Event viewer - doesn't

  • Thread starter Thread starter PAul MAskens
  • Start date Start date
P

PAul MAskens

I'm trying to diagnose a problem with Adobe Photoshop Elements, which
installs but doesn't run.
I get an errro "the interface is unknown" and PSE4 wont run.

What worried me now is that hte event viewer won't run either.

I run Sophos antivirus, with Intercheck running continually, and regularly
sweep my PC with SpyBot S&D and Ad-Aware SE. It appears that some shared
file(s) are corrupted, or out of date versions.
My windows CD is XP, not SP2, I kepe up to date via Windows Update which
says I have no updates needed.

Any suggestions welcome !
 
Check that the 'Event Log' service is started.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| I'm trying to diagnose a problem with Adobe Photoshop Elements, which
| installs but doesn't run.
| I get an errro "the interface is unknown" and PSE4 wont run.
|
| What worried me now is that hte event viewer won't run either.
|
| I run Sophos antivirus, with Intercheck running continually, and regularly
| sweep my PC with SpyBot S&D and Ad-Aware SE. It appears that some shared
| file(s) are corrupted, or out of date versions.
| My windows CD is XP, not SP2, I kepe up to date via Windows Update which
| says I have no updates needed.
|
| Any suggestions welcome !
|
| ---------------------------
| Event Viewer
| ---------------------------
| Unable to complete the operation on "Security".
| The interface is unknown.
| ---------------------------
| OK
| ---------------------------
|
|
|
 
Paul

I would attack the problem by cleaning the machine of all spyware.

When dealing with a persistent virus / trojan you need to delete system
restore points and not use them as they will contain the virus and put
it back into your system. Turn off System Restore and then turn it back
on so that you only have one restore point until cleaning is
finished. Also run your anti-virus with updated definitions in safe
mode. Sometimes you need to run an anti-virus from a floppy and Trend
offer one that can be used.

Create a new folder named Sysclean (e.g., C:\Program files\Sysclean, or
just a desktop folder).
Download Sysclean.com (http://www.trendmicro.com/download/dcs.asp) and
place it in this folder.

Download the latest Controlled Pattern Release zip
(http://www.trendmicro.com/download/pattern.asp, e.g., lpt123.zip) and
extract its contents to the same folder. See the Readme text file for
additional instructions.

Delete Temporary Internet Files (IE Tools>Internet Options>General)
accepting the option to delete all offline content. Reboot and delete
contents of all TEMP folders and then your Recycle Bin.

Close all running programs including your anti-virus application, go
offline, and run Sysclean. For best results, do nothing with the machine
until the scan completes.

If the scan shows any infections in System Restore files and you're
running WinXP, create a new Restore Point
(Start>Programs>Accessories>System Tools>System Restore), then delete
all but the most recent Restore Point (Start>Programs>Accessories>System
Tools>Disk Cleanup>More options).

Work through the spyware removal programmes etc in turn in safe mode
until you get no results.

Afterwards, update your own anti-virus application and perform another
full system scan.

Install and run HijackThis:
Download HijackThis (Freeware)
http://tomcoyote.com/hjt/

Finally run HijackThis and post the HijackThis log to the HijackThis
forum here:
http://aumha.net/

You will need to register with Aumha to be able to post.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
 
Good one, I didn't think the service would be stopped.
But now I get (replace Security with Application or System)
 
Very comprehensive Gary, thanks.

I'm not sure it's a virus/trojan. I suspect that either the installer's
screwed up and it thinks some libraries are there that are missing, or I'm
in DLL Hell and the versions of some DLLs are out of sync, possibly registry
in a mess too.

However I'll work through all the steps in order, you're the expert !
I would attack the problem by cleaning the machine of all spyware.
Click to expand...
Done that, using both Ad-Aware and Spybot - both now report nothing.
All I had was tracking cookies, which are gone now.
When dealing with a persistent virus / trojan you need to delete system
restore points and not use them as they will contain the virus and put
it back into your system. Turn off System Restore and then turn it back
on so that you only have one restore point until cleaning is
finished.
Click to expand...
OK - Done that.
Also run your anti-virus with updated definitions in safe
mode. Sometimes you need to run an anti-virus from a floppy and Trend
offer one that can be used.
Click to expand...
My Sophos AV has a run from CD option.
The system is clear.
Create a new folder named Sysclean (e.g., C:\Program files\Sysclean, or
just a desktop folder).
Download Sysclean.com (http://www.trendmicro.com/download/dcs.asp) and
place it in this folder.
Click to expand...
OK done
Download the latest Controlled Pattern Release zip
(http://www.trendmicro.com/download/pattern.asp, e.g., lpt123.zip) and
extract its contents to the same folder. See the Readme text file for
additional instructions.
Click to expand...
OK done - virus pattern lpt$vpn.994 not the spyware pattern.
Delete Temporary Internet Files (IE Tools>Internet Options>General)
accepting the option to delete all offline content. Reboot and delete
contents of all TEMP folders and then your Recycle Bin.
Click to expand...
OK, IE Tools> Internet Options> Temporary Internet Files, (Delete Files...),
[] Delete all offline content
Seems to be the same thing but IE6 has a different menu/command structure.
Close all running programs including your anti-virus application, go
offline, and run Sysclean. For best results, do nothing with the machine
until the scan completes.
Click to expand...
OK, be back when that's done
 
Don't know what to make of your reply.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Good one, I didn't think the service would be stopped.
| But now I get (replace Security with Application or System)
| ---------------------------
| Event Viewer
| ---------------------------
| Unable to complete the operation on "Security".
| The interface is unknown.
| ---------------------------
| OK
| ---------------------------
|
| It's most certainly not OK :(
 
Frustration at the Windows "i've just reported a fault, OK?" dialog :)
Plus the fault is still there, something seems wrong deep in XP.

Is it possible for a worm (despite the hourly AV updates) to turn off
services?
 
Possibly. You didn't tell us; is the 'Event Log' service is started?


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Frustration at the Windows "i've just reported a fault, OK?" dialog :)
| Plus the fault is still there, something seems wrong deep in XP.
|
| Is it possible for a worm (despite the hourly AV updates) to turn off
| services?
|
|
 
I checked, and that is for Photoshop CS (the previous version)
I'm using Photoshop CS2 (version 9, not 8) and only a 32 bit CPU.

Thanks, but it's not the solution for me.
 
OK, I'm confused..... what did this really mean?

"What worried me now is that hte event viewer won't run either."

The cryptic nature of your posts are making this difficult to understand.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Sorry, yes the service is running, but with no change to the eerror
|
|
 
Gerry - thanks for the comprehensive help.

Well. it's been a while but I'm finally on the last leg.
If the scan shows any infections in System Restore files
Click to expand...
It didn't, so that's OK.
Work through the spyware removal programmes etc in turn in safe mode
until you get no results.
Click to expand...
Done, Sophos, AdAware and SpyBot found nothing in safe mode..
Afterwards, update your own anti-virus application and perform another
full system scan.
Click to expand...
Done, nothing found.
I've configured Sophos for hourly updates via their web site.
Install and run HijackThis:
Download HijackThis (Freeware)
http://tomcoyote.com/hjt/ Done.

Finally run HijackThis and post the HijackThis log to the HijackThis
forum here:
http://aumha.net/
Click to expand...
I'm on the way there.
Hope this helps.
Click to expand...
More than help, it's been excellent.

PAul
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

EVENT ID 7000 2
Console Event Viewer Warnings 2
Error in Event Viewer Security should i worry? 3
DCOM Errors When Connecting to DSL 2
W32Time error in event viewer 5
Event Viewer - Warning 2
Empty event viewer (hotfix doesn't work) 1
Event Viewer 2

Back
Top