[hilario]

Hi all:

Don't know if this is the right place to report this problem.
If not please forgive me.

I'm getting constant crashes on my machine.
My suspiction go to some kind of malware, but it can also happen due to any hardware problem.


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{04E7A3BB-DB38-481C-A809-35FA60C78EDF}" = AVG 2011
"{0800E395-4DD7-3A93-BB96-08596C0D725F}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PTG
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{19DC9559-9C20-4A46-A67D-7ECBA52A2788}" = Nokia PC Suite
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F1C4668-7767-4109-9B5E-19AD056F2CA0}" = MP3 Skype Recorder
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java™ 6 Update 23
"{291D8FE1-ED05-4934-80CE-A5F6B7A8718D}" = MySQL Server 5.1
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{350C9816-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F12C31A-0B6E-4D60-ACB9-6ACE9214951B}" = Microsoft .NET Framework 2.0 Language Pack - CHS
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{55A9972B-EA29-43C3-94B6-7A178D6F2E11}" = ScreenRecorder
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.8.0.193c
"{7B1DBCBE-DF17-3B58-844C-F572F70EF5C4}" = Microsoft .NET Framework 3.5 Language Pack SP1 - ptg
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{80517829-032C-440F-A686-5343ECA59172}" = MediaPortal StreamedMP Skin 1.4.9
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{88528F28-E04A-3A93-B3C0-14651148FE82}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PTG
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D273DE5-ABFA-4BD0-A9D7-EE9C971438C4}_is1" = PDF-Viewer
"{90120000-0010-0816-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Portuguese (Portugal)) 12
"{90120000-0015-0816-0000-0000000FF1CE}" = Microsoft Office Access MUI (Portuguese (Portugal)) 2007
"{90120000-0015-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0816-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Portugal)) 2007
"{90120000-0016-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0816-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007
"{90120000-0018-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0816-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007
"{90120000-0019-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0816-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007
"{90120000-001A-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0816-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Portugal)) 2007
"{90120000-001B-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0816-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Portugal)) 2007
"{90120000-001F-0816-0000-0000000FF1CE}_ENTERPRISE_{C312E1CD-EC19-4270-A072-F36F634DFF79}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0816-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Portugal)) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0816-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Portuguese (Portugal)) 2007
"{90120000-0044-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0816-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Portugal)) 2007
"{90120000-006E-0816-0000-0000000FF1CE}_ENTERPRISE_{A8523DA4-5563-4F0E-BD9D-4E4CC3CF7239}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0816-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Portuguese (Portugal)) 2007
"{90120000-00A1-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0816-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Portuguese (Portugal)) 2007
"{90120000-00BA-0816-0000-0000000FF1CE}_ENTERPRISE_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{976BAF39-1CC7-4573-BB0F-CAA8CE55A98A}" = MediaPortal MP-TVSeries Plugin 2.6.6
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C301D681-00D3-4597-8446-3DE54FE20F1A}" = TortoiseSVN 1.6.11.20210 (32 bit)
"{CA50045C-5119-48e7-9BA7-6B317379857A}" = DJ_AIO_Software
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE16D92B-50F3-4FC5-B29C-13FAFEE1A6C6}" = DYMO LabelWriter Drivers
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DA71A94B-3617-4935-8BBE-1566B2174C95}" = Drv
"{DCD22647-6D31-479D-8F97-16D0AA934D9E}" = PC Connectivity Solution
"{E1DCAA98-90E1-4FBD-A942-28591B20F2D3}" = winLAME 2009 beta 1
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{EBCB131B-9BB0-3075-A91C-1F6CD34E2BBF}" = Microsoft .NET Framework 4 Extended PTG Language Pack
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F4C68898-EBA5-46A9-82B3-2D30426086BF}" = AVG 2011
"{F855451C-21E2-3034-B042-E1E66923548A}" = Microsoft .NET Framework 4 Client Profile PTG Language Pack
"{FA8A44D7-3E8A-4034-9C4F-088FA6B72BC4}" = HP Deskjet All-In-One Software 9.0
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"05B59228C7E1C21DFBE89260F879BD95880548D8" = Pacote de controladores do Windows - Nokia Modem (10/05/2009 4.2)
"123 Free Solitaire_is1" = 123 Free Solitaire 2009 v7.1
"504244733D18C8F63FF584AEB290E3904E791693" = Pacote de controladores do Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"7-Zip" = 7-Zip 4.65
"8CDCFB95BB84DD9C0F88F22266A0CA86035E55BA" = Pacote de controladores do Windows - Nokia Modem (06/01/2009 7.01.0.4)
"AC3ACM" = AC-3 ACM Codec
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AIMP3" = AIMP3
"Any Video Converter_is1" = Any Video Converter 3.1.7
"Ares" = Ares 2.1.6
"Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.7
"Aspell Portuguese Dictionary_is1" = Aspell Portuguese Dictionary-0.50-2
"Audacity_is1" = Audacity 1.2.6
"AVG" = AVG 2011
"AviSynth" = AviSynth 2.5
"Bejeweled 2 Deluxe_is1" = Bejeweled 2 Deluxe
"CCleaner" = CCleaner
"CDisplay_is1" = CDisplay 1.8
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"doPDF 7 printer_is1" = doPDF 7.1 printer
"DVD Shrink_is1" = DVD Shrink 3.2
"DYMO Label v.8" = DYMO Label v.8
"Easy File Locker" = Easy File Locker 1.2
"eMule" = eMule
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Everything" = Everything 1.2.1.371
"FinePrint" = FinePrint
"Free MP3 WMA WAV Converter_is1" = Free MP3 WMA WAV Converter v2.0
"GNU Aspell_is1" = GNU Aspell 0.50-3
"Griffith_is1" = Griffith 0.12
"GTK 2.0" = Ambiente de execução GTK+ 2.14.7 rev a (remover apenas)
"HDMI" = Intel® Graphics Media Accelerator Driver
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HP-Color LaserJet 2600n" = Color LaserJet 2600n
"InstallShield_{80517829-032C-440F-A686-5343ECA59172}" = MediaPortal StreamedMP Skin 1.4.9
"InstallShield_{976BAF39-1CC7-4573-BB0F-CAA8CE55A98A}" = MediaPortal MP-TVSeries Plugin 2.6.6
"IrfanView" = IrfanView (remove only)
"KaraFun_is1" = KaraFun 1.18
"KeePassPasswordSafe2_is1" = KeePass Password Safe 2.13
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.7.0 (Full)
"LAME for Audacity_is1" = LAME v3.98.2 for Audacity
"Mah Jong Quest_is1" = Mah Jong Quest
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MediaPortal" = MediaPortal
"MediaPortal TV Server" = MediaPortal TV Server / Client
"Microsoft .NET Framework 2.0 Language Pack - CHS" = Microsoft .NET Framework 2.0 语言包 - 简体中文
"Microsoft .NET Framework 3.5 Language Pack SP1 - ptg" = Microsoft .NET Framework 3.5 Language Pack SP1 - PTG
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PTG Language Pack" = Microsoft .NET Framework 4 Client Profile PTG Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PTG Language Pack" = Microsoft .NET Framework 4 Extended PTG Language Pack
"MKVtoolnix" = MKVtoolnix 4.4.0
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Mozilla Thunderbird (3.1.6)" = Mozilla Thunderbird (3.1.6)
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Ozone for AIMP 1.00" = Ozone for AIMP 1.00
"PhonerLite_is1" = PhonerLite 1.84
"Pidgin" = Pidgin
"PSPad editor_is1" = PSPad editor
"Rainlendar2" = Rainlendar2 (remove only)
"Rainmeter" = Rainmeter (remove only)
"RarmaRadio_is1" = RarmaRadio 2.55
"Revo Uninstaller" = Revo Uninstaller 1.91
"RocketDock_is1" = RocketDock 1.3.5
"Scott's Gmail Alert" = Scott's Gmail Alert
"SubtitleWorkshop" = Subtitle Workshop 2.51
"System Explorer_is1" = System Explorer 2.6.1
"The King" = The King
"The KMPlayer" = The KMPlayer (remove only)
"TheSage" = TheSage
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"VirtualCloneDrive" = VirtualCloneDrive
"VobSub" = VobSub 2.23
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"Wudf01007" = Microsoft User-Mode Driver Framework Feature Pack 1.7
"X-Lite 1.5_is1" = X-Lite 3.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)
"Youtube Downloader HD_is1" = Youtube Downloader HD v. 2.2.2

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 07-01-2011 12:18:14 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha drwtsn32.exe, versão 5.1.2600.0, módulo em falha
dbghelp.dll, versão 5.1.2600.5512, endereço em falha 0x0001295d.

Error - 07-01-2011 12:18:42 | Computer Name = HILARIO-FA96503 | Source = Application Hang | ID = 1002
Description = A desligar a aplicação explorer.exe, versão 6.0.2900.5512, modulo
de desligar hungapp, versão 0.0.0.0, endereço de desligar 0x00000000.

Error - 07-01-2011 12:19:01 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha explorer.exe, versão 6.0.2900.5512, módulo em falha
unknown, versão 0.0.0.0, endereço em falha 0x055033a8.

Error - 07-01-2011 12:19:45 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha explorer.exe, versão 6.0.2900.5512, módulo em falha
unknown, versão 0.0.0.0, endereço em falha 0x056333a8.

Error - 07-01-2011 12:20:22 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha explorer.exe, versão 6.0.2900.5512, módulo em falha
unknown, versão 0.0.0.0, endereço em falha 0x00000000.

Error - 07-01-2011 12:23:32 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha explorer.exe, versão 6.0.2900.5512, módulo em falha
unknown, versão 0.0.0.0, endereço em falha 0x056f33a8.

Error - 07-01-2011 12:23:57 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha mbam.exe, versão 1.50.1.3, módulo em falha unknown,
versão 0.0.0.0, endereço em falha 0x00f433a8.

Error - 07-01-2011 12:24:11 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha mbam.exe, versão 1.50.1.3, módulo em falha unknown,
versão 0.0.0.0, endereço em falha 0x00f433a8.

Error - 07-01-2011 13:44:46 | Computer Name = HILARIO-FA96503 | Source = .NET Runtime 2.0 Error Reporting | ID = 1000
Description = Faulting application mediaportal.exe, version 1.1.5.0, stamp 4cca7eb5,
faulting module mscorwks.dll, version 2.0.50727.3615, stamp 4be902c7, debug? 0,
fault address 0x0010725a.

Error - 07-01-2011 21:15:45 | Computer Name = HILARIO-FA96503 | Source = Application Error | ID = 1000
Description = Aplicação em falha AVGIDSAgent.exe, versão 10.0.0.360, módulo em falha
ntdll.dll, versão 5.1.2600.5755, endereço em falha 0x000369da.

[ System Events ]
Error - 07-01-2011 13:57:13 | Computer Name = HILARIO-FA96503 | Source = DCOM | ID = 10005
Description = O DCOM obteve o erro "%1084" ao tentar iniciar o serviço EventSystem
com os argumentos "" de forma a executar o servidor: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 07-01-2011 14:00:39 | Computer Name = HILARIO-FA96503 | Source = DCOM | ID = 10005
Description = O DCOM obteve o erro "%1084" ao tentar iniciar o serviço EventSystem
com os argumentos "" de forma a executar o servidor: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 07-01-2011 14:01:04 | Computer Name = HILARIO-FA96503 | Source = DCOM | ID = 10005
Description = O DCOM obteve o erro "%1084" ao tentar iniciar o serviço EventSystem
com os argumentos "" de forma a executar o servidor: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 07-01-2011 14:32:12 | Computer Name = HILARIO-FA96503 | Source = System Error | ID = 1003
Description = Código de erro 1000008e, parâmetro1 c0000005, parâmetro2 f74585e2,
parâmetro3 ba47c94c, parâmetro4 00000000.

Error - 07-01-2011 14:32:40 | Computer Name = HILARIO-FA96503 | Source = Service Control Manager | ID = 7000
Description = O serviço MSICPL falhou o arranque devido ao seguinte erro: %%2

Error - 07-01-2011 14:32:40 | Computer Name = HILARIO-FA96503 | Source = Service Control Manager | ID = 7000
Description = O serviço MSICPL falhou o arranque devido ao seguinte erro: %%2

Error - 07-01-2011 21:16:04 | Computer Name = HILARIO-FA96503 | Source = Service Control Manager | ID = 7034
Description = O serviço AVGIDSAgent terminou inesperadamente. Isto aconteceu 1 vez(es).

Error - 08-01-2011 7:50:21 | Computer Name = HILARIO-FA96503 | Source = System Error | ID = 1003
Description = Código de erro 100000c5, parâmetro1 00000005, parâmetro2 00000002,
parâmetro3 00000001, parâmetro4 805515a1.

Error - 08-01-2011 7:50:37 | Computer Name = HILARIO-FA96503 | Source = System Error | ID = 1003
Description = Código de erro 00000024, parâmetro1 001902fe, parâmetro2 f76f6494,
parâmetro3 f76f6190, parâmetro4 804e8452.

Error - 08-01-2011 7:50:39 | Computer Name = HILARIO-FA96503 | Source = System Error | ID = 1003
Description = Código de erro 1000007e, parâmetro1 c0000005, parâmetro2 00000001,
parâmetro3 f78b2c84, parâmetro4 f78b2980.


< End of report >

Edited by Essexboy, 08 January 2011 - 06:37 AM.
no logs outside malware forum please

[Advertisements]

• Please download the Event Viewer Tool by Vino Rosso VEW and save it to your Desktop:
• Double-click VEW.exe
• Under 'Select log to query', select (as appropriate):
  
  • Application
  • System
• Under 'Select type to list', select (as appropriate):
  
  • Error
  • Information
  • Warning

Then use the 'Date of events' or 'Number of events' as follows:

Either:

• Click the radio button for 'Number of events'
  Type 3 in the 1 to 20 box (or any number from 1 to 20)
  Then click the Run button.
  Notepad will open with the output log.
  
  
• Click the radio button for 'Date of events'
  In the From: boxes type today's date (presuming the crash happened today) 13 07 2009
  In the To: boxes type today's date (presuming the crash happened today) 13 07 2009
  Then click the Run button.
  Notepad will open with the output log.

Please post the Output log in your next reply


Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.

Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes
WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply







Download Autoruns from the link in my signature below:

1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As or Save in some versions.
6: Save AutoRuns.txt file to known location like your Desktop.
7: Attach to your next reply.









Download and install Free Everest Home Edition
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.
Click the + by computer, click on Sensor. Get a screenshot and post it so I can check your temps and voltages...


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"

[rshaffer61]

• Please download the Event Viewer Tool by Vino Rosso VEW and save it to your Desktop:
• Double-click VEW.exe
• Under 'Select log to query', select (as appropriate):
  
  • Application
  • System
• Under 'Select type to list', select (as appropriate):
  
  • Error
  • Information
  • Warning

Then use the 'Date of events' or 'Number of events' as follows:

Either:

• Click the radio button for 'Number of events'
  Type 3 in the 1 to 20 box (or any number from 1 to 20)
  Then click the Run button.
  Notepad will open with the output log.
  
  
• Click the radio button for 'Date of events'
  In the From: boxes type today's date (presuming the crash happened today) 13 07 2009
  In the To: boxes type today's date (presuming the crash happened today) 13 07 2009
  Then click the Run button.
  Notepad will open with the output log.

Please post the Output log in your next reply


Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.

Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes
WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply







Download Autoruns from the link in my signature below:

1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As or Save in some versions.
6: Save AutoRuns.txt file to known location like your Desktop.
7: Attach to your next reply.









Download and install Free Everest Home Edition
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.
Click the + by computer, click on Sensor. Get a screenshot and post it so I can check your temps and voltages...


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"

[hilario]

Hi rshaffer61:

Thanks for your reply.

first problem: VIEW tells me " view has not been coded for your language-PORTUGUESE)"

Is there any way to change language ?? I see "languages" on the right bottom of the view window but no way to change language.

hilario.

[rshaffer61]

Try this instead of that viewer.
Please follow the steps below to enter the Event Viewer program in XP. This will give me more information into what is causing your issue.

Go to

Start and then click on Run
Type in eventvwr.msc and press Enter
On left side click on Applications On right side look for any RED X about the time of a incident
On left side click on System. On right side look for any Red X about the same time of a incident
Also look for any yellow exclamation mark at the same time in either of the above
If you find any double click on one at a time and take a screenshot.
To take a screenshot click on your Print Screen on your keyboard. It is normally the key above your number pad between the F12 key and the Scroll Lock key
Now go to Start
All Programs
Accessories
Paint
In the empty white area click and hold the CTRL key and then click the V
Go to the File option at the top and click on Save as
Save as file type JPEG and save it to your Desktop

Include as a attachment in your next reply
If your attachment is to big to attach then go to Mediafire .
Register and upload your file.
Then reply with the link located to the right of your now uploaded file on Mediafire



Please follow the steps below to enter the Event Viewer program in Vista. This will give me more information into what is causing your issue. You can get to Event viewer two ways and I will post both for you.

Method One

• Go to
• Start
• In the Search box type in Event Viewer in the search box and press Enter
• From this point you can follow from step four from the below method as they will be the same.
Method Two

• Go to Start
• Right click on the Computer Icon and select Manage
• Navigate to the Event Viewer, You will be prompted to accept the action you are going to perform. Click continue
• On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
• Look for the ones that correspond to the times that your issue occurred.
• If any are found please double click and expand the error. This will open and give you more information on the error.
• Please include that in your next reply.

[hilario]

In the meantime here you have the "WHOCRASHED" report:

System Information (local)
--------------------------------------------------------------------------------

computer name: HILARIO-FA96503
windows version: Windows XP Service Pack 3, 5.1, build: 2600
windows dir: C:\WINDOWS
CPU: GenuineIntel Intel® Core™2 Duo CPU E7400 @ 2.80GHz Intel586, level: 6
2 logical processors, active mask: 3
RAM: 2137174016 total
VM: 2147352576, free: 2050740224



--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.


On Sat 08-01-2011 11:32:34 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-07.dmp
This was probably caused by the following module: ipnat.sys (ipnat+0x68A6)
Bugcheck code: 0x100000D1 (0xF0, 0x2, 0x1, 0xFFFFFFFFA74408A6)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\ipnat.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: IP Network Address Translator
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Sat 08-01-2011 8:04:58 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-06.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x9673D)
Bugcheck code: 0x1000007E (0xFFFFFFFFC0000005, 0x1, 0xFFFFFFFFF78B2C84, 0xFFFFFFFFF78B2980)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Sistema operativo Microsoft® Windows®
company: Microsoft Corporation
description: Sistema & kernel NT Kernel
Bug check description: This indicates that a system thread generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sat 08-01-2011 8:03:10 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-05.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0x20E9A)
Bugcheck code: 0x4E (0x2, 0x11647, 0x7F69F, 0xFFFF)
Error: PFN_LIST_CORRUPT
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
Bug check description: This indicates that the page frame number (PFN) list is corrupted.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Sat 08-01-2011 8:01:06 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-04.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x606BA)
Bugcheck code: 0x1A (0x780, 0xFFFFFFFFC0341000, 0xFFFFFFFF8224C678, 0xFFFFFFFFFD80F4D0)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Sistema operativo Microsoft® Windows®
company: Microsoft Corporation
description: Sistema & kernel NT Kernel
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sat 08-01-2011 1:07:58 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-03.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0xDFF0)
Bugcheck code: 0x24 (0x1902FE, 0xFFFFFFFFF76F6494, 0xFFFFFFFFF76F6190, 0xFFFFFFFF804E8452)
Error: NTFS_FILE_SYSTEM
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
Bug check description: This indicates a problem occurred in the NTFS file system.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Sat 08-01-2011 1:03:34 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-02.dmp
This was probably caused by the following module: avgidsfilter.sys (AVGIDSFilter+0x11BA)
Bugcheck code: 0x4E (0x2, 0x16300, 0x7F69F, 0xFFFF)
Error: PFN_LIST_CORRUPT
file path: C:\WINDOWS\system32\drivers\avgidsfilter.sys
product: AVG IDS
company: AVG Technologies CZ, s.r.o.
description: IDS Application Activity Monitor Filter Driver.
Bug check description: This indicates that the page frame number (PFN) list is corrupted.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: avgidsfilter.sys (IDS Application Activity Monitor Filter Driver., AVG Technologies CZ, s.r.o. ).
Google query: avgidsfilter.sys AVG Technologies CZ, s.r.o. PFN_LIST_CORRUPT




On Sat 08-01-2011 1:00:04 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010811-01.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0x21BC3)
Bugcheck code: 0x100000C5 (0x5, 0x2, 0x1, 0xFFFFFFFF805515A1)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 18:03:50 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-12.dmp
This was probably caused by the following module: ksecdd.sys (KSecDD+0x85E2)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFFF74585E2, 0xFFFFFFFFBA47C94C, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\ksecdd.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Kernel Security Support Provider Interface
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 17:58:43 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-11.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0x401F3)
Bugcheck code: 0x1000000A (0x406D, 0x2, 0x0, 0xFFFFFFFF804ECFB7)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 17:57:24 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-10.dmp
This was probably caused by the following module: hal.dll (hal+0x2A16)
Bugcheck code: 0x1000000A (0x34, 0x2, 0x1, 0xFFFFFFFF80702A16)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\hal.dll
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Hardware Abstraction Layer DLL
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 17:53:51 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-09.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0x31B8C)
Bugcheck code: 0x10000050 (0xFFFFFFFFF52E14E6, 0x0, 0xFFFFFFFFF7B83B8C, 0x2)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 17:45:16 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-08.dmp
This was probably caused by the following module: afd.sys (afd+0xD249)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFFA73C6249, 0xFFFFFFFFA5E51A4C, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\afd.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Ancillary Function Driver for WinSock
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 16:26:56 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-07.dmp
This was probably caused by the following module: avgmfx86.sys (avgmfx86+0x1945)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFFF7480685, 0xFFFFFFFFA66F365C, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\avgmfx86.sys
product: AVG Internet Security
company: AVG Technologies CZ, s.r.o.
description: AVG Resident Shield Minifilter Driver
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: avgmfx86.sys (AVG Resident Shield Minifilter Driver, AVG Technologies CZ, s.r.o.).
Google query: avgmfx86.sys AVG Technologies CZ, s.r.o. KERNEL_MODE_EXCEPTION_NOT_HANDLED_M




On Fri 07-01-2011 16:24:18 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-06.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0xDFF0)
Bugcheck code: 0x24 (0x1902FE, 0xFFFFFFFFF78EEA00, 0xFFFFFFFFF78EE6FC, 0xFFFFFFFFF7B89256)
Error: NTFS_FILE_SYSTEM
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
Bug check description: This indicates a problem occurred in the NTFS file system.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Fri 07-01-2011 9:42:21 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010711-05.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x606BA)
Bugcheck code: 0x4E (0x2, 0x15000, 0x7F69F, 0xFFFF)
Error: PFN_LIST_CORRUPT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Sistema operativo Microsoft® Windows®
company: Microsoft Corporation
description: Sistema & kernel NT Kernel
Bug check description: This indicates that the page frame number (PFN) list is corrupted.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.



--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

32 crash dumps have been found and analyzed. Only 15 are included in this report. 11 third party drivers have been identified to be causing system crashes on your computer. It is strongly suggested that you check for updates for these drivers on their company websites. Click on the links below to search with Google for updates for these drivers:

rtenicxp.sys (Realtek 10/100/1000 NDIS 5.1 Driver , Realtek Semiconductor Corporation )

avgmfx86.sys (AVG Resident Shield Minifilter Driver, AVG Technologies CZ, s.r.o.)

avgidsfilter.sys (IDS Application Activity Monitor Filter Driver., AVG Technologies CZ, s.r.o. )

igxpdv32.dll (Component GHAL Driver, Intel Corporation)

xlkfs.sys (File System Filter Driver, XOSLAB.COM)

avgtdix.sys (AVG Network connection watcher, AVG Technologies CZ, s.r.o.)

nv4_disp.sys

unknown

If no updates for these drivers are available, try searching with Google on the names of these drivers in combination the errors that have been reported for these drivers and include the brand and model name of your computer as well in the query. This often yields interesting results from discussions from users who have been experiencing similar problems.


Read the topic general suggestions for troubleshooting system crashes for more information.

Note that it's not always possible to state with certainty whether a reported driver is actually responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.

[hilario]

eventviewer screenshots

Attached Thumbnails

• 
• 
• 

[rshaffer61]

ipnat.sys is part of the firewall services.
Other then windows firewall do you have anything like Norton Internet Security running with its firewall active?


avgidsfilter.sys belongs to the AVG9 program. Can possibly be a virus but we will look into that later in the malware forum.

ksecdd.sys is part of the Microsoft OS system.

afd.sys is also part of the OS and has to do with the network and internet connection.

avgmfx86.sys is again part of the AVG program.

The majority of your errors seem to have to do with the OS itself and most likely means a corruption somehow.
After posting the other logs I asked for please do the following.

Go to

Start and then to Run
Type in Chkdsk /r Note the space between k and /
Click Enter ...It will probably ask if you want to do this on the next reboot...click Y
If the window doesn't shutdown on its own then reboot the system manually. On reboot the system will start the chkdsk operation
This one will take longer then chkdsk /f

Note... there are 5 stages...
It may appear to hang at a certain percent for a hour or more or even back up and go over the same area...this is normal...
DO NOT SHUT YOUR COMPUTER DOWN WHILE CHKDSK IS RUNNING OR YOU CAN HAVE SEVERE PROBLEMS
This can take several hours to complete.
When completed it will boot the system back into windows.

Let me know if this fixes the problem

[hilario]

After the 2 check disks problem remains.But let me ask you something:

you said 2nd check "chkdsk /f" would take hours !! it took only 3 or 4 minutes and i think there were only 3 stages !!!
Am I doing something wrong ???

Another detail that can be important.

When rebooting it crashes many times eeven before loading windows with my settings , and this is the reason why I think this
can also be a hardware problem. What do you think ???

[rshaffer61]

There is only one chkdsk you should have run and that is the chkdsk /r
Since that didn't find anything then we move on to the next step.

Go Start and then to Run ("Start Search" in Vista),
Type in: sfc /scannow
Click OK (Enter in Vista).
Have Windows CD/DVD handy.
If System File Checker (sfc) finds any errors, it may ask you for the CD/DVD.
If sfc does not find any errors in Windows XP, it will simply quit, without any message.
In Vista you will receive the following message: "Windows resource protection did not find any integrity violations".

For Vista users ONLY: Navigate to C:\Windows\Logs\CBS folder. You'll see CBS.log file.
Usually, it's pretty big file, so upload it to Flyupload, and post download link.


If you don't have Windows CD....
This applies mostly to Windows XP, since Vista rarely requires use of its DVD while running "sfc"
Note This method will not necessarily work as well, as when using Windows CD, because not always ALL system files are backed up on your hard drive. Also, backed up files may be corrupted as well.

Go Start and then Run
type in regedit and click OK


Navigate to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

You will see various entries Values on the right hand side.

The one we want is called: SourcePath

It probably has an entry pointing to your CD-ROM drive, usually D and that is why it is asking for the XP CD.
All we need to do is change it to: C:
Now, double click the SourcePatch setting and a new box will pop up.
Change the drive letter from your CD drive to your root drive, usually C:
Close Registry Editor.

Now restart your computer and try sfc /scannow again!


Thanks to Broni for the instructions



Revised and Simplified:


Do you have a valid XP CD?

If so, place it in your CD ROM drive and follow the instructions below:

• Click on Start and select Run... type sfc /scannow (note the space) (Let this run undisturbed until the window with the blue progress bar goes away)

SFC - Which stands for System File Checker,
retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.
If you want to see what was replaced, right-click My Computer and click on Manage. In the new window that appears, expand the Event Viewer (by clicking on the + symbol next to it) and then click on System.

[hilario]

ok rshaffer61, let me tell you what I did:

I followed second sugestion as I have a win xp pro sp3 but i'm not sure if it's compatible
with my installed version.
However after changing drive to C: and after the reboot it asked me to insert win cd as some DLL's were missing !!!
Then I introduced the cd I have and it started showing messages saying cd was not comptible.
I went on closing those windows and noticed that the checking bar moved till the end.
Don't know if check was correct or not.

Waiting to see if it solved the problem.

It's been 2 hours since I did that and so far there were no crashes.
Let's wait and see.

Thanks again for your paciency.

hilario.

[rshaffer61]

However after changing drive to C: and after the reboot it asked me to insert win cd as some DLL's were missing !!!

Yep defiantly System Files were missing and probably causing most of the issue.

I went on closing those windows and noticed that the checking bar moved till the end.

Advancing the status bar but it doesn't sound like it was repairing if you were closing instead of clicking ok or continue.

It's been 2 hours since I did that and so far there were no crashes.
Let's wait and see.

It may have been able to replace or repair the file it needed to resolve it. I will await your results since it has now been 4 plus hours.

[hilario]

Hi rshaffer61:

10 hours have passed and so far no more crashes.

Probably problem has been solved.

I wanna thank you once again and wish all the best for 2011.

hilario.

[rshaffer61]

Great to hear but I will continue to monitor this topic for a couple more days just in case.
Let us know what happens then and if so then we will consider this issue resolved.

[hilario]

you were right.

After more than 10 hours had a new crash:


On Sun 09-01-2011 9:52:36 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini010911-02.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0xAC18)
Bugcheck code: 0x1000000A (0x0, 0x1C, 0x1, 0xFFFFFFFF804E1C18)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Sistema operativo Microsoft® Windows®
company: Microsoft Corporation
description: Sistema & kernel NT Kernel
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.

Don't know what to do now.
I'm thinking of a format and a fresh install !!!
Or maybe I can try a repair with the windows cd that I have before the format ???

what do you think ??

[rshaffer61]

Ok lets try the next step to correct the issue.




Repair Installation Instructions

· Insert your Windows XP CD in your CD-ROM and then Restart your computer.

· At the first post screen start tapping the Del key to enter System Bios
· Find the Advance Options or Boot Sequence screen.
· You will need to change the boot sequence so that the CDrom is first and the HD is second.
· Press F10 to Save and Exit and then press Enter to accept.
· The system will now reboot
· When the "Press any key to boot from CD" message is displayed on your screen, press a key to start your computer from the Windows XP CD.
· When you see the following message displayed on the Welcome to Setup screen, press ENTER
· To setup Windows XP now, press ENTER.
· At this point an option to press R to enter the Recovery Console is displayed. DO NOT SELECT THIS OPTION.

· On the Windows XP Licensing Agreement screen, press F8 to agree to the license agreement.
· Make sure that your current installation of Windows XP is selected and highlighted in the box, and then press the R key to repair Windows XP.
· Follow the instructions on the screen to complete Setup.

You can also go HERE
to read a step by step tutorial with screenshots.