Windows Logon UI Error?

Hi Guys

I have just recently installed a new Logitech webcam on my system and when I rebooted after installing the software I have ended up with a Windows Logon UI encountered a problem box

Error Signature

szAppName : logonui.exe szAppVer : 0.0.0.0 szModName : unknown
szModVer : 0.0.0.0 offset : 00000000

Tech Details

C:\WINDOWS\PCHealth\ErrorRep\UserDumps\logonui.exe.20060825-160846-00.mdmp
C:\DOCUME~1\PAULSM~1\LOCALS~1\Temp\WER45b9.dir00\appcompat.txt

The problem is it causes other errors especially with Dr Watson Debugging something or other. I will add that error to the thread when it comes up again.

Dr Watson Error appeared.

Dr Watson Postmortem Debugger has encountered an error

Error Sig

AppName: drwtsn32.exe AppVer: 5.1.2600.0 ModName: kernel32.dll
ModVer: 5.1.2600.2945 Offset: 00082fc4

Now when I try to access any application it just keeps telling me that the application has encountered an error and will close.


I have tried reinstalling the Logitech software again but it always happens.

Anyone shed any light please?

Thanks

Paul

Hello Paul :)

There is a chance that it is a trojan, so run these scans to eliminate this first. Possibly is not that, but better to be sure.

Trojan Scan http://www.windowsecurity.com/trojanscan/

Housecall http://housecall.trendmicro.com/

Take a note os any names found.

Elaine

Hi Elaine

I have ran Housecall and it did not find anything serious.

I cannot run the trojan scanner as it keeps coming up with error loading engine.

The problem now is I have tried to rollback the computer when I installed the camera and that won't let me do that! I tried going back a month but it will not let me do that either.

Now when I boot I keep getting this error message after desktop loads up.

Automatic Updates has encountered a problem and needs to close.

szAppName : wuauclt.exe szAppVer : 5.8.0.2469 szModName : kernel32.dll
szModVer : 5.1.2600.2945 offset : 00082fc4

The funny thing is I keep seeing this exact error window for a few other things I have tried to access today.

Paul

Paul

Quote:

---

The funny thing is I keep seeing this exact error window for a few other things I have tried to access today.

---

It could be more serious in that case. Hardware, file system, memory, in fact almost anything :(

Try the following for a start
1. Run system file check. Get your XP installation CD out
Start/Run and type in
sfc /scannow ( there is a space before /)

2. Test memory
If you have more than one stick of RAM (256MB or more) take one out and try again. If it does not help or makes things worse swap the sticks and try again. This will identify if you have a bad stick.

OR
You can put either of these free programs on a floppy and test the RAM

memtest86
http://www.memtest86.com/

Windows Memory Diagnostic
http://oca.microsoft.com/en/windiag.asp

3. Also look here for errors to help us

a) Right click My Computer / Properties / Hardware / Device Manager.
Look for "Yellow" errors

b) Control Panel / Performance and Maintenance / Admin Tools / Event Viewer / System.
Look for "Red" errors. Double click on error.
If there are a lot, some of them will be duplicates so just post one of each.
Take a note of the Event ID and also the Source and post them back.

Try #3 first and post back what you find

Elaine

Hi Elaine

Tried the sfc /scannow and it didn't work?

Have not tried the mem sticks but I do have a few programmes as you suggested to try, but I don't think its that!

As for #3 lots of errors from the 25th onwards. Will look and post what I find.

Thanks

Paul

Here are the first few and there are lots

History of Failed Apps

Faulting application regsvr32.exe, version 5.1.2600.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application runonce.exe, version 6.0.2900.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application grpconv.exe, version 5.1.2600.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Faulting application logonui.exe, version 6.0.2900.2180, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Thanks

Paul

Paul,

If you uninstall the Logitech webcam do you still get these errors?

If it is not that
In Event viewer I think you have looked at "Applications".
Could you please go back and look at "System"
We need you to post the Event ID and also the Source fo each RED error.

Are there any errors in Device Manager?

What happened with system file check?

Elaine

Hi Elaine

If I uninstall the webcam I still get the same errors.

System file check did not work. I typed it in and nothing happened??

No errors in Device Manager

List of Event ID and Source for "System" to follow.

See previous post Elaine for answers to other questions.

System ID Events & Sources

Error 25/07/2006 19:16:22 Service Control Manager None 7026 N/A PAUL-T3DJB6S0GV

The ASPI32 service failed to start due to the following error:
The system cannot find the file specified.


Error 25/07/2006 19:16:22 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV
The following boot-start or system-start driver(s) failed to load:
ANVIOCTL

They appear quite regular as a pair



Error 26/07/2006 19:13:55 sr None 1 N/A PAUL-T3DJB6S0GV

The System Restore filter encountered the unexpected error '0xC0000056' while processing the file 'klin.sys' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.

This one concerns me as I could not rollback to an earlier date?



Error 27/07/2006 06:03:37 Dhcp None 1002 N/A PAUL-T3DJB6S0GV

The IP address lease 192.168.0.2 for the Network Card with network address 000D611E51E8 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).

Error 20/08/2006 17:48:40 eventlog None 6004 N/A PAUL-T3DJB6S0GV

A driver packet received from the I/O subsystem was invalid. The data is the packet.

Error 25/08/2006 17:09:15 DCOM None 10010 Paul Smith PAUL-T3DJB6S0GV

The server {66B093B7-B5E3-4CFE-B32B-FEB55F172481} did not register with DCOM within the required timeout.

Error 25/08/2006 23:36:01 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV

Timeout (30000 milliseconds) waiting for the kavsvc service to connect.


Error 25/08/2006 23:36:01 Service Control Manager None 7009 N/A PAUL-T3DJB6S0GV

The kavsvc service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.


Error 26/08/2006 10:12:47 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV

The Logitech Process Monitor service failed to start due to the following error:
The system cannot find the file specified.

Error 26/08/2006 17:21:49 Service Control Manager None 7034 N/A PAUL-T3DJB6S0GV

The LVSrvLauncher service terminated unexpectedly. It has done this 1 time(s).

Error 26/08/2006 17:23:34 SideBySide None 32 N/A PAUL-T3DJB6S0GV

Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.

Error 26/08/2006 17:23:34 SideBySide None 59 N/A PAUL-T3DJB6S0GV

Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The DHCP Client service depends on the NetBT service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The DHCP Client service depends on the NetBT service which failed to start because of the following error:
A device attached to the system is not functioning

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The TCP/IP NetBIOS Helper service depends on the AFD Networking Support Environment service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7001 N/A PAUL-T3DJB6S0GV

The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Error 26/08/2006 19:04:25 Service Control Manager None 7026 N/A PAUL-T3DJB6S0GV

The following boot-start or system-start driver(s) failed to load:
AFD
AmdK7
ANVIOCTL
asuskbnt
Fips
IPSec
KLIF
Klmc
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip
WS2IFSL

I hope you can see something in all of that!

Kind regards

Paul

Oh dear Paul. That is a nightmare :eek:

There are so many errors it will take ages to track them down. I can`t understand why you had none of them till you installed the webcam. If it had caused these problems, uninstalling it should have fixed them.

1. Multiple drivers not loading

2. Many Services not starting

3. Kaspersky related problems. Are you running this?
System Restore names a Kaspersky file as the problem

4. Maybe a problem with driver for an "Asus" graphics card

Sytem file check will not work, so I think you should try running chkdsk.
Boot into Safe Mode by pressing F8 at bootup
Start/Run and type in
cmd
The command prompt box will open
Type in
chkdsk /r (there is a space before /)
ENTER

I think you should take the precaution of backing up everything you can`t afford to lose before doing anything on this machine.

Elaine

Hi Elaine

I'm still running Kapersky as my antivirus set. I can try reinstalling this.

I will try chkdisk first.

Thanks will keep you updated!!

Paul

Chkdsk did not find anything!!

I'm going to try to reinstall Kapersky to see if that will resolve any issues.

Is there any other way around scf / scannow to see if any files need repairing?

Thanks

Paul

I have tried all you have asked and it comes up with nothing?

Now when I right click a file to delete it it comes up with Windows Explorer has encountered an error. So now I cannot even delete a file....

This is wierd?

Paul

OK Paul

You didn`t manage to run the trojan scan. See if you can run Ewido. It is a very good program and although it is not totally free you get a fully functional version for 2 weeks.

http://www.ewido.net/en/

Update it before running, let it fix all it finds and take a note of all names of malware.

If this does not help I think you will have to try a Repair of XP. But try this first and post back the result.

Elaine

Hi Elaine

I think its sorted now. I haven't had any errors since yesterady afternoon.

Don't ask me what I have done because I couldn't tell you.

I removed some apps in the add/remove section.

One of them was asus driver which I no longer have.

Then I removed a duplicate ATI control center programme which I noticed appeared in my start up tray.

I didn't remove Kapersky and that seems to be working fine.

I uninstalled the camera and reinstalled just the driver only, leaving out the software package.

I will run the programme you recommend and get back to you.

Thanks for the help so far

Paul

Ok ran the programme

Found 1 High - Dialer.BT.g and 1 medium Tracing Cookie.

I will remove these but I don't think they were the root of the problem.

Thanks

Paul

Hello Paul

No, I don`t think they would have caused the problem, but it is good to know that your system is clean.

I`m sorry this has taken so long to fix. These errors are hard to track down as they can be caused by almost anything.
It could well have been the "Asus" graphics card driver. We often find that left over drivers for graphics cards can cause havoc.

Hopefully all is well now. :)

Elaine

Ah well spoke well to soon.....

First error was something to do with HP.

These are all Application Errors

Error 28/08/2006 10:47:34 Application Error None 1000 N/A PAUL-T3DJB6S0GV

Faulting application hposm.exe, version 2.1.6.2, faulting module , version 0.0.0.0, fault address 0x00000000.

Error 28/08/2006 10:47:35 Application Error None 1000 N/A PAUL-T3DJB6S0GV

Faulting application hptskmgr.exe, version 2.1.6.2, faulting module , version 0.0.0.0, fault address 0x00000000.

Error 28/08/2006 11:02:35 Application Error None 1000 N/A PAUL-T3DJB6S0GV


Lots of these Dr Watson errors

Error 28/08/2006 12:02:36 Application Error None 1000 N/A PAUL-T3DJB6S0GV

Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.


There is only one System error

Error 28/08/2006 08:02:24 Service Control Manager None 7000 N/A PAUL-T3DJB6S0GV

The ASPI32 service failed to start due to the following error:
The system cannot find the file specified.

So it would seem we have cleared up a few of the System errors but we are now left with a few application errors in particular HP. This must have something to do with our printer.

I will try to update the drivers for it.

Paul

Paul,

Internet search shows many people have problems with these 2 HP applications

hposm.exe
hptskmgr.exe

Look for them in msconfig and disable them. There is some information here

http://reviews.cnet.com/5208-6142-0....ssageID=772133
Scroll down page

http://forums1.itrc.hp.com/service/f...69666+28353475

Elaine

Hi Elaine

I have only started having these problems with the above 2.

Ok back a few posts you mentioned sfc \scannow. Well it worked now. I have inserted my XP disc and left it running. I came back to find my desktop screen so how do I know if it repaired any files etc???

I will look at the above 2 threads later.

Will keep you posted!!

Thanks

Paul

Paul,

For some reason VDr is not sending all replies to me. :( I`ve missed quite a few lately and have to come and check the threads. So, sorry if I`m a bit late.

As far as I know sfc does not create a log. You just run it and check if your problem has been fixed.

Check the threads and decide if you want to disable (not delete) these processes. I think one of them just checks for updates so you don`t need it. That type of process just uses up your CPU and can mess up the system. If you get trouble with the printer it will be easy to re-enable them.

Elaine

Hi Elaine so far so good. Went into msconfig and disabled the 2 processes. My wife used the printer this morning without a hitch. I reckon we have cracked it.

The solution was I think the scf /scannow which I think replaced some corrupted files.

Fingers crossed we can say this thread is sorted.

Thankyou for all your help on this!!

Kind Regards

Paul

Hi Paul,

I hope we have indeed cracked it. :) It`s a pity that sfc would not run way back at the beginning. As I said before this type of problem can be difficult to track down.

I believe you said you really needed it working well for next week, so let it run and use it as much as you can for a few days just to be sure. When you go on your trip, take your XP installation CD with you and if you have any more trouble you will just have to post again, but hopefully that won`t happen.

Elaine

Hi Elaine

Its back, but only 2 errors

System
Error 29/08/2006 10:07:29 eventlog None 6004 N/A PAUL-T3DJB6S0GV

A driver packet received from the I/O subsystem was invalid. The data is the packet.

Application
Error 29/08/2006 10:25:29 Application Error None 1000 N/A PAUL-T3DJB6S0GV


Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00082fc4.

So it looks like I need to get rid of one to prevent the other?

Paul

Where are you getting all the NEW errors from? :D

I have hunted around for " 6004 ". People have reported antivirus as being the cause. You had Kaspersky errors before. Did you ever reinstall it?
Another post suggests that this might be a faulty network card (or network card drivers) - the replacement of the card fixing the issue. Have a look at the network card in Device Manager. Is it showing any "Yellow" errors? Right click it/Properties and seewhat is being reported.

Other options
1. Shut down Kaspersky, stay offline and run machine to see if error still appears.

2. Disable network card and again run machine to see what happens.

Elaine

Yes I need it working by close of play today really LOL!!!!

My wife and I use it to communicate. I have the laptop and she has the tower. We both use a webcam so I can talk to my son.

Hopefully I can get it working. Its not happening as regular as it was.

Paul

I will have a look around Google to see what I can find

Hi Elaine

I did not uninstall Kapersky in the end.

I have had a look in devices and network card appears to be fine.

I will have to try the other two options but I don't think I'm going to have time to test it fully.

Could just completely reinstall Kapersky and take it from there.

I do run a wireless network between the two machines.

Paul

I had the exact same problem. Even after uninstalling the webcam driver and program the problem remained. I had to use msconfig to deactivate lvsrv launcher and logitec process monitor. After that all looks ok but I can´t use the webcam. Can anyone help me? Thanks in advance.