Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Weird Shortcut in C: (snqn) and suspected Ramnit?


  • Please log in to reply

#76
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
One more possibility:

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after each line:

net  stop  w32time
    w32tm.exe  /unregister
    w32tm.exe  /register
    net  start  w32time

  • 0

Advertisements


#77
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
The first one didn't work, and when I register anything

"[Window Title]
RegSvr32

[Content]
The module "C:\Windows\System32\w32time.dll" failed to load.

Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent .DLL files.

The specified module could not be found.


[OK]"

Vew

Link is broken?

Seems like the w32time service isn't started...

I also get the error.

C:\Windows\system32>w32tm.exe /unregister
The following error occurred: Access is denied. (0x80070005)

These 2 worked though, still no avail.

w32tm.exe /register
net start w32time
  • 0

#78
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
The VEW link is good if you click on it but the forum software plays games with it so you can't just type what you see:

http://images.malwareremoval.com/vino/VEW.exe

  • 0

#79
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 14/03/2012 9:54:26 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 14/03/2012 1:41:52 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:41:51 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:41:50 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:39:55 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:39:55 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:39:54 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:39:54 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 1:39:53 PM
Type: Error Category: 0
Event: 11 Source: Disk
The driver detected a controller error on \Device\Harddisk1\DR2.

Log: 'System' Date/Time: 14/03/2012 10:01:56 AM
Type: Error Category: 1
Event: 20 Source: Microsoft-Windows-WindowsUpdateClient
Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.121.1421.0).

Log: 'System' Date/Time: 14/03/2012 10:01:51 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 14/03/2012 4:26:06 AM
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server {E579AB5F-1CC4-44B4-BED9-DE0991FF0623} did not register with DCOM within the required timeout.

Log: 'System' Date/Time: 14/03/2012 2:54:04 AM
Type: Error Category: 1
Event: 20 Source: Microsoft-Windows-WindowsUpdateClient
Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.121.1421.0).

Log: 'System' Date/Time: 14/03/2012 2:53:51 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 14/03/2012 2:50:01 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 13/03/2012 12:18:33 PM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 13/03/2012 11:11:51 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 13/03/2012 11:11:44 AM
Type: Error Category: 0
Event: 13 Source: ACPI
: The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

Log: 'System' Date/Time: 13/03/2012 5:18:51 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 13/03/2012 2:20:53 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

Log: 'System' Date/Time: 13/03/2012 12:12:13 AM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified module could not be found.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 14/03/2012 11:26:50 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name www.boutichesaid.cv.dz timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 14/03/2012 6:25:08 PM
Type: Warning Category: 223
Event: 225 Source: Microsoft-Windows-Kernel-PnP
The application \Device\HarddiskVolume2\Users\Administrator\Downloads\PortableApps\WinContig\WinContig64.exe with process id 4704 stopped the removal or ejection for the device USB\VID_0781&PID_5530\20044529011DA4318CE0.

Log: 'System' Date/Time: 14/03/2012 1:38:55 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name www.gotesting.info timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 13/03/2012 2:23:31 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name i3.ambrybox.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 13/03/2012 12:16:07 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 13/03/2012 12:13:59 PM
Type: Warning Category: 0
Event: 4 Source: MEIx64
The Intel® Management Engine Interface is being disabled.

Log: 'System' Date/Time: 13/03/2012 11:32:07 AM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name 65.230.181.213.in-addr.arpa timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 13/03/2012 3:56:56 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 13/03/2012 5:45:51 AM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name help.drp.su timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 13/03/2012 2:33:44 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 13/03/2012 2:16:36 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 13/03/2012 1:47:05 AM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name www.weather.gov timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 13/03/2012 12:11:24 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.
  • 0

#80
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Did you try post #74?
  • 0

#81
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
Yes this is what happens.

[Window Title]
RegSvr32

[Content]
The module "\windows\system32\w32time.dll" failed to load.

Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent .DLL files.

The specified module could not be found.


[OK]
  • 0

#82
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
Now this shows when I try to sync, "[Window Title]
Date and Time

[Main Instruction]
Unable to continue

[Content]
You do not have permission to perform this task. Please contact your computer administrator for help.

[OK]"
  • 0

#83
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Create a new user with admin rights and then log in as the new user and try it.

To open User Accounts, click the Start button Picture of the Start button, click Control Panel, click User Accounts and Family Safety, and then click User Accounts.

Click Manage another account. Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

Click Create a new account.

Type the name you want to give the user account, click an account type, and then click Create Account.


  • 0

#84
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
Still, no permissions.
  • 0

#85
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Copy C:\windows\system32\w32time.dll over to C:\windows\

Then go into regedit and navigate to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\Parameters

Find the Service DLL and right click on it and Modify.

Change
%systemroot%\system32\w32time.dll

to

%systemroot%\w32time.dll

Then OK.

Reboot then try and sync the time.
  • 0

Advertisements


#86
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
The whole W32Time key is missing o_O
  • 0

#87
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
I might have left out a blank line the last time:

Download the attached file and Save it then right click and Extract All than find the w32time.reg file and right click and Merge.
  • 0

#88
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
Well, now "Changes can't be saved"
  • 0

#89
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Did you do #85?
  • 0

#90
roadran

roadran

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 142 posts
No, and I can't seem to copy it. I have teracopy installed and running under UAC it says the file isn't found? I have all permissions on that file also
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP