Windows XP Sp3 Stop Errors

F

fusa

I am getting stop errors in Windows Xp Sp3. This started happening in
September, but is getting more common now. Most of the errors have been 7e,
but some 8e errors. I originally tried doing a rollback to a week before the
stop errors started, but that didn't help. I then tried reinstalling XP but
the same problems exist. I ran memtest86 for about 9 hours with 9 passes and
0 errors. The smart diagnostics on all hard drives report the drives as being
good. Chkdsk /f also did not return any errors.
The stop errors that the most recent install of XP has generated are located
at http://rapidshare.com/files/157140856/mini.rar.html
 
N

nass

fusa said:
I am getting stop errors in Windows Xp Sp3. This started happening in
September, but is getting more common now. Most of the errors have been 7e,
but some 8e errors. I originally tried doing a rollback to a week before the
stop errors started, but that didn't help. I then tried reinstalling XP but
the same problems exist. I ran memtest86 for about 9 hours with 9 passes and
0 errors. The smart diagnostics on all hard drives report the drives as being
good. Chkdsk /f also did not return any errors.
The stop errors that the most recent install of XP has generated are located

Can you let us know the error message in PLAIN Text!!!
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

HTH,
nass
 
F

fusa

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 3095
Date: 10/24/2008
Time: 8:52:06 AM
User: N/A
Computer: SERVER
Description:
This computer is configured as a member of a workgroup, not as a member of a
domain. The Netlogon service does not need to run in this configuration.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: SideBySide
Event Category: None
Event ID: 32
Date: 10/24/2008
Time: 8:52:38 AM
User: N/A
Computer: SERVER
Description:
Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was
The referenced assembly is not installed on your system.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: SideBySide
Event Category: None
Event ID: 59
Date: 10/24/2008
Time: 8:52:38 AM
User: N/A
Computer: SERVER
Description:
Generate Activation Context failed for C:\WINDOWS\system32\ssleay32.dll.
Reference error message: The operation completed successfully.
..

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: SideBySide
Event Category: None
Event ID: 59
Date: 10/24/2008
Time: 8:52:38 AM
User: N/A
Computer: SERVER
Description:
Generate Activation Context failed for C:\WINDOWS\system32\libeay32.dll.
Reference error message: The operation completed successfully.
..

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: SideBySide
Event Category: None
Event ID: 59
Date: 10/24/2008
Time: 8:52:38 AM
User: N/A
Computer: SERVER
Description:
Generate Activation Context failed for C:\WINDOWS\system32\libssl32.dll.
Reference error message: The operation completed successfully.
..

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 10/24/2008
Time: 8:51:55 AM
User: N/A
Computer: SERVER
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x1000007e
(0xc0000005, 0x804e7d64, 0xf78a2744, 0xf78a2440). A dump was saved in:
C:\WINDOWS\Minidump\Mini102408-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


nass said:
fusa said:
I am getting stop errors in Windows Xp Sp3. This started happening in
September, but is getting more common now. Most of the errors have been 7e,
but some 8e errors. I originally tried doing a rollback to a week before the
stop errors started, but that didn't help. I then tried reinstalling XP but
the same problems exist. I ran memtest86 for about 9 hours with 9 passes and
0 errors. The smart diagnostics on all hard drives report the drives as being
good. Chkdsk /f also did not return any errors.
The stop errors that the most recent install of XP has generated are located

Can you let us know the error message in PLAIN Text!!!
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

HTH,
nass
 
F

fusa

oops, think this is what you're looking for:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 10/24/2008
Time: 8:54:53 AM
User: N/A
Computer: SERVER
Description:
Error code 1000007e, parameter1 c0000005, parameter2 804e7d64, parameter3
f78a2744, parameter4 f78a2440.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 37 1000007
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 38 30 34 65 37 64 36 34 804e7d64
0040: 2c 20 66 37 38 61 32 37 , f78a27
0048: 34 34 2c 20 66 37 38 61 44, f78a
0050: 32 34 34 30 2440
 
N

nass

Hi Fusa,
Your machine severly infected, try to run a scan by going through these
cleaning steps and then you can contact me with your Hijackthis or send it to
one of many forums on the internet to help you further.
Read this link first but don't try to apply the instructions!
C:\WINDOWS\system32\ssleay32.dll
C:\WINDOWS\system32\libeay32.dll
C:\WINDOWS\system32\libssl32.dll
http://forums.spybot.info/showthread.php?t=21787

Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If you wish to send me your Hijackthis log I will be happy to help you
further or send to one of many forums on the internet!
Download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk ( _ is underscore)

Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/builds/downloading-slim
Run Disk Clean Up on your Drive.
HTH,
nass
---
http://www.nasstec.co.uk

fusa said:
oops, think this is what you're looking for:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 10/24/2008
Time: 8:54:53 AM
User: N/A
Computer: SERVER
Description:
Error code 1000007e, parameter1 c0000005, parameter2 804e7d64, parameter3
f78a2744, parameter4 f78a2440.

For the error above read here:
The above refer to a dirty bit on your RAM or one of your RAM sticks, try to
test your RAM as instructed below and then run disk clean up on your system.
Double click "My Computer" Icon on your desktop, then right click your
Primary partition or main Drive which (C:\), select properties.
On the system properties click on Tools Tab and click Check Disk button.
A pop-up window will come up check both check boxes and click [OK] then Yes
to confirm that you want to run Check Disk on Start Up and Reboot your
machine.

This always refer to a bad Hardware/driver installed.
Try the Last good known Configuration to log into the system, then open
Device manager and see if there is any malfunctioining Devices or conflict in
IRQ, also look in the Event Viewer for error message and post them back in
your next post.
Read this articles and see, but how did you get rid of the Contra?.

Open a run command and type in these commands to see if there is a conflict
in /among drivers :
pstat.exe click [OK]
dmpchck.exe click [OK]
What you get from running this commands?.

You receive a "serious error" or a "STOP: 0x0000007E" error message in
Windows XP
http://support.microsoft.com/?kbid=321637&sd=RMVP
"STOP 0x0000007E" error message after you upgrade to Windows XP
http://support.microsoft.com/kb/330182
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&sd=tech
You receive a "serious error" or a "STOP: 0x0000007E" error message in
Windows XP
http://support.microsoft.com/kb/321637
Error message in Windows XP Service Pack 2: "Stop 0x7E"
http://support.microsoft.com/kb/900485
Stop: 0x7E Error occurs in Kbdclass.sys when you try to shut down Windows XP
http://support.microsoft.com/kb/313050
Easy CD Creator 5.0 does not function in Windows XP
http://support.microsoft.com/kb/310628
How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

Try to use the Verifier.exe command to see which Drivers not Verified on
your system:
How to Use Driver Verifier to Troubleshoot Windows Drivers
http://support.microsoft.com/kb/244617/en-us

You may have a bad RAM try to test your RAM by running Memtest by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://www.memtest86.com/
You may need to reposition/reset the RAM sticks in their slots.
After that you could do a repair install, and then test.
http://www.michaelstevenstech.com/XPrepairinstall.htm

0x00000019
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1

"STOP 0x00000074 BAD_SYSTEM_CONFIG_INFO" Error Message When You Start Your
Computer
http://support.microsoft.com/kb/326679

You receive a "STOP: 0x00000073 CONFIG_LIST_FAILED" error message in Windows
2000 or in Windows XP

http://support.microsoft.com/kb/291808

Install of XP Pro fails with Stop 0x0000007E on Dimension 9100
http://forums.us.dell.com/supportforums/board/message?board.id=sw_winxp&message.id=164525&page=2

"STOP 0x0000007E" error message after you upgrade to Windows XP
http://support.microsoft.com/kb/330182

Stop 0x00000050 in Win32k.sys When Changing Keyboard Layout
http://support.microsoft.com/kb/252371
Damaged Font Causes STOP 0x00000050 Error Message in the Win32k.sys File in
Windows 2000
http://support.microsoft.com/kb/319965
The HaxDoor virus may cause a "STOP 0x00000050" or "STOP 0x0000008e" error
message
http://support.microsoft.com/kb/903251
Error Message: STOP 0x00000050 (0xffffffe0, 0x00000001, 0xf30da010,
0x00000000) PAGE_FAULT_IN_NONPAGED_AREA
http://support.microsoft.com/kb/817197
Easy CD Creator 5.0 does not function in Windows XP
http://support.microsoft.com/kb/310628
Use the command chkdsk /r with recovery console:
http://support.microsoft.com/kb/314058
http://support.microsoft.com/kb/326215
DMA Mode for ATA/ATAPI Devices in Windows XP
http://www.microsoft.com/whdc/device/storage/IDE-DMA.mspx
How to enable 48-bit Logical Block Addressing support for ATAPI disk drives
in Windows XP
http://support.microsoft.com/kb/303013
Example on the error code:
http://support.microsoft.com/kb/174232
 
P

PA Bear [MS MVP]

<QP>
0x0000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
A system thread generated an exception which the error handler did not
catch. There are numerous individual causes for this problem, including
hardware incompatibility, a faulty device driver or system service, or some
software issues. Check Event Viewer (EventVwr.msc) for additional
information.
</QP>
Source: http://aumha.org/a/stop.htm
 
F

fusa

I run NOD32 constantly since before the stop errors started, and after the
reinstall of XP. I also run Malware Anti Malware, Spybot Saearch And
Destroy, Rogue Remover SpywareBlaster, and Super AntiWpyware. None of those
have detected an infection. As I started in the posts above I ran memtest86
for 9 hours, with 0 errors. Also as I have already stated the smart
diagnostics on hard drives are all good, and chkdsk/f returns 0 errors.
Since I have reinstalled windows Xp there is no last good configuration since
the stop errors have occurred since the reinstall of Xp.

nass said:
Hi Fusa,
Your machine severly infected, try to run a scan by going through these
cleaning steps and then you can contact me with your Hijackthis or send it to
one of many forums on the internet to help you further.
Read this link first but don't try to apply the instructions!
C:\WINDOWS\system32\ssleay32.dll
C:\WINDOWS\system32\libeay32.dll
C:\WINDOWS\system32\libssl32.dll
http://forums.spybot.info/showthread.php?t=21787

Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If you wish to send me your Hijackthis log I will be happy to help you
further or send to one of many forums on the internet!
Download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk ( _ is underscore)

Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/builds/downloading-slim
Run Disk Clean Up on your Drive.
HTH,
nass
---
http://www.nasstec.co.uk

fusa said:
oops, think this is what you're looking for:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 10/24/2008
Time: 8:54:53 AM
User: N/A
Computer: SERVER
Description:
Error code 1000007e, parameter1 c0000005, parameter2 804e7d64, parameter3
f78a2744, parameter4 f78a2440.

For the error above read here:
The above refer to a dirty bit on your RAM or one of your RAM sticks, try to
test your RAM as instructed below and then run disk clean up on your system.
Double click "My Computer" Icon on your desktop, then right click your
Primary partition or main Drive which (C:\), select properties.
On the system properties click on Tools Tab and click Check Disk button.
A pop-up window will come up check both check boxes and click [OK] then Yes
to confirm that you want to run Check Disk on Start Up and Reboot your
machine.

This always refer to a bad Hardware/driver installed.
Try the Last good known Configuration to log into the system, then open
Device manager and see if there is any malfunctioining Devices or conflict in
IRQ, also look in the Event Viewer for error message and post them back in
your next post.
Read this articles and see, but how did you get rid of the Contra?.

Open a run command and type in these commands to see if there is a conflict
in /among drivers :
pstat.exe click [OK]
dmpchck.exe click [OK]
What you get from running this commands?.

You receive a "serious error" or a "STOP: 0x0000007E" error message in
Windows XP
http://support.microsoft.com/?kbid=321637&sd=RMVP
"STOP 0x0000007E" error message after you upgrade to Windows XP
http://support.microsoft.com/kb/330182
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&sd=tech
You receive a "serious error" or a "STOP: 0x0000007E" error message in
Windows XP
http://support.microsoft.com/kb/321637
Error message in Windows XP Service Pack 2: "Stop 0x7E"
http://support.microsoft.com/kb/900485
Stop: 0x7E Error occurs in Kbdclass.sys when you try to shut down Windows XP
http://support.microsoft.com/kb/313050
Easy CD Creator 5.0 does not function in Windows XP
http://support.microsoft.com/kb/310628
How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

Try to use the Verifier.exe command to see which Drivers not Verified on
your system:
How to Use Driver Verifier to Troubleshoot Windows Drivers
http://support.microsoft.com/kb/244617/en-us

You may have a bad RAM try to test your RAM by running Memtest by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://www.memtest86.com/
You may need to reposition/reset the RAM sticks in their slots.
After that you could do a repair install, and then test.
http://www.michaelstevenstech.com/XPrepairinstall.htm

0x00000019
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1

"STOP 0x00000074 BAD_SYSTEM_CONFIG_INFO" Error Message When You Start Your
Computer
http://support.microsoft.com/kb/326679

You receive a "STOP: 0x00000073 CONFIG_LIST_FAILED" error message in Windows
2000 or in Windows XP

http://support.microsoft.com/kb/291808

Install of XP Pro fails with Stop 0x0000007E on Dimension 9100
http://forums.us.dell.com/supportforums/board/message?board.id=sw_winxp&message.id=164525&page=2

"STOP 0x0000007E" error message after you upgrade to Windows XP
http://support.microsoft.com/kb/330182

Stop 0x00000050 in Win32k.sys When Changing Keyboard Layout
http://support.microsoft.com/kb/252371
Damaged Font Causes STOP 0x00000050 Error Message in the Win32k.sys File in
Windows 2000
http://support.microsoft.com/kb/319965
The HaxDoor virus may cause a "STOP 0x00000050" or "STOP 0x0000008e" error
message
http://support.microsoft.com/kb/903251
Error Message: STOP 0x00000050 (0xffffffe0, 0x00000001, 0xf30da010,
0x00000000) PAGE_FAULT_IN_NONPAGED_AREA
http://support.microsoft.com/kb/817197
Easy CD Creator 5.0 does not function in Windows XP
http://support.microsoft.com/kb/310628
Use the command chkdsk /r with recovery console:
http://support.microsoft.com/kb/314058
http://support.microsoft.com/kb/326215
DMA Mode for ATA/ATAPI Devices in Windows XP
http://www.microsoft.com/whdc/device/storage/IDE-DMA.mspx
How to enable 48-bit Logical Block Addressing support for ATAPI disk drives
in Windows XP
http://support.microsoft.com/kb/303013
Example on the error code:
http://support.microsoft.com/kb/174232
 
F

fusa

Here is the KiJackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:10:33 PM, on 10/24/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Synergy\synergyc.exe
C:\Program Files\Unreal3.2\wircd.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\COMODO\Firewall\cfp.exe
C:\WINDOWS\system32\taskswitch.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Vidalia\vidalia.exe
C:\Program Files\full phat\Snarl\snarl.exe
C:\Program Files\HostsMan\hm.exe
C:\Program Files\HostsMan\hostssrv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe
C:\Program Files\Privoxy\privoxy.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Tor\tor.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = http=127.0.0.1:8118;https=127.0.0.1:8118
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program
Files\IEPro\iepro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -
C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F}
- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program
Files\COMODO\Firewall\cfp.exe" -h
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32
Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Vidalia] "C:\Program Files\Vidalia\vidalia.exe"
O4 - HKCU\..\Run: [Snarl] "C:\Program Files\full phat\Snarl\snarl.exe"
O4 - HKCU\..\Run: [HostsMan] "C:\Program Files\HostsMan\hm.exe" -s
O4 - HKCU\..\Run: [HostsServer] "C:\Program Files\HostsMan\hostssrv.exe"
--start
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
Destroy\TeaTimer.exe
O4 - Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program
Files\Yahoo!\Widgets\YahooWidgets.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program
Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program Files\Apache
Software Foundation\Apache2.2\bin\ApacheMonitor.exe
O4 - Global Startup: Privoxy.lnk = C:\Program Files\Privoxy\privoxy.exe
O9 - Extra button: IE7Pro Grab and Drag -
{000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag -
{000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: IE7Pro Preferences -
{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences -
{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) -
C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1223776908750
O17 -
HKLM\System\CCS\Services\Tcpip\..\{C8CC711E-9882-4A39-ABE2-2D07CCA21C19}:
NameServer = 208.67.222.222,208.67.220.220
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Apache2.2 - Apache Software Foundation - C:\Program
Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner
- C:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program
Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32
Antivirus\ekrn.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) -
Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Synergy Client - Unknown owner - C:\Program
Files\Synergy\synergyc.exe
O23 - Service: UnrealIRCd - none - C:\Program Files\Unreal3.2\wircd.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
 
F

fusa

I have already checked that site, unfortunately none of the stop errors
listed seemed to specifically address the issues that I am having.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top