Computer crashes with disk cleanup?
My computer keeps crashing when I try to disk cleanup. It was crashing at startup then it stopped when I went to safe mode and scanned with Norton. I have windows xp. I cannot system restore to an earlier date even in safe mode. Why is it doing this? I think I had a virus. I cleaned it up with Norton. Norton was crashing it until I went to settings and turned off compressed files scan.1 person needs an answerI do too
June 30th, 2010 7:56pm

My computer keeps crashing when I try to disk cleanup. It was crashing at startup then it stopped when I went to safe mode and scanned with Norton. I have windows xp. I cannot system restore to an earlier date even in safe mode. Why is it doing this? I think I had a virus. I cleaned it up with Norton. Norton was crashing it until I went to settings and turned off compressed files scan.Can you tell us if you have Enough Disk Space and Also RAM?What type of infection Norton picked up?Norton can block you from restoring your system even in Safe Mode!Message: "Restoration Incomplete. Your computer cannot be restored " when you run Windows System Restorehttp://service1.symantec.com/support/sharedtech.nsf/pfdocs/2005113009323013 HOW TO: View and Manage Event Logs in Event Viewer in Windows XPhttp://support.microsoft.com/kb/308427/en-usPlease send us the Event log, only one kind of each error not repeated same error messages! nass -- http://www.nasstec.co.uk
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2010 9:34pm

I have 13.73 GB of space and 384MB of RAM.Norton picked up a whole bunch of medium level threats. I cut Norton off and still could not restore. I can only choose the day that I got the problem monday tuesday and today. I need to go back further than that.I manually deleted the temporary files and it got through disk cleanup. Today I received and error code 1000000a, parameter1 00000000. parameter2 00000002, parameter3 00000001, parameter4 804db861. and two other like this. Also, The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'EraserUtilDrv11010.sys' on volume 'HarddiskVolume1'. It has stopped monitoring the volume. There are more from previous days but those days I couldn't even get to the startup screen.
July 1st, 2010 12:13am

I have 13.73 GB of space and 384MB of RAM.Norton picked up a whole bunch of medium level threats. I cut Norton off and still could not restore. I can only choose the day that I got the problem monday tuesday and today. I need to go back further than that.I manually deleted the temporary files and it got through disk cleanup. Today I received and error code 1000000a, parameter1 00000000. parameter2 00000002, parameter3 00000001, parameter4 804db861. and two other like this. Also, The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'EraserUtilDrv11010.sys' on volume 'HarddiskVolume1'. It has stopped monitoring the volume. There are more from previous days but those days I couldn't even get to the startup screen. Can you click on the calender Arrow to get to June << Month entry here >>Try June restore points and see if that will help. Please post the exact Verbatim/wording of the error messages.I will look into the errors you provided and let you know.Regardsnass -- http://www.nasstec.co.uk
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2010 2:12am

No I cannot move the calender arrow. System Error, Category (102), Type Error, Event ID 1003Really not sure what wording I should send? I went to the error properties to give you that information. Where should I be looking? Lot of category 102 errors. I have so many. How recent and how much should I send?
July 1st, 2010 5:31am

No I cannot move the calender arrow. System Error, Category (102), Type Error, Event ID 1003Really not sure what wording I should send? I went to the error properties to give you that information. Where should I be looking? Lot of category 102 errors. I have so many. How recent and how much should I send? Hi,The error message will be like this, you need to double click the error message and click on the Two pages icon to copy it to the Clipboard or to a Notepad then copy and paste in your next post.Event Type: ErrorEvent Source: PrintEvent Category: NoneEvent ID: 19Date: 28/06/2010Time: 15:12:08User: NT AUTHORITY\SYSTEMComputer: M/ADescription:Sharing printer failed + 1722, Printer Microsoft Office Document Image Writer share name Printer2.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.In the above example we know the error type, the source which the printer and the description of the error message which will help us to troubleshoot a printer issue here. nass -- http://www.nasstec.co.uk
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2010 3:36pm

Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 7/1/2010Time: 9:38:59 AMUser: N/AComputer: DANYELLDescription:Error code 1000000a, parameter1 00000000, parameter2 00000002, parameter3 00000001, parameter4 804db861.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 53 79 73 74 65 6d 20 45 System E0008: 72 72 6f 72 20 20 45 72 rror Er0010: 72 6f 72 20 63 6f 64 65 ror code0018: 20 31 30 30 30 30 30 30 10000000020: 61 20 20 50 61 72 61 6d a Param0028: 65 74 65 72 73 20 30 30 eters 000030: 30 30 30 30 30 30 2c 20 000000, 0038: 30 30 30 30 30 30 30 32 000000020040: 2c 20 30 30 30 30 30 30 , 0000000048: 30 31 2c 20 38 30 34 64 01, 804d0050: 62 38 36 31 b861 Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 6/30/2010Time: 12:28:11 PMUser: N/AComputer: DANYELLDescription:Error code 1000000a, parameter1 00000000, parameter2 00000002, parameter3 00000001, parameter4 804db861.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 53 79 73 74 65 6d 20 45 System E0008: 72 72 6f 72 20 20 45 72 rror Er0010: 72 6f 72 20 63 6f 64 65 ror code0018: 20 31 30 30 30 30 30 30 10000000020: 61 20 20 50 61 72 61 6d a Param0028: 65 74 65 72 73 20 30 30 eters 000030: 30 30 30 30 30 30 2c 20 000000, 0038: 30 30 30 30 30 30 30 32 000000020040: 2c 20 30 30 30 30 30 30 , 0000000048: 30 31 2c 20 38 30 34 64 01, 804d0050: 62 38 36 31 b861 Event Type: ErrorEvent Source: srEvent Category: NoneEvent ID: 1Date: 6/30/2010Time: 12:26:57 PMUser: N/AComputer: DANYELLDescription:The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'EraserUtilDrv11010.sys' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 06 00 00 00 04 00 4e 00 ......N.0008: 00 00 00 00 01 00 00 c0 .......À0010: 00 00 00 00 00 00 00 00 ........0018: 00 00 00 00 00 00 00 00 ........0020: 00 00 00 00 00 00 00 00 ........Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 6/30/2010Time: 9:18:49 AMUser: N/AComputer: DANYELLDescription:Error code 00000023, parameter1 000e00e0, parameter2 f71cc6e0, parameter3 f71cc3dc, parameter4 f146599c.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 53 79 73 74 65 6d 20 45 System E0008: 72 72 6f 72 20 20 45 72 rror Er0010: 72 6f 72 20 63 6f 64 65 ror code0018: 20 30 30 30 30 30 30 32 00000020020: 33 20 20 50 61 72 61 6d 3 Param0028: 65 74 65 72 73 20 30 30 eters 000030: 30 65 30 30 65 30 2c 20 0e00e0, 0038: 66 37 31 63 63 36 65 30 f71cc6e00040: 2c 20 66 37 31 63 63 33 , f71cc30048: 64 63 2c 20 66 31 34 36 dc, f1460050: 35 39 39 63 599c Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 6/30/2010Time: 9:18:03 AMUser: N/AComputer: DANYELLDescription:Error code 00000023, parameter1 000e00e0, parameter2 f71d06e0, parameter3 f71d03dc, parameter4 f146599c.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 53 79 73 74 65 6d 20 45 System E0008: 72 72 6f 72 20 20 45 72 rror Er0010: 72 6f 72 20 63 6f 64 65 ror code0018: 20 30 30 30 30 30 30 32 00000020020: 33 20 20 50 61 72 61 6d 3 Param0028: 65 74 65 72 73 20 30 30 eters 000030: 30 65 30 30 65 30 2c 20 0e00e0, 0038: 66 37 31 64 30 36 65 30 f71d06e00040: 2c 20 66 37 31 64 30 33 , f71d030048: 64 63 2c 20 66 31 34 36 dc, f1460050: 35 39 39 63 599c Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 6/30/2010Time: 9:11:09 AMUser: N/AComputer: DANYELLDescription:Error code 1000008e, parameter1 c0000005, parameter2 00000000, parameter3 f04c8468, parameter4 00000000.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 53 79 73 74 65 6d 20 45 System E0008: 72 72 6f 72 20 20 45 72 rror Er0010: 72 6f 72 20 63 6f 64 65 ror code0018: 20 31 30 30 30 30 30 38 10000080020: 65 20 20 50 61 72 61 6d e Param0028: 65 74 65 72 73 20 63 30 eters c00030: 30 30 30 30 30 35 2c 20 000005, 0038: 30 30 30 30 30 30 30 30 000000000040: 2c 20 66 30 34 63 38 34 , f04c840048: 36 38 2c 20 30 30 30 30 68, 00000050: 30 30 30 30 0000 Event Type: ErrorEvent Source: NtfsEvent Category: Disk Event ID: 55Date: 6/29/2010Time: 11:08:16 PMUser: N/AComputer: DANYELLDescription:The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 0c 00 00 00 02 00 4e 00 ......N.0008: 02 00 00 00 37 00 04 c0 ....7..À0010: 00 00 00 00 32 00 00 c0 ....2..À0018: 68 00 00 00 00 00 00 00 h.......0020: 00 00 00 00 00 00 00 00 ........Event Type: ErrorEvent Source: Application ErrorEvent Category: NoneEvent ID: 1001Date: 6/30/2010Time: 11:44:01 AMUser: N/AComputer: DANYELLDescription:Fault bucket 1902663678.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 42 75 63 6b 65 74 3a 20 Bucket: 0008: 31 39 30 32 36 36 33 36 190266360010: 37 38 0d 0a 78.. Thanks. Do you need further than that? Anything else?
July 1st, 2010 5:08pm

Hi,Seeing these error messages indicate unhealthy System running and you need to Back Up your Valuable Data and be ready for the worse. Sorry to be the bearer of Bad News!Try with the basics first:1- Run the check desk on your system by doing this step:Open "My Computer " Right click on your Primary PartitionC:\ select properties. On the Local C:\ Properties window click onTools and click Check Now Button. and Check the two check boxes will appear and then Say "YES" to the prompt window to run it on Start Up andReboot/Restart your machine. Be patient with the chkdsk procedure it may take a while.2- Test your RAM by downloading the windows Crash Analysis or WindDiag from Microsoft search Ping.com or the forum here and run a test on your RAM, it may be some programs wrote a dirty bits to the memory causing these issues to rise. 3- Run the Windows Verifier per the link below on running Advanced Clean-Boot procedure.4- make sure all Drivers Up2dates ( Motherboard from the motherboard Manufacturer website all drivers, like BIOS, Video, Sound, Network..etc only the recommended one by the Mobo manufacturer).5- Run a thorough Malware and virus scan with your security software to make sure all clean as it should be.How to perform advanced clean-boot troubleshooting in Windows XPhttp://support.microsoft.com/kb/316434How to configure Windows XP to start in a "clean boot" statehttp://support.microsoft.com/kb/310353Hard disk volume monitoring may stop in Windows XPhttp://support.microsoft.com/kb/888402Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 7/1/2010Time: 9:38:59 AMUser: N/AComputer: DANYELLDescription:Error code 1000000a, parameter1 00000000, parameter2 00000002, parameter3 00000001, parameter4 804db861.What is 0x0000000A: or common error for it (IRQL_NOT_LESS_OR_EQUAL)Typically due to a bad driver, or faulty or incompatible hardware orsoftware. Use the General Troubleshooting of STOP Messages check-listabove. Technically, this error condition means that a kernel-modeprocess or driver tried to access a memory location to which it did nothave permission, or at a kernel Interrupt Request Level (IRQL) that wastoo high.Click Start >> Run >> type in the TxT box:sigverif.exe ================================================================================================= Event Type: ErrorEvent Source: srEvent Category: NoneEvent ID: 1Date: 6/30/2010Time: 12:26:57 PMUser: N/AComputer: DANYELLDescription:The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'EraserUtilDrv11010.sys' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.Hard disk volume monitoring may stop in Windows XPhttp://support.microsoft.com/kb/888402Norton causing a System Restore Errorhttp://community.norton.com/t5/Norton-Internet-Security-Norton/Norton-causing-a-System-Restore-Error/m-p/94109=======================================================================================================Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 6/30/2010Time: 9:18:49 AMUser: N/AComputer: DANYELLDescription:Error code 00000023, parameter1 000e00e0, parameter2 f71cc6e0, parameter3 f71cc3dc, parameter4 f146599c.Again Hardware driver causing the system error. =========================================================================================================Event Type: ErrorEvent Source: System ErrorEvent Category: (102)Event ID: 1003Date: 6/30/2010Time: 9:11:09 AMUser: N/AComputer: DANYELLDescription:Error code 1000008e, parameter1 c0000005, parameter2 00000000, parameter3 f04c8468, parameter4 00000000.This behaviour may occur if one of the following conditions is true:-One or more of the random access memory RAM modules that are installed on your computer are faulty or have a dirty Bits written to it, or badly programmed/written Application.-your motherboard drivers not up2date. -Video Driver =========================================================================================================Event Type: ErrorEvent Source: NtfsEvent Category: Disk Event ID: 55Date: 6/29/2010Time: 11:08:16 PMUser: N/AComputer: DANYELLDescription:The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.This mean the Volume is dirty and you need to run the System File Checker if the Master File Table ( MFT) not corrupted!sfc /scannow or Check Disk =============================================================================================================Event Type: ErrorEvent Source: Application ErrorEvent Category: NoneEvent ID: 1001Date: 6/30/2010Time: 11:44:01 AMUser: N/AComputer: DANYELLDescription:Fault bucket 1902663678.It refer to an application or a third-party add-ons/toolbar may corrupted or damaged causing this message to appear.nass -- http://www.nasstec.co.uk
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2010 11:26pm

Ok I checked RAM and it told me everything was fine.I ran a check disk.All drivers and microsoft udpates (hotfix, service pack3) are up to date.Done a virus and malware and spyware check.I think that my programs are damages with missing files. Sometimes when I run scan checks (even in safe mode) it crashes.Event Type: ErrorEvent Source: Application ErrorEvent Category: NoneEvent ID: 1000Date: 7/5/2010Time: 9:42:00 PMUser: N/AComputer: DANYELLDescription:Faulting application navw32.exe, version 17.7.0.12, faulting module symhtml.dll, version 4.0.0.67, fault address 0x0003ff1b.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 41 70 70 6c 69 63 61 74 Applicat0008: 69 6f 6e 20 46 61 69 6c ion Fail0010: 75 72 65 20 20 6e 61 76 ure nav0018: 77 33 32 2e 65 78 65 20 w32.exe 0020: 31 37 2e 37 2e 30 2e 31 17.7.0.10028: 32 20 69 6e 20 73 79 6d 2 in sym0030: 68 74 6d 6c 2e 64 6c 6c html.dll0038: 20 34 2e 30 2e 30 2e 36 4.0.0.60040: 37 20 61 74 20 6f 66 66 7 at off0048: 73 65 74 20 30 30 30 33 set 00030050: 66 66 31 62 0d 0a ff1b.. This happen when I ran a Norton scan in safe mode. Event Type: ErrorEvent Source: Application ErrorEvent Category: NoneEvent ID: 1000Date: 7/5/2010Time: 4:34:33 PMUser: N/AComputer: DANYELLDescription:Faulting application safari.exe, version 5.33.16.0, faulting module msvcr80.dll, version 8.0.50727.4053, fault address 0x00014500.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 41 70 70 6c 69 63 61 74 Applicat0008: 69 6f 6e 20 46 61 69 6c ion Fail0010: 75 72 65 20 20 73 61 66 ure saf0018: 61 72 69 2e 65 78 65 20 ari.exe 0020: 35 2e 33 33 2e 31 36 2e 5.33.16.0028: 30 20 69 6e 20 6d 73 76 0 in msv0030: 63 72 38 30 2e 64 6c 6c cr80.dll0038: 20 38 2e 30 2e 35 30 37 8.0.5070040: 32 37 2e 34 30 35 33 20 27.4053 0048: 61 74 20 6f 66 66 73 65 at offse0050: 74 20 30 30 30 31 34 35 t 0001450058: 30 30 0d 0a 00.. This happen running Windows defender.Event Type: ErrorEvent Source: Bonjour ServiceEvent Category: NoneEvent ID: 100Date: 7/3/2010Time: 11:20:41 PMUser: N/AComputer: DANYELLDescription:244: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.) This happening just sitting idle.Event Type: ErrorEvent Source: Application ErrorEvent Category: NoneEvent ID: 1001Date: 7/2/2010Time: 9:54:36 PMUser: N/AComputer: DANYELLDescription:Fault bucket 1902744151.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 42 75 63 6b 65 74 3a 20 Bucket: 0008: 31 39 30 32 37 34 34 31 190274410010: 35 31 0d 0a 51.. Sitting idle. I done all of the instructions that you told me that it would allow me to do. And I still can not system restore before last week but can after that.
July 6th, 2010 5:55am

Hi,navw32.exe This indicate a corruption in Norotn. Does Norotn Subscription up2date and current?Can you please send me your hijackthis log to have a look at it and see it may be an infection which corrupted your Applications?Download Hijackthis and rename:http://www.trendmicro.com/ftp/products/hijackthis/HijackThis.exeMy email address to_you_ross(at)yahoo.co.uk( _ ) = Underscore nass -- http://www.nasstec.co.uk
Free Windows Admin Tool Kit Click here and download it now
July 6th, 2010 11:02am

Norton is up to date and current. Logfile of Trend Micro HijackThis v2.0.4Scan saved at 10:27:13 AM, on 7/7/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\CTHELPER.EXEC:\WINDOWS\system32\devldr32.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Ahead\InCD\InCD.exeC:\Program Files\Windows Defender\MSASCui.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\Motive\McciCMService.exeC:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXEC:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Windows NT\Accessories\WORDPAD.EXEC:\Documents and Settings\Therd\Local Settings\Temporary Internet Files\Content.IE5\4GG6KS18\HijackThis[1].exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localO2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coIEPlg.dllO2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\IPSBHO.DLLO2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coIEPlg.dllO4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXEO4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUNO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exeO4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exeO4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hideO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000341&p=GRman000&si=&a=BF0PVwdBqkCGZa2H4cvglA&n=2010040317O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) -https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1237243957769O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1265244198912O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dllO23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exeO23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exeO23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exeO23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe--End of file - 8083 bytes
July 7th, 2010 5:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics