Printable View
Recently, whenever I go to my Start Menu, it sometimes freezes and I get told that Windows is closing Microsoft IE in order to protect my computer. It offers me the option of sending an error report. Has anyone here experienced this? Do you know why this is happening? Is it some sort of security download that's causing this? Is there anything I can or should do to get this to stop?
Is this IE6 or IE7?
That would be IE6. I hope you see this and know the answer.
Dr Seven :)
Check this setting
Right click "My computer" and then click on "Properties".
In the "System Properties" window, find the "Advanced” tab, and click on it. Then, in the "Performance” section click the "Settings” button.
You can see in the "Performance Options” window a tab named "Data Execution Prevention”.
Click on it, and make sure that the "Turn on DEP for essential Windows programs and services only” is selected.
Click Ok a few times to close the windows you opened, and then when you are prompted to restart your computer, click Ok again.
Elaine
I probably know the answer for IE7. In fact I would strongly recommend that you upgrade to IE7, it is a lot more secure than IE6.Quote:
Originally Posted by Dr Seven
Quote:
Originally Posted by SuperSparks
And learn how to uninstall IE7 so you can take care get rid of it when it messes up.
I followed the procedure Train outlined, but "TURN on DEP for essential Windows programs and services only" was already selected so it didn't ask me to restart my computer. I wonder if doing what you said, then, was not the solution. Could there be something else to do if I already have TURN on DEP already selected?
Maybe corrupted, disable it, reboot, then go back in and re-enable it.
OK. I disabled it, rebooted and re-enabled it. As soon as I did the Start Menu Froze again.
Would it be smart to disable it and leave it disabled? After all, I have Norton for Security -- or is that some other process?
Wonder if Norton is the problem to start with?
Norton Could be the problem. If I have Norton enabled I can't use System Restore. I also can't use Windows Firewall with Norton enabled.
But you didn't answer my question: Should I just leave TURN on DEP disabled?
Try it with DEP disabled. Some people do this when they have problems with it.
Be aware though that you are removing a layer of protection against malware.
If you have a Norton firewall you should have Windows firewall turned off. It is not good to run 2 firewalls.
How to run System Restore with Norton
http://bertk.mvps.org/html/symantecdoc1.html
Elaine
Thanks for the info about turning off DEP.
I am not trying to run two firewalls. Sorry for the confusion.
Thanks for the link on how to do system restore with Norton turned off.
I realize turning off DEP is one less level of protection but if it is going to be a pain in the posterior then I don't want it.
I have this thread bookmarked. I'll let you know if this resolves the issue.
Okey dokey
We are waiting to see :)
Elaine
Because my START menu didn't freeze for a couple of days I thought turning off DEP had worked. But today it froze again. It offered me the option of changing my settings which was to turn it back on again.
Is there anything else I can do to stop this besides turning on DEP? Or am I stuck with this malfunction?
Why don`t you want to upgrade to IE7 as Nick suggested?
Elaine
Recently I posted and wondered what I could do to stop my start menu freezing. I was told to disable DEP. It did that. It ddin't work. I realize I marked the old thread resolved, but I couldn't figure out how to delete it and start over again. I wanted to start over again because people here were telling me that they were waiting to see if it worked, but then when I posted and said it hadn't worked I got no response.
I am sorry for reposting, but I didn't know what else to do.
Anyway, am I stuck with this DEP malfunction or is there something I can do about it to fix it or make it stop freezing my start meu?
Dr Seven--I suggest you go back to the original thread
http://discussions.virtualdr.com/sho...d.php?t=225617
and post to the effect that you marked it Resolved when it is not and are still looking for suggestions.
My reason is that too many things have already been discussed and there would be no point in going over them again. And you did not explain the problem in this thread.
Also this thread suggests a narrowing of the subject to DEP. I am not sure that really is your problem. In fact I would suspect that you may have Malware (virus, etc.).
The procedure for clearing that up is here (assuming you can stay on the internet long enough).
http://discussions.virtualdr.com/sho...d.php?t=167915
Also there are ideas here
http://forums.techguy.org/windows-nt...ar-freeze.html
P.S. In the Feedback forum you could ask if there is a way to edit out the Resolved icon on your original thread. Have you looked in Thread Tools whether anything is mentioned about reversing your original choice?
Threads merged and title altered
104456--Thanks, but did you mean to alter the title to "DEP problems"? The original post has to do with freezing and shutdown, and the fix could be other than to change DEP settings. Recent posts have switched away from DEP, anyway.
Dr Seven--When the problem occurs, reboot and have a look at Event Viewer. Start|Adminstrative Tools|Event Viewer|System and look for Red error ball icons time stamped when the problem occurred. Double click on the red ball. The first window will have some error info, but generally this is not too helpful to anyone but any expert. (Copy it anyway, in case someone would like to see it.). More importantly click the blue go.microsoft link. The next window will usually have more and more understandable info. It may even suggest a fix. If it does not help you fix the problem, copy that info and post here.
Title changed to DEP Problems with freezing and shutdown
And removed the resolved bit.
Welshjim,
First of all, I apologize for being an idiot and not seeing that there was a page TWO to this thread.
Second of all, I already have Ad-aware and Spybot installed.
Third of all, I have Highjack this installed.
Fourth of all, it is my fault for making it sound like I can't stay on the internet. What happens is that I get the error message telling me that it needs to shut down Windows to protect it and then when I click the message to close it it's like the system reboots without doing a whole reboot. Instead of a whole reboot, it takes my start menu off and my desktop icons disappear. Then the start menu and the icons come back.
I do notice that the cursor on here is kind of wavering. Does that mean anything?
I will run Ad-aware and Spybot and go through the Highjack This routine and get back to let you know if Ad-aware or Spybot or HighJack This tells me anything.
OH. And when I go to Start I don't see any Administrative Tools listed.
Here is the results of the HighjackThis log:
Logfile of HijackThis v1.99.1
Scan saved at 3:02:07 AM, on 11/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\My Documents\HijackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunKistEM] "C:\Program Files\Digital Media Reader\shwiconem.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [Gateway Extended Warranty] "C:\Program Files\Gateway\GWCares\GWCares.exe"
O4 - HKLM\..\Run: [AzMixerSel] "C:\Program Files\Realtek\InstallShield\AzMixerSel.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [Window Washer] "C:\Program Files\Webroot\Washer\wwDisp.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2005\Scheduler daemon.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/mini...ansporter.cab?
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/res...scbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Netscape Update Service (NCUpdateSvc) - Netscape Communications Corporation - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
Updated Ad-aware and Spybot. Ran same. Ad-aware found nothing. Spybot found sixteen spywares.
I`m not one of the HijackTHis experts, but nothing bad jumps out at me
Elaine
IE is shutting down, could be caused by errors on the webpage(s) and that is causing Explorer to shut down and reboot.
That is what is causing all the icons and taskbar to disappear.
One of the main reasons I do not use IE 7 with XP. Got sick of that happening.
Are you saying that I have IE7 or am I confused? I was pretty sure that I have IE6.
This doesn't happen when I get to the webpage. It happens when I click on Start Menu and try to move up to Favorites.
So if I don't have IE7 then are we back to square one? Is there anything I can do to stop this freeze up and reboot?
Should I uninstall and reinstall my browser? And if I do will I lose everything? Or is there an easier fix?
Dr Seven--To determine what version of IE you have installed, click Help on the IE Toolbar|About Internet Explorer. If IE 7, did you install it over IE6 some months ago, or did it come with the PC? In the latter case, it is pretty hard to uninstall. In the former case, it should be easy to uninstall from Control Panel|Add/Remove. And if you have IE 6, there are several possible fixes.
Have you looked at Event Viewer? That just might give you the explanation for the problems you are having. Another way to access Event Viewer is Start|Control Panel|Administrative Tools|Event Viewer|System.
And can you tell us one more time when the problem occurs? I have understood it is when you click Start|Favorites. What happens if you open IE first and then click Favorites? Or is it just by clicking Start?
P.S. I see that you ran an older version of HiJackThis. You may want to get the latest and run again. http://www.majorgeeks.com/download5554.html
Jim,
I found Event Viewer. It showed warnings about something called W32 Time and something called TCPIP. It also showed several errors in something called Service Control.
I definitely have IE6.
I don't know if it happens by opening IE and clicking Favorites since I never do that. So I would guess that it is only when I click Start and Favorites.
I will download the lastest version of HighjackThis and post the log.
Maybe something I've reported on here or the latest HighjackThis will help.
And here is the log from the latest HighjackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:31:43 AM, on 11/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\mmc.exe
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\I1G3MJ67\HiJackThis[1].exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunKistEM] "C:\Program Files\Digital Media Reader\shwiconem.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [Gateway Extended Warranty] "C:\Program Files\Gateway\GWCares\GWCares.exe"
O4 - HKLM\..\Run: [AzMixerSel] "C:\Program Files\Realtek\InstallShield\AzMixerSel.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [Window Washer] "C:\Program Files\Webroot\Washer\wwDisp.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2005\Scheduler daemon.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/mini...ansporter.cab?
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/res...scbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Netscape Update Service (NCUpdateSvc) - Netscape Communications Corporation - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
--
End of file - 8164 bytes
Dr Seven--Can you copy and post the exact error messages you get when accessing Event Viewer and following the procedure suggested in Post 21? The info you have provided is too general.
Are you able to connect to the internet using IE6?
There are fixes for IE6, among which
http://www.theeldergeek.com/repair_ie6.htm
You have little to lose by trying them.
However, it may be worth waiting to see those Event Viewer messages.
Also I understand the problem occurs when you click Favorites after having clicked Start. Correct? Is IE open at that time (showing on your Taskbar)?
Jim,
It didn't suggest a fix like saying "do this and then this etc..."
It just wanted to know if I wanted to send some info across the internet.
(I am referring to the blue go.microsoft link)
Some of the info it was asking if I wanted to send was category, company, event id and file name. Both the file name and event name were net event.dll
and the file version was 5.1.2600.0
Clicking on the red ball told me that the following boot-start failed to load
driver szkg
Is this helpful enough? I hope so. I didn't see any way to copy everything I saw there because the menu bar didn't include Copy or if it did, I failed to find it and anyway it just seemed to be wanting to know if I wanted to send an error report. I couldn't see any way to click past that.
Try this:
- In Event Viewer, click System on the left, then double-click on one of the red X's on the right:
- Click the 3rd button down on the right to copy the info into the clipboard (in memory) on your computer:
- Come back over here to VirtualDr, in your " DEP Problems with freezing and shutdown" thread, scroll down to the Quick Reply box and click once in it to position your cursor there in that box:
- Now press [Ctrl-V] (or click Edit|Paste in your browser) to paste what's in the clipboard in your computer into the Quick Reply box, then click the Post Quick Reply button:Note that you could also add (type) whatever else you like within the Quick Reply box or click the Go Advanced button for more options.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 11/17/2007
Time: 10:57:12 AM
User: N/A
Computer: GARY
Description:
The following boot-start or system-start driver(s) failed to load:
szkg
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
I hope this helps.
Dr Seven--The info you posted allowed me to Google and find the following
http://www.google.com/search?sourcei...+load%3a++szkg
The first reference on that page may be especially pertinent. Did you ever use Stopzilla?
The info I can find on Service Control Manager and Event ID 7026 is a bit hairy, so for the moment, if the above reference does not help, maybe you should take the Event Viewer instructions to the final step suggested earlier.
Click that link http://go.microsoft.com/fwlink/events.asp. Yes, it will send a message to MS, but it should also produce a window with even more info on the problem. (Sometimes that window appears under the other open windows and you must access by clicking on the item in the Taskbar.)
If the info in the right panel does not help you solve the problem yourself, copy that info and post. Spyware Dr has shown you the easy way to copy the earlier window. Unfortunately the last window does not have an easy copy button built in. You will have to highlight the contents in the right panel by dragging the cursor over the first few words, then hold down Shift and scroll to the end. Now, with Shift help down, click a spot right after the final word. That should highlight the whole text. Click Control+C and paste that info into a Reply here (Control+V).
Here is the only thing I saw as a possible solution and I don't know how to do any of this:
Verify that the drivers are configured correctly.
Verify that the computer is running the most current version of the drivers.
Everything else just seemed to be the description of the problem.
If I had Stopzilla I didn't know it. It might have snuck in as a spyware.
I am going to be searching for szkg and delete it if I find it.
I'lll let you know if I found it, but it might be a few days before I can tell you if it worked since my Start menu hasn't been frozen for several days.
PS: I searched for szkg.sys and according to SEARCH there are no instances of it on my machine.
Maybe that's why it said it failed to load, maybe that's where the info above comes into play -- about making sure the drivers are configured correctly etc?
Dr Seven--Saw where? The second event viewer page?Quote:
Here is the only thing I saw
Cross your fingers. Maybe the problem has solved itself. One or more reboots will often fix things, including driver problems.Quote:
my Start menu hasn't been frozen for several days.
And if garbage is hung up in the ram, yes that can and does happen, a shutdown and wait of 30 seconds, usually clears the ram and when you boot up, everything runs fine.
Have not seen that in Vista yet, but have had that happen in other OS's.