defragller crashes my pc, some critical error with ide drivers comes up when windows is restarted. Since the pc crashes i don't think i can get a debug report. i'm gonna try re-installing
This topic is about defraggler please post a new thread in the ccleaner help section. And provide MUCH more information
it's hard to provide more info when you don't specify what info would be helpful, and the software does not keep logs on what happens on it's own. If you follow the guide for debug mode, the line given to run won't run properly as is. make sure /debug is outside the quotes that are forced into place. I'm gonna try and get something useing this.
windows error correcting freezes and defraggler's error correction doesn't find an issue. SMART health indications say warning. some things are higher (errors) and start and stop are high. the drive is 1500 days of use.
an older drive takes more time then usual to become chooseable in the list then normal. but it's smart health is good. and also has no other issues
it's hard to provide more info when you don't specify what info would be helpful, and the software does not keep logs on what happens on it's own. If you follow the guide for debug mode, the line given to run won't run properly as is. make sure /debug is outside the quotes that are forced into place. I'm gonna try and get something useing this.
Please unless you issue is EXACTLY the same you still need to start your own thread. also it is not fair to make another member look like a fool by changing a previous post without atribution of the change
defragller crashes my pc, some critical error with ide drivers comes up when windows is restarted. Since the pc crashes i don't think i can get a debug report. i'm gonna try re-installing
Originally stated the issue was with ccleaner.
Anyone helping needs to know
Operating System Version and Service pack level
32bit or 64bit
Version of the software giving you issues (DO NOT JUST SAY latest version, this imparts NO information give the ACTUAL version)
some critical error with ide drivers comes up when windows is restarted
Means nothing please give an actual error code and the details of the code, and what is happening with the program when the system crashes (analyzing? defragging? opening? closing?)
What kind of IDE drive? how big? how old? does it have errors if you run scandisc? are all drivers up to date (usually the issue with PC crashes)? do you get a bluescreen of death?
DO NOT REPLY TO THIS TOPIC START YOUR OWN, it is unfair to the original poster for us to keep pinging thier email with "your post has been replied to" when this is (MOST LIKELY) a seperate issue
yes to run debug you must type it EXACTLY as "c:\program files\defraggler\defraggler.exe" /debug (replacing the c:\program files\defraggler with the location of your defraggler and replacing defraggler.exe with defraggler64.exe if this is required by the bit level of your Windows)
Starting my own topic would just flood the forums with similar threads, as is happening, so i chose the most recent most similar issue...As i've read from the forums both 64 and 32 bit versions are not working properly. I am using the 32 bit version in windows xp pro sp3 version 2.08.373
the debug3 created a 39MB file. Here is the section where it froze the pc. no blue screen, but randomly windows will report a critcal error happened, that is not documented. And has no specific error code.
[2012-01-03] [19:34:47.515] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" vcn: 282:86 to 530585.
[2012-01-03] [19:34:47.546] 00bac 3 FileCollection::UpdateFragments#339 File "\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png", before: 368, 2, after: 368, 1.
[2012-01-03] [19:34:47.546] 00bac 1 DefragVolumeSinglePassHelper::LayFileAt#273 MoveFileRegionWithMarking for file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" to 530585, 282, 86 finished (hr=0x00000000). Destination block is not free.
[2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#292 Found proper fragment vcn:282 for file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" (start at 530303, 0, 368), currentLcn: 530585
[2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#201 Laying file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" finished at 530671.
[2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 530671
[2012-01-03] [19:34:47.562] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\lang\pintlcsk.dic at lcn: 530671, length: 120
[2012-01-03] [19:34:47.562] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 530791
[2012-01-03] [19:34:47.562] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1090 Detected potential free block of 296 (maximum 12315) clusters at 530791
[2012-01-03] [19:34:47.625] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1183 Searching through files took 0.063s
[2012-01-03] [19:34:47.640] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1196 Found "\WINDOWS\system32\urlmon.dll" file, length: 296
[2012-01-03] [19:34:47.640] 00bac 2 DefragVolumeSinglePassHelper::LayFileAt#145 Laying file "D:\WINDOWS\system32\urlmon.dll" (start at 10401488, 0, 296) at 530791, length: 296.
[2012-01-03] [19:34:47.640] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\WINDOWS\system32\urlmon.dll" vcn: 0:296 to 530791.
[2012-01-03] [19:34:47.750] 00bac 3 FileCollection::UpdateFragments#339 File "\WINDOWS\system32\urlmon.dll", before: 296, 1, after: 296, 1.
[2012-01-03] [19:34:47.765] 00bac 1 DefragVolumeSinglePassHelper::LayFileAt#273 MoveFileRegionWithMarking for file "D:\WINDOWS\system32\urlmon.dll" to 530791, 0, 296 finished (hr=0x00000000). Destination block is not free.
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#292 Found proper fragment vcn:0 for file "D:\WINDOWS\system32\urlmon.dll" (start at 530791, 0, 296), currentLcn: 530791
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#201 Laying file "D:\WINDOWS\system32\urlmon.dll" finished at 531087.
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531087
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\$NtServicePackUninstall$\msxml2.dll at lcn: 531087, length: 124
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531211
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\fp4apws.dll at lcn: 531211, length: 37
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531248
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\atinxbxx.sys at lcn: 531248, length: 8
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531256
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\wpnpinst.exe at lcn: 531256, length: 3
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531259
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\$NtServicePackUninstall$\msutb.dll at lcn: 531259, length: 34
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531293
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll at lcn: 531293, length: 14
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531307
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1090 Detected potential free block of 20 (maximum 11799) clusters at 531307
[2012-01-03] [19:34:47.828] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1183 Searching through files took 0.064s
[2012-01-03] [19:34:47.828] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1196 Found "\cygwin\usr\share\emacs\23.3\lisp\isearch.elc" file, length: 20
[2012-01-03] [19:34:47.828] 00bac 2 DefragVolumeSinglePassHelper::LayFileAt#145 Laying file "D:\cygwin\usr\share\emacs\23.3\lisp\isearch.elc" (start at 7685449, 0, 20) at 531307, length: 20.
[2012-01-03] [19:34:47.843] 00bac 3 DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones#2969 Intruder fragment ("D:\Program Files\AGEIA Technologies\v2.7.4\AG1011\pcmp.o", 531307, 208, 20, lcLeft: 20) detected at 531307.
[2012-01-03] [19:34:47.859] 00bac 3 DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones#3067 Found free block in zone 0 at 3831849:20, requested: 20
[2012-01-03] [19:34:47.859] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\Program Files\AGEIA Technologies\v2.7.4\AG1011\pcmp.o" vcn: 208:20 to 3831849.
More info from the beggining of the file[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#708 D:\Program Files\Defraggler\Defraggler.exe
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#710 CmdLine: “D:\Program Files\Defraggler\Defraggler.exe” /debug3
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#714 Version: 2_8_373
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#740 FileVersion: 2.8.0.373
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#741 ProductVersion: 2.8.0.373
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#742 Flags: 0x00000000, OS: 0x00000004, Type: 0x00000002, Subtype: 0x00000000
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#743 Flags description: Release
[2012-01-03] [19:21:07.9682012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#776 OEM ID: 0
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#777 Number of processors: 1
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#778 Page size: 4096
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#779 Processor type: 586
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#780 Minimum application address: 10000
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#781 Maximum application address: 7ffeffff
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#782 Active processor mask: 1
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#785 Clean boot: 0
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#786 Monitors: 3, Display: 1152x864, Virtual: 0x0 2592x864
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#796 Major: 0x00000005, Minor: 0x00000001, Build: 2600, PlatformId: 0x00000002
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#797 SPMajor: 0x0003, SPMinor: 0x0000, CSDVersion: “Service Pack 3”
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#798 SuiteMask: 0x00000100, ProductType: 0x00000001
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#810 Memory: Load: 28, Physical: 1521704960/2138046464, PageFile: 8057778176/8422174720, Virtual: 2108395520/2147352576, Extended 0
[2012-01-03] [19:21:07.968] 00c94 1 wWinMain#316 /debug3
system stuffMainboard : Dell Computer Corp. 0G1548
Chipset : Intel i845G
Processor : Intel Pentium 4 @ 2200MHz
Physical Memory : 2048MB (2 x 1024 DDR-SDRAM )
Video Card : NVIDIA Quadro FX 500/FX 600
Hard Disk : Maxtor 4D060H3 (61GB)
Hard Disk : Seagate ST3802110A (80GB)
Monitor Type : Dell Computer DELL 1703FP - 17 inches
Monitor Type : Unspecified
Network Card : Intel 82550/1/7/8/9 EtherExpress PRO/100( Ethernet Adapter
Network Card : Broadcom BCM440x 10/100 Integrated Ethernet Controller
Operating System : Microsoft Windows XP Professional 5.01.2600 Service Pack 3 (32-bit)
DirectX : Version 9.0c (May 2010)
There are several dmboot events listed in the event viewer, stateing that 2 hardrives failed to start properly. I did install intel application accelerater, and have recently updated windows components using auto updates. mostly .net updates and visual C++ all drivers are up to date before these errors developed. If you would like the binary etc i can get it for you. But again no error codes were available and it states that it is an unknown error.
- If a moderator asks you to post a new thread, it's because you need to post a new thread The only similarity your post had to do with the topic is that they both involved Defraggler Thus I have split to a new topic.
- Nobody asked you to run debug3 it's too verbose and stops you from attaching the file to the thread. Please attach a log from debug (just debug) to this thread. If needed a developer may ask for a debug2 or debug3, but they usually won't and if they do they'll ask for it via PM and have you mail or upload it to them.
- A partial log does not help the Volunteer members and the developers figure out why you are crashing. I don't even see where the crash is. Why have you placed part of the log then place a part from the beginning
What settings do you have set for you Defraggler?
Please post the windows system log data, showing the crash, like this
Event Type: Error Event Source: W32Time Event Category: None Event ID: 29 Date: 10/13/2011 Time: 6:13:43 PM User: N/A Computer: Computer1 Description: The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 15 minutes. NtpClient has no source of accurate time. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Which of the 2 hard drives are you defragging the Seagate or the Maxtor? I'm assuming this wasn't a one time thing and that the crash can be recreated
yea, i've done it 3 times...I don't like hangs with nothing...i don't wanna keep doing it..I also use something called pcilatency tool...i haven't had issues with my settings before. I even crashed 3 times on default...We haven't abused the pc, I've checked the connections and heat. i'm just !o.0! i want my defraggler to work.
Which drive are you running defraggler on, the Seagate or the Maxtor?
Did this problem start after you installed the intel application accelerator?
Do you have any problems running Windows defrag?
I was assumeing running the windows defrag is what caused this issue in the first place. As it completely scrambles everything and takes defraggler hours to rearrange the drive how i've had it previously. My brother has run windows defrag twice before this error occured. I will try it again after this post.
I finally recieved some clue from wiindows error reporting as to what it thinks causes the crash.
Intel Storage Driver (IdeChnDr.sys) has stopped working properly.
This product is no longer supported by the manufacturer.
I'm not sure how a previously working driver suddenly causes crashes with software already configured to use the old drivers, just because a company foolishly refuses to maintain it's drivers without first setting up open source community and free support.
I've been trying to defrag the seagate.
running windows defrag results in a crash, rebooted to safe mode, and ran it again, crashed, ran windows defrag in command prompt in safe mode, crashed and gave the error PFN_list_corrupt. It appears someone may have released some virus to promote their software again...or maybe not. any idea's?
Event Type: Error
Event Source: dmboot
Event Category: None
Event ID: 3
Date: 1/13/2012
Time: 10:45:06 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
dmboot: Failed to start volume Volume2 (E:)
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 03 00 50 c0 ......PÀ
0010: 00 00 00 00 00 00 00 00 ........
0018: 01 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
_________________________________________
Event Type: Error
Event Source: dmboot
Event Category: None
Event ID: 3
Date: 1/13/2012
Time: 10:45:06 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
dmboot: Failed to start volume Volume1 (D:)
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 03 00 50 c0 ......PÀ
0010: 00 00 00 00 00 00 00 00 ........
0018: 01 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
_____________________________________________
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 1/13/2012
Time: 3:07:37 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
Error code 100000d1, parameter1 00000034, parameter2 00000002, parameter3 00000000, parameter4 b9ef88f0.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 33 34 2c 20 000034,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 39 65 66 00, b9ef
0050: 38 38 66 30 88f0
__________________________________________
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 1/13/2012
Time: 3:07:00 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
Error code 1000000a, parameter1 00000166, parameter2 00000002, parameter3 00000000, parameter4 804faada.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 30 1000000
0020: 61 20 20 50 61 72 61 6d a Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 31 36 36 2c 20 000166,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 38 30 34 66 00, 804f
0050: 61 61 64 61 aada
____________________________________________
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 1/13/2012
Time: 3:06:13 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
Error code 1000000a, parameter1 00000166, parameter2 00000002, parameter3 00000000, parameter4 804faada.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 30 1000000
0020: 61 20 20 50 61 72 61 6d a Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 31 36 36 2c 20 000166,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 38 30 34 66 00, 804f
0050: 61 61 64 61 aada
________________________________________and now w32time
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 34
Date: 1/4/2012
Time: 10:10:35 AM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
The time service has detected that the system time needs to be changed by +75622 seconds. The time service will not change the system time by more than +54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|69.69.69.15:123->65.55.21.19:123) is working properly.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
If you suspect a virus please see here as soon as possible
http://forum.piriform.com/index.php?showtopic=34786
Also do a memory test .
Some strange things i saw in event viewer/application
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/13/2012
Time: 9:01:19 PM
User: NT AUTHORITY\SYSTEM
Computer: WEEEFX-8F5E138E
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 1/13/2012
Time: 9:00:27 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
Fips
intelppm
IPSec
MpFilter
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip
For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.
I believe ^^ this is safe mode loading??? i don't normally see these after booting in safe mode.
Event Type: Information
Event Source: MPSampleSubmission
Event Category: None
Event ID: 5001
Date: 1/13/2012
Time: 5:21:27 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
Bucket 1913344444, bucket table 5, EventType mptelemetry, P1 0, P2 moaccapability, P3 3.0.8402.0, P4 2, P5 0, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.
For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.
Data:
0000: 42 00 75 00 63 00 6b 00 B.u.c.k.
0008: 65 00 74 00 3a 00 20 00 e.t.:. .
0010: 31 00 39 00 31 00 33 00 1.9.1.3.
0018: 33 00 34 00 34 00 34 00 3.4.4.4.
0020: 34 00 34 00 0d 00 0a 00 4.4.....
0028: 42 00 75 00 63 00 6b 00 B.u.c.k.
0030: 65 00 74 00 54 00 61 00 e.t.T.a.
0038: 62 00 6c 00 65 00 20 00 b.l.e. .
0040: 35 00 0d 00 0a 00 5.....
Event Type: Information
Event Source: crypt32
Event Category: None
Event ID: 7
Date: 1/13/2012
Time: 5:08:30 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
Successful auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.
Event Type: Information
Event Source: Microsoft Security Client
Event Category: None
Event ID: 5001
Date: 1/13/2012
Time: 5:03:28 PM
User: N/A
Computer: WEEEFX-8F5E138E
Description:
The description for Event ID ( 5001 ) in Source ( Microsoft Security Client ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 2078499399, 5, mssecurityclient, setup.exe, 2.1.1116.0, 0x8000ffff, morrobootstraper__cinstallflow__internalrun - getenablefirewallaction, morrobootstraper__cflow__processflowactionresult, 0, security essentials, NIL, NIL, NIL.
Data:
0000: 42 00 75 00 63 00 6b 00 B.u.c.k.
0008: 65 00 74 00 3a 00 20 00 e.t.:. .
0010: 32 00 30 00 37 00 38 00 2.0.7.8.
0018: 34 00 39 00 39 00 33 00 4.9.9.3.
0020: 39 00 39 00 0d 00 0a 00 9.9.....
0028: 42 00 75 00 63 00 6b 00 B.u.c.k.
0030: 65 00 74 00 54 00 61 00 e.t.T.a.
0038: 62 00 6c 00 65 00 20 00 b.l.e. .
0040: 35 00 0d 00 0a 00 5.....
not sure if this is normal or not, but no one should be attempting a remote connection.
thx for the reply hazelnut, unfortunatly all of these sites are untrusted, offer little help...and recommend software i am avoiding for numerous reasons. mainly it never works or get exploited and targeted. Some of the threads on some sites even tell you to install malware/fake software.
I can't believe piriform doesn't fight malware. and hasn't developed software to do so aside from the benefits of defrag and reg cleaning... Even closed the section for it. hmmmmm
I tried to do a system restore and it crashed...BSOD windows detected this error and offered to run it again. I didn't. And this was not logged in the events logs.
Before we go on a virus hunt here...remember I came here for help with defraggler not running and freezeing my pc. I bet if we find the issue there, we could likely also remove or disable associated threats if present. Often this unstealths crafty codeing. So that anti-v can do it's job. So far i've used 5 different anti-v's i trust. I will continue. I see no reasons thus far for defraggler not to be able to run normally, and windows defrag also does not run and results in a freeze with no BSOD. windows has not detected a hard fault/crash or even logged an event when windows defrag was run. It only shows it was started.
The sites that are linked to are not untrustworthy. They are some of the top malware fighting sites in the world.
One of them, malwarebytes malware help for instance which is listed, how can you say it is untrustworthy?
You are being totally off course here, just get yourself some help from one of those listed sites.
As for the fact about why we have stopped doing malware removal on the forum, unfortunately our spyware moderator died just before xmas.