For information on how to deal with, and protect your computer, please go down to the bottom of the help desk to the archive section (main page). From there select how to combat Spyware, in this archive there are many tools, which will help you combat this problem. Problems concerning the Windows XP Operating System should go in this forum.


Email This Page to Someone
  Footslog's Web Boards
  Windows XP
  memory parity error (Page 1)

Post New Topic  Post A Reply
profile | register | preferences | faq | search

This topic is 2 pages long:   1  2  next newest topic | next oldest topic
Author Topic:   memory parity error
Josh1
Administrator
posted April 11, 2006 01:50 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Before you try that lets go ahead and turn write behind caching off if it is on, right click my computer, go to properties-hardware-device manager-disk drives-click on your D drive-properties-polices and uncheck write behind caching. When you turn this feature off you may or may not notice a slow down, hopefully this will get rid of that error message. What was the blue screen, do you have the details of that message? You could do that, take the D drive off. You have an SCSI setup, so you should not have to do anything just make sure your primary drive is on channel one, it already should be. If you have any problems then let us know.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted April 10, 2006 09:47 PM     Click Here to See the Profile for dm567     Edit/Delete Message
At 2 am on the 9th,the following error is logged:

The driver detected a controller error on \Device\Harddisk2\D.

At 8 am the computer had the blue screen "system halted" and needed to be rebooted.

Should I just disconnect the D hard drive which is my second hard drive?

If you think I should try this, what is the best way to do it? Can't I just turn it off in devices and see if the computer goes down in a few weeks.

Its interested because it seems to happen mostly early in the morning and about once a week?????????????

Dom

IP: Logged

Josh1
Administrator
posted April 06, 2006 01:34 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Well a longer log may mean more of a potential for Spyware and viruses, but that is not always true. Concerning an online scan vs. a local scan, you should always have an antivirus installed on your machine. An online scan may be more updated then a local installed program. Updates are constantly being provided to the virus scan server, now most if not all locally installed antivirus programs will automatically update when the information is sent to that server. What is the difference, well just as you most likely have different Spyware programs on your PC so that one program may find something that another did not, it’s the same way with a virus scan. True a virus is a virus so it should not matter, but you want to make sure you are totally clean, and are using the most up to date detection as possible. If you could imagine how many viruses are created each month, week and day so we want to make sure you are clean. Yes Safety Live is part of the Windows Live project by Microsoft which has been out for a couple of months now. Many other services are going to be used with Windows live; you can find more information here http://www.footslog.com/board/Forum10/HTML/000536.html
Go ahead and run another Hijack this log

I also invite you to download Process Explorer http://www.sysinternals.com/ntw2k/freeware/procexp.shtml this tools is Windows Task Manager on steroids, it can show you what process and applications are running in real time, where a particular DLL, process and application are running from at the core level, so you can easily tell if the file is bad or not. You also may want to look at the other tools on that website.
------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief
http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

[This message has been edited by Josh1 (edited April 06, 2006).]

IP: Logged

dm567
Member
posted April 06, 2006 11:00 AM     Click Here to See the Profile for dm567     Edit/Delete Message
That is a great site. Is it owned my Microsoft?

I ran the scan and it only found 1 problem, realvnc, which I removed since I don't use it.

I removed the other two items you mentioned also.

Anything else to remove?

DM

IP: Logged

dm567
Member
posted April 06, 2006 12:50 AM     Click Here to See the Profile for dm567     Edit/Delete Message
You only mentioned 3 items. Don't you think there are too many sevices running? or is it normal?

Also, regarding running the virus scan: I have the McAfee virus scan installed. Wouldn't it not find it? Or is the one you linked to better?

DM

IP: Logged

Josh1
Administrator
posted April 05, 2006 09:02 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Have you run a virus scan recently? Run the full service scan http://safety.live.com/site/en-US/

The reason I say that, is because this is a legitimate file needed for Windows, but also could be a Trojan C:\WINDOWS\System32\inetsrv\inetinfo.exe

Go ahead and delete these

O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)

If this is a trusted site O15 - Trusted Zone: *.taxsoft.com then leave it in the trusted zone, but if not then I would delete it. Anything in this zone will pass right through onto your computer no matter if it is harmful or not. Is this something you installed for the testing of the hard drive? O23 - Service: DriveHealth - Unknown owner - C:\Program Files\Helexis\Drive Health\dhcore.exe (file missing) Delete that entry regardless.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted April 05, 2006 07:15 PM     Click Here to See the Profile for dm567     Edit/Delete Message
WOW its longer

IP: Logged

dm567
Member
posted April 05, 2006 07:15 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I had an older version and just upgraded.

here are the new results:

Logfile of HijackThis v1.99.1
Scan saved at 5:14:09 PM, on 4/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\program files\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\System32\inetsrv\inetinfo.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\mqsvc.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
C:\WINDOWS\System32\RunDLL32.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\OurPictures\OurPictures.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Active SMART\ActiveSMART.exe
C:\Program Files\Broderbund\Screen Shot Deluxe 4.0\Sshot4.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\WINDOWS\System32\WISPTIS.EXE
C:\Program Files\TurboTax\Deluxe 2005\32bit\ttax.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dominic\Desktop\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\DOCUME~1\Dominic\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: RefresherBand Class - {B24BA06E-FB7B-4757-95C2-DC01125F750E} - C:\PROGRA~1\YREFRE~1\YREFRE~1.DLL
O3 - Toolbar: NewsStand Toolbar - {6E94ACD5-2C6A-48AC-84EF-A4DE746D385F} - C:\Program Files\NewsStand\Reader\NSIETool.dll
O4 - HKLM\..\Run: [McAfee Guardian] "C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\Run: [OfotoNow USB Detection] C:\WINDOWS\System32\RunDLL32.exe C:\PROGRA~1\Ofoto\OfotoNow\OFUSBS.DLL,WatchForConnection OfotoNow
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\Run: [OurPictures] "C:\Program Files\OurPictures\OurPictures.exe" /AutoStart
O4 - Startup: Active SMART.lnk = C:\Program Files\Active SMART\ActiveSMART.exe
O4 - Startup: Screen Shot Deluxe 4.0.lnk = C:\Program Files\Broderbund\Screen Shot Deluxe 4.0\Sshot4.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: SBC Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: SnipeIt! eSnipe - http://www.esnipe.com/SnipeIt/SnipeItOpen3.asp
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.taxsoft.com
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,1,0,4724/mcfscan.cab
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O21 - SSODL: BCWipe - {A55D435E-3140-4577-30BD-730F6BF8DADE} - C:\Program Files\Jetico\BCWipe.dll (file missing)
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DriveHealth - Unknown owner - C:\Program Files\Helexis\Drive Health\dhcore.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe

IP: Logged

dm567
Member
posted April 05, 2006 07:11 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I already have hijackthis.

The results are:
Logfile of HijackThis v1.97.7
Scan saved at 5:10:06 PM, on 4/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\program files\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\System32\inetsrv\inetinfo.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\mqsvc.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
C:\WINDOWS\System32\RunDLL32.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\OurPictures\OurPictures.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Active SMART\ActiveSMART.exe
C:\Program Files\Broderbund\Screen Shot Deluxe 4.0\Sshot4.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\WINDOWS\System32\WISPTIS.EXE
C:\Program Files\TurboTax\Deluxe 2005\32bit\ttax.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dominic\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: RefresherBand Class - {B24BA06E-FB7B-4757-95C2-DC01125F750E} - C:\PROGRA~1\YREFRE~1\YREFRE~1.DLL
O3 - Toolbar: NewsStand Toolbar - {6E94ACD5-2C6A-48AC-84EF-A4DE746D385F} - C:\Program Files\NewsStand\Reader\NSIETool.dll
O4 - HKLM\..\Run: [McAfee Guardian] "C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\Run: [OfotoNow USB Detection] C:\WINDOWS\System32\RunDLL32.exe C:\PROGRA~1\Ofoto\OfotoNow\OFUSBS.DLL,WatchForConnection OfotoNow
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\Run: [OurPictures] "C:\Program Files\OurPictures\OurPictures.exe" /AutoStart
O4 - Startup: Active SMART.lnk = C:\Program Files\Active SMART\ActiveSMART.exe
O4 - Startup: Screen Shot Deluxe 4.0.lnk = C:\Program Files\Broderbund\Screen Shot Deluxe 4.0\Sshot4.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: SBC Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: SnipeIt! eSnipe - http://www.esnipe.com/SnipeIt/SnipeItOpen3.asp
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O15 - Trusted Zone: *.taxsoft.com
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,1,0,4724/mcfscan.cab


I don't know what the results mean?

DM

IP: Logged

Josh1
Administrator
posted April 05, 2006 06:31 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Glad to hear that sure go here http://www.spywareinfo.com/~merijn/downloads.html and download Hijack this do a scan and then post the results in your reply. Perhaps it was just the cable, you are welcome for the help.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted April 05, 2006 05:44 PM     Click Here to See the Profile for dm567     Edit/Delete Message
Josh,

I got rid of it just now. I had to learn a little German to do it and used an online german translator.

Apparently when I was fooling around with the program in german there was an option to have the program boot up on start and I cliked on it. Now I unclicked it.

The best thing is that the computer has not gone down now in five days. Perhaps it was the cable just like you said but I'll keep my fingers crossed. If it goes a month we'll be sure that was it.

Thanks for your help.

By the way, my startup is getting slow and I looked in processes in the Windows Task Manager and there's a ton of them.(over50) Is there a way for me to get a copy of them so I can post them and you may be able to tell me which ones I can get rid of and how to get rid of them?

Dom

Dom

IP: Logged

Josh1
Administrator
posted April 05, 2006 05:36 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Well from what you are telling me is that this file is coming before even Windows starts up, I figured it would be in the boot.ini file, because when the BIOS does its job, the Boot.ini will load and look for an operating system, so I thought that this file would be here but I guess not. I will reply back to them and ask them what the name is. Have you had any more problems and does the same error message show up in event viewer?

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted April 05, 2006 05:10 PM     Click Here to See the Profile for dm567     Edit/Delete Message
Actually if it was just a file how could it get into the startup without altering the registry?

Perhaps they are thinking of something else?

IP: Logged

dm567
Member
posted April 05, 2006 05:07 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I've already tried doing file searches for anything with caldera in it and anything with wwbmu in it. Nothing.

They need to tell us the name of the file when it installs in german.

dom

IP: Logged

Josh1
Administrator
posted April 05, 2006 02:15 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
This is the email I got

"Thank you for contacting Hitachi Global Storage Technologies.

The DFT software once downloaded does is just a normal file on your system.
It does not install anything on the system itself. If you would like to remove the file you will just need to select the file and delete it. If you would like to remove the software from the CD, the CD will need to be a RW CD. You should be able to rewrite over the utility."

Is this the name of the file? Caldera DR-DOS

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted April 04, 2006 07:15 PM     Click Here to See the Profile for dm567     Edit/Delete Message
not in add/remove programs

I don't remember the directory

Not listed as a program either

IP: Logged

Josh1
Administrator
posted April 04, 2006 07:11 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Will do, have you looked in add remove programs? And do you remember the directory this was installed at?

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted April 04, 2006 06:47 PM     Click Here to See the Profile for dm567     Edit/Delete Message
Nothing has happened since I made sure all the cables were tight.

Let me know when they respond on how to remove the german software.

Dom

IP: Logged

Josh1
Administrator
posted April 04, 2006 01:37 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
No, don’t do the write scan, this will write over existing data. Maybe it was a loose connection, as I said before I had received that same error message I made sure the cable to the drive was on, and the error message did not happen anymore. Well you need to delete them, if you don’t then you will have two of the programs, just with different languages unless you install them in the same directory, and then one will overwrite the other. I will email them and ask them how to delete this program.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 31, 2006 10:36 AM     Click Here to See the Profile for dm567     Edit/Delete Message
scan says both drives OK. I did the extended test mode write only.

There is a read,write mode but it says a warning that I don't understand and am afraid to try. It says "write test selected user data on these disks will be destroyed OK?" I can't believe it would destroy the data currently on the drives. What do you make of this warning?

There have been no incidents of my computer crashing in the last two days but that is not unusual since it can go a week without a problem. I tightened up all the connectors to the hardrives as you suggested. One may have been a little loose. I probably bumpted it when I changed the memory modules. Lets see what happens in the next week.

Also, let me know when they tell you how to uninstall the german version of the program I erroneously installed. It slows down my boot. I was thinking about reinstalling it in English. However, would I then end up with two programs on my boot or would it overwrite the german one????????

IP: Logged

Josh1
Administrator
posted March 30, 2006 05:47 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
I guess it has something to do with it being an SCSI drive, anyway let us know how the scan goes.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 30, 2006 05:39 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I found a Fujitsu SCSE Daignostic Tool on Fujiitsu's web site and am running it now. I'll let you know what it says.

IP: Logged

dm567
Member
posted March 30, 2006 04:24 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I downloaded and installed active smart and it doesn't recognize either drive.

Both drives are FUJITSU MAP3735NP SCSI drives.

IP: Logged

Josh1
Administrator
posted March 30, 2006 04:24 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
You are welcome just let us know what happens.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 30, 2006 04:19 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I must have missed the lanquage screen. It may be there.

It would have been easier if I had seen it. Then I could read about how to get rid of it.

I'll try the harddrive software while we wait and see how to remove the german version.

Thanks,
dom

IP: Logged

Josh1
Administrator
posted March 30, 2006 02:45 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
I will go ahead and email them on how to remove the program if the steps I suggested do not work. Even though I emailed then the first time asking them how to do that, I guess they forgot to answer that one. This is the S.M.A.R.T program I was originally trying to find for you but I could not find it until now, http://www.download.com/Active-SMART/3000-2248_4-10330117.html?tag=lst-0-1 I have used this one before and I like it and its very easy to use and delete. The only thing about this version its an evaluation one I believe it will last for 30 days then you will need to register to continue to use it. http://www.ariolic.com/activesmart/index.html

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

Josh1
Administrator
posted March 30, 2006 02:24 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Alright this is the email I got from them

"Please note that there is a section during the creation of the floppy that asks your country location and keyboard layout. If you have any other questions or concerns, please let us know. Thank you for contacting Hitachi GST."

support_usa@hitachigst.com

Did you see that screen?


------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief
http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

[This message has been edited by Josh1 (edited March 30, 2006).]

IP: Logged

Josh1
Administrator
posted March 30, 2006 01:41 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Okay I emailed this company, so hopefully we will hear something on the wrong version and why this program is not easy to uninstall. Okay when you ran the program, what directory did it install? No that is a normal boot.ini file I was hoping to see a line with this program in to delete. Okay go to my computer then open your C: drive look for the name of this folder, if you cannot find it go to search and search for this file. I will never suggest this program again

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 30, 2006 12:40 AM     Click Here to See the Profile for dm567     Edit/Delete Message
This is all I found after clicking on Edit:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

Do you see anything there? It shows up as a page when booting up. I think it says "WWBMU Bootmenu" at the top of the page and it counts down to zero. Once it gets to zero it dissapears and the boot continues normally.

I also went to the sytem configuration "start up" and can't see it there either. It must be somewhere, right?

IP: Logged

dm567
Member
posted March 30, 2006 12:12 AM     Click Here to See the Profile for dm567     Edit/Delete Message
I did a search and found another person on the net who had the same problem and installed this thing in german: http://ubuntuforums.org/showthread.php?p=70474

Does that help?

I'll try what you said and let you know.

dom

IP: Logged

Josh1
Administrator
posted March 29, 2006 10:57 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Oh Dominic I am so sorry I have never used that program, so I did not know it would install in German and won’t go away. I am looking at the help guide right now and al the language is in English, maybe you got a German one somehow yea as you said something must be wrong with that site. Lets see what boots and if we can find this and delete it, so go into windows, go to control panel then go to system then go to advanced-settings-edit then look for anything that has to do with this program, then put an REM in front of that line followed by a space then save it. I email these people then I will ask them why do not have an English version and why the guide is in English but the version you have, is in German. Once again I am sorry, and you are right about the BIOS not doing SMART. I find another one for you.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 29, 2006 09:22 PM     Click Here to See the Profile for dm567     Edit/Delete Message
More specifically here is what happened:
I downloaded the fitness test called a cd image. I copied the image to a cd. I booted from the cd. A program called Caldera DR-DOS came up and I got a DOS prompt. I typed in DIR. I got a bunch of files and one was wwbmu.exe. I typed that in and pressed enter and then the program came up in german. I just retraced my steps and see that I may have installed the program accidently but I can't read German and can't figure out how to unistall. Can you read german?

Try booting up with the CD image on your computer. I think something is wrong with that Hitachi site.

IP: Logged

dm567
Member
posted March 29, 2006 08:56 PM     Click Here to See the Profile for dm567     Edit/Delete Message
I downloaded the fitness test from the hitachi website and created a bootable cd. I booted up with it and it was in german! Now I can't get rid of it. Its part of the boot now. It comes up every time I boot and if I do nothing it times out and the boot continues. I tried restore but that didn't get rid of it.
I looked in the add/delete programs in the controll panel but its not there. How do I get rid of it?

Also, I checked the bios and saw nothing so I guess it doesn't support Smart.

dominic

IP: Logged

Josh1
Administrator
posted March 29, 2006 05:27 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Okay lets see if this works http://www.hitachigst.com/hdd/support/download.htm do not do the restore function or the low level format. Well you would need to go in the BIOS; to get into the BIOS you will need to look on your screen right after the machine reboots it will tell you what key to push so you can get into the BIOS. Then you will need to go into each menu to see if you see anything that says BIOS feature, make sure its enabled. If you don’t see if then you BIOS does not have SMART detection, so you can download the tool instead. The error message for your video card could mean that the card could not map or place or locate the required memory area(s) for the video card and whatever application it was currently running. Yea stage four and five take the longest, depending on how big and many files you have on your drive it could take an hour or two. Possibly 45 minutes. Yea let us know the results of the scan

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 29, 2006 05:20 PM     Click Here to See the Profile for dm567     Edit/Delete Message
you were right. It didn't finish the chkdsk. I did it again and rebooted and its at stage 4 of 5 showing 1 % completed. At this rate it will take hours to complete. I'll let you know what happens.

Also, how do I find out if I have smart drives?

Also, how do I find out if my bios supports smart?

Dom

IP: Logged

dm567
Member
posted March 29, 2006 04:56 PM     Click Here to See the Profile for dm567     Edit/Delete Message
by the way, I have recently updated my bios and the driver to my video card.

IP: Logged

dm567
Member
posted March 29, 2006 04:54 PM     Click Here to See the Profile for dm567     Edit/Delete Message
how do i determine if I have a smart feature on my bios?

I tried the drivehealth2.0 beta but it gives an error:

"unable to communicate with Core Service! Error #4: request timeout"

IP: Logged

Josh1
Administrator
posted March 29, 2006 04:52 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Did you see the window that says a scandisk has been scheduled press a key within 10 seconds to abort then the time countdown? I don’t think it would have scanned that fast, chkdsk has five phases and it will usually take about an hour or two for chkdsk to run on my system. The results will be on the blue screen you saw, but because the scan did not finish then you see no results. Try the scan again with out the /x switch

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

dm567
Member
posted March 29, 2006 04:44 PM     Click Here to See the Profile for dm567     Edit/Delete Message
chkdsk d: /x

I typed this command in the run box and it told me it couldn't proceed because of something and asked if I would like to schedule it at next startup. I said yes and then restarted and it seemed to run Chkdsk but then dissappeared and windows opened. How do you find out the results.

The /x commmand is for ntsf files. I found it on micorsoft web site.

How do you know what it did?

IP: Logged

Josh1
Administrator
posted March 29, 2006 04:41 PM     Click Here to See the Profile for Josh1     Edit/Delete Message
Alright then try this http://www.drivehealth.com/update.html?action=update also do you have a SMART feature in your BIOS? You should be able to check drive D by opening up my computer, right click drive D go to tools and then disk checking. Check the bottom box when it comes up and then do the scan, you may need to restart for the scan to take place.

------------------
Powered by Intelligent Computing Solutions.
------------------------
www.footslog.com

For every problem, there is a solution.

Please give what you can to the Hurricane relief

http://www.microsoft.com/mscorp/citizenship/giving/relief.asp

IP: Logged

This topic is 2 pages long:   1  2 

All times are CT (US)

next newest topic | next oldest topic

Administrative Options: Close Topic | Archive/Move | Delete Topic
Post New Topic  Post A Reply
Hop to:

Contact Us | Footslog Home



Ad

The information presented on FootsloG.com is copyrighted as a collective work. FootsloG.com is free for personal use (non-commercial). Any other use FootsloG.com, including copying or reproducing any portion of this web site is strictly prohibited without the express written consent of FootsloG.com. If you have any questions about the usage term please contact us via email: webmaster@footslog.com.



Problems, Knowledge, and Power, powered by intelligent Computing Solutions