Computer Hope
Microsoft => Microsoft Windows => Windows XP => Topic started by: jawa_dude on December 21, 2012, 02:12:20 PM
-
I've recently encountered an error that has rendered my system pretty much unusable soon after upgrading Firefox (maybe unrelated); whenever I log into my system (under the default username [Joshua]) it seems that the taskbar fails to load (the start button and system time do not load/display) and hovering the mouse cursor over it changes it to an hourglass. At times I am able to access files located on the desktop, though at times a Windows explorer error window will pop-up with explorer.exe listed as one of the files that 'will be included in this error report'.
When I boot in safe mode, there are two accounts, Administrator and Joshua. The problem does not exist in Administrator and everything appears functional, however the same can't be said when logging into Joshua in safe mode.
From safe mode I reviewed the event log for application logs, and it seems that everytime I log into Joshua, an application error is thrown with the following information:
"Windows cannot access the file C:\Windows\system32\usmt\migwiz.exe for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program migwiz.exe because of this error." - I'm convinced this is the issue though I'm no expert.
I checked the location of this file an it exists, I attempted to make a copy of the folder to my desktop in safe mode; "Windows cannot read from source file or disk error", right-clicking the file prompts a Windows Explorer error window which when I inspect has an error signature of AppName: explorer.exe. Doing this also seems to reset explorer.exe while in safe mode.
What I've tried so far (will update, may have forgotten some items):
- Updated virus scan of the system with Malwarebytes
- Ran chkdsk
- Ended and restarted the explorer.exe
- Booted in diagnostic mode
- Changed the startup mode for SSDP Discovery Service to disabled
- Restored system to an earlier point before the problems occurred
I would appreciate any input into this problem, I've been stuck on it for the last 6-7 days ???. Let me know if there is any more information that I may provide (P.S. I'm posted/checking this thread from another system).
-
Have you tried (from safe mode) to do a restore to an earlier date (a date prior to this issue arising should do it)?truenorth
-
Yes. I've tried a system restore to approximately 2-3 days before the problem first occured. When it was complete I was informed that nothing had changed :-\.
Forgot to add this to the list of items that I've tried.
-
Disable all but bare essentials from the start menu/disable your virus scanner/disable your ISP connection and try to restart the computer.truenorth
If at any time the problem ceases to exist please return to tell us what worked.truenorth
-
Thanks again for your input.
I disabled all startup processes from safe mode and restarted in normal mode (network cable unplugged as usual), the problem was still present. Another window explorer error occured (the one with Send/Dont Send etc), the files included to be sent in this report included:
C:\DOCUME~1\Joshua\LOCALS~1\Temp\WER455c.dir00\explorer.exe.mdmp
C:\DOCUME~1\Joshua\LOCALS~1\Temp\WER455c.dir00\appcompat.txt
(note the tilde was superscript)
p.s. The following processes were running from reviewing the task manager, nothing unusual/non-essential;
tskmgr.exe
drwtsn32.exe
explorer.exe
svchost.exe
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
System
System Idle Process
-
Try using autorun.
Download Autoruns (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx)
After extracting, double click autoruns and go to File - Save - Filename : Autoruns
Save as type : Text. Copy and Paste the text on your next reply
-
When I opened the autoruns.exe via the command line nothing appeared to happen, (although a process for autoruns appeared in the task manager, no more than 2-3K mem usage).
I was however able to run the autoruns.exe as Administrator in safe mode:
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "UCam_Menu" "MUI StartMenu Application" "CyberLink Corp." "c:\program files\cyberlink\youcam\muitransfer\muistartmenu.exe"
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Address Book 6" "Outlook Express Setup Library" "Microsoft Corporation" "c:\program files\outlook express\setup50.exe"
+ "Microsoft Outlook Express 6" "Outlook Express Setup Library" "Microsoft Corporation" "c:\program files\outlook express\setup50.exe"
"HKLM\SOFTWARE\Classes\Protocols\Filter" "" "" ""
+ "text/xml" "Microsoft Office XML MIME Filter" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoxmlmf.dll"
"HKLM\SOFTWARE\Classes\Protocols\Handler" "" "" ""
+ "livecall" "Windows Live Messenger Protocol Handler Module" "Microsoft Corporation" "c:\program files\windows live\messenger\msgrapp.14.0.8064.0206.dll"
+ "ms-help" "Microsoft® Help Data Services Module" "Microsoft Corporation" "c:\program files\common files\microsoft shared\help\hxds.dll"
+ "ms-itss" "Microsoft® InfoTech Storage System Library" "Microsoft Corporation" "c:\program files\common files\microsoft shared\information retrieval\msitss.dll"
+ "msnim" "Windows Live Messenger Protocol Handler Module" "Microsoft Corporation" "c:\program files\windows live\messenger\msgrapp.14.0.8064.0206.dll"
+ "skype-ie-addon-data" "Skype add-on for IE" "Skype Technologies S.A." "c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll"
+ "skype4com" "Skype for COM API" "Skype Technologies" "c:\program files\common files\skype\skype4com.dll"
+ "wlmailhtml" "Windows Live Mail" "Microsoft Corporation" "c:\program files\windows live\mail\mailcomm.dll"
"HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components" "" "" ""
+ "0" "" "" "File not found: About:Home"
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "Kaspersky Anti-Virus" "Windows Shell Extension" "Kaspersky Lab ZAO" "c:\program files\kaspersky lab\kaspersky internet security 2011\shellex.dll"
+ "Notepad++" "ShellHandler for Notepad++ (64 bit)" "" "c:\program files\notepad++\nppshell_04.dll"
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" ""
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbamext.dll"
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" ""
+ "Kaspersky Anti-Virus" "Windows Shell Extension" "Kaspersky Lab ZAO" "c:\program files\kaspersky lab\kaspersky internet security 2011\shellex.dll"
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Classes\Directory\Shellex\DragDropHandlers" "" "" ""
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "igfxcui" "igfxpph Module" "Intel Corporation" "c:\windows\system32\igfxpph.dll"
"HKLM\Software\Classes\Folder\Shellex\ColumnHandlers" "" "" ""
+ "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files\common files\adobe\acrobat\activex\pdfshell.dll"
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "Kaspersky Anti-Virus" "Windows Shell Extension" "Kaspersky Lab ZAO" "c:\program files\kaspersky lab\kaspersky internet security 2011\shellex.dll"
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbamext.dll"
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Classes\Folder\ShellEx\DragDropHandlers" "" "" ""
+ "WinRAR" "" "" "c:\program files\winrar\rarext.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "Adobe PDF Link Helper" "Adobe PDF Helper for Internet Explorer" "Adobe Systems Incorporated" "c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll"
+ "FilterBHO Class" "WebToolBar component" "Kaspersky Lab ZAO" "c:\program files\kaspersky lab\kaspersky internet security 2011\klwtbbho.dll"
+ "Google Toolbar Helper" "Google Toolbar" "Google Inc." "c:\program files\google\google toolbar\googletoolbar_32.dll"
+ "Google Toolbar Notifier BHO" "GoogleToolbarNotifier" "Google Inc." "c:\program files\google\googletoolbarnotifier\5.7.7529.1424\swg.dll"
+ "IEVkbdBHO Class" "" "" "c:\program files\kaspersky lab\kaspersky internet security 2011\ievkbd.dll"
+ "Java(tm) Plug-In 2 SSV Helper" "Java(TM) Platform SE binary" "Sun Microsystems, Inc." "c:\program files\java\jre6\bin\jp2ssv.dll"
+ "JQSIEStartDetectorImpl Class" "Java(TM) Quick Starter binary" "Sun Microsystems, Inc." "c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll"
+ "Loader Class" "Url Helper" "Bandoo Media, inc" "c:\program files\windows searchqu toolbar\datamngr\browserconnection.dll"
+ "Searchqu Toolbar" "dtx Dynamic Link Library" "" "c:\program files\windows searchqu toolbar\datamngr\toolbar\searchqudtx.dll"
+ "Skype Plug-In" "Skype add-on for IE" "Skype Technologies S.A." "c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll"
+ "Windows Live Sign-in Helper" "WindowsLiveLogin.dll" "Microsoft Corporation" "c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll"
"HKLM\Software\Microsoft\Internet Explorer\Toolbar" "" "" ""
+ "Google Toolbar" "Google Toolbar" "Google Inc." "c:\program files\google\google toolbar\googletoolbar_32.dll"
+ "Searchqu Toolbar" "dtx Dynamic Link Library" "" "c:\program files\windows searchqu toolbar\datamngr\toolbar\searchqudtx.dll"
"HKLM\Software\Microsoft\Internet Explorer\Extensions" "" "" ""
+ "&Blog This in Windows Live Writer" "Windows Live Writer Blog This Extension" "Microsoft Corporation" "c:\program files\windows live\writer\writerbrowserextension.dll"
+ "&Virtual Keyboard" "WebToolBar component" "Kaspersky Lab ZAO" "c:\program files\kaspersky lab\kaspersky internet security 2011\klwtbbho.dll"
+ "S&end to OneNote" "Microsoft Office OneNote Internet Explorer Add-in" "Microsoft Corporation" "c:\program files\microsoft office\office12\onbttnie.dll"
+ "Skype Plug-In" "Skype add-on for IE" "Skype Technologies S.A." "c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll"
+ "URLs c&heck" "WebToolBar component" "Kaspersky Lab ZAO" "c:\program files\kaspersky lab\kaspersky internet security 2011\klwtbbho.dll"
+ "Windows Messenger" "Windows Messenger" "Microsoft Corporation" "c:\program files\messenger\msmsgs.exe"
"Task Scheduler" "" "" ""
+ "GoogleUpdateTaskMachineCore.job" "Google Installer" "Google Inc." "c:\program files\google\update\googleupdate.exe"
+ "GoogleUpdateTaskMachineUA.job" "Google Installer" "Google Inc." "c:\program files\google\update\googleupdate.exe"
+ "GoogleUpdateTaskUserS-1-5-21-178885553-318018972-1790314184-1005Core.job" "Google Installer" "Google Inc." "c:\documents and settings\joshua\local settings\application data\google\update\googleupdate.exe"
+ "GoogleUpdateTaskUserS-1-5-21-178885553-318018972-1790314184-1005UA.job" "Google Installer" "Google Inc." "c:\documents and settings\joshua\local settings\application data\google\update\googleupdate.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ ".ipsec" "" "" "File not found: \*"
+ "Ambfilt" "Creative WDM 3D Audio Driver" "Creative" "c:\windows\system32\drivers\ambfilt.sys"
+ "BTWUSB" "Driver for Bluetooth USB Devices" "Broadcom Corporation." "c:\windows\system32\drivers\btwusb.sys"
+ "Changer" "" "" "File not found: C:\WINDOWS\System32\Drivers\Changer.sys"
+ "DOSMEMIO" "" "" "c:\windows\system32\memio.sys"
+ "HDAudBus" "High Definition Audio Bus Driver v1.0a" "Windows (R) Server 2003 DDK provider" "c:\windows\system32\drivers\hdaudbus.sys"
+ "i2omgmt" "" "" "File not found: C:\WINDOWS\System32\Drivers\i2omgmt.sys"
+ "ialm" "Intel Graphics Miniport Driver" "Intel Corporation" "c:\windows\system32\drivers\igxpmp32.sys"
+ "IntcAzAudAddService" "Realtek(r) High Definition Audio Function Driver" "Realtek Semiconductor Corp." "c:\windows\system32\drivers\rtkhdaud.sys"
+ "KL1" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl1.sys"
+ "kl2" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl2.sys"
+ "KLIF" "Kaspersky Lab Interceptor and Filter" "Kaspersky Lab" "c:\windows\system32\drivers\klif.sys"
+ "klim5" "Kaspersky Lab Intermediate Network Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\klim5.sys"
+ "klmouflt" "Kaspersky Lab Mouse Class Filter" "Kaspersky Lab" "c:\windows\system32\drivers\klmouflt.sys"
+ "lbrtfdc" "" "" "File not found: C:\WINDOWS\System32\Drivers\lbrtfdc.sys"
+ "Monfilt" "Creative WDM Audio Driver (32-bit)" "Creative Technology Ltd." "c:\windows\system32\drivers\monfilt.sys"
+ "MP4ConverterAudio" "Support Device" "Windows (R) Codename Longhorn DDK provider" "c:\windows\system32\drivers\mp4converteraudio.sys"
+ "PCIDump" "" "" "File not found: C:\WINDOWS\System32\Drivers\PCIDump.sys"
+ "PDCOMP" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDCOMP.sys"
+ "PDFRAME" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDFRAME.sys"
+ "PDRELI" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDRELI.sys"
+ "PDRFRAME" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDRFRAME.sys"
+ "Ptilink" "Direct Parallel Link Driver" "Parallel Technologies, Inc." "c:\windows\system32\drivers\ptilink.sys"
+ "PxHelp20" "Px Engine Device Driver for Windows 2000/XP" "Sonic Solutions" "c:\windows\system32\drivers\pxhelp20.sys"
+ "RTL819xp" "Realtek RTL8189xP NDIS5.1 miniport driver" "Realtek Semiconductor Corporation " "c:\windows\system32\drivers\rtl819xp.sys"
+ "RTLE8023xp" "Realtek 10/100/1000 NDIS 5.1 Driver " "Realtek Semiconductor Corporation " "c:\windows\system32\drivers\rtenicxp.sys"
+ "rtport" "Generic Port I/O for Win32" "Windows (R) 2003 DDK 3790 provider" "c:\windows\system32\drivers\rtport.sys"
+ "Secdrv" "SafeDisc driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys"
+ "SynTP" "Synaptics Touchpad Driver" "Synaptics, Inc." "c:\windows\system32\drivers\syntp.sys"
+ "VMC33F" "Vimicro USB Video Class Camera" "Vimicro Corporation" "c:\windows\system32\drivers\vmc33f.sys"
+ "WDICA" "" "" "File not found: C:\WINDOWS\System32\Drivers\WDICA.sys"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.iac2" "Indeo® audio software" "Intel Corporation" "c:\windows\system32\iac25_32.ax"
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm"
+ "msacm.sl_anet" "Audio codec for MS ACM" "Sipro Lab Telecom Inc." "c:\windows\system32\sl_anet.acm"
+ "msacm.trspch" "DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50" "DSP GROUP, INC." "c:\windows\system32\tssoft32.acm"
+ "vidc.cvid" "Cinepak® Codec" "Radius Inc." "c:\windows\system32\iccvid.dll"
+ "vidc.iv31" "" "" "c:\windows\system32\ir32_32.dll"
+ "vidc.iv32" "" "" "c:\windows\system32\ir32_32.dll"
+ "vidc.iv41" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax"
+ "vidc.iv50" "Intel Indeo® video 5.10" "Intel Corporation" "c:\windows\system32\ir50_32.dll"
"HKLM\Software\Classes\Filter" "" "" ""
+ "Indeo® video 4.4 Compression Filter" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax"
+ "Indeo® video 4.4 Compression Filter" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax"
+ "Indeo® video 4.4 Decompression Filter" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax"
+ "Indeo® video 4.4 Decompression Filter" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax"
"HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" ""
+ "9x8Resize" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "ACELP.net Audio Decoder" "ACELP.net Audio Decoder" "Sipro Lab Telecom Inc." "c:\windows\system32\acelpdec.ax"
+ "Allocator Fix" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "Bitmap" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "Capture File Writer" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "CyberLink TL MPEG Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\program files\cyberlink\youcam\yctlmsplter.ax"
+ "Cyberlink Track Filter" "Cyberlink Track Filter" "CyberLink Corp." "c:\program files\cyberlink\youcam\yctrack.ax"
+ "CyberLink Video Regulator" "Video Regulator" "Cyberlink" "c:\program files\cyberlink\youcam\ycrgl.ax"
+ "CyberLink WebCamera NULL Render" "CLWEBCAMERARENDER" "CyberLink" "c:\program files\cyberlink\youcam\ycwebcamerarender.ax"
+ "CyberLink WMV Dumper" "CLWMVDump Dynamic Link Library" "" "c:\program files\cyberlink\youcam\ycwmvdump.ax"
+ "Frame Eater" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "Indeo® audio software" "Indeo® audio software" "Intel Corporation" "c:\windows\system32\iac25_32.ax"
+ "Indeo® video 5.10 Compression Filter" "Intel Indeo® video 5.10" "Intel Corporation" "c:\windows\system32\ir50_32.dll"
+ "Indeo® video 5.10 Decompression Filter" "Intel Indeo® video 5.10" "Intel Corporation" "c:\windows\system32\ir50_32.dll"
+ "MPEG Layer-3 Decoder" "MPEG Layer-3 Audio Decoder" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codecx.ax"
+ "Record Queue" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "Record Queue" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "ShotDetect" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "Stetch" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WIA Stream Snapshot Filter" "WIA Stream Snapshot Filter" "MyCompanyName" "c:\windows\system32\wiasf.ax"
+ "WM VIH2 Fix" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "WM VIH2 Fix" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Audio Analyzer" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Black Frame Generator" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT DirectX Transform Wrapper" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT DV Extract Filter" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "WMT DV Extract Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT FormatConversion" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Import Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Interlacer" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Log Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT MuxDeMux Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Sample Info Filter" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Sample Info Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Screen capture Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Switch Filter" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Switch Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Virtual Renderer" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Virtual Renderer" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Virtual Source" "Windows Live Video Acquisition Filters" "Microsoft Corporation" "c:\program files\windows live\photo gallery\wlxvafilt.dll"
+ "WMT Virtual Source" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Volume" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll"
+ "YC_EVRWindow" "CLEvr" "CyberLink Corp." "c:\program files\cyberlink\youcam\ycevr.dll"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls" "" "" ""
+ "C:\PROGRA~1\WI9130~1\Datamngr\datamngr.dll C:\PROGRA~1\WI9130~1\Datamngr\IEBHO.dll C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" "Data Manager" "Bandoo Media, inc" "c:\program files\windows searchqu toolbar\datamngr\datamngr.dll"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify" "" "" ""
+ "igfxcui" "igfxdev Module" "Intel Corporation" "c:\windows\system32\igfxdev.dll"
+ "klogon" "Logon Visualizer" "Kaspersky Lab ZAO" "c:\windows\system32\klogon.dll"
"HKCU\Control Panel\Desktop\Scrnsave.exe" "" "" ""
+ "C:\windows\IMAGIN~1.SCR" "Screensaver for SWFlash" "TopThinks, INC." "c:\windows\imagine digital freedom.scr"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries" "" "" ""
+ "000000000014" "" "" "c:\windows\system32\rsvpsp.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" ""
+ "3500-4500 Series Port" "Printer Communication System" " " "c:\windows\system32\lxdilmpm.dll"
-
Have you tried creating another user account (other than joshua) and logging in from there? truenorth
-
The problem persists on a new user account, the taskbar/desktop seemed responsive for just a moment before the hourglass appeared. I'm still messing around with different startup options with no luck, keep getting the same error on the event viewer.
-
You said you ran a malware scan with MalwareBytes. Do you have an anti virus app installed? If so, did you run a full scan with that also?
-
Try also disabling your Kaspersky Internet Security (Firewall and or real time protection) referring to Windows access error. What XP service pack do you use? Did you install any Topthinks screensaver for XP?
-
@Allan
Yes I have Kaspersky 2011 with an expired license, running a full scan at the moment, will update later (taking a while).
@Jason
Service Pack 3. No Topthinks screensaver (was using an alternate in the past). I will attempt to boot without kaspersky internet security once the scan completes.
Will update shortly, thanks for the input.
-
@Allan
Yes I have Kaspersky 2011 with an expired license, running a full scan at the moment, will update later (taking a while).
@Jason
Service Pack 3. No Topthinks screensaver (was using an alternate in the past). I will attempt to boot without kaspersky internet security once the scan completes.
Will update shortly, thanks for the input.
How are you running it and from where? And if it has an expired license it probably doesn't have the latest definitions. I suggest you create a disc from one of the links above.
-
I ran the scan in safe mode with the Administrator account, no threats detected - scan took almost 15hrs.
Would a free anti-virus suffice (AVG perhaps) as I'm on a netbook and do not (currently) have any devices that I could boot from/would want to risk getting infected.
I disabled all of Kaspersky's protection services (from safe mode admin) and booted in diag mode, no change. Upon shutdown a End Now dialog appeared for the explorer.exe as it was unresponsive.
-
Sure, try AVG - anything with current definitions. But please do NOT have more than one AV installed at the same time. If you are going to install AVG or Avira or something similar, you should uninstall Kaspersky first.
-
Sorry about the delay, removing Kaspersky is taking a while longer than I'd originally thought. Once I have an AV with the latest definitions I will run a full scan and report any findings...
Are you convinced that this is an issue with malware?
-
Nope. Just another step in the troubleshooting process - but one that's needed.
-
Update. Still unable to remove Kaspersky Internet Security 2011 via safe mode, despite using Kaspersky's remover tool. Would I need to purchase a new license to progress with the troubleshooting? As the problem with removing kaspersky from my system seems to warrant its own thread...
Completely stumped here as what to do next/how to get around this.