Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Blue Screen/Shut Down

Started by mwright1000 , Aug 26 2012 09:47 AM

  • Please log in to reply

#46
mwright1000
Posted 02 September 2012 - 05:09 PM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
Vino's Event Viewer v01c run on Windows XP in English
Report run at 02/09/2012 5:35:56 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 02/09/2012 5:33:24 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 02/09/2012 3:53:11 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 02/09/2012 3:28:12 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 01/09/2012 10:58:45 PM
Type: error Category: 0
Event: 1 Source: sr
The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume.

Log: 'System' Date/Time: 01/09/2012 10:58:41 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 01/09/2012 10:55:08 PM
Type: error Category: 0
Event: 11 Source: PlugPlayManager
The device Root\LEGACY_SFDRV01A\0000 disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 01/09/2012 10:55:08 PM
Type: error Category: 0
Event: 11 Source: PlugPlayManager
The device Root\LEGACY_NGLOG\0000 disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 01/09/2012 10:55:08 PM
Type: error Category: 0
Event: 11 Source: PlugPlayManager
The device Root\LEGACY_NGFILTER\0000 disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 31/08/2012 11:36:36 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Dell Wireless WLAN Tray Service service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 31/08/2012 7:52:18 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 31/08/2012 10:33:38 AM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 30/08/2012 6:17:50 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 29/08/2012 8:52:42 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 29/08/2012 6:43:53 PM
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Dell Wireless WLAN Tray Service service terminated unexpectedly. It has done this 1 time(s).

Log: 'System' Date/Time: 29/08/2012 6:22:57 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 29/08/2012 6:22:10 PM
Type: error Category: 0
Event: 1 Source: sr
The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume.

Log: 'System' Date/Time: 29/08/2012 6:04:08 PM
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 02/09/2012 12:38:22 PM
Type: warning Category: 0
Event: 36 Source: W32Time
The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized.

Log: 'System' Date/Time: 01/09/2012 12:13:17 AM
Type: warning Category: 0
Event: 36 Source: W32Time
The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized.

Log: 'System' Date/Time: 31/08/2012 11:49:38 PM
Type: warning Category: 0
Event: 11050 Source: dnscache
The DNS Client service could not contact any DNS servers for a repeated number of attempts. For the next 30 seconds the DNS Client service will not use the network to avoid further network performance problems. It will resume its normal behavior after that. If this problem persists, verify your TCP/IP configuration, specifically check that you have a preferred (and possibly an alternate) DNS server configured. If the problem continues, verify network conditions to these DNS servers or contact your network administrator.

Log: 'System' Date/Time: 31/08/2012 7:57:23 AM
Type: warning Category: 0
Event: 36 Source: W32Time
The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized.

Log: 'System' Date/Time: 29/08/2012 6:49:22 PM
Type: warning Category: 0
Event: 11050 Source: dnscache
The DNS Client service could not contact any DNS servers for a repeated number of attempts. For the next 30 seconds the DNS Client service will not use the network to avoid further network performance problems. It will resume its normal behavior after that. If this problem persists, verify your TCP/IP configuration, specifically check that you have a preferred (and possibly an alternate) DNS server configured. If the problem continues, verify network conditions to these DNS servers or contact your network administrator.

Log: 'System' Date/Time: 29/08/2012 6:04:39 PM
Type: warning Category: 0
Event: 1003 Source: Dhcp
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 001C264F7C74. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
  • 0

Advertisements

#47
mwright1000
Posted 02 September 2012 - 05:11 PM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
Vino's Event Viewer v01c run on Windows XP in English
Report run at 02/09/2012 7:11:07 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 30/08/2012 6:05:18 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:18 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:18 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:15 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:15 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:15 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:13 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:13 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 6:05:13 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 2:04:55 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 2:04:55 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 2:04:55 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 1:29:27 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 1:29:27 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 1:29:27 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 1:29:24 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 1:29:24 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 1:29:24 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 12:13:06 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

Log: 'Application' Date/Time: 30/08/2012 12:13:06 PM
Type: error Category: 0
Event: 100 Source: Bonjour Service
The event description cannot be found.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 02/09/2012 5:32:13 PM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user MARTYSLAPTOP\Marty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Log: 'Application' Date/Time: 02/09/2012 3:52:07 PM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user MARTYSLAPTOP\Marty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Log: 'Application' Date/Time: 01/09/2012 10:57:12 PM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user MARTYSLAPTOP\Marty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Log: 'Application' Date/Time: 31/08/2012 10:32:13 AM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user MARTYSLAPTOP\Marty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Log: 'Application' Date/Time: 30/08/2012 6:16:28 PM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user MARTYSLAPTOP\Marty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

Log: 'Application' Date/Time: 29/08/2012 6:03:01 PM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user MARTYSLAPTOP\Marty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
  • 0

#48
RKinner
Posted 02 September 2012 - 07:24 PM

RKinner

    Malware Expert

  • Expert
  • 24,624 posts
  • MVP
Copy the next line:
sc config MCSTRM start= disabled

Start, Run, cmd, OK to bring up the command window. Right click and Paste or Edit then Paste and the copied line should appear. Hit Enter.

Now type (with an Enter at the end):
services.msc

The service window should open. Find the Bonjour service and right click on it and select properties then change the Startup Type to Disabled and Apply.

Control Panel, System, System Protection. Find the section on Available Disks and make sure only C is checked. Then Apply or OK.



Download UPHClean. To download and install UPHClean, visit the following Microsoft Web site:
http://www.microsoft...70-42470E2F3582
You will be prompted to validate your copy of Windows.
As soon as you have downloaded the UPHClean installer (UPHClean-Setup.msi), double-click the installer to begin the installation.
In the User Profile Hive Cleanup Service installation wizard, click Next.
In the License Agreement page, read the license agreement, select I Agree, and then click Next.
In the Select Installation Folder page, click Next.
In the Confirm Installation page, click Next.
When UPHClean is installed, click Close.

Start, Run, eventvwr.msc, OK to bring up the Event Viewer. Right click on System and Clear All Events, No (we don't want to save the old log), OK. Repeat for Application.

Reboot.


2. Double-click VEW.exe
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.

Ron
  • 0

#49
mwright1000
Posted 02 September 2012 - 07:44 PM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
there is no Bonjour listed in the service list. I went to system and there is no system protection
  • 0

#50
RKinner
Posted 02 September 2012 - 07:51 PM

RKinner

    Malware Expert

  • Expert
  • 24,624 posts
  • MVP
It may say System Restore. You should be able to get to the correct window by:

Start, Run, sysdm.cpl , OK



Start, Run, cmd, OK
sc  query  state=  all  >  \junk.txt

Attach C:\junk.txt to your next post.
  • 0

#51
mwright1000
Posted 02 September 2012 - 08:01 PM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
do you want me to do the all the stuff in the post before this one then do this>>>>
Start, Run, cmd, OK

sc query state= all > \junk.txt

Attach C:\junk.txt to your next post.

Also in system and system restore there is only drive C listed and what about Bonjour like I said that was not in the service list.
  • 0

#52
RKinner
Posted 03 September 2012 - 01:14 AM

RKinner

    Malware Expert

  • Expert
  • 24,624 posts
  • MVP
If System Restore only shows the C: drive that's good.

C:\junk.txt will tell me how to kill off bonjour.

Do the rest of the earlier post starting with "Download UPHClean..."
  • 0

#53
mwright1000
Posted 03 September 2012 - 08:38 AM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
Vino's Event Viewer v01c run on Windows XP in English
Report run at 03/09/2012 10:36:44 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 03/09/2012 10:32:09 AM
Type: warning Category: 0
Event: 1003 Source: Dhcp
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 001C264F7C74. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.



Vino's Event Viewer v01c run on Windows XP in English
Report run at 03/09/2012 10:38:05 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  • 0

#54
mwright1000
Posted 03 September 2012 - 08:49 AM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
nothing happened when i ran this...

Start, Run, cmd, OK

sc query state= all > \junk.txt

It just pulled up another prompt line
  • 0

#55
RKinner
Posted 03 September 2012 - 09:46 AM

RKinner

    Malware Expert

  • Expert
  • 24,624 posts
  • MVP
That what it should do. It created a file c:\junk.txt. If you want to see the file you can type: 

notepad  \junk.txt

or you can run it again without the > \junk.txt at the end.

It looks like from your latest event logs that bonjour is no longer complaining so we are not going to need the file anyway. How is it running now? Any more blue screens recently? Still slow and jittery? If so, when exactly is it slow? At boot? When typing in the forum? (Is it also slow when typing in notepad?) Does the mouse lag?

Let's see if we can figure out what is wrong with the dvd.

copy the next line:

req export "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}" %userprofile%\Desktop\DVD.txt

Start, Run, cmd, OK to bring up a command window. Right click and select Paste or Edit then Paste and the copied line should appear. Hit Enter.


You should now find a file on your desktop called DVD.txt. Please Attach the file.
  • 0

Advertisements

#56
mwright1000
Posted 03 September 2012 - 10:09 AM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
says request is not recognized.....
  • 0

#57
RKinner
Posted 03 September 2012 - 10:41 AM

RKinner

    Malware Expert

  • Expert
  • 24,624 posts
  • MVP
I mistyped. Try:

reg export "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}" %userprofile%\Desktop\DVD.txt
  • 0

#58
mwright1000
Posted 03 September 2012 - 10:58 AM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
says Error...Too many command line-parameters
  • 0

#59
RKinner
Posted 03 September 2012 - 11:08 AM

RKinner

    Malware Expert

  • Expert
  • 24,624 posts
  • MVP
did you copy and paste it or try to type it? I just copy and pasted it on my PC and it worked fine.

reg export "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}" %userprofile%\Desktop\DVD.txt
  • 0

#60
mwright1000
Posted 03 September 2012 - 11:12 AM

mwright1000

    Member

  • Topic Starter
  • Member
  • PipPip
  • 82 posts
i copied and pasted it. did it twice and came up with error message.
is my prompt supposed to say....C:\Documents and Settings\Marty>
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP