tab, click Device Settings and click Select Output Device.
3 In the Device Selection tab, click the TV option.
4 Change the Video output format to S‐video.

AGP and PCI-E Programs May Hang With AMD K7 and K8
Processors
 Issue
Microsoft® Windows® 2000 and Windows XP systems using AMD K7 and K8
processors can hang when an AGP or PCI‐E program is used.
 Root Cause
There is a known problem with Microsoft® Windows® 2000 and Windows XP
systems using AMD K7 and K8 CPUs that results in the Microsoft operating system
allocating overlapping 4M cached pages with 4k write‐combined pages. This
condition results in undefined behavior and data corruption, and is explicitly
disallowed by the AMD CPU manual.
This problem can affect any device driver in the system that allocates write‐combined
system memory, but is usually most easily reproduced with graphics drivers since
graphics drivers generally make heavy use of write‐combined system memory for
performance reasons.
 Resolution
Microsoft has a knowledge base article on the issue, the text of which is unfortunately
quite outdated. While the article only mentions Windows 2000, AGP, and K7, both the
root cause and resolution also apply to Windows 2000 or Windows XP, AGP or PCI‐E,
and AMD K7 or K8. The article can be found at http://support.microsoft.com/
?id=270715. The issue is resolved by applying an operating system registry key as described in the
referenced article that instructs the Microsoft operating system to not use the 4M
pages, thus avoiding the conflict.
The registry key is automatically applied by installation of the latest NVIDIA nForce
platform driver package (including 4.57 SMBUS or later). It is imperative for the
package to be installed or for the registry key to be applied before the NVIDIA
graphics driver or any other device drivers are installed. The registry key takes effect
only after an operating system reboot.

[Broni]

1.

Quote

Avast! is still causing problems

You still don't explain, what problems.

Quote

I use AVIRA - and get report logs with 11-17 Errors in them

As I said, leave Event Viewer alone. Is Avira working fine? If not, what are the visible issues (aside from Event Viewer errors)?

2. Do you have any problems with your video?
If yes, update the driver.
If not, leave it alone.
Generally, you update drivers only, if they're causing some problems.

3. IE is part of Windows, that's why it's being updated through Windows updates.
FF and TB are just regular programs, so they update themselves.
Regarding FF, I suggest you perform CLEAN reinstallation, as described here: http://kb.mozillazin...talling_Firefox
Regarding IE...open it, go Tools>Internet options>Advanced tab and click on "Reset" button. Restart IE and see how it goes.