Kelly

Hi Albert,

My youngest son is just out of HS as well and MySpace came way after this
happened! )

However, this is all too much the same. I still remember sitting there
toying with all of the services to figure it out. What I do remember is
that the Plug and Play Service had a lot to do with it. If yours isn't set
to Automatic, do so and then reboot.

Also, without having to re-read this thread to know if I had already
suggested this:

Start/Run/Msconfig - Startup and Services

See what is running during the boot process and what is disabled.

As for HJT - what you need to do is Customize/Configure it. For the
startups that you want, set them to the ignore list. After that, mark all
to be selected.


--

All the Best,
Kelly (MS-MVP/DTS&XP)

Happy Birthday if today is your birthday!

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Alberto" <Alberto@discussions.microsoft.com> wrote in message
news:642BF49C-451D-40CA-BB4F-CE75D5FA4C16@microsoft.com...
> No Kelly, I don't remember exactly what was happening at the time.
> My high school kids use it a lot; they use MySpace and one day we booted
> up
> and there was no sound.
> But your comment about changing themes is interesting. I had issues with
> strange computer behavior last year so I did a Restore. When I tried to
> re-create the 4 profiles on the computer, my son's would not remain as he
> left it unless I confiigured his profile as an administrator. it has been
> that way ever since.
> I went through my HJT log today and noticed quite a few bad entries. Now I
> am waiting for instructions on what to do next so i don't mess it up even
> worse.
> Thanks
>
> "Kelly" wrote:
>
>> LOL, I hear that ~ but if you change your mind. )
>>
>> I spotted it because this same thing had happened to a system here for
>> one
>> of my boys. The theme would change, the sound would go and many services
>> were disabled. So I wrote a script to change it all at once (each time
>> the
>> system was woke). I forget how I finally solved this. It was with XP
>> but
>> years ago.
>>
>> As luck would have it, I no longer have that script; however, wrote the
>> smaller one for a client of mine who had similar issues - the one you
>> used.
>>
>> What you can try is a .bat file that I have stored on line 377 (right
>> hand
>> side): http://www.kellys-korner-xp.com/xp_tweaks.htm
>>
>> Other than that....I am still thinking. )
>>
>> Also, beings you stated that this is how it all began, can you remember
>> exactly what was going on? You may trigger my thoughts.
>> --
>>
>> All the Best,
>> Kelly (MS-MVP/DTS&XP)
>>
>> Happy Birthday if today is your birthday!
>>
>> Taskbar Repair Tool Plus!
>> http://www.kellys-korner-xp.com/taskbarplus!.htm
>>
>>
>> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> news:86AF9542-7922-4EDA-8FBA-7871E341D39D@microsoft.com...
>> > Kelly,
>> >
>> > I hope I get this fixed before I have to travel from CA to Louisiana
>> > :-)
>> >
>> > I'm glad you spotted the audio; that is actually when all of this
>> > started.
>> > I
>> > called Emachines one night and after poking around the Tech tells me
>> > that
>> > the
>> > on-board audio can sometimes die. I tried to install a Soundblaster
>> > card
>> > but
>> > that failed. I realize now that it probably had to do with the Cryto
>> > service
>> > not working so it couldn't/wouldn't load properly. It is also around
>> > the
>> > time
>> > when the MS security updates started failing to install.
>> > I will try to run the reg update you have tonight - is there anything
>> > else
>> > you can think of to try regarding all the services being shut down, or
>> > do
>> > I
>> > just wait for the results of my HiJack This log to be checked?
>> >
>> > Thanks,
>> > Albert
>> >
>> > "Kelly" wrote:
>> >
>> >> Hi Albert,
>> >>
>> >> That would be the first place I would begin. I also noticed that your
>> >> audio
>> >> seemed compromised. On line 371 I have a reg file that restores many
>> >> services that become disabled due to malware exploits.
>> >> http://www.kellys-korner-xp.com/xp_tweaks.htm
>> >>
>> >> If you are planning to visit Louisiana soon, bring your system on
>> >> over.
>> >> )
>> >> --
>> >>
>> >> All the Best,
>> >> Kelly (MS-MVP/DTS&XP)
>> >>
>> >> Happy Birthday if today is your birthday!
>> >>
>> >> Taskbar Repair Tool Plus!
>> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >>
>> >>
>> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> >> news:EF139D79-3990-4BD4-8412-CE80DBDDC6B6@microsoft.com...
>> >> > Kelly,
>> >> >
>> >> > I'm not sure that getting the drivers for the Unknown adapter will
>> >> > work,
>> >> > but
>> >> > I will try it. I assume that since the printer won't work, and
>> >> > trying
>> >> > to
>> >> > "Copy" files to a backup drive doesn't work, that even if I have the
>> >> > drivers
>> >> > I won't be able to launch the update.
>> >> >
>> >> > I can open files, like pictures and such, and then save them
>> >> > individually
>> >> > to
>> >> > a backup drive, but not as a group using Windows Explorer. Nothing
>> >> > happens
>> >> > at
>> >> > all.
>> >> >
>> >> > BTW - I have posted the HiJack log to aumha and I might try
>> >> > bleepingcomputers as well.
>> >> >
>> >> > Thanks,
>> >> > Albert
>> >> >
>> >> > "Kelly" wrote:
>> >> >
>> >> >> Alberto,
>> >> >>
>> >> >> Get the drivers from another system and save to either a pen drive
>> >> >> or
>> >> >> cd.
>> >> >>
>> >> >> --
>> >> >>
>> >> >> All the Best,
>> >> >> Kelly (MS-MVP/DTS&XP)
>> >> >>
>> >> >> Happy Birthday if today is your birthday!
>> >> >>
>> >> >> Taskbar Repair Tool Plus!
>> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >> >>
>> >> >>
>> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> >> >> news:6C33B08C-A3F2-449E-8422-D76E3C6969EA@microsoft.com...
>> >> >> > Kelly,
>> >> >> >
>> >> >> > At this time I won't be able to do anything since the services
>> >> >> > aren't
>> >> >> > working I can't get on the Net to update the drivers or research
>> >> >> > the
>> >> >> > Unknown.
>> >> >> > I did try to update it a few weeks ago but failed. It seemed all
>> >> >> > else
>> >> >> > was
>> >> >> > working at the time (although iTunes and Nokia applications were
>> >> >> > having
>> >> >> > some
>> >> >> > issues) so I didn't pursue it.
>> >> >> >
>> >> >> > If you know of any malware or other reason why most of my
>> >> >> > services
>> >> >> > will
>> >> >> > no
>> >> >> > longer start, let me know.
>> >> >> >
>> >> >> > Thanks,
>> >> >> > Albert
>> >> >> >
>> >> >> > "Kelly" wrote:
>> >> >> >
>> >> >> >> Alberto you need to address the unknown network adapter, first.
>> >> >> >> Go
>> >> >> >> to
>> >> >> >> the
>> >> >> >> website of your system manufacturer then select make, model and
>> >> >> >> OS.
>> >> >> >> Scroll
>> >> >> >> down to find the network drivers. If this card is an add-on
>> >> >> >> either
>> >> >> >> use
>> >> >> >> the
>> >> >> >> cd, etc that came with it or download the drivers via the net.
>> >> >> >>
>> >> >> >> --
>> >> >> >>
>> >> >> >> All the Best,
>> >> >> >> Kelly (MS-MVP/DTS&XP)
>> >> >> >>
>> >> >> >> Happy Birthday if today is your birthday!
>> >> >> >>
>> >> >> >> Taskbar Repair Tool Plus!
>> >> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >> >> >>
>> >> >> >>
>> >> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> >> >> >> news:C0A729FA-D604-4669-91FA-AA64D15D0E42@microsoft.com...
>> >> >> >> > Gerry,
>> >> >> >> >
>> >> >> >> > Device Mgr looks OK. Nothing different from a month ago. There
>> >> >> >> > is
>> >> >> >> > an
>> >> >> >> > Unknown
>> >> >> >> > Network Adapter with the yellow exclamation, but that was
>> >> >> >> > there
>> >> >> >> > before.
>> >> >> >> >
>> >> >> >> > I cannot print, nor connect to the internet, so I can't
>> >> >> >> > copy/paste
>> >> >> >> > the
>> >> >> >> > Event
>> >> >> >> > Viewer; I will have to write it out here.
>> >> >> >> >
>> >> >> >> > Under Security I have 3 events -
>> >> >> >> > Falure Audit 11/2/08 Security Policy Change #615 Network
>> >> >> >> > Service
>> >> >> >> > Same on 11/1/08
>> >> >> >> > Same on 10/28/08
>> >> >> >> >
>> >> >> >> > Under System I have many events-
>> >> >> >> > Error Service control Manager 7023 (Only 1 day is listed
>> >> >> >> > 11/2/08
>> >> >> >> > and
>> >> >> >> > most
>> >> >> >> > of
>> >> >> >> > the errors are this one).
>> >> >> >> > Error PlugPlay Manager 12 (5 instances)
>> >> >> >> > Error UPS 2481 (1 instance)
>> >> >> >> >
>> >> >> >> > I cannot get any info when dbl-clicking or Rt-click and try to
>> >> >> >> > open
>> >> >> >> > Properties
>> >> >> >> >
>> >> >> >> > Is there a way to use Recovery Console?
>> >> >> >> >
>> >> >> >> > "Gerry" wrote:
>> >> >> >> >
>> >> >> >> >> Alberto
>> >> >> >> >>
>> >> >> >> >> I had System File Checker in mind but given the lack of a CD
>> >> >> >> >> that
>> >> >> >> >> is
>> >> >> >> >> not
>> >> >> >> >> practical.
>> >> >> >> >>
>> >> >> >> >> What errors appear in Event Viewer?
>> >> >> >> >>
>> >> >> >> >> Please post copies of all Error and Warning Reports appearing
>> >> >> >> >> in
>> >> >> >> >> the
>> >> >> >> >> System and Application logs in Event Viewer relating to the
>> >> >> >> >> last
>> >> >> >> >> boot
>> >> >> >> >> in
>> >> >> >> >> normal mode . No Information Reports or Duplicates please.
>> >> >> >> >> Indicate
>> >> >> >> >> which also appear in a previous boot.
>> >> >> >> >>
>> >> >> >> >> You can access Event Viewer by selecting Start, Control
>> >> >> >> >> Panel,
>> >> >> >> >> Administrative Tools, and Event Viewer. When researching the
>> >> >> >> >> meaning
>> >> >> >> >> of the error, information regarding Event ID, Source and
>> >> >> >> >> Description
>> >> >> >> >> are important.
>> >> >> >> >>
>> >> >> >> >> A tip for posting copies of Error Reports! Run Event Viewer
>> >> >> >> >> and
>> >> >> >> >> double
>> >> >> >> >> click on the error you want to copy. In the window, which
>> >> >> >> >> appears
>> >> >> >> >> is a
>> >> >> >> >> button resembling two pages. Click the button and close Event
>> >> >> >> >> Viewer.Now start your message (email) and do a paste into the
>> >> >> >> >> body
>> >> >> >> >> of
>> >> >> >> >> the message. Make sure this is the first paste after exiting
>> >> >> >> >> from
>> >> >> >> >> Event Viewer.
>> >> >> >> >>
>> >> >> >> >> Are there any yellow question marks in Device Manager? Right
>> >> >> >> >> click
>> >> >> >> >> on
>> >> >> >> >> the My Computer icon on your Desktop and select Properties,
>> >> >> >> >> Hardware,Device Manager. If yes what is the Device Error
>> >> >> >> >> code?
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> --
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> Hope this helps.
>> >> >> >> >>
>> >> >> >> >> Gerry
>> >> >> >> >> ~~~~
>> >> >> >> >> FCA
>> >> >> >> >> Stourport, England
>> >> >> >> >> Enquire, plan and execute
>> >> >> >> >> ~~~~~~~~~~~~~~~~~~~
>> >> >> >> >>
>> >> >> >> >> Alberto wrote:
>> >> >> >> >> > Gerry,
>> >> >> >> >> >
>> >> >> >> >> > I have an eMachines T3504 which started with SP1 I believe
>> >> >> >> >> > and
>> >> >> >> >> > was
>> >> >> >> >> > updated to SP2 through a download. I do not have a CD that
>> >> >> >> >> > came
>> >> >> >> >> > with
>> >> >> >> >> > this computer, only the restore disk. I am trying to avoid
>> >> >> >> >> > doing
>> >> >> >> >> > a
>> >> >> >> >> > Restore - I did it once and a few minor things got changed
>> >> >> >> >> > and
>> >> >> >> >> > I
>> >> >> >> >> > don't have all the original program CD's for a number of
>> >> >> >> >> > applications.
>> >> >> >> >> >
>> >> >> >> >> > I do have an XP CD from an older computer, but I am pretty
>> >> >> >> >> > sure
>> >> >> >> >> > it
>> >> >> >> >> > is
>> >> >> >> >> > also SP1.
>> >> >> >> >> >
>> >> >> >> >> > What were you thinking?
>> >> >> >> >> >
>> >> >> >> >> > "Gerry" wrote:
>> >> >> >> >> >
>> >> >> >> >> >> Alberto
>> >> >> >> >> >>
>> >> >> >> >> >> What do you have by way of of a Windows XP CD? Does it
>> >> >> >> >> >> contain
>> >> >> >> >> >> the
>> >> >> >> >> >> SP2 update?
>> >> >> >> >> >>

Alberto

Well, I have been advised by the good folks at aumha to scrub the drive and
start over. Way too many problems and high probability a lot of stuff hiding
in dark places.
Thanks for all your efforts - I may be posting once I try a Restore because
that is all the eMachines people gave me.

Albert

"Kelly" wrote:

> Hi Albert,
>
> My youngest son is just out of HS as well and MySpace came way after this
> happened! )
>
> However, this is all too much the same. I still remember sitting there
> toying with all of the services to figure it out. What I do remember is
> that the Plug and Play Service had a lot to do with it. If yours isn't set
> to Automatic, do so and then reboot.
>
> Also, without having to re-read this thread to know if I had already
> suggested this:
>
> Start/Run/Msconfig - Startup and Services
>
> See what is running during the boot process and what is disabled.
>
> As for HJT - what you need to do is Customize/Configure it. For the
> startups that you want, set them to the ignore list. After that, mark all
> to be selected.
>
>
> --
>
> All the Best,
> Kelly (MS-MVP/DTS&XP)
>
> Happy Birthday if today is your birthday!
>
> Taskbar Repair Tool Plus!
> http://www.kellys-korner-xp.com/taskbarplus!.htm
>
>
> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
> news:642BF49C-451D-40CA-BB4F-CE75D5FA4C16@microsoft.com...
> > No Kelly, I don't remember exactly what was happening at the time.
> > My high school kids use it a lot; they use MySpace and one day we booted
> > up
> > and there was no sound.
> > But your comment about changing themes is interesting. I had issues with
> > strange computer behavior last year so I did a Restore. When I tried to
> > re-create the 4 profiles on the computer, my son's would not remain as he
> > left it unless I confiigured his profile as an administrator. it has been
> > that way ever since.
> > I went through my HJT log today and noticed quite a few bad entries. Now I
> > am waiting for instructions on what to do next so i don't mess it up even
> > worse.
> > Thanks
> >
> > "Kelly" wrote:
> >
> >> LOL, I hear that ~ but if you change your mind. )
> >>
> >> I spotted it because this same thing had happened to a system here for
> >> one
> >> of my boys. The theme would change, the sound would go and many services
> >> were disabled. So I wrote a script to change it all at once (each time
> >> the
> >> system was woke). I forget how I finally solved this. It was with XP
> >> but
> >> years ago.
> >>
> >> As luck would have it, I no longer have that script; however, wrote the
> >> smaller one for a client of mine who had similar issues - the one you
> >> used.
> >>
> >> What you can try is a .bat file that I have stored on line 377 (right
> >> hand
> >> side): http://www.kellys-korner-xp.com/xp_tweaks.htm
> >>
> >> Other than that....I am still thinking. )
> >>
> >> Also, beings you stated that this is how it all began, can you remember
> >> exactly what was going on? You may trigger my thoughts.
> >> --
> >>
> >> All the Best,
> >> Kelly (MS-MVP/DTS&XP)
> >>
> >> Happy Birthday if today is your birthday!
> >>
> >> Taskbar Repair Tool Plus!
> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
> >>
> >>
> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
> >> news:86AF9542-7922-4EDA-8FBA-7871E341D39D@microsoft.com...
> >> > Kelly,
> >> >
> >> > I hope I get this fixed before I have to travel from CA to Louisiana
> >> > :-)
> >> >
> >> > I'm glad you spotted the audio; that is actually when all of this
> >> > started.
> >> > I
> >> > called Emachines one night and after poking around the Tech tells me
> >> > that
> >> > the
> >> > on-board audio can sometimes die. I tried to install a Soundblaster
> >> > card
> >> > but
> >> > that failed. I realize now that it probably had to do with the Cryto
> >> > service
> >> > not working so it couldn't/wouldn't load properly. It is also around
> >> > the
> >> > time
> >> > when the MS security updates started failing to install.
> >> > I will try to run the reg update you have tonight - is there anything
> >> > else
> >> > you can think of to try regarding all the services being shut down, or
> >> > do
> >> > I
> >> > just wait for the results of my HiJack This log to be checked?
> >> >
> >> > Thanks,
> >> > Albert
> >> >
> >> > "Kelly" wrote:
> >> >
> >> >> Hi Albert,
> >> >>
> >> >> That would be the first place I would begin. I also noticed that your
> >> >> audio
> >> >> seemed compromised. On line 371 I have a reg file that restores many
> >> >> services that become disabled due to malware exploits.
> >> >> http://www.kellys-korner-xp.com/xp_tweaks.htm
> >> >>
> >> >> If you are planning to visit Louisiana soon, bring your system on
> >> >> over.
> >> >> )
> >> >> --
> >> >>
> >> >> All the Best,
> >> >> Kelly (MS-MVP/DTS&XP)
> >> >>
> >> >> Happy Birthday if today is your birthday!
> >> >>
> >> >> Taskbar Repair Tool Plus!
> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
> >> >>
> >> >>
> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
> >> >> news:EF139D79-3990-4BD4-8412-CE80DBDDC6B6@microsoft.com...
> >> >> > Kelly,
> >> >> >
> >> >> > I'm not sure that getting the drivers for the Unknown adapter will
> >> >> > work,
> >> >> > but
> >> >> > I will try it. I assume that since the printer won't work, and
> >> >> > trying
> >> >> > to
> >> >> > "Copy" files to a backup drive doesn't work, that even if I have the
> >> >> > drivers
> >> >> > I won't be able to launch the update.
> >> >> >
> >> >> > I can open files, like pictures and such, and then save them
> >> >> > individually
> >> >> > to
> >> >> > a backup drive, but not as a group using Windows Explorer. Nothing
> >> >> > happens
> >> >> > at
> >> >> > all.
> >> >> >
> >> >> > BTW - I have posted the HiJack log to aumha and I might try
> >> >> > bleepingcomputers as well.
> >> >> >
> >> >> > Thanks,
> >> >> > Albert
> >> >> >
> >> >> > "Kelly" wrote:
> >> >> >
> >> >> >> Alberto,
> >> >> >>
> >> >> >> Get the drivers from another system and save to either a pen drive
> >> >> >> or
> >> >> >> cd.
> >> >> >>
> >> >> >> --
> >> >> >>
> >> >> >> All the Best,
> >> >> >> Kelly (MS-MVP/DTS&XP)
> >> >> >>
> >> >> >> Happy Birthday if today is your birthday!
> >> >> >>
> >> >> >> Taskbar Repair Tool Plus!
> >> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
> >> >> >>
> >> >> >>
> >> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
> >> >> >> news:6C33B08C-A3F2-449E-8422-D76E3C6969EA@microsoft.com...
> >> >> >> > Kelly,
> >> >> >> >
> >> >> >> > At this time I won't be able to do anything since the services
> >> >> >> > aren't
> >> >> >> > working I can't get on the Net to update the drivers or research
> >> >> >> > the
> >> >> >> > Unknown.
> >> >> >> > I did try to update it a few weeks ago but failed. It seemed all
> >> >> >> > else
> >> >> >> > was
> >> >> >> > working at the time (although iTunes and Nokia applications were
> >> >> >> > having
> >> >> >> > some
> >> >> >> > issues) so I didn't pursue it.
> >> >> >> >
> >> >> >> > If you know of any malware or other reason why most of my
> >> >> >> > services
> >> >> >> > will
> >> >> >> > no
> >> >> >> > longer start, let me know.
> >> >> >> >
> >> >> >> > Thanks,
> >> >> >> > Albert
> >> >> >> >
> >> >> >> > "Kelly" wrote:
> >> >> >> >
> >> >> >> >> Alberto you need to address the unknown network adapter, first.
> >> >> >> >> Go
> >> >> >> >> to
> >> >> >> >> the
> >> >> >> >> website of your system manufacturer then select make, model and
> >> >> >> >> OS.
> >> >> >> >> Scroll
> >> >> >> >> down to find the network drivers. If this card is an add-on
> >> >> >> >> either
> >> >> >> >> use
> >> >> >> >> the
> >> >> >> >> cd, etc that came with it or download the drivers via the net.
> >> >> >> >>
> >> >> >> >> --
> >> >> >> >>
> >> >> >> >> All the Best,
> >> >> >> >> Kelly (MS-MVP/DTS&XP)
> >> >> >> >>
> >> >> >> >> Happy Birthday if today is your birthday!
> >> >> >> >>
> >> >> >> >> Taskbar Repair Tool Plus!
> >> >> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
> >> >> >> >> news:C0A729FA-D604-4669-91FA-AA64D15D0E42@microsoft.com...
> >> >> >> >> > Gerry,
> >> >> >> >> >
> >> >> >> >> > Device Mgr looks OK. Nothing different from a month ago. There
> >> >> >> >> > is
> >> >> >> >> > an
> >> >> >> >> > Unknown
> >> >> >> >> > Network Adapter with the yellow exclamation, but that was
> >> >> >> >> > there
> >> >> >> >> > before.
> >> >> >> >> >
> >> >> >> >> > I cannot print, nor connect to the internet, so I can't
> >> >> >> >> > copy/paste
> >> >> >> >> > the
> >> >> >> >> > Event
> >> >> >> >> > Viewer; I will have to write it out here.
> >> >> >> >> >
> >> >> >> >> > Under Security I have 3 events -
> >> >> >> >> > Falure Audit 11/2/08 Security Policy Change #615 Network
> >> >> >> >> > Service
> >> >> >> >> > Same on 11/1/08
> >> >> >> >> > Same on 10/28/08
> >> >> >> >> >
> >> >> >> >> > Under System I have many events-
> >> >> >> >> > Error Service control Manager 7023 (Only 1 day is listed
> >> >> >> >> > 11/2/08
> >> >> >> >> > and
> >> >> >> >> > most
> >> >> >> >> > of
> >> >> >> >> > the errors are this one).
> >> >> >> >> > Error PlugPlay Manager 12 (5 instances)
> >> >> >> >> > Error UPS 2481 (1 instance)
> >> >> >> >> >
> >> >> >> >> > I cannot get any info when dbl-clicking or Rt-click and try to
> >> >> >> >> > open
> >> >> >> >> > Properties
> >> >> >> >> >
> >> >> >> >> > Is there a way to use Recovery Console?
> >> >> >> >> >
> >> >> >> >> > "Gerry" wrote:
> >> >> >> >> >
> >> >> >> >> >> Alberto
> >> >> >> >> >>
> >> >> >> >> >> I had System File Checker in mind but given the lack of a CD
> >> >> >> >> >> that
> >> >> >> >> >> is
> >> >> >> >> >> not
> >> >> >> >> >> practical.
> >> >> >> >> >>
> >> >> >> >> >> What errors appear in Event Viewer?
> >> >> >> >> >>
> >> >> >> >> >> Please post copies of all Error and Warning Reports appearing
> >> >> >> >> >> in
> >> >> >> >> >> the
> >> >> >> >> >> System and Application logs in Event Viewer relating to the
> >> >> >> >> >> last
> >> >> >> >> >> boot
> >> >> >> >> >> in
> >> >> >> >> >> normal mode . No Information Reports or Duplicates please.

Kelly

Good luck and you are most welcome. )

--

All the Best,
Kelly (MS-MVP/DTS&XP)

Happy Birthday if today is your birthday!

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Alberto" <Alberto@discussions.microsoft.com> wrote in message
news:9E0FDF6B-E43C-4E77-B775-B3380C51CFA6@microsoft.com...
> Well, I have been advised by the good folks at aumha to scrub the drive
> and
> start over. Way too many problems and high probability a lot of stuff
> hiding
> in dark places.
> Thanks for all your efforts - I may be posting once I try a Restore
> because
> that is all the eMachines people gave me.
>
> Albert
>
> "Kelly" wrote:
>
>> Hi Albert,
>>
>> My youngest son is just out of HS as well and MySpace came way after this
>> happened! )
>>
>> However, this is all too much the same. I still remember sitting there
>> toying with all of the services to figure it out. What I do remember is
>> that the Plug and Play Service had a lot to do with it. If yours isn't
>> set
>> to Automatic, do so and then reboot.
>>
>> Also, without having to re-read this thread to know if I had already
>> suggested this:
>>
>> Start/Run/Msconfig - Startup and Services
>>
>> See what is running during the boot process and what is disabled.
>>
>> As for HJT - what you need to do is Customize/Configure it. For the
>> startups that you want, set them to the ignore list. After that, mark
>> all
>> to be selected.
>>
>>
>> --
>>
>> All the Best,
>> Kelly (MS-MVP/DTS&XP)
>>
>> Happy Birthday if today is your birthday!
>>
>> Taskbar Repair Tool Plus!
>> http://www.kellys-korner-xp.com/taskbarplus!.htm
>>
>>
>> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> news:642BF49C-451D-40CA-BB4F-CE75D5FA4C16@microsoft.com...
>> > No Kelly, I don't remember exactly what was happening at the time.
>> > My high school kids use it a lot; they use MySpace and one day we
>> > booted
>> > up
>> > and there was no sound.
>> > But your comment about changing themes is interesting. I had issues
>> > with
>> > strange computer behavior last year so I did a Restore. When I tried to
>> > re-create the 4 profiles on the computer, my son's would not remain as
>> > he
>> > left it unless I confiigured his profile as an administrator. it has
>> > been
>> > that way ever since.
>> > I went through my HJT log today and noticed quite a few bad entries.
>> > Now I
>> > am waiting for instructions on what to do next so i don't mess it up
>> > even
>> > worse.
>> > Thanks
>> >
>> > "Kelly" wrote:
>> >
>> >> LOL, I hear that ~ but if you change your mind. )
>> >>
>> >> I spotted it because this same thing had happened to a system here for
>> >> one
>> >> of my boys. The theme would change, the sound would go and many
>> >> services
>> >> were disabled. So I wrote a script to change it all at once (each
>> >> time
>> >> the
>> >> system was woke). I forget how I finally solved this. It was with XP
>> >> but
>> >> years ago.
>> >>
>> >> As luck would have it, I no longer have that script; however, wrote
>> >> the
>> >> smaller one for a client of mine who had similar issues - the one you
>> >> used.
>> >>
>> >> What you can try is a .bat file that I have stored on line 377 (right
>> >> hand
>> >> side): http://www.kellys-korner-xp.com/xp_tweaks.htm
>> >>
>> >> Other than that....I am still thinking. )
>> >>
>> >> Also, beings you stated that this is how it all began, can you
>> >> remember
>> >> exactly what was going on? You may trigger my thoughts.
>> >> --
>> >>
>> >> All the Best,
>> >> Kelly (MS-MVP/DTS&XP)
>> >>
>> >> Happy Birthday if today is your birthday!
>> >>
>> >> Taskbar Repair Tool Plus!
>> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >>
>> >>
>> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> >> news:86AF9542-7922-4EDA-8FBA-7871E341D39D@microsoft.com...
>> >> > Kelly,
>> >> >
>> >> > I hope I get this fixed before I have to travel from CA to Louisiana
>> >> > :-)
>> >> >
>> >> > I'm glad you spotted the audio; that is actually when all of this
>> >> > started.
>> >> > I
>> >> > called Emachines one night and after poking around the Tech tells me
>> >> > that
>> >> > the
>> >> > on-board audio can sometimes die. I tried to install a Soundblaster
>> >> > card
>> >> > but
>> >> > that failed. I realize now that it probably had to do with the Cryto
>> >> > service
>> >> > not working so it couldn't/wouldn't load properly. It is also around
>> >> > the
>> >> > time
>> >> > when the MS security updates started failing to install.
>> >> > I will try to run the reg update you have tonight - is there
>> >> > anything
>> >> > else
>> >> > you can think of to try regarding all the services being shut down,
>> >> > or
>> >> > do
>> >> > I
>> >> > just wait for the results of my HiJack This log to be checked?
>> >> >
>> >> > Thanks,
>> >> > Albert
>> >> >
>> >> > "Kelly" wrote:
>> >> >
>> >> >> Hi Albert,
>> >> >>
>> >> >> That would be the first place I would begin. I also noticed that
>> >> >> your
>> >> >> audio
>> >> >> seemed compromised. On line 371 I have a reg file that restores
>> >> >> many
>> >> >> services that become disabled due to malware exploits.
>> >> >> http://www.kellys-korner-xp.com/xp_tweaks.htm
>> >> >>
>> >> >> If you are planning to visit Louisiana soon, bring your system on
>> >> >> over.
>> >> >> )
>> >> >> --
>> >> >>
>> >> >> All the Best,
>> >> >> Kelly (MS-MVP/DTS&XP)
>> >> >>
>> >> >> Happy Birthday if today is your birthday!
>> >> >>
>> >> >> Taskbar Repair Tool Plus!
>> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >> >>
>> >> >>
>> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> >> >> news:EF139D79-3990-4BD4-8412-CE80DBDDC6B6@microsoft.com...
>> >> >> > Kelly,
>> >> >> >
>> >> >> > I'm not sure that getting the drivers for the Unknown adapter
>> >> >> > will
>> >> >> > work,
>> >> >> > but
>> >> >> > I will try it. I assume that since the printer won't work, and
>> >> >> > trying
>> >> >> > to
>> >> >> > "Copy" files to a backup drive doesn't work, that even if I have
>> >> >> > the
>> >> >> > drivers
>> >> >> > I won't be able to launch the update.
>> >> >> >
>> >> >> > I can open files, like pictures and such, and then save them
>> >> >> > individually
>> >> >> > to
>> >> >> > a backup drive, but not as a group using Windows Explorer.
>> >> >> > Nothing
>> >> >> > happens
>> >> >> > at
>> >> >> > all.
>> >> >> >
>> >> >> > BTW - I have posted the HiJack log to aumha and I might try
>> >> >> > bleepingcomputers as well.
>> >> >> >
>> >> >> > Thanks,
>> >> >> > Albert
>> >> >> >
>> >> >> > "Kelly" wrote:
>> >> >> >
>> >> >> >> Alberto,
>> >> >> >>
>> >> >> >> Get the drivers from another system and save to either a pen
>> >> >> >> drive
>> >> >> >> or
>> >> >> >> cd.
>> >> >> >>
>> >> >> >> --
>> >> >> >>
>> >> >> >> All the Best,
>> >> >> >> Kelly (MS-MVP/DTS&XP)
>> >> >> >>
>> >> >> >> Happy Birthday if today is your birthday!
>> >> >> >>
>> >> >> >> Taskbar Repair Tool Plus!
>> >> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >> >> >>
>> >> >> >>
>> >> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in message
>> >> >> >> news:6C33B08C-A3F2-449E-8422-D76E3C6969EA@microsoft.com...
>> >> >> >> > Kelly,
>> >> >> >> >
>> >> >> >> > At this time I won't be able to do anything since the services
>> >> >> >> > aren't
>> >> >> >> > working I can't get on the Net to update the drivers or
>> >> >> >> > research
>> >> >> >> > the
>> >> >> >> > Unknown.
>> >> >> >> > I did try to update it a few weeks ago but failed. It seemed
>> >> >> >> > all
>> >> >> >> > else
>> >> >> >> > was
>> >> >> >> > working at the time (although iTunes and Nokia applications
>> >> >> >> > were
>> >> >> >> > having
>> >> >> >> > some
>> >> >> >> > issues) so I didn't pursue it.
>> >> >> >> >
>> >> >> >> > If you know of any malware or other reason why most of my
>> >> >> >> > services
>> >> >> >> > will
>> >> >> >> > no
>> >> >> >> > longer start, let me know.
>> >> >> >> >
>> >> >> >> > Thanks,
>> >> >> >> > Albert
>> >> >> >> >
>> >> >> >> > "Kelly" wrote:
>> >> >> >> >
>> >> >> >> >> Alberto you need to address the unknown network adapter,
>> >> >> >> >> first.
>> >> >> >> >> Go
>> >> >> >> >> to
>> >> >> >> >> the
>> >> >> >> >> website of your system manufacturer then select make, model
>> >> >> >> >> and
>> >> >> >> >> OS.
>> >> >> >> >> Scroll
>> >> >> >> >> down to find the network drivers. If this card is an add-on
>> >> >> >> >> either
>> >> >> >> >> use
>> >> >> >> >> the
>> >> >> >> >> cd, etc that came with it or download the drivers via the
>> >> >> >> >> net.
>> >> >> >> >>
>> >> >> >> >> --
>> >> >> >> >>
>> >> >> >> >> All the Best,
>> >> >> >> >> Kelly (MS-MVP/DTS&XP)
>> >> >> >> >>
>> >> >> >> >> Happy Birthday if today is your birthday!
>> >> >> >> >>
>> >> >> >> >> Taskbar Repair Tool Plus!
>> >> >> >> >> http://www.kellys-korner-xp.com/taskbarplus!.htm
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> "Alberto" <Alberto@discussions.microsoft.com> wrote in
>> >> >> >> >> message
>> >> >> >> >> news:C0A729FA-D604-4669-91FA-AA64D15D0E42@microsoft.com...
>> >> >> >> >> > Gerry,
>> >> >> >> >> >
>> >> >> >> >> > Device Mgr looks OK. Nothing different from a month ago.
>> >> >> >> >> > There
>> >> >> >> >> > is
>> >> >> >> >> > an
>> >> >> >> >> > Unknown
>> >> >> >> >> > Network Adapter with the yellow exclamation, but that was
>> >> >> >> >> > there
>> >> >> >> >> > before.
>> >> >> >> >> >
>> >> >> >> >> > I cannot print, nor connect to the internet, so I can't
>> >> >> >> >> > copy/paste
>> >> >> >> >> > the
>> >> >> >> >> > Event
>> >> >> >> >> > Viewer; I will have to write it out here.
>> >> >> >> >> >
>> >> >> >> >> > Under Security I have 3 events -
>> >> >> >> >> > Falure Audit 11/2/08 Security Policy Change #615 Network
>> >> >> >> >> > Service
>> >> >> >> >> > Same on 11/1/08
>> >> >> >> >> > Same on 10/28/08
>> >> >> >> >> >
>> >> >> >> >> > Under System I have many events-
>> >> >> >> >> > Error Service control Manager 7023 (Only 1 day is listed
>> >> >> >> >> > 11/2/08
>> >> >> >> >> > and
>> >> >> >> >> > most
>> >> >> >> >> > of
>> >> >> >> >> > the errors are this one).
>> >> >> >> >> > Error PlugPlay Manager 12 (5 instances)
>> >> >> >> >> > Error UPS 2481 (1 instance)
>> >> >> >> >> >
>> >> >> >> >> > I cannot get any info when dbl-clicking or Rt-click and try
>> >> >> >> >> > to
>> >> >> >> >> > open
>> >> >> >> >> > Properties
>> >> >> >> >> >
>> >> >> >> >> > Is there a way to use Recovery Console?
>> >> >> >> >> >
>> >> >> >> >> > "Gerry" wrote:
>> >> >> >> >> >
>> >> >> >> >> >> Alberto
>> >> >> >> >> >>
>> >> >> >> >> >> I had System File Checker in mind but given the lack of a
>> >> >> >> >> >> CD
>> >> >> >> >> >> that
>> >> >> >> >> >> is
>> >> >> >> >> >> not
>> >> >> >> >> >> practical.
>> >> >> >> >> >>
>> >> >> >> >> >> What errors appear in Event Viewer?
>> >> >> >> >> >>
>> >> >> >> >> >> Please post copies of all Error and Warning Reports
>> >> >> >> >> >> appearing
>> >> >> >> >> >> in
>> >> >> >> >> >> the
>> >> >> >> >> >> System and Application logs in Event Viewer relating to
>> >> >> >> >> >> the
>> >> >> >> >> >> last
>> >> >> >> >> >> boot
>> >> >> >> >> >> in
>> >> >> >> >> >> normal mode . No Information Reports or Duplicates please.