[Niki McKnight]

System was completely hanging on every application so I rebooted and then was able to access the SystemLook program.
A HUGE concern to me is that I am still unable to get my PaintShop Pro program to load...


SystemLook:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 03:45 on 27/02/2010 by Nichole (Administrator - Elevation successful)

========== filefind ==========

Searching for "dxtmsft.dll"
C:\Windows\System32\dxtmsft.dll --a--- 347136 bytes [08:02 13/02/2008] [08:02 13/02/2008] ED0C3840B457F7313990EE40D0472CC6
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16386_none_958f8d1384b90193\dxtmsft.dll --a--- 347136 bytes [08:49 02/11/2006] [09:46 02/11/2006] 9554730D4436243EB2954EA250E2A00E
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16546_none_95bad08f84988c1d\dxtmsft.dll --a--- 347136 bytes [15:15 23/11/2007] [15:15 23/11/2007] F4F3F39FD99D88F154CE699D1E724C31
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16575_none_9599608184b1c699\dxtmsft.dll --a--- 347136 bytes [08:01 20/01/2008] [08:01 20/01/2008] 011B7F8D45C30A8F433EB84307C5B5EA
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585\dxtmsft.dll --a--- 347136 bytes [08:02 13/02/2008] [08:02 13/02/2008] ED0C3840B457F7313990EE40D0472CC6
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20663_none_962bcca49dc917c4\dxtmsft.dll --a--- 347136 bytes [15:15 23/11/2007] [15:15 23/11/2007] FF7BE3F6EDD444B02B94481178D98E38
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20697_none_960f5e089dddd0f3\dxtmsft.dll --a--- 347136 bytes [08:01 20/01/2008] [08:01 20/01/2008] 7CEFEF0DA047C752E8103225AEDB336C
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20734_none_964d3e989dafda6f\dxtmsft.dll --a--- 347136 bytes [08:02 13/02/2008] [08:02 13/02/2008] E56533D8586AD79BA36F1980E3476B3B

Searching for "dxtrans.dll"
C:\Windows\System32\dxtrans.dll --a--- 214528 bytes [08:02 13/02/2008] [08:02 13/02/2008] FFD9DF7F0F33302CDB18093637CFDAD6
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16386_none_958f8d1384b90193\dxtrans.dll --a--- 214528 bytes [08:49 02/11/2006] [09:46 02/11/2006] 5F904D7C18A5DCC268017BC83A2C866D
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16546_none_95bad08f84988c1d\dxtrans.dll --a--- 214528 bytes [15:15 23/11/2007] [15:15 23/11/2007] 73F8A869BA702CE998DDB9D9B81D1A52
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16575_none_9599608184b1c699\dxtrans.dll --a--- 214528 bytes [08:01 20/01/2008] [08:01 20/01/2008] 7347F0AF529BCAC7843D65B76A25940A
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585\dxtrans.dll --a--- 214528 bytes [08:02 13/02/2008] [08:02 13/02/2008] FFD9DF7F0F33302CDB18093637CFDAD6
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20663_none_962bcca49dc917c4\dxtrans.dll --a--- 214528 bytes [15:15 23/11/2007] [15:15 23/11/2007] C7BEEC34761D9B596AD3C4D19CD1C425
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20697_none_960f5e089dddd0f3\dxtrans.dll --a--- 214528 bytes [08:01 20/01/2008] [08:01 20/01/2008] 4709C17D0170A7AF61B08ADA06339AF6
C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20734_none_964d3e989dafda6f\dxtrans.dll --a--- 214528 bytes [08:02 13/02/2008] [08:02 13/02/2008] B8EE0F10BB78E4CCEDDBF3ED3033D13F

Searching for "msvbvm60.dll"
C:\Program Files\DAK421_P15\msvbvm60.dll --a--- 1384448 bytes [22:24 25/08/2000] [22:24 25/08/2000] FAA00AF796756CA72A967F625E8E3042
C:\Windows\System32\msvbvm60.dll --a--- 1376528 bytes [08:20 02/11/2006] [09:46 02/11/2006] D358B1A8F68E9A387DB2E2C216CFE2A5
C:\Windows\winsxs\x86_microsoft-windows-msvbvm60_31bf3856ad364e35_6.0.6000.16386_none_c04d02d754cecca9\msvbvm60.dll --a--- 1376528 bytes [08:20 02/11/2006] [09:46 02/11/2006] D358B1A8F68E9A387DB2E2C216CFE2A5

Searching for "rsaenh.dll"
C:\Windows\System32\rsaenh.dll --a--- 228968 bytes [08:45 02/11/2006] [09:47 02/11/2006] A90247CD20C2DB51C264EACC00A3039F
C:\Windows\winsxs\x86_microsoft-windows-rsaenh-dll_31bf3856ad364e35_6.0.6000.16386_none_5d904dcbb4596800\rsaenh.dll --a--- 228968 bytes [08:45 02/11/2006] [09:47 02/11/2006] A90247CD20C2DB51C264EACC00A3039F

Searching for "SLC.dll"
C:\Windows\System32\SLC.dll --a--- 223232 bytes [15:08 23/11/2007] [15:08 23/11/2007] AE43F1EEA8CB7BD6D372F5A08B00849D
C:\Windows\winsxs\x86_microsoft-windows-s..icensing-slc-client_31bf3856ad364e35_6.0.6000.16386_none_c2e898f3a9024b10\SLC.dll --a--- 221184 bytes [08:44 02/11/2006] [09:46 02/11/2006] C984BA7C8AAB74D1ED8A38A14B19D8C6
C:\Windows\winsxs\x86_microsoft-windows-s..icensing-slc-client_31bf3856ad364e35_6.0.6000.16509_none_c3421cfda8beb1db\SLC.dll --a--- 223232 bytes [15:08 23/11/2007] [15:08 23/11/2007] AE43F1EEA8CB7BD6D372F5A08B00849D
C:\Windows\winsxs\x86_microsoft-windows-s..icensing-slc-client_31bf3856ad364e35_6.0.6000.20624_none_c3b1187ec1f10ad4\SLC.dll --a--- 223232 bytes [15:08 23/11/2007] [15:08 23/11/2007] D1F0A982F40CF6E48A157C317A4794DF

-=End Of File=-

[Advertisements]

Hey Niki McKnight,

Apologies for the delay. Hope things are not getting worse than it already is.

From the error messages, it seems that something hidden is blocking the tools from running. We need to do deeper scans to see what's going on.

Please follow my instructions in the order they were given, and print out a copy of it as you may not have access to the forums during the fix.

1) Run RootRepeal

Download RootRepeal from one of the following locations and save it to your desktop:Link 1
Link 2
Link 3

• Double click to start the program
• Click on the Report tab at the bottom of the program window
• Click the button
• In the Select Scan dialog, check:
  • Drivers
  • Files
  • Processes
  • SSDT
  • Stealth Objects
  • Hidden Services
  • Shadow SSDT
• Click the OK button
• In the next dialog, select all drives showing
• Click OK to start the scan
  

  Note: The scan can take some time. DO NOT run any other programs while the scan is running

• When the scan is complete, click the button and save the report to your Desktop as RootRepeal.txt
• Go to File, then Exit to close the program

If the report is not too long, post the contents of RootRepeal.txt in your next reply. If the report is very long, it will not be complete if you post it, so please attach it to your reply instead.

To attach a file, do the following:

• Click Add Reply
• Under the reply panel is the Attachments Panel
• Browse for the attachment file you want to upload, then click the green Upload button
• Once it has uploaded, click the Manage Current Attachments drop down box
• Click on to insert the attachment into your post

2) Run MBR

Please download MBR.exe to your desktop. Double-click on it and it will produce a log on desktop (mbr.log). Please post the log in your next reply.

3) Run TrendMicro Sysclean Package

Please download and run the Trend Micro Sysclean Package on your computer.
NOTE! This scan will probably take a long time to run on your computer so be patient and don't use it while it's scanning.

• Trend Micro Damage Cleanup Engine
  

• Make sure you read this document to understand how to use the program. Trend Micro Sysclean Package README 1st
• Basically there are 3 parts that need to be downloaded from these links:

• Sysclean Package
• Virus Pattern Files
• Spyware Pattern Files

• As an example on 2008-10-17 the files to download are: sysclean.com | lpt605.zip | ssapiptn697.zip
• NOTE! These file names are examples and you must visit Trend Micro for the very latest files which may have different names.
• Create a brand new folder to copy these files to.
• As an example: C:\DCE
• Then open each of the zipped archive files and copy their contents to C:\DCE
• Copy the file sysclean.com to the new folder C:\DCE as well.
• Double-click on the file sysclean.com that is in the C:\DCE folder and follow the on-screen instructions.
  
  After doing all of this, please post back your results, including the log file sysclean.log that will be left behind by sysclean.

• This self-extracting archive is a stand-alone fix package that incorporates the Trend Micro VSAPI Malware and Spyware scanning engines as well as the Trend Micro Damage Cleanup Engine and Template.
  This tool supports the following features:
  o Terminate all detected malware/spyware instances in memory
  o Remove malware/spyware registry entries
  o Remove malware/spyware entries from system files
  o Scan for and delete all detected malware/spyware copies in all local drives

Compress and uncompress files (zip files) in Vista

Next reply (please include in your post):

RootRepeal log
MBR log
TrendMicro Sysclean logs

[Ltangelic]

Hey Niki McKnight,

Apologies for the delay. Hope things are not getting worse than it already is.

From the error messages, it seems that something hidden is blocking the tools from running. We need to do deeper scans to see what's going on.

Please follow my instructions in the order they were given, and print out a copy of it as you may not have access to the forums during the fix.

1) Run RootRepeal

Download RootRepeal from one of the following locations and save it to your desktop:Link 1
Link 2
Link 3

• Double click to start the program
• Click on the Report tab at the bottom of the program window
• Click the button
• In the Select Scan dialog, check:
  • Drivers
  • Files
  • Processes
  • SSDT
  • Stealth Objects
  • Hidden Services
  • Shadow SSDT
• Click the OK button
• In the next dialog, select all drives showing
• Click OK to start the scan
  

  Note: The scan can take some time. DO NOT run any other programs while the scan is running

• When the scan is complete, click the button and save the report to your Desktop as RootRepeal.txt
• Go to File, then Exit to close the program

If the report is not too long, post the contents of RootRepeal.txt in your next reply. If the report is very long, it will not be complete if you post it, so please attach it to your reply instead.

To attach a file, do the following:

• Click Add Reply
• Under the reply panel is the Attachments Panel
• Browse for the attachment file you want to upload, then click the green Upload button
• Once it has uploaded, click the Manage Current Attachments drop down box
• Click on to insert the attachment into your post

2) Run MBR

Please download MBR.exe to your desktop. Double-click on it and it will produce a log on desktop (mbr.log). Please post the log in your next reply.

3) Run TrendMicro Sysclean Package

Please download and run the Trend Micro Sysclean Package on your computer.
NOTE! This scan will probably take a long time to run on your computer so be patient and don't use it while it's scanning.

• Trend Micro Damage Cleanup Engine
  

• Make sure you read this document to understand how to use the program. Trend Micro Sysclean Package README 1st
• Basically there are 3 parts that need to be downloaded from these links:

• Sysclean Package
• Virus Pattern Files
• Spyware Pattern Files

• As an example on 2008-10-17 the files to download are: sysclean.com | lpt605.zip | ssapiptn697.zip
• NOTE! These file names are examples and you must visit Trend Micro for the very latest files which may have different names.
• Create a brand new folder to copy these files to.
• As an example: C:\DCE
• Then open each of the zipped archive files and copy their contents to C:\DCE
• Copy the file sysclean.com to the new folder C:\DCE as well.
• Double-click on the file sysclean.com that is in the C:\DCE folder and follow the on-screen instructions.
  
  After doing all of this, please post back your results, including the log file sysclean.log that will be left behind by sysclean.

• This self-extracting archive is a stand-alone fix package that incorporates the Trend Micro VSAPI Malware and Spyware scanning engines as well as the Trend Micro Damage Cleanup Engine and Template.
  This tool supports the following features:
  o Terminate all detected malware/spyware instances in memory
  o Remove malware/spyware registry entries
  o Remove malware/spyware entries from system files
  o Scan for and delete all detected malware/spyware copies in all local drives

Compress and uncompress files (zip files) in Vista

Next reply (please include in your post):

RootRepeal log
MBR log
TrendMicro Sysclean logs

[Niki McKnight]

LtAngelic, I'm so sorry that my system is being so difficult.

ANOTHER BUMP IN THE ROAD.... EACH TIME I ATTEMPT TO RUN THE ROOTREPEAL PROGRAM I ENCOUNTER ERROR AFTER ERROR AND THEN THE PROGRAM SHUTS DOWN... I WILL ATTACH SCREEN SHOTS OF THE ERRORS AS WELL AS THE FILES THAT WERE CREATED REGARDING THE ERRORS. (additionally, there was a dump file created, do you want me to include that as an attachment too?)

ERRORS RE: RootRepeal:

1.)08:03:32: FOPS - DeviceIoControl Error! Error Code = 0xc0000024 Extended Info (0x000000d0)
08:03:32: DeviceIoControl Error! Error Code = 0x1e7
08:03:32: FOPS - DeviceIoControl Error! Error Code = 0xc0000024 Extended Info (0x000000d0)

2.) (this is only part of the second error, as the text was lengthy, though I'll include the entire text as an attachment)

08:11:28: DeviceIoControl Error! Error Code = 0xc0000024
08:11:28: DeviceIoControl Error! Error Code = 0xc0000024
08:11:36: Warning - the number of SSDT entries from the kernel and the number on-disk are different (0 and 398).
08:11:36: DeviceIoControl Error! Error Code = 0x0
08:11:36: WARNING: The SSDT in our driver has been faked (0x00000250)!
08:11:36: DeviceIoControl Error! Error Code = 0x0
08:11:36: Could not get loaded modules!
08:11:36: DeviceIoControl Error! Error Code = 0xc0000024
08:11:36: FOPS - DeviceIoControl Error! Error Code = 0xc0000024 Extended Info (0x000000d0)
08:11:36: Could not read system registry! Please contact the author!
08:11:36: DeviceIoControl Error! Error Code = 0x0

3.)ROOTREPEAL CRASH REPORT
-------------------------
Windows Version: Windows Vista SP0
Exception Code: 0xc0000005
Exception Address: 0x00422bf2
Attempt to read from address: 0x00000004

ROOTREPEAL CRASH REPORT
-------------------------
Windows Version: Windows Vista SP0
Exception Code: 0xc0000005
Exception Address: 0x77b22086
Attempt to read from address: 0x74e5bd15













Also, these errors regarding the RootRepeal Program were in the event viewer:

Log Name: Application
Source: Application Error
Date: 2/28/2010 8:08:09 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Faith
Description:
Faulting application RootRepeal.exe, version 1.3.5.0, time stamp 0x4a842d4f, faulting module RootRepeal.exe, version 1.3.5.0, time stamp 0x4a842d4f, exception code 0xc0000005, fault offset 0x00022bf2, process id 0xbe4, application start time 0x01cab8766e05e0e7.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-02-28T13:08:09.000Z" />
<EventRecordID>44197</EventRecordID>
<Channel>Application</Channel>
<Computer>Faith</Computer>
<Security />
</System>
<EventData>
<Data>RootRepeal.exe</Data>
<Data>1.3.5.0</Data>
<Data>4a842d4f</Data>
<Data>RootRepeal.exe</Data>
<Data>1.3.5.0</Data>
<Data>4a842d4f</Data>
<Data>c0000005</Data>
<Data>00022bf2</Data>
<Data>be4</Data>
<Data>01cab8766e05e0e7</Data>
</EventData>
</Event>

~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 2/28/2010 8:58:40 AM
Event ID: 5038
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: Faith
Description:
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\rootrepeal.sys
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5038</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2010-02-28T13:58:40.373Z" />
<EventRecordID>35861</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="52" />
<Channel>Security</Channel>
<Computer>Faith</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume1\Windows\System32\drivers\rootrepeal.sys</Data>
</EventData>
</Event>

~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 2/28/2010 8:17:11 AM
Event ID: 5038
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: Faith
Description:
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\rootrepeal.sys
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5038</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2010-02-28T13:17:11.017Z" />
<EventRecordID>35853</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="52" />
<Channel>Security</Channel>
<Computer>Faith</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume1\Windows\System32\drivers\rootrepeal.sys</Data>
</EventData>
</Event>


ALSO, when I looked at the properties for the RootRepeal Program I noticed it was "blocked", could that be why it's not working?




OTHER CONCERNS & QUESTIONS

1.) I was wondering should I try running these programs perhaps in safe mode?

2.) I looked around at the system information and services and a few things stood out as questionable, which I'll post below, if you would please just make sure they are legitimate...

(I know some processes have multiple enteries, but I've never seen these have multiples???)





3.) Also do you have any idea why my Paint Shop Pro will not load, I desperately need access to this program ASAP!



Log Name: Application
Source: Application Error
Date: 2/27/2010 3:44:04 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Faith
Description:
Faulting application Paint Shop Pro.exe, version 8.0.0.0, time stamp 0x3e9f67b9, faulting module JascWorkspace.dll, version 8.0.0.0, time stamp 0x3e9f5c69, exception code 0xc0000005, fault offset 0x00023543, process id 0x9b0, application start time 0x01cab78901ad14e4.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-02-27T08:44:04.000Z" />
<EventRecordID>44128</EventRecordID>
<Channel>Application</Channel>
<Computer>Faith</Computer>
<Security />
</System>
<EventData>
<Data>Paint Shop Pro.exe</Data>
<Data>8.0.0.0</Data>
<Data>3e9f67b9</Data>
<Data>JascWorkspace.dll</Data>
<Data>8.0.0.0</Data>
<Data>3e9f5c69</Data>
<Data>c0000005</Data>
<Data>00023543</Data>
<Data>9b0</Data>
<Data>01cab78901ad14e4</Data>
</EventData>
</Event>

~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~

4.) My AOL keeps popping up the following message, should I install it? It says it's a security thing.

[Niki McKnight]

I tried to apply the SP1, but I'm still unable. Below are some of the errors regarding Windows update...









Below are various other errors the system has encountered over the past few hours...



























Below is similar to a HiJackThis Log... I'm stumped as to why there are 3 instances of java?



And what's up with the "dummy" file on this one?

Edited by Niki McKnight, 28 February 2010 - 09:41 PM.

[Ltangelic]

Hey Niki McKnight,

Apologies for the delay, looks like things have gotten worse since we've started. :S

2.) I looked around at the system information and services and a few things stood out as questionable, which I'll post below, if you would please just make sure they are legitimate...

(I know some processes have multiple enteries, but I've never seen these have multiples???)

The files in itself are legit I'm sure, but they *could* be manipulated by malicious softwares. We'll need to do a check on them to be sure.

3.) Also do you have any idea why my Paint Shop Pro will not load, I desperately need access to this program ASAP!

I believe it's because the malware on your computer is cloggin up your system. We need to remove the malware first before we can do a check on your program.

I would advise that you do not connect to the Internet at this point of time to prevent more malware from coming in.

Important! Please do a backup of all files and important documents from your computer so in case something goes wrong, you won't lose your important data.

We need to do a check on your system files first. Please do the following:

• Click Start, and then click Run.
• Copy and then paste (or type) the following command in the Open box, and then press ENTER:
• cmd
• At the command prompt, type sfc /scannow, and then press ENTER.

After that, please go into safe mode and run my previous instruction here:

http://www.geekstogo...s...t&p=1773314

[Niki McKnight]

Hi LtAngelic....

Even in safe mode I'm still getting the same error messages... and now I have some strange wording on my desktop... Where'd you usually see the words safemode, mine says "test mode" I system restored but it is still there...=~( I'm going to go try again... And unfortunately this is my only pc and I have to keep it online...=~(

[Ltangelic]

Hey Niki McKnight,

How did the system file check go? Are you able to go and boot into your Last Known Good Configuration? Please back up your data before that in case you lose anything.

[Niki McKnight]

File check was fine.... I tried the last known config, didn't help...

[Ltangelic]

Hey,

I guess we're out of options here, let's do a system repair. Please go to the link below and follow the instructions there (Please backup your important data beforehand):

http://www.bleepingc...utorial148.html

When you're done with the system repair, please run OTL and post me a new log. Thanks.

Edited by Ltangelic, 03 March 2010 - 06:36 AM.

[Niki McKnight]

My computer didn't come with any dvd or cd to boot from....=~( I'm running Vista Home Premium on this computer though I do have Vista Home Edition SP1 disk that I got for one of my other computers.

[Ltangelic]

Hey,

Unfortunately, we'll need a disk to do the repair. Are you able to borrow a Vista Home Premium disk? If possible, please contact the company that sold you the computer for a disk.

[Niki McKnight]

No, I don't know anyone I can borrow a disk from... I bought the computer with Vista already loaded on it... So are you suggesting I just ring HP and ask to borrow a Vista disk? For some reason I doubt they're going to be that neighborly... Can we address the specific problems instead of just trying to start over? Maybe if we we're able to get SP1 & SP2 installed the problems would resolve themselves...??? And can you tell me what you think the issues are? Thanks...

[Ltangelic]

Hey,

I'm really sorry to say this, but I need you to do a system repair because your computer can no longer run the tools properly. I won't be able to clean up your computer if the tools cannot run, and since Last Good Known Configuration and Safe Mode does not work either, there is no other option but a system repair. If a system repair is really not feasible, I'm afraid you'll need to do a complete system restore before we can continue with this cleaning up process. Even though borrowing from HP does not stand a high chance, but please give it a try.

Once you are done with the system repair (or system restore if it's not feasible), please post back on here with a fresh OTL log and we'll do the cleaning up and updating.

Thanks for your understanding and patience.

[Niki McKnight]

Hi Lt... I'm not sure what you mean... My system restore works... and I had a copy of my registry from a few months back, so I imported that into the registry... I also scanned with Avira, which removed 129 entries... I'm no longer getting the error messages nor is my system bogged down, the only SERIOUS set back, (and it is very serious to me), is that I cannot get Paint Shop Pro to run. Each time I try to open it it starts the splash screen and then spits out an error message saying that PSP has stopped working...
Perhaps, you want to refer me to someone else, who can address the issues regarding the Vista service packs and PSP. However, I will post the error codes from the event viewer shortly, and hope that we can get it functioning again... Thanks ~Niki

[Ltangelic]

Alright, can you please post a new OTL log as well? Let's get your system cleaned up before updating.