Windows Explorer keeps shutting down, Help!

Discussion in 'Windows - Software discussion' started by Fireman4u, Aug 25, 2008.

  1. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Hi All,

    Well I got my system working and added several programs that I use and added something that didn't agree with my system.

    I'm using Vista Home Premium SP1 64bit. I bought the OEM so I'm not sure if I can reinstall it. Anyway I started getting the pop up message that Windows Explorer shut down and gave me the option to restart it or check on the web for solutions to the problem. I would click on restart and after a couple times it would start working. I did find a couple of viruses on my system and deleted them using NoAdware program. Now I get the message "Error Loading C:\Windows\System32\pmnkLDtu.dll, The specified module could not be found". Everything hangs when I go with a normal start and when I open the OS in safe mode. At least I was able to use the task manager to shut down. I've tried several different modes to enter the OS but nothing works.

    I have been unable to find out what pmnkLDtu.dll is, does anyone here know? Also any suggestions as to how to fix the problem, I can't even get into system restore. Last but not least, since I bought an OEM OS would I be able to reinstall it if I have to go that route?

    Thanks for reading this post and any suggestions will be more than welcomed, thanks!
     
  2. ERICKO200

    ERICKO200 Member

    Joined:
    Jun 2, 2007
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    11
    Hello.. the first thing you should do is.. download Combofix. that will get rid of many issues. sounds like you are infected pretty bad. run combo fix and see if that makes ur computer usable again.. if it does then u may continue to try to remoove the other infections, but if u run it and it doesant fix most of the issue then u can run it a few more times.. after the 3rd time if ur "main" problem isnt solved u will have to reload your operating system because even if u do successfully remoove all malware the sidefects u will keep may make ur machine unstable.
    Also yes u can reload your windows, all u need is the windows key and a copy of your current windows version.. u may also download vista ultimate and use your current windows key and it will downgrade itself to whatever version you have.

    Here is the link to where u can download combofix.
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    Here is a Tutorial on how to use it.
    http://www.bleepingcomputer.com/combofix/how-to-use-combofix

    Hope i helped.
     
  3. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Thanks Erick0200 for all the info and help!

    I will definitely try that out to see if I can fix it and if not then I will reinstall the OS.

    Have a great day!
     
  4. scorpNZ

    scorpNZ Active member

    Joined:
    Mar 23, 2005
    Messages:
    4,266
    Likes Received:
    63
    Trophy Points:
    78
    OEM disks can be reinstalled without issue tho it's limited on the amount of activations before you have to use phone support,normally those disks are tied to the computer it was first activated on it really depends on the license,anyway consider investing in ghost or acronis or a limited free version of xxclone,to create images,it will void the need to do reinstalls from scratch,if you need help with drive imaging the guys at radified are pretty good & the advice is free,they also specialise in it.

    http://radified.com/cgi-bin/yabb2/YaBB.pl

    when imaging you have a number of options clone a drive to another hard drive,or just create an image (kinda like an iso) that can be burned to DVD & use it to reinstall if anything goes awry,you also can create an incremental image whereby only the recent changes get written,the beauty of imaging is you have a fully updated working OS ready at anytime,also you won't need to reactivate once an image is made

    There is another option which may avoid having to reactivate,use the disk to do a repair or do a web search for the activated files,(xp has two of em which can be saved then so long as no major hardware changes have been made you can reinsert them into the system folder),vista should be the same,TechRepublic may have the instructions as that's where i got the xp one from.
     
  5. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Thank you ScorpNZ!

    This information will help me with my next project too, updating an older computer.

    I finally got my system back up and running, drivers installed, etc., but I am still having problems with Windows Explorer shutting down and restarting. I still can't figure out what is causing that.

    Thanks for all the help!
     
  6. jony218

    jony218 Guest

    You probably have a hardware compatibilty issue.
    Do a scandisk on all your hard drives/partitions.
    Make sure your hard drives are set to dma instead of pio.
    make sure you don't have any media cards connected to the usb ports.

    Than I would start looking at the hardware. Maybe the built-in soundcard, try a PCI soundcard if you have one.

    But something else, maybe vista 64 doesn't work well with your motherboard.
     
  7. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Thanks Jony218,

    I will do that, I just haven't had much time to check to see if they all are working as they should. It does seem to act up when I updated the software on the audio card that I have, I'm going to check their site and see if there is an issue with the 64 bit system. I did check to see if the parts would be compatible with Vista 64 bit system, they said they were but sometimes they need tweaking to get them to work right.

    I hope to have some spare time this weekend so I should be able to check the components.

    Again thanks for the help!
     
  8. scorpNZ

    scorpNZ Active member

    Joined:
    Mar 23, 2005
    Messages:
    4,266
    Likes Received:
    63
    Trophy Points:
    78
    If your getting that BSOD with all the writing on it but you can't write the info down coz it restarts,you can disable the restart function on system failure,in xp it's
    right clik My Computer,left clik properties,clik ADVANCED tab,under startup & recovery clik settings untick automatically restart,or you may have the line to select disable auto restart when at selection screen for safe boot,if not you'll need to do a search for how to disable it as the BSOD will tell you what's actually going wrong,it's just a matter of copying the small description near top kinda like
    video_card_unable_ ,then copy the numbers at the bottom to find the error meaning
     
  9. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Thanks ScorpNZ,

    That shut down info will be a great help, I didn't know you could do that.
    I was able to get the data, between one of the Explorer's tantrums, unfortunately I don't understand what it's telling me other than appcrash.

    Here's what I got:

    Problem signature
    Problem Event Name: APPCRASH
    Application Name: Explorer.EXE
    Application Version: 6.0.6001.18000
    Application Timestamp: 4791970c
    Fault Module Name: srchadmin.dll
    Fault Module Version: 6.0.6001.18000
    Fault Module Timestamp: 4791adfc
    Exception Code: c0000005
    Exception Offset: 000000000000d3a8
    OS Version: 6.0.6001.2.1.0.768.3
    Locale ID: 1033
    Additional Information 1: c524
    Additional Information 2: 392f6e64b64b3f69e3eeac444ded190a
    Additional Information 3: b6f7
    Additional Information 4: 786eb34cc1c1d50a58d5cf66774789ea

    Files that help describe the problem
    Version.txt
    AppCompat.txt
    memory.hdmp
    minidump.mdmp

    Does this make sense to you, I'm in the dark....lol!
     
  10. scorpNZ

    scorpNZ Active member

    Joined:
    Mar 23, 2005
    Messages:
    4,266
    Likes Received:
    63
    Trophy Points:
    78
    It's all gobbledeegook to me too,it's time like these you need a minty..lol..

    You may be able to do a websearch or a search thru microsoft.com to find out what the number sequence means either way it's explorer that's the issue,which part is anyones guess,if i was in your position i'd do a reformat & reinstall vista simply coz the amount of time spent attempting to fix it will be longer than doing so,it would be a good time to invest in some cloning software also as it will avoid any start from scratch reinstalls later


     
  11. cdavfrew

    cdavfrew Regular member

    Joined:
    May 19, 2008
    Messages:
    1,183
    Likes Received:
    0
    Trophy Points:
    46
    Hi Fireman4u

    I think I know why your explorer keeps crashing. It is because of this module within the process: srchadmin.dll, which is faulty and causes explorer to crash. I do have Vista, so I can help you out.

    Please download Autoruns from Sysinternals. You can find it here: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx .

    Extract the files. Run autoruns.exe, and then click on Ctrl-F Type in srchadmin, and then uncheck the box next to whatever the result is. This should solve the problem.

    I'm more interested in your original problem. It most certainly had to do with a trojan.

    Before we begin the cleanup process, it is important to do a little analysis first. We will analyze your computer with a tool called HijackThis.

    Please download the HijackThis zip file. Save it onto a convenient place in your computer, and then unzip the file.

    Rename HijackThis(.exe) to scanner(.exe).

    Next, run scanner(.exe). A window will pop up.

    • Click on the button which says Main Menu, then Do a system scan and save a logfile.
    • Please wait for the scan to be completed.
    • After the scan has completed, a text window will pop up. Please post the contents of this window here.

    This will also be located at hijackthis(.txt) in the same folder that HijackThis was originally saved.

    NOTE:: Do not fix anything using HijackThis, as this may also damage legitimate components of your computer.

    Best Regards :D
     
  12. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Your right ScorpNZ, I do need a minty...lol! I did reformat and reinstall the OS and still have an occasional problem.

    Looks like Cdavfrew knows what all that means!

    Thanks for the info on HijackThis. I will definitely run it to make sure I don't have any more Trojans. Can you tell me what "srchadmin.dll" is? Does it come with Trojans or is it part of a program I might have installed? I will run the program tomorrow when I have more time and will let you know what happens.

    Again thank you both for your help! I did write to Microsoft and got a response telling to reboot in safe mode but I haven't heard anything since.
     
  13. scorpNZ

    scorpNZ Active member

    Joined:
    Mar 23, 2005
    Messages:
    4,266
    Likes Received:
    63
    Trophy Points:
    78
    srchadmin.dll is to do with desktop search or the indexing service,they abbreviate so instead of being search administrator they shorten it too srchadmin,if you don't use desktop search i'm pretty sure you can remove it from add/remove you may need to select the updates box to see it as it could be a KB update & not an actual normal install,i did an update at windows update & downloaded it not realising it was a search tool & had to dump it from add/remove.

    You should be clean now,that said it would'nt hurt to do a scan just in case

    http://www.processlibrary.com/directory/

    pmnkLDtu.dll Whoa! not even processlibrary.com have it listed,but the site sent a thing to the people there to look into it,i can't find it on any other site either,that can only mean one thing it should'nt have been there
     
    Last edited: Sep 6, 2008
  14. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Thanks ScorpNZ for the info. I know I couldn't find that one .dll anywhere I looked.

    Here's the info from the HijackThis scan:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:26:51 PM, on 8/11/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\ASUS\WiFi-AP @n\WiFi-AP@n.exe
    C:\Program Files (x86)\ASUS\AASP\1.00.40\aaCenter.exe
    C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
    C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
    C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe
    C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
    C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe
    C:\Program Files\ASUS\AI Remote\AiRc.exe
    C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMTray.exe
    C:\Program Files (x86)\ATI\Catalyst Media Center\CMCService.exe
    C:\Program Files (x86)\CyberLink\Shared Files\brs.exe
    C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe
    C:\Program Files (x86)\lg_fwupdate\fwupdate.exe
    C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
    C:\Windows\SysWOW64\Ctxfihlp.exe
    C:\Program Files\ASUS\AI Remote\AiRemote.exe
    C:\Windows\SysWOW64\CTXFISPI.EXE
    C:\Program Files (x86)\Seagate\SystemTray\StxMenuMgr.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Users\Ed\Desktop\HiJackThis\Scanner.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    F2 - REG:system.ini: UserInit=userinit.exe
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [SoundTray] "C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe"
    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
    O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"
    O4 - HKLM\..\Run: [CPU Power Monitor] "C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"
    O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe
    O4 - HKLM\..\Run: [Ai Remote Help] "C:\Program Files\ASUS\AI Remote\AiRc.exe" -r
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SBAMTray] C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMTray.exe
    O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
    O4 - HKLM\..\Run: [CMCService] "C:\Program Files (x86)\ATI\Catalyst Media Center\CMCService.exe"
    O4 - HKLM\..\Run: [BDRegion] "C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe"
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [InstantBurn] C:\PROGRA~2\CYBERL~1\INSTAN~1\Win2K\IBurn.exe
    O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files (x86)\lg_fwupdate\fwupdate.exe" blrun
    O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
    O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
    O4 - HKLM\..\Run: [StxTrayMenu] C:\Program Files (x86)\Seagate\SystemTray\FreeAgentLauncher.exe C:\Program Files (x86)\Seagate\SystemTray\StxMenuMgr.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O8 - Extra context menu item: Customize Menu - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
    O8 - Extra context menu item: Fill Forms - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    O8 - Extra context menu item: Save Forms - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    O13 - Gopher Prefix:
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15105/CTPID.cab
    O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
    O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files (x86)\ATI\Catalyst Media Center\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files (x86)\ATI\Catalyst Media Center\Kernel\TV\CLSched.exe
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\Comodo\Firewall\cmdagent.exe
    O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
    O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
    O23 - Service: Creative Dolby Digital Live Pack Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\DDLLicensing.exe
    O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files (x86)\ATI\Catalyst Media Center\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
    O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
    O23 - Service: Sunbelt VIPRE Antivirus Service (SBAMSvc) - Sunbelt Software - C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMSvc.exe
    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 11094 bytes


    Looks like some files are missing. I have been upgrading the drivers for the hardware I installed and it seems to have help, could be my imagination thinking it helped.....lol.

    I hope you all can make heads or tails out of the info from the scan.
     
  15. scorpNZ

    scorpNZ Active member

    Joined:
    Mar 23, 2005
    Messages:
    4,266
    Likes Received:
    63
    Trophy Points:
    78
    If cd's still around he can go thru it,as far as i can make out it looks good.If you don't use adobe pdf reader there's a free for personal use lite alterntive that does'nt take up anywhere as much space & is real fast loading it's foxit reader
    http://www.foxitsoftware.com/ ,also you may find IE7 pro handy if you still use IE7 like i do http://www.ie7pro.com/
     
  16. cdavfrew

    cdavfrew Regular member

    Joined:
    May 19, 2008
    Messages:
    1,183
    Likes Received:
    0
    Trophy Points:
    46
    Hey Fireman

    woah... you have many missing files. Right now, I need you to confirm if these files are there or not:

    C:\Windows\system32\lsass.exe
    C:\Windows\System32\spoolsv.exe

    If not, please follow the instructions on this page:
    http://forums.majorgeeks.com/showthread.php?t=147786

    Best Regards :D

     
  17. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Hi ScorpNZ and Cdavfrew,

    Thanks for looking over the data. Scorp if your talking about the OS cd I still have it and all the other ones that came with the hardware I installed, I also have Adobe pdf.

    I checked for the two files you listed and found the spoolsv.exe but did not find the Isass.exe, should I run the scan?

    I was also wondering since I just built the computer and have been updating the software for the various hardware, but have not completed all the updates, if that would cause some of the files to be missing, just a thought.

    Have a great day and again thanks for all the help!
     
  18. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Another thing I have noticed, and may be causing the problem, is the card reader. I installed an internal card reader and I've tried twice to to see if it works by putting an SD card in it to be read. Each time it didn't read the card and then the windows explorer started the shut down start up cycle. It connects to a USB on the motherboard and I've moved it to another USB connection with the same results. I will be looking into this today and see if can be causing the problem.
     
  19. scorpNZ

    scorpNZ Active member

    Joined:
    Mar 23, 2005
    Messages:
    4,266
    Likes Received:
    63
    Trophy Points:
    78
    There was a post 2 weeks ago about a fella who installed vista on to a machine,it was a reasonably late model hp that had internal card reader,it would'nt read cards ,there were also issues with drivers for his USB's ports as well
     
  20. Fireman4u

    Fireman4u Member

    Joined:
    Jan 13, 2008
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Thanks ScorpNZ, I'll try to find it later. I'm still having problems even without trying to use the reader.

    I did run the SFC Scannow but I don't think it changed anything, I had left the room while it was scanning and when I came back the scan window was closed, I assume it was supposed to do that.
     

Share This Page