Computer Hope
Microsoft => Microsoft Windows => Windows Vista and 7 => Topic started by: Sceptical on April 03, 2009, 02:11:19 PM
-
Hi Guys and Gals.
Been having loads of grief with BSOD's just lately, lots of different error codes.
After doing a few searches it looks as though i may have overdone the reg fix thing.
I have used RegCure and Advanced System Care thinking i am being very diligent, looks like i may have been a bit of a wotsit!
My main question is this, are parts of the registry seperate in each account on the same computer?
Reason i ask is i have tried to burn a avi file using Nero 7 but i seem to get a BSOD before it completes, i had a hunch about the registry so i tried burning the avi file in the guest account, it made it to the end without a BSOD leading me to think that my accounts registry is damaged.
If my hunch is right what can i do about it? if not, can i repair something i have bust?
Cheers
-
Hi Guys and Gals.
Been having loads of grief with BSOD's just lately, lots of different error codes.
After doing a few searches it looks as though i may have overdone the reg fix thing.
I have used RegCure and Advanced System Care
[/quote]
Oh dear.
Registry cleaners probably made your bad situation worse :-\
My main question is this, are parts of the registry seperate in each account on the same computer?
Ahh, indeed! Let me explain.
The registry is divided into several parts, called "hives" (for what reason we don't know). The main two hives are "HKEY_LOCAL_MACHINE" and "HKEY_CURRENT_USER". Generally, User-specific settings are stored in HKEY_CURRENT_USER (which, I might add is really just a "shortcut" to the right users key in HKEY_USERS, but I do ramble too much). Machine specific settings, such as Driver configuration and setup and so forth, as well as some program settings (usually defaults), are found in HKEY_LOCAL_MACHINE.
Now, the appropriate "user" hive data is stored in a hidden file called "NTUSER.DAT" in the users "my documents" folder.
So far, I think I've somewhat answered your question. Your suspicions, translated into this, are that your "user" hive file for that particular account is corrupted, I imagine. One possible route would be to create a new account and migrate all your files and settings there- another alternative would be a Windows System Restore, which will restore your registry files.
Reason i ask is i have tried to burn a avi file using Nero 7 but i seem to get a BSOD before it completes, i had a hunch about the registry so i tried burning the avi file in the guest account, it made it to the end without a BSOD leading me to think that my accounts registry is damaged.
If my hunch is right what can i do about it? if not, can i repair something i have bust?
Cheers
Can you recall the STOP code for the Blue screen? if you get it again, do post the error code.
-
Hi BC.
Thanks for the detailed reply,
1. If reg cleaners do damgae is it best to just let the computer get on with it?
2. I take it the answer is yes, there are parts of the registry that are unique to each user?
3. Now then, you want STOP codes eh? i'll give you stop codes...................
STOP: 0x0000000A (0x00000166, 0x00000002, 0x00000000, 0x804E5433) with a Driver_IRQL message at the top of the page.
STOP: 0x0000008E ( 0x0000001D, 0x80501066, 0xF7BCAD74, 0x00000000 )
STOP: 0x0000000D1 ( 0x8797F958, 0x00000002, 0x00000000, 0xF7877B51 )
NVNRM. SYS-Address F7877B51 base at F786F000, Datestamp 40a927fa
STOP: 0x0000007F ( 0x0000000D, 0x00000000, 0x00000000, 0x00000000 )
PAGE_FAULT_IN_NONE_PAGE_AREA
STOP: 0x00000050 ( 0xFFC0585C, 0x00000001, 0x8054BBB4, 0x00000000 )
How's that for a selection?
Does it mean anything, other than ooooppps?
-
3 of the 4 point ot memory errors...
DLoad MemTest...follow the instructions for creating a bootable floppy/CD...
Let it run at least 2 hours...
Any error messages at all and you have a bad/failing stick of RAM.
-
Navigate to: C:\Windows\Minidump folder.
If you see any .dmp files, zip all of them, and attach zipped file to your next reply.
-
@ Broni, in this case, would it help to use system restore to undo the registry changes if there is a restore point existing?
-
Worth a try...
-
Broni, i don't see a mini dump folder, (hidden files are showing).
X, System Restore was corrupt and wouldn't restore to any previous points so i had to clear it and start again.
patio, downloaded the latest mem test, no floppy needed it was a executable, i looked over after a hour or so, BSOD!! so i don't know if it found anything as i don't think it makes a log does it?
I'll try it on the guest account.
-
How many user accounts do you have on this computer?
Do the blue screens only occur in one specific account?
What is the capacity of your hard drive and how much free space is left?
What antivirus programs do you have installed?
-
1. Click Start, point to Settings, and then click Control Panel (Start>Control Panel in Vista).
2. Double-click System.
3. Click (Advanced system settings link in Vista, then --->)the Advanced tab, and then click Settings under Startup and Recovery.
4. In the Write debugging information list, click Small memory dump (64k).
This will enable dump files, so when new BSOD happens, all info should be there.
-
Broni, done that, cheers.
JJ, 2 user accounts, mine and 1 guest, no one uses it really apart from me and if someone does they are only allowed on the guest.
Haven't seen a BSOD on the guest account yet, that is what makes me think it isn't hardware, more like i've messed up the registry in my belief that the more often you run reg cleaners the beter. :-[
160gb drive in two partitions, C drive is 78.1 with 27 free.
I am using Avast at the mo, used to be AVG but it was taking too long to boot.
MemTest has ran on the guest account to almost 300% without errors.
I will let it run again when i go out in a bit and see if i get a BSOD.
I shall have to try using the guest account as much as i can and see if i get a BSOD.
Spec;
XP Home SP3,
K7NF2-RAID Mobo,
Ath xp 3200+ @2.2Ghz
1024mb RAM,
NVIDIA GeForce 6600,
Seagate 160gb HD
-
Try doing a system restore to before the problem started.
http://www.computerhope.com/issues/ch000589.htm
If that doesn't work create a new user account and transfer your settings to the new one
http://support.microsoft.com/?kbid=811151
-
Got a new BSOD after flashing a dvd drive.
BAD_POOL_HEADER
STOP: 0x00000019 ( 0x00000020, 0xE2F1BB78, 0xE2F1C340, 0x0CF97C1D )
I have a dmp file but it wont let me uplaod it here.
JJ, system restore was corrupt, it wouldn't go back to any earlier date so i had to restart it.
I have already made a new account and was wondering how to transfer properly, thanks for that link.
I thought maybe if i transferred stuff across i may take the problem with me?
-
I have a dmp file but it wont let me uplaod it here.
You have to zip it in order to attach it.
-
You now have a Bad Pool Header message...
Again this all leads back to RAM.
However there are other circumstances that will cause RAM error messages and here they are in no apparent order:
Bad RAM
Flakey or failing HDD
Flakey or failing PSU.
For the RAM the MemTest info has already been given...
For the HDD DLoad and run the FREE diagnostics on the HDD from the manuf. site...run the Long test...
For the PSU borrow a known good unit of the same or greater wattage and swap it in ther overnight...if the issues go away you need a new PSU.
Best of Luck.
P.S. You may want to remove all the RAM sticks and clean the contacts and replace them...use canned air to blow out the slots as well...
-
I'm back.
Right, i have attached 2 files, no i haven't it wont let me upload .rar. Hoorah! I may have done it at last (or not?)
JJ, copy to a new user wont work it gets to a certain point and i get
'Cannot copy (strange garbled file name) Cannot find the specified file.
Make sure you specify the correct path' ??
That happened from 'user data to user data' folder.
patio, i shall give the hdd thing a go, as for the psu, i don't have access to a better one than i have, only the one i replaced that came with the case i bought.
Thing is, if it is hardware, how come i only get BSOD's on my original user account?
All seems a bit strange to me.
[attachment deleted by admin]
-
Oh my.
Now call me a thicko if you will, i have just had my latest BSOD while using a different account and thought, right thats it, i'm taking a stick of RAM out.
While i was fiddling i decided to check the graphics card as people have mentioned one BSOD relating to it.
The godamn fan wasn't working!!
I took it out and pushed the fan plug hard and it clicked into place and bingo, the fan works.
Is it possible that that is all it was?
A overheating card??
-
Very Possible....
I'd still run the checks i suggested...
-
Yeah...Your two dump files show:
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M, and BAD_POOL_HEADER errors, both in win32k.sys
It looks like some hardware problem. RAM?
-
Broni.
Tried the RAM test several times, no sign of a problem, i hope it was just the card overheating, (see post above).
patio, will do, and i will leave something running overnight to see what happens.
Cheers.
-
Very well, then :)
-
I hope so Broni, it is doing my head in!!
-
Ours as well..... ::)
-
Run diagnostics on your hard drive
http://www.tacktech.com/display.cfm?ttid=287
On that page find the brand of hard drive that you have and download the diagnostics disk. That will be an ISO that you can use to create bootable CD or floppy.
What is the capacity of your hard drive and how much free space is left?
What antivirus programs do you have installed?
-
by the way, When was the last time you blew the dust out of your computer?
-
JJ, did that last night though the one i got from seagate, (SeaTools For Windows ver 1.1.1.0) isn't a bootable cd it is a programme installed on windows. I ran the long test and no bad sectors found. (Don't know if the other versions do something different?)
My computer was still fine this morning, left on overnight so i hope the fan was the only problem, we shall see.
Cheers all. (IF it's fixed, if not, i'll be back). ;D
patio, don't lie, you love it really!
jj, just seen your other message, not long back, probably when i didn't replace the graphics card fan plug properly. Ooopps!
-
What antivirus programs do you have installed?
Try to do a repair install
http://www.michaelstevenstech.com/XPrepairinstall.htm
-
patio, i've left the computer on for 48 hours since i have fixed the graphics card fan, no sign of a BSOD.
It looks like that was the problem.
These things never cease to amaze me.
The range of error codes i've had is boggling, if this really was my probelm, there seems little point in them being there in the first place if no one knows exactly what they mean.
I shall keep the link you have provided, just in case!! :-\
Cheers
-
Good news :)
-
if computer is working fine, maybe you do want to make registry point just in case you play with the registry and have a problem again.... :)
-
Hahahahhahahahahahahahahahahaha :'(
Opened my big gob too soon didn't i. :-X
DRIVER IRQ BSOD at 9pm ish.
Looks like i'll try that repair then..................
-
At this point, you might be better off just saving all of the data that you want to save, and doing a clean install.
by the way, you never answered this
What antivirus programs do you have installed?
-
You know what? i think you may be right, i was just in the process of downloading SP3 and creating a slipstream cd.
Never used one before but it seems the quickest route.
Any reason not to use one as far as you know?
-
No
Just realize you will lose all of your data. Any programs will need to be reinstalled.
After the install you want to check device manager to make sure all of your drivers loaded. Then go to Microsoft Update and get all of the updates that are available for your machine. After that install the antivirus program of your choice and you should be good to go.
Patio mentioned that the cause of your problems could be your power supply. Have you tried a different one, just to rule that out as the culprit?
-
If you don't want to go through the process of creating a slipstream disk, you can just use your original XP disk to do the install and then download all of the updates from microsoft update.
-
JJ, sorry, thought i'd answered that one, i'm using Avast after getting miffed with the time AVG took to load at start up.
(Now i don't like how long Avasts 'quick scan' takes, but hey, it's free.)
As for the PSU, i don't have a better, more powerful one, only an inferior one that came with this case, but it is new so is it worth a try?? Or shall i do the deed anyway as i don't really give a hoot?
As for data, not too bothered, i'm at that point where there is so much junk on here yet you daren't uninstall it, just in case!!
Will windows install drivers other than it's default ones then? I thought i had to do that manually for each piece of hardware?
I'll wait for any final answers/advice before i do the deed.
Cheers
-
If you don't want to go through the process of creating a slipstream disk, you can just use your original XP disk to do the install and then download all of the updates from microsoft update.
But without at least sp1 you'll get infected very soon if you're connected to the web.
-
But without at least sp1 you'll get infected very soon
SP2?...where the firewall comes in.... ;D
-
But without at least sp1 you'll get infected very soon if you're connected to the web.
I'd just install the XP and immediately download the sp2 if your version of windows xp doesn't have it. You probably need sp2 anyway to install some programs.
-
You download SP2 standalone on secure computer, move it to the computer #2, install it there, turn Windows firewall on, and then you connect to the net.
-
But without at least sp1 you'll get infected very soon if you're connected to the web.
I've done this several times and have never had that happen. The first thing to do after the install is make sure all of your drivers loaded. The very next thing is connect to the internet, go to windows update and get all of the updates that are available. Service pack two is usually one of the first updates that you get. You have to keep restarting and going back to Microsoft update until it stops finding updates for your computer. After that, install the antivirus of your choice and you should be good to go.
If you want to create a slipsteam disk, go ahead. I've never had problems with slipstream disks.
As for your drivers, you may get lucky and the XP disk will recognize all of your hardware and load drivers during the install. I've had luck with this several times. As I mentioned above, the very first thing to do after you have installed XP is check device manager. Click Start then Run and type in: devmgmt.msc and press enter. If you see any yellow exclamation marks you will need a driver for that device.
When you bought your computer it should have came with a few Cd's. One of these will be your drivers CD. It might say something like "drivers and utilities" on it. That will have all of the drivers for your computer on it.
If you don't have a drivers CD, don't worry. Your computer manufacturer's website should have all of your drivers available for download. If you do have to download drivers, use a different computer to get them and save them to a CD. Remember, the very first thing you want to do after you have connected to the internet, is go to Microsoft Update and get all of the updates that are available for your machine (even if you use the slipstream disk).
-
Cheers all for the suggestions and advice, not sure why noone has mentioned SP3?
That is what i was going to make the slipstream with.
Another BSOD this morning, hope it's not hardware after all this.
Ah hah!
-
SP3 is one of the updates that windows update will give you.
Even if you do use the slipstream disk, get all of the updates available after you do the install.
By the way, If you want a free antivirus program check out avira. I like it.
http://www.free-av.com/en/trialpay_download/1/avira_antivir_personal__free_antivirus.html
-
Hi JJ, nice to know you are around, do you live on these forums ;D
I'm just in the process of saving my outlook express messages/settings, bit mad!
I'll take a look at the anti virus you suggest, cheers.
I'm nearly ready to go for the big one, nothing to lose................................... .... :-X
-
Well, hello again one and all.
I have reinstalled windows, all is fine except the graphics.
It has just taken me half an hour to scroll through this page.
My system recognises that i have a VGA card, i have downloaded the latest driver from NVidia, turned off my anti virus, installed it, but there is an exclamation mark by the card in device manager after restart. I uninstalled, reinstalled, no good. I have uninstalled the driver again and downloaded it again in case of corrupt download.
I am now going to turn off, reseat the card and try all over again.
Iwonder if my card has had it?? Reason for BSOD's??
Don't know what is wrong with the driver (or me), but i have allowed windows to install a driver for me and it is working.
The one i tried to install from nvidia was very new, 2/4/2009, not sure if there is a problem with it.
-
So, that was a waste of time, we are back to hardware.
I just had a random re boot!!
No BSOD as i hadn't unchecked the 'automatic restart' option.
I've hardly done anything so...............................back to that tedious task of testing one thing at a time.
-
i hadn't unchecked the 'automatic restart' option
Do it, then.
-
Broni, i did, but haven't had a BSOD since, typical, i almost want one now! ;D
After a few minutes of start up this morning i got a Windows error pop up,
'The system has recovered form a serious error'
File attached.
BTW, why can't i open these .dmp files??
Seems a bit strange that windows makes them but wont open them?
[attachment deleted by admin]
-
Just been on the guest account and i got another pop up error.
Raid Service U.S. English Resources
File attached
[attachment deleted by admin]
-
How old is this computer?
Do you have another video card that you can swap in there to rule that out as the culprit?
At this point my money is on the power supply being defective.
-
It's a self build so no particular age as i have changed things as needed.
Mobo about 2005
Same with most other bits PSU, one stick of RAM etc.
I have an inferior psu that came with the case, is it worth trying that then if it becomes stable get a decent one??
It does seem a bit odd all these different goings on.
Looking at the price of stuff nowadays (old git) it may pay to start again.
Just don't like defeat!!
-
A flakey PSU can cause all sorts of problems. If your motherboard is underpowered, you will get a host of errors.
-
Bugger.
I bought a decent one expecting it to last till i die.
Is 4 years a good life for a psu?
-
The second attached file contains some 3d6e_appcompat.txt, not .dmp file, so I can't read it.
The first one gives an error in NVENETFD.sys file, which is NVIDIA nForce Networking Controller Driver.
-
Cheers Broni.
Giving it a good test at the mo, downloading, burning dvd's etc, i've said it before but at the mo all is fine.
I shall give it a couple more days, see what happens.
There is plenty of room in the bin! ;D
I'm not sure but it feels like it is settling down if there is such a thing with these strange creatures.
-
Keep us posted :)
-
Keep us posted :)
Glad things are getting solved one step at a time! Good luck! :)
-
Hey all.
I'm back.
I was right no to report all is well (I wanted to give it a month, didn't quite make it!)
Nearly a month after formatting and the BSOD's are back with a vengance.
Two today within an hour of each other.
The second happened trying to do a Avast virus scan but of course it may have happened without the scan.
I have attached three files found in my mini dump folder.
Oh JOY!!
Cheers.
Just looked back over system restore, the only thing installed before the BSOD's is Medal Of Honour Allied Assault.
That has been on my computer for many years, could an update of some sort have caused the problems before my format?
Does anyone know of any issues?
Just a thought..........................
[attachment deleted by admin]
-
One error is the old one, we talked about already.
The new one (for some reason, I can open only one .dmp file), list DRIVER_IRQL_NOT_LESS_OR_EQUAL @ psched.sys (MS QoS Packet Scheduler).
It's hard to diagnose anything from one error, but from what I've read, the error may be caused by some conflict between security programs, or bad NIC card.
I'd like to check something....
Download HijackThis:
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download (http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download)
by clicking on Download HijackThis Installer
Install, and run it.
Post HijackTHis log.
Do NOT attempt to fix anything!
NOTE. If you're using Vista, right click on HijackThis, and click Run as Administrator
-
Hi Broni.
Feels like old times!! :)
Here is the hijack this log file.
I have given up trying to 'fix' things, it must be something i'm doing but what?
Thanks for trying.
Cheers.
P.S. XP Home
[attachment deleted by admin]
-
I can't see anything.
Perform the action listed below, but leave Avast startup(s), and service(es) alone. After restart, try Avast scan again.
Go Start>Run (Start Search in Vista), type in:
msconfig
Click OK (hit Enter in Vista).
Click on Startup tab.
Click Disable all
Click Services tab.
Put checkmark in Hide all Microsoft services
Click Disable all.
Click OK.
Restart computer in Normal Mode.
NOTE. If you use different firewall, than Windows firewall, turn Windows firewall on, just for this test, since your regular firewall won't be running.
If you use Windows firewall, you're fine.
-
I can't see anything either...
But my eyes are going .
-
O.k.
Done that and will now run the scan.
I take it you meant disable all then re check the Avast stuff?
Cheers
Did a thorough scan. Nothing found.
-
It's not about finding anything.
You said:
Nearly a month after formatting and the BSOD's are back with a vengance.
Two today within an hour of each other.
The second happened trying to do a Avast virus scan
Now, you ran the scan with most startups, and services disabled, and nothing happened.
It's gonna be up to you to perform investigation.
Go back to services, and enable one of disabled ones.
Restart computer, and use it for a while.
If nothing happens, enable another one, and so on, until you'll find the culprit.
If services check out OK, start enabling startups, one by one.
-
Hmmm.
I obviously did something wrong.
I have just gone to services and they are nearly all checked.
Epson V3 Service
2x Google
Windows card space
Java
Lavasoft
NBService
NMIndexing Service
NVidea Display Driver Service
Windows Media Network Sharing Service
Are all unchecked.
In Start Up only
ash Disp and ctfmon are checked.
In the general tab it is on selective sart up and Load System Services and the Start Up buttons are unchecked.
Why would the services load if the button is un checked?
Anyway, that rules out most of the services in one foul swoop.
Do I actually need any of these start up items?
-
I wanna see those startups better....
Download, and install Quick Startup: http://www.glarysoft.com/qs.html
Go File>Export, save report, and paste it into your next post.
-
There are onlt three running, did you want me to enable all and post that file?
Name: avast!
Path: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: CTFMON.EXE
Path: C:\WINDOWS\System32\CTFMON.EXE
Location: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: ctfmon.exe
Path: C:\WINDOWS\system32\ctfmon.exe
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Total 3 Items
-
Yes, please.
-
Startup List report created on 09/05/2009 by Startup Manager
Name: avast!
Path: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: SunJavaUpdateSched
Path: "C:\Program Files\Java\jre6\bin\jusched.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Sony Ericsson PC Suite
Path: "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: QuickTime Task
Path: "C:\Program Files\QuickTime\qttask.exe" -atboottime
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Omnipage
Path: C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: nwiz
Path: nwiz.exe /install
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: NVRaidService
Path: C:\WINDOWS\System32\nvraidservice.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: NvMediaCenter
Path: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: NvCplDaemon
Path: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: NeroFilterCheck
Path: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Cmaudio
Path: RunDll32 cmicnfg.cpl,CMICtrlWnd
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Adobe Reader Speed Launcher
Path: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Ad-Watch
Path: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: CTFMON.EXE
Path: C:\WINDOWS\System32\CTFMON.EXE
Location: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: ctfmon.exe
Path: C:\WINDOWS\system32\ctfmon.exe
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: swg
Path: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: EPSON Stylus Photo R265 Series
Path: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNE.EXE /FU "C:\WINDOWS\TEMP\E_S146.tmp" /EF "HKCU"
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Microsoft Office
Path: C:\PROGRA~1\MICROS~3\Office10\OSA.EXE -b -l
Location: C:\Documents and Settings\All Users\Start Menu\Programs\StartUp
Status: Enabled
------------------------------------------------------------------------------------------
Total 18 Items
-
1. Download, and run CTFMON-Remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/
The CTFMON-Remover helps you removing the annoying CTFMON.EXE from your Windows operating system. The program is easy to use and displays whether the CTFMON.EXE is installed and running or not. If it was found then you can remove it within seconds. Just in case that you need the CTFMON sometime in the future there is also an option to restore the original one.
Note:The CTFMON.EXE is among other things responsible for changing the language schema of your keyboard (e.g. for switching between the German and English keyboard layout). So in case you are using this feature you shouldn't remove or disable the CTFMON.EXE!
NOTE. CTFMON.EXE is not a threat, but unnecessary startup, which can't be disabled in any other way.
2. Download, and run QuickTime Killer: http://www.softpedia.com/get/System/Launchers-Shutdown-Tools/QuickTime-Killer.shtml
After downloading, double click on EnGraphQuickTimeKillerInstaller.msi file.
You may be asked to download, and install .NET Framework
QuickTime Killer will remove QuickTime from start up and kill any running QuickTime processes. This application runs silently at start up and closes itself as soon as it takes care of QuickTime. QuickTime itself won't be removed from your computer, and will be available whenever needed.
NOTE. QuickTime is not a threat, but unnecessary startup, which can't be disabled in any other way.
3. I recommend, you uninstall Adobe Reader, along with Adobe Reader Speed Launcher, and switch to FoxIt: http://www.filehippo.com/download_foxit/. It's much lighter, and faster, than Adobe. It does very same thing.
4. I recommend, you uninstall Ad-aware, which doesn't do much except for running an extra service on startup, even, if the program itself is not running.
Much better alternatives:
- SUPERAntiSpyware Free Edition: http://www.superantispyware.com/download.html
- Malwarebytes' Anti-Malware (trial version is fully functionable): http://www.malwarebytes.org/mbam.php
5. Using QuickStart, un-check following entries:
- SunJavaUpdateSched
- Sony Ericsson PC Suite
- Omnipage
- nwiz
- NvCplDaemon
- NeroFilterCheck
- Cmaudio
- EPSON Stylus Photo R265 Series
- Microsoft Office
-
Step 1. Done
Step 2. .NET Framework won't install, i have tried re booting but i just get 'Setup Error' in the top left of the .net framework 3.5 set up window?
Step 3. In add remove i have Adobe AIR, Adobe Flash Player 10 Active X and Adobe Reader 9.1. Uninstall all?
Step 4. Done
Step 5. Done
-
2. No big deal with QuickTime. Forget it.
3. Leave Adobe Flash Player 10 Active X alone. Two others can go.
-
O.k.
All done.
What now, wait and see??
-
Yeah, see how the computer will behave now.
-
O.k. Cheers for that.
One thing since doing all this, on start up, as i go from the welcome screen to my account i get a quick flash of a command prompt screen, too quick to see anything.
Is this a part of one of the progs i have installed?
-
Without knowing what that screen says, it's hard to say.
-
I shall have a go at disabling start ups to see which one makes it stop if any.
I have found another strange one.
I ran CTFMON-Remover, however, when I start Quick Startup there is CTFMON.exe ticked. (Located in Windows/system32)
I run CTFMON-Remover again and it says that the CTFMON has been replaced?
-
Is it still ticked in msconfig?
-
No, no mention of it?
-
You're good then.
-
Cool.
I shall give it a while, keep an eye (if possible) on what I do on here and hope!
Cheers for the help thus far.
-
You're very welcome :)
-
Hi Broni.
Had one or two things go a bit weird but still keeping an eye.
Decided to take a look at my daughters laptop, put quick start on it and found more than enough.
Could youtake a lookand tell me what to get rid of when you have a moment?
Cheers.
Startup List report created on 19/05/2009 by Startup Manager
Name: Ad-Watch
Path: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Adobe Photo Downloader
Path: "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Adobe Reader Speed Launch
Path: C:\PROGRA~1\Adobe\ACROBA~2.0\Reader\READER~1.EXE
Location: C:\Documents and Settings\All Users\Start Menu\Programs\StartUp
Status: Enabled
------------------------------------------------------------------------------------------
Name: avast!
Path: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: ctfmon.exe
Path: C:\WINDOWS\system32\ctfmon.exe
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: CTFMON.EXE
Path: C:\WINDOWS\system32\CTFMON.EXE
Location: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: CtrlVol
Path: "C:\Program Files\Launch Manager\CtrlVol.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: DAEMON Tools-1033
Path: "C:\Program Files\D-Tools\daemon.exe" -lang 1033
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: EPM-DM
Path: c:\acer\epm\epm-dm.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: ePowerManagement
Path: C:\Acer\ePM\ePM.exe boot
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: eRecoveryService
Path: C:\Program Files\Acer\eRecovery\Monitor.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: HotKeysCmds
Path: C:\WINDOWS\system32\hkcmd.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: IgfxTray
Path: C:\WINDOWS\system32\igfxtray.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: IMJPMIG8.1
Path: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: LaunchAp
Path: "C:\Program Files\Launch Manager\LaunchAp.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: LManager
Path: "C:\Program Files\Launch Manager\HotkeyApp.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: LMgrOSD
Path: "C:\Program Files\Launch Manager\OSDCtrl.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: msnmsgr
Path: "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
Location: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: MSPY2002
Path: C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: NeroFilterCheck
Path: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: PCMService
Path: "C:\Program Files\Arcade\PCMService.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: PHIME2002A
Path: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: PHIME2002ASync
Path: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: PowerKey
Path: "C:\Program Files\Launch Manager\PowerKey.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: preload
Path: C:\Windows\RUNXMLPL.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: QuickTime Task
Path: "C:\Program Files\QuickTime\qttask.exe" -atboottime
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: RealPlayer
Path: "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: SoundMan
Path: SOUNDMAN.EXE
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: swg
Path: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: SynTPEnh
Path: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: SynTPLpr
Path: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: Wbutton
Path: "C:\Program Files\Launch Manager\Wbutton.exe"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Name: \\PAININTHEASS\EPSON Stylus Photo R265 Series
Path: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNE.EXE /FU "C:\DOCUME~1\Tara\LOCALS~1\Temp\E_S9.tmp" /EF "HKCU"
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Status: Enabled
------------------------------------------------------------------------------------------
Total 33 Items
In the meantime i will try ctfmon remover and quick time killer etc.
-
Wow! Lot of startups....
These can be safely disabled:
- Adobe Photo Downloader
- CtrlVol (up to her - Acer's on screen volume control using the Fn key)
- IgfxTray
- IMJPMIG8.1 (if she uses Asian characters in MS Office it's needed)
- msnmsgr
- NeroFilterCheck
- preload
- RealPlayer
- SoundMan
- \\PAININTHEASS\EPSON Stylus Photo R265 Series
1. I recommend, she gets rid of Adobe Acrobat Reader, along with Adobe Reader Speed Launch, and she switches to FoxIt: http://www.filehippo.com/download_foxit/
-
Cheers.
-
Sure thing :)
-
Oh no!!
I'm back.
Had bits and bobs go wrong, now it's going crazy.
I have had the sound card (on board) stop working three times. (Loud 'grrrr' buzzy type noise from the speakers, BSOD, then no sound on re boot).
I have to uninstall driver, SWITCH OFF, not reboot else it doesn't work.
Uninstall my card then search for hardware changes and install the driver.
Since the last post I have got 12 dmp files from BSOD's.
Nearly three months ago I formatted my drive, took a look yesterday and it was badly fragmented, is this normal for this space of time?
I've defragged now.
Some of the BSOD's are telling me to change my graphics card, is this just a suggestion or does it know something?
Looking more and more like a hardware failure but which bit, that is the question.
I could get a new tower with a better spec for £300 but I hate chucking stuff out if it is only a card or a stick of RAM.
Cheers.
-
Navigate to: C:\Windows\Minidump folder.
If you see any .dmp files, zip all of them, and attach zipped file to your next reply.
Vista users You may need to copy .dmp files, paste them into some other folder, or desktop, and zip them there.
-
Hi Broni.
Here is some of the zip files, it wont let me attach any more.
I will try in another post.
Cheers
Just had another while trying to reply!!
[attachment deleted by admin]
-
Another 4
[attachment deleted by admin]
-
Another 4
[attachment deleted by admin]
-
Last one. ::)
[attachment deleted by admin]
-
I looked at last five errors.
Two of them list NVENETFD.sys file, which is NVIDIA nForce Networking Controller Driver
Another one at nv4_mini.sys, which is NVIDIA Miniport Driver
Two others point to undescribed hardware error, and another one is about memory_corruption.
I'd start with reinstalling nVidia chipset driver.
-
Ok, I can try that but we did that last time as some of the original BSOD's pointed to the graphics driver.
Is it possible that the card itself is the culprit?
Could it be the motherboard?
Could it be the HDD giving up?
Power supply?
Or all or any of the above?
Cheers.
-
You can't exclude anything, but you have to start somewhere, and the best way is to deal with one possible fix at a time.
-
Had bits and bobs go wrong, now it's going crazy.
I have had the sound card (on board) stop working three times.
A few others (ie Patio) have accurately identified your problem - memory or connected items that can corrupt memory. You must execute diagnostics to 'see' the problem. Your conclusions (memory tester reports no problem) are incomplete because you don't have the background that will explain how to find the defect.
Defective memory can work find in a 70 degree room. But fail intermittently with programs. To find defective memory, a test program must also execute when memory is uncomfortable to touch - a temperature that all memory calls ideal. IOW heat memory with a hair dryer on its highest settings. Or in a room that is 100 degree F - a perfectly acceptable temperature to any PC. All memory loves that temperature. Execute the test. Failure may be in the memory (not individual locations), in driver interface circuits on the motherboard, or in power to that memory. But that is where you problem (with highest certainty) exists.
Now, what else makes memory fail in strange (intermittent) ways? A completely defective power supply ‘system’ that always boots the computer – but is defective. Only way to eliminate those many component (in a power ‘system’) from the suspect list is a multimeter. It must measure voltages on any purple, orange, red, and yellow wires when system is multitasking to as many peripherals (sound card, disk drive, internet, etc) as possible. Even swapping a power supply does not identify a defect in other power ‘system’ components.
1) Measure those voltages with a 3.5 digit multimeter. 2) Execute a good memory diagnostic (which one are you using) in the only condition that finds memory failures even before those failures cause program crashes later: heated. Your every number (and numbers are always the most important fact) says a memory problem exists. That does not mean just a memory SIMM. But you have a memory problem. Stop looking anywhere else. You have a memory problem.
-
Thanks for the reply westom.
A memory problem huh? The wife is right!! ;D
Now then, I have read your reply a few times, if I have understood it right you are saying that the 'chain' from the power supply right to the sockets on the motherboard is where the problem lies.
So it COULD be the power supply, it COULD be the motherboard, it COULD be the RAM itself?
You have suggested two steps, step 1, ooohh, never done that before but hey, i'll give it a go, is there a guide somewhere on how to do it, (I have access to a multi meter unless a '3.5 digit' one is special?)
Step 2, sounds a bit easierI used MemTest as suggested by Patio in post 3, would this do the job or do I need a different one with the memory heated as you suggest, if I need to use the hairdryer method does this not overheat other components or should they all be happy cooking away?
Two of those BSOD's happened while attempting to start a demanding (for this computer) game so that points to what you are saying, very intermitent though, *censored* things, it's easier if it goes bang, at least you know what's wrong!!
Cheers.
-
Thanks for the reply westom.
A memory problem huh? The wife is right!! ...
You have suggested two steps, step 1, ooohh, never done that before but hey, i'll give it a go, ...
Step 2, sounds a bit easierI used MemTest as suggested by Patio in post 3, would this do the job or do I need a different one with the memory heated as you suggest,
Step one (multimeter) is the simplest solution. Takes maybe 30 seconds. 3.5 digits means your measurements will be in three significant digits. There is no guide since this is about as complex as removing screws to open the computer's cover. This site may provide more information on which wires to touch and measure:
http://www.hardwarebook.net/connector/power/atxpower.html
Step two: Memtst86 is a good memory tester. It will test motherboard memory where your symptoms suggest failures are occurring. It will not test video memory that can create other (different) memory problems.
Heat is a diagnostic tool. Your symptoms suggest failure is not in specific memory locations; is in the interface between all memory locations and the CPU. Heat can be used to make the intermittent failure hard. Then be used to selectively heat items to discover where that problem exists. Problem could be inside a memory SIMM or it could be the interface logic between SIMM and CPU.
Suggested is to first make the problem hard. Heat is a typical tool used to discover this. (Excessive cooling – freezer - is another but less helpful and more difficult tool to accomplish same).
-
MemTest does check video memory ....just so you know.
-
There is no guide since this is about as complex as removing screws to open the computer's cover.
That's only true if you have done it before, everything is easy to those that know how to do it.
I have never used a multi meter, wouldn't know what settings to use or at which end to touch which wires and then you need to know what the results mean.
I'm not knocking you, I appreciate the help but I wouldn't equate it to undoing a couple of screws.
I know the inside of a computer is a tad delicate and touching the wrong things at the wrong voltage or whatever may create a small plume of smoke!! :o
-
MemTest does check video memory ....just so you know.
The video memory that is 'shared' from the motherboard? Or video memory located on the video controller? When was that Memtst featured added?
-
That's only true if you have done it before, everything is easy to those that know how to do it.
I have never used a multi meter,
I was not kidding when I said the meter is sold where hammers are sold because it is that complex. In reality, it takes practice to learn how to strike a hammer on a nail. Meter is even easier.
Set meter to voltage range - ie 20 VDC. Touch leads to any two wires. Read numbers on meter. It is that complex. Which is why meters are only sold where geniuses shop - such as K-mart.
If it was difficult for a junior high school student, I would not have posted it. Why did I not detail the complex facts obtained from those meter readings? You post the numbers. I do any complex stuff.
If you fear a meter, then you fear jump starting a car or replacing a fluorescent light bulb. Both are far most dangerous. Not an exaggeration. Actually, that risk is understated. Jump starting, et al is far more dangerous than what I have posted. Meter is that much easier.
Smart is to confirm no danger exists. Dumb is to fear only due to ignorance and blind fear. Use the meter. If you need more, then read the instructions – written so that any K-mart or Radio Shack shopper can understand.
-
The video memory that is 'shared' from the motherboard? Or video memory located on the video controller? When was that Memtst featured added?
Actually it's been there for awhle so i din't have a qualitive answer for you....
But most people miss the reported #'s anyways...