[Inactive] Internet Explorer Connection & Windows Defender

Printable View

Show 40 post(s) from this thread on one page

May 26th, 2012, 12:14 AM
Broni
Quote:

When I click on IE now it says c:\Program Files\Internet Explorer\iexplore.exe Illegal Operation attempted on a registry key that has been marked for deletion

Please pay attention to my instructions:

Quote:

**Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.

Combofix log looks good.
Let's see about your internet connection...

Please download Farbar Service Scanner Download Link and run it on the computer with the issue.
- Make sure the following options are checked:
  - Internet Services
  - Windows Firewall
  - System Restore
  - Security Center/Action Center
  - Windows Update
  - Windows Defender
- Press "Scan".
- It will create a log (FSS.txt) in the same directory the tool is run.
- Please copy and paste the log to your reply.
May 26th, 2012, 10:13 PM
lesliel

Internet Explorer Connection & Windows Defender

Farbar Service Scanner Version: 25-05-2012
Ran by owner (administrator) on 26-05-2012 at 21:11:31
Running from "F:\"
Microsoft® Windows Vista™ Home Premium (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
Checking ServiceDll: ATTENTION!=====> Unable to open Dhcp registry key. The service key does not exist.

Connection Status:
==============
Localhost is blocked.
There is no connection to network.
Attempt to access Google IP returned error: Other errors
Attempt to access Yahoo IP returned error: Other errors

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Security Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2008-05-14 03:09] - [2008-05-14 03:09] - 0803328 ____A (Microsoft Corporation) 5DF77458AA92FDB36FCE79C60F74AB5D

C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll
[2009-03-09 15:22] - [2008-10-16 16:13] - 1809944 ____A (Microsoft Corporation) 84A03BFE004B06E93408618976DC9C14

C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll
[2008-05-14 03:12] - [2008-05-14 03:12] - 0265912 ____A (Microsoft Corporation) 0D5AD0E71FF5DDAC5DD2F443B499ABD0

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit

**** End of log ****
May 26th, 2012, 10:19 PM
Broni

We have couple of issues there.

First we have one registry key missing.

Following steps involve registry editing. Please create new restore point before proceeding!!!
How to:
XP - http://support.microsoft.com/kb/948247
Vista and Seven - http://www.howtogeek.com/howto/windo...ystem-restore/

Download following registry key: http://www.bleepstatic.com/fhost/uploads/1/dhcp.reg
Double click on dhcp.reg file and confirm the prompt.
Restart computer.
Post new FSS log.
May 26th, 2012, 10:27 PM
lesliel

Internet Explorer Connection & Windows Defender

Thank you. When trying to create a restore I get the error, "Could not create the scheduled task for the following reason: The request is not supported. (0x80070032)
May 26th, 2012, 10:31 PM
Broni

See if this will fix the error: http://www.winhelponline.com/article...ows-Vista.html
May 26th, 2012, 10:41 PM
lesliel

I have done that and both Windows Event Log and Task Scheduler have been started and on Automatic before and after the restart.
May 26th, 2012, 11:06 PM
Broni

Skip creating restore point for now and proceed with applying registry fix.
May 26th, 2012, 11:15 PM
lesliel

It said registry key installed successfully.

Farbar Service Scanner Version: 25-05-2012
Ran by owner (administrator) on 26-05-2012 at 22:13:50
Running from "F:\"
Microsoft® Windows Vista™ Home Premium (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

Connection Status:
==============
Localhost is blocked.
There is no connection to network.
Attempt to access Google IP returned error: Other errors
Attempt to access Yahoo IP returned error: Other errors

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Security Center:
============
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.
Checking LEGACY_wscsvc: ATTENTION!=====> Unable to open LEGACY_wscsvc\0000 registry key. The key does not exist.

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2008-05-14 03:09] - [2008-05-14 03:09] - 0803328 ____A (Microsoft Corporation) 5DF77458AA92FDB36FCE79C60F74AB5D

C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll
[2009-03-09 15:22] - [2008-10-16 16:13] - 1809944 ____A (Microsoft Corporation) 84A03BFE004B06E93408618976DC9C14

C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll
[2008-05-14 03:12] - [2008-05-14 03:12] - 0265912 ____A (Microsoft Corporation) 0D5AD0E71FF5DDAC5DD2F443B499ABD0

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit

**** End of log ****
May 26th, 2012, 11:24 PM
Broni

Very good.
That fixed the missing registry key.
We have another one missing but we'll take care of it later.

For now we have this issue:

Quote:

Localhost is blocked.

Go Start>Run (Start search in Vista and 7), type in:
cmd
Click OK (in Vista and 7, while holding CTRL, and SHIFT, press Enter).

At Command Prompt, type in:
netsh int ip reset reset.log
Hit Enter.
Type in:
netsh winsock reset catalog
Hit Enter.

Restart computer.

Post new FSS log.
May 26th, 2012, 11:33 PM
lesliel

c:\windows\system32>netsh int ip reset reset.log = Reseting echo request, failed. Access is denied. Reseting global, OK!, Reseting interface, OK!

reset catalog = success

Farbar Service Scanner Version: 25-05-2012
Ran by owner (administrator) on 26-05-2012 at 22:32:24
Running from "F:\"
Microsoft® Windows Vista™ Home Premium (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

Connection Status:
==============
Localhost is blocked.
There is no connection to network.
Attempt to access Google IP returned error: Other errors
Attempt to access Yahoo IP returned error: Other errors

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Security Center:
============
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.
Checking LEGACY_wscsvc: ATTENTION!=====> Unable to open LEGACY_wscsvc\0000 registry key. The key does not exist.

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2008-05-14 03:09] - [2008-05-14 03:09] - 0803328 ____A (Microsoft Corporation) 5DF77458AA92FDB36FCE79C60F74AB5D

C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll
[2009-03-09 15:22] - [2008-10-16 16:13] - 1809944 ____A (Microsoft Corporation) 84A03BFE004B06E93408618976DC9C14

C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll
[2008-05-14 03:12] - [2008-05-14 03:12] - 0265912 ____A (Microsoft Corporation) 0D5AD0E71FF5DDAC5DD2F443B499ABD0

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit

**** End of log ****
May 26th, 2012, 11:49 PM
Broni
Please download MiniToolBox, save it to your desktop and run it.

Checkmark following boxes:
- Report IE Proxy Settings
- Report FF Proxy Settings
- List content of Hosts
- List IP configuration
- List Winsock Entries
- List last 10 Event Viewer log
- List Devices (do NOT change any settings)
- List Restore Points
Click Go and post the result.
May 26th, 2012, 11:54 PM
lesliel

MiniToolBox by Farbar Version: 14-01-2012
Ran by owner (administrator) on 26-05-2012 at 22:53:05
Microsoft® Windows Vista™ Home Premium (X86)
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Broadcom 802.11b/g WLAN = Wireless Network Connection (Connected)
NVIDIA nForce Networking Controller = Local Area Connection (Media disconnected)

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set interface luid=loopback_0 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_4 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=wireless_0 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled

popd
# End of IPv4 configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . :
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 802.11b/g WLAN
Physical Address. . . . . . . . . : 00-1A-73-5B-88-22
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::1cfc:2e7b:56dd:6470%10(Preferred)
Autoconfiguration IPv4 Address. . : 169.254.100.112(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NVIDIA nForce Networking Controller
Physical Address. . . . . . . . . : 00-1B-24-43-19-C4
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 9:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{D5C1FE52-2F34-41A3-9F9D-BF208FE88DA7}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5efe:169.254.100.112%12(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 7:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{28F058A5-ABB1-48F7-A91F-A3143EF6CC6C}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 10:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 6TO4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: UnKnown
Address: 127.0.0.1:53

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Ping request could not find host google.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1:53

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Ping request could not find host yahoo.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1:53

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Ping request could not find host bleepingcomputer.com. Please check the name and try again.

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
10 ...00 1a 73 5b 88 22 ...... Broadcom 802.11b/g WLAN
8 ...00 1b 24 43 19 c4 ...... NVIDIA nForce Networking Controller
1 ........................... Software Loopback Interface 1
12 ...00 00 00 00 00 00 00 e0 isatap.{D5C1FE52-2F34-41A3-9F9D-BF208FE88DA7}
11 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
13 ...00 00 00 00 00 00 00 e0 isatap.{28F058A5-ABB1-48F7-A91F-A3143EF6CC6C}
9 ...00 00 00 00 00 00 00 e0 6TO4 Adapter
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.100.112 281
169.254.100.112 255.255.255.255 On-link 169.254.100.112 281
169.254.255.255 255.255.255.255 On-link 169.254.100.112 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 169.254.100.112 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 169.254.100.112 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
10 281 fe80::/64 On-link
12 286 fe80::5efe:169.254.100.112/128
On-link
10 281 fe80::1cfc:2e7b:56dd:6470/128
On-link
1 306 ff00::/8 On-link
10 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [227328] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\mswsock.dll [227328] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/26/2012 10:04:20 PM) (Source: EventSystem) (User: )
Description: d:\vista_gdr\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (05/26/2012 09:58:45 PM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\wbem\wmiprvse.exe; Descripton = QuickRestoreMaker Generated; Hr = 0x8004230f).

Error: (05/26/2012 09:58:45 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details BeginPrepareSnapshot({2cf67ef2-e813-40f5-a5f7-8a847137ca75},{4803be85-041d-4f59-acc4-3bf3b966d1b1},\\?\Volume{6f5bb887-4f0c-11dc-bc22-806e6f6e6963}\) [hr = 0x80042308].

Operation:
Add a Volume to a Shadow Copy Set

Context:
Execution Context: Coordinator

Error: (05/26/2012 09:58:45 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Volume/disk not connected or not found.
Error context: GetComputerNameEx(3, NULL, [0]) [0].

Operation:
Processing BeginPrepareSnapshot
Snapshot Context

Context:
Execution Context: System Provider
Volume Name: \\?\Volume{6f5bb887-4f0c-11dc-bc22-806e6f6e6963}\
Snapshot ID: {4803be85-041d-4f59-acc4-3bf3b966d1b1}

Error: (05/26/2012 09:49:33 PM) (Source: EventSystem) (User: )
Description: d:\vista_gdr\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (05/26/2012 09:58:51 AM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\msiexec.exe /V; Descripton = Installed Microsoft Fix it 50199; Hr = 0x8004230f).

Error: (05/26/2012 09:58:51 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details BeginPrepareSnapshot({33295485-ae5c-4309-ab85-043aed07d058},{952469fa-2d97-4aad-84c6-844aa43c4ac4},\\?\Volume{6f5bb887-4f0c-11dc-bc22-806e6f6e6963}\) [hr = 0x80042308].

Operation:
Add a Volume to a Shadow Copy Set

Context:
Execution Context: Coordinator

Error: (05/26/2012 09:58:51 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Volume/disk not connected or not found.
Error context: GetComputerNameEx(3, NULL, [0]) [0].

Operation:
Processing BeginPrepareSnapshot
Snapshot Context

Context:
Execution Context: System Provider
Volume Name: \\?\Volume{6f5bb887-4f0c-11dc-bc22-806e6f6e6963}\
Snapshot ID: {952469fa-2d97-4aad-84c6-844aa43c4ac4}

Error: (05/26/2012 09:57:31 AM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\msiexec.exe /V; Descripton = Installed Microsoft Fix it 50199; Hr = 0x8004230f).

Error: (05/26/2012 09:57:31 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details BeginPrepareSnapshot({871215ca-b875-4955-900d-10f646edbb12},{4187bf2a-ba69-4ce8-9f5f-222a85502d69},\\?\Volume{6f5bb887-4f0c-11dc-bc22-806e6f6e6963}\) [hr = 0x80042308].

Operation:
Add a Volume to a Shadow Copy Set

Context:
Execution Context: Coordinator

System errors:
=============
Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: DHCP Client%%5

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: WinHTTP Web Proxy Auto-Discovery ServiceDHCP Client%%0

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: DHCP Client%%5

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: WinHTTP Web Proxy Auto-Discovery ServiceDHCP Client%%0

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: DHCP Client%%5

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: WinHTTP Web Proxy Auto-Discovery ServiceDHCP Client%%0

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: DHCP Client%%5

Error: (05/26/2012 10:41:47 PM) (Source: Service Control Manager) (User: )
Description: WinHTTP Web Proxy Auto-Discovery ServiceDHCP Client%%0

Error: (05/26/2012 10:41:47 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 0.0.0.0

Update Source: %NT AUTHORITY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\NETWORK SERVICE

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Error: (05/26/2012 10:41:47 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 0.0.0.0

Update Source: %NT AUTHORITY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\NETWORK SERVICE

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Microsoft Office Sessions:
=========================

========================= Devices: ================================

========================= Restore Points ==================================

19-04-2012 01:12:13 Scheduled Checkpoint
23-05-2012 13:54:30 Removed Trend Micro AntiVirus.
23-05-2012 13:56:47 Removed Trend Micro AntiVirus.
23-05-2012 14:00:23 Removed Trend Micro AntiVirus.
23-05-2012 14:13:10 Removed Trend Micro AntiVirus.
23-05-2012 22:45:48 Restore Operation

**** End of log ****
May 27th, 2012, 12:13 AM
Broni

Quote:

NVIDIA nForce Networking Controller = Local Area Connection (Media disconnected)

Is the ethernet cable plugged in?
May 27th, 2012, 12:20 AM
lesliel

It was wireless, but I have now plugged it in and have the same result.
May 27th, 2012, 12:25 AM
Broni

Do you still have that original MBAM log where some items have been removed?

Show 40 post(s) from this thread on one page