Windows Logon UI Error?

Hi Guys

I have just recently installed a new Logitech webcam on my system and when I rebooted after installing the software I have ended up with a Windows Logon UI encountered a problem box

Error Signature

szAppName : logonui.exe szAppVer : 0.0.0.0 szModName : unknown
szModVer : 0.0.0.0 offset : 00000000

Tech Details

C:\WINDOWS\PCHealth\ErrorRep\UserDumps\logonui.exe.20060825-160846-00.mdmp
C:\DOCUME~1\PAULSM~1\LOCALS~1\Temp\WER45b9.dir00\appcompat.txt

The problem is it causes other errors especially with Dr Watson Debugging something or other. I will add that error to the thread when it comes up again.

Dr Watson Error appeared.

Dr Watson Postmortem Debugger has encountered an error

Error Sig

AppName: drwtsn32.exe AppVer: 5.1.2600.0 ModName: kernel32.dll
ModVer: 5.1.2600.2945 Offset: 00082fc4

Now when I try to access any application it just keeps telling me that the application has encountered an error and will close.


I have tried reinstalling the Logitech software again but it always happens.

Anyone shed any light please?

Thanks

Paul

Hello Paul :)

There is a chance that it is a trojan, so run these scans to eliminate this first. Possibly is not that, but better to be sure.

Trojan Scan http://www.windowsecurity.com/trojanscan/

Housecall http://housecall.trendmicro.com/

Take a note os any names found.

Elaine

Hi Elaine

I have ran Housecall and it did not find anything serious.

I cannot run the trojan scanner as it keeps coming up with error loading engine.

The problem now is I have tried to rollback the computer when I installed the camera and that won't let me do that! I tried going back a month but it will not let me do that either.

Now when I boot I keep getting this error message after desktop loads up.

Automatic Updates has encountered a problem and needs to close.

szAppName : wuauclt.exe szAppVer : 5.8.0.2469 szModName : kernel32.dll
szModVer : 5.1.2600.2945 offset : 00082fc4

The funny thing is I keep seeing this exact error window for a few other things I have tried to access today.

Paul

Paul

Quote:

---

The funny thing is I keep seeing this exact error window for a few other things I have tried to access today.

---

It could be more serious in that case. Hardware, file system, memory, in fact almost anything :(

Try the following for a start
1. Run system file check. Get your XP installation CD out
Start/Run and type in
sfc /scannow ( there is a space before /)

2. Test memory
If you have more than one stick of RAM (256MB or more) take one out and try again. If it does not help or makes things worse swap the sticks and try again. This will identify if you have a bad stick.

OR
You can put either of these free programs on a floppy and test the RAM

memtest86
http://www.memtest86.com/

Windows Memory Diagnostic
http://oca.microsoft.com/en/windiag.asp

3. Also look here for errors to help us

a) Right click My Computer / Properties / Hardware / Device Manager.
Look for "Yellow" errors

b) Control Panel / Performance and Maintenance / Admin Tools / Event Viewer / System.
Look for "Red" errors. Double click on error.
If there are a lot, some of them will be duplicates so just post one of each.
Take a note of the Event ID and also the Source and post them back.

Try #3 first and post back what you find

Elaine

Hi Elaine

Tried the sfc /scannow and it didn't work?

Have not tried the mem sticks but I do have a few programmes as you suggested to try, but I don't think its that!

As for #3 lots of errors from the 25th onwards. Will look and post what I find.

Thanks

Paul

Here are the first few and there are lots

History of Failed Apps

Faulting application regsvr32.exe, version 5.1.2600.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application runonce.exe, version 6.0.2900.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application grpconv.exe, version 5.1.2600.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application logonui.exe, version 6.0.2900.2180, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Thanks

Paul

Paul,

If you uninstall the Logitech webcam do you still get these errors?

If it is not that
In Event viewer I think you have looked at "Applications".
Could you please go back and look at "System"
We need you to post the Event ID and also the Source fo each RED error.

Are there any errors in Device Manager?

What happened with system file check?

Elaine

Hi Elaine

If I uninstall the webcam I still get the same errors.

System file check did not work. I typed it in and nothing happened??

No errors in Device Manager

List of Event ID and Source for "System" to follow.

See previous post Elaine for answers to other questions.

System ID Events & Sources

Error 25/07/2006 19:16:22 Service Control Manager None 7026 N/A PAUL-T3DJB6S0GV

The ASPI32 service failed to start due to the following error:
The system cannot find the file specified.


Error 25/07/2006 19:16:22 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV
The following boot-start or system-start driver(s) failed to load:
ANVIOCTL

They appear quite regular as a pair



Error 26/07/2006 19:13:55 sr None 1 N/A PAUL-T3DJB6S0GV

The System Restore filter encountered the unexpected error '0xC0000056' while processing the file 'klin.sys' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.

This one concerns me as I could not rollback to an earlier date?



Error 27/07/2006 06:03:37 Dhcp None 1002 N/A PAUL-T3DJB6S0GV

The IP address lease 192.168.0.2 for the Network Card with network address 000D611E51E8 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).

Error 20/08/2006 17:48:40 eventlog None 6004 N/A PAUL-T3DJB6S0GV

A driver packet received from the I/O subsystem was invalid. The data is the packet.

Error 25/08/2006 17:09:15 DCOM None 10010 Paul Smith PAUL-T3DJB6S0GV

The server {66B093B7-B5E3-4CFE-B32B-FEB55F172481} did not register with DCOM within the required timeout.

Error 25/08/2006 23:36:01 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV

Timeout (30000 milliseconds) waiting for the kavsvc service to connect.


Error 25/08/2006 23:36:01 Service Control Manager None 7009 N/A PAUL-T3DJB6S0GV

The kavsvc service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.


Error 26/08/2006 10:12:47 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV

The Logitech Process Monitor service failed to start due to the following error:
The system cannot find the file specified.

Error 26/08/2006 17:21:49 Service Control Manager None 7034 N/A PAUL-T3DJB6S0GV

The LVSrvLauncher service terminated unexpectedly. It has done this 1 time(s).

Error 26/08/2006 17:23:34 SideBySide None 32 N/A PAUL-T3DJB6S0GV

Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.

Error 26/08/2006 17:23:34 SideBySide None 59 N/A PAUL-T3DJB6S0GV

Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The DHCP Client service depends on the NetBT service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The DHCP Client service depends on the NetBT service which failed to start because of the following error:
A device attached to the system is not functioning

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The TCP/IP NetBIOS Helper service depends on the AFD Networking Support Environment service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7026 N/A PAUL-T3DJB6S0GV

The following boot-start or system-start driver(s) failed to load:
AFD
AmdK7
ANVIOCTL
asuskbnt
Fips
IPSec
KLIF
Klmc
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip
WS2IFSL

I hope you can see something in all of that!

Kind regards

Paul

Oh dear Paul. That is a nightmare :eek:

There are so many errors it will take ages to track them down. I can`t understand why you had none of them till you installed the webcam. If it had caused these problems, uninstalling it should have fixed them.

1. Multiple drivers not loading

2. Many Services not starting

3. Kaspersky related problems. Are you running this?
System Restore names a Kaspersky file as the problem

4. Maybe a problem with driver for an "Asus" graphics card

Sytem file check will not work, so I think you should try running chkdsk.
Boot into Safe Mode by pressing F8 at bootup
Start/Run and type in
cmd
The command prompt box will open
Type in
chkdsk /r (there is a space before /)
ENTER

I think you should take the precaution of backing up everything you can`t afford to lose before doing anything on this machine.

Elaine

Hi Elaine

I'm still running Kapersky as my antivirus set. I can try reinstalling this.

I will try chkdisk first.

Thanks will keep you updated!!

Paul

Chkdsk did not find anything!!

I'm going to try to reinstall Kapersky to see if that will resolve any issues.

Is there any other way around scf / scannow to see if any files need repairing?

Thanks

Paul

I have tried all you have asked and it comes up with nothing?

Now when I right click a file to delete it it comes up with Windows Explorer has encountered an error. So now I cannot even delete a file....

This is wierd?

Paul

OK Paul

You didn`t manage to run the trojan scan. See if you can run Ewido. It is a very good program and although it is not totally free you get a fully functional version for 2 weeks.

http://www.ewido.net/en/

Update it before running, let it fix all it finds and take a note of all names of malware.

If this does not help I think you will have to try a Repair of XP. But try this first and post back the result.

Elaine

Hi Elaine

I think its sorted now. I haven't had any errors since yesterady afternoon.

Don't ask me what I have done because I couldn't tell you.

I removed some apps in the add/remove section.

One of them was asus driver which I no longer have.

Then I removed a duplicate ATI control center programme which I noticed appeared in my start up tray.

I didn't remove Kapersky and that seems to be working fine.

I uninstalled the camera and reinstalled just the driver only, leaving out the software package.

I will run the programme you recommend and get back to you.

Thanks for the help so far

Paul