Computer Crashes

[bizzoveg111]

Hi again

My computer keeps crashing with the error message:
C:\WINDOWS\Minidump\Mini020606-04.dmp
C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\WER2.tmp.dir00\sysdata.xml

This morning it kept doing it when I was converting a file. Then it did it again when i was copying a dvd,

Any ideas?

There are no viruses etc detected by ewido, adaware & spybot.

Logfile of HijackThis v1.99.1
Scan saved at 10:22:43 AM, on 8/02/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HijackThisSpywareRemover\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com.au/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as...rl/LSSupCtl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/zenpuzzlegarden/mi...pGameLoader.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1132951782953
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1133261628729
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab
O16 - DPF: {E36C5562-C4E0-4220-BCB2-1C671E3A5916} (Seagate SeaTools English Online) - http://www.seagate.com/support/disc/asp/to.../npseatools.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Thanks very much.

Liz

[guestolo]

It definitely sounds like a problem with your application or driver
Open up eventviewer
Go to start>>run>>type in
eventvwr.msc
Highlight application on the left then click on Action
Clear All Events
You don't have to save the info

The next time you crash with the error message
Go back to event viewer
Double click on Applications on the right
Look for an error
Double click to open the Error
What info do you find under Description?

This error can also be associated with wrong or outdated graphics drivers
but I wouldn't look that route yet
When you say converting a file or copying DVD
What programs are you using for this?

[bizzoveg111]

Hi there

I have done as requested.

Shall wait for the next crash and get back to you.

Thanks

I am using DVD XCopy platinum and Clone dvd. for copies

Thanks again

[bizzoveg111]

Hi there.

I have had 2 incidents......a window crashed and then something happened while WINDOWS SERVICE PACK 2 was installing......

Here are the descriptions from the event viewer...............

10th Feb 2006
Whilst playing Media player and getting emails and browsing, explorer crashed with this error message in ‘event viewer’………..

Faulting application iexplore.exe, version 6.0.2800.1106, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Then later that day……


While WINDOWS SERVICE PACK 2 was installing…………there must have been a crash as a message appeared saying that the installation was interrupted and it was restoring old configuration.

The following is the event viewer descriptions; (5 errors)
1. Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040206.

2. The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.  Please contact Microsoft Product Support Services to report this error.

WARNING: Windows saved user MRS-6PZ4A2K71NU\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

3. Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040206.

4. The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.  Please contact Microsoft Product Support Services to report this error.
 
5. Faulting application iexplore.exe, version 6.0.2800.1106, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

I have uninstalled SERVICE PACK 2 as this was recommended when windows restarted.

Please help...what is happening?

Thanks

Liz

[guestolo]

Ok, let's get some info
What was the last program you remember installing before these errors started
Was it CloneCD?

Also, do you have the latest video drivers from Nvidia for you card?

I am going to venture a guess, this may be your best route
Uninstall CloneCD and DVD XCopy
There is a good possibility they are interfering
Reboot the computer

Back in Windows
Go to Start>>run>>type in
sfc /scannow

Let system file checker completely run
Have your XP CD available just in case you need it

Afterwards, go back and try reinstall Service pack 2 for Windows
If all goes well, then this is the time you can go back and reinstall CloneCD and DVDXcopy
Make sure they are the latest versions

[bizzoveg111]

Hi again

I have uninstalled Clone CD and DVD X Copy as requested.

Rebooted windows and typed sfc / scannow but no scanning takes place.

A small black screen flashes for a second and thats it!

What now?

Thanks

Liz

[guestolo]

I think you typed it in wrong, no space after the /
copy and paste the following into the START>>run field
close down all other windows and then click OK
Don't open IE until it's done pleae

sfc /scannow

[bizzoveg111]

Hi again

Yep. That was the problem...I copied it and it worked.
However, when i put my windows CD in, there were 4 options to choose from. eg' Install Windows etc

I chose "Check system....." as i thought this is what we were doing this for.

I successfully installed windows service pack 2 previously....forgot to mention this sorry.

Anyway, when the sfc was checking my system this message appeared;
Setup cannot continue because the version of Windows on your computer is newer than the version on the CD.

Warning: If you decide to delete the newer version of Windows that is currently installed on your computer, the files and settings cannot be recovered.

So, i cancelled until i got your advice.

Thanks so much

Liz

Oh its me again

I replied too hasty before. That was just the auto windows cd loading. The scannow thing is still going.

Will get back to you shortly........

Thanks

[bizzoveg111]

Problems with this as the scanning kept wanting me to insert the correct CD. It is the original version so i dont know what to do.

Please advise...

Thanks Liz

[guestolo]

Insert the CD supplied with your computer
After you do the above
Make sure to visit windows updates and install any high priority updates
Excluding SP2 for now

[bizzoveg111]

I have previously installed sp2 successfully.

i is the windows cd that came with computer, however the computer was reformatted by a computer shop who STATED they used my cd to install windows.

What now?

Thanks

[guestolo]

Not a problem, it's telling you that you can't fix the problems with sfc /scannow because the version of windows is newer than the one on the cd
I can sit here and show you links how to fix this or slipstream SP1 on to a burnt CD
But why don't you just try to repair your version of Windows
Keep your copy of Windows close by

Read this link and do a Repair of your system
http://www.michaelstevenstech.com/XPrepairinstall.htm
REPAIR not RECOVERY
Afterwards, download and install ALL High priority updates and SP 1a
Don't install SP2 yet, but get all others

[bizzoveg111]

Hi there

You keep mentioning not to install SP2 yet but I already have. I did it whilst waiting for reply.

I had to uninstall it and then reinstall. About a week ago/

But computer still crashes...twice today.

Do I still go to the repair link/ Thanks

Liz

[bizzoveg111]

Hi there.

I was a bit impatient and decided to to the repair thing.

All went well.

No crashes or anything.....so far.

Shall check in each day and let you know how all is going.

Thanks

Liz

[guestolo]

Sorry for the delay

Make sure you head over to Windows updates
You will have to reinstall all Service packs and other high priority updates
after doing the repair
It may be best to install SP1 first and all High priorities then move on to SP2
To be safe, I wouldn't have CloneCd installed before updating to SP2

Can you post a fresh hijackthis log after you have done so please

[bizzoveg111]

Hi.

All updates done!

Here is a hijack log;
Logfile of HijackThis v1.99.1
Scan saved at 9:15:41 AM, on 21/02/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SpywareBlaster\spywareblaster.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThisSpywareRemover\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com.au/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as...rl/LSSupCtl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/zenpuzzlegarden/mi...pGameLoader.dll
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1132951782953
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1133261628729
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab
O16 - DPF: {E36C5562-C4E0-4220-BCB2-1C671E3A5916} (Seagate SeaTools English Online) - http://www.seagate.com/support/disc/asp/to.../npseatools.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Page kept closing though....as in the other threadf with ebay.

I will check what you have replied to there

Thanks

Liz

[bizzoveg111]

Ok

Please raed my above message as well.

After all this, the computer has not crashed again.

However, my internet explorer does.
Not only in ebay but twice just now trying to reply on this thread......

What can it be?

Here are the last 2 error messages;
C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\a615_appcompat.txt
C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\c0e0_appcompat.txt

Same sort of message....different numbers.
I restart the machine and it seems ok...for a while.

Please help!

Thanks

Liz

[birdman]

''(Here are the last 2 error messages;
C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\a615_appcompat.txt
C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\c0e0_appcompat.txt)''

this is what google found :Try searching for this file C:\Program Files\DivX\Dr.DivX\EncodeDivxExt.dll.  and delete it
█████████████████████

[bizzoveg111]

Oh my goodness!

Explorer crashed 5 times just trying to see your response.

I do not have that file to delete it.

I looked manually....I used 'search' and cannot find it anywhere.

I have 'view hidden files' selected.

Oh What is wrong?

Please help...........

Liz

[birdman]

Appcompat.txt contains information about the problem. Open it up in notepad.
Copy:     notepad C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\a615_appcompat.txt
Copy:     notepad C:\DOCUME~1\MRSSKE~1\LOCALS~1\Temp\c0e0_appcompat.txt                                                                                                            


Go to START,RUN then paste (one at a time)                                                                                                        

It should show you whats causing the error's.Then post results