Jump to content

32bit XP crash with Defraggler 2.08.373


pazsion

Recommended Posts

  • Moderators

This topic is about defraggler please post a new thread in the ccleaner help section. And provide MUCH more information

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

Support at https://support.ccleaner.com/s/?language=en_US

Pro users file a PRIORITY SUPPORT via email support@ccleaner.com

Link to comment
Share on other sites

it's hard to provide more info when you don't specify what info would be helpful, and the software does not keep logs on what happens on it's own. If you follow the guide for debug mode, the line given to run won't run properly as is. make sure /debug is outside the quotes that are forced into place. I'm gonna try and get something useing this.

 

windows error correcting freezes and defraggler's error correction doesn't find an issue. SMART health indications say warning. some things are higher (errors) and start and stop are high. the drive is 1500 days of use.

 

an older drive takes more time then usual to become chooseable in the list then normal. but it's smart health is good. and also has no other issues

Link to comment
Share on other sites

  • Moderators
it's hard to provide more info when you don't specify what info would be helpful, and the software does not keep logs on what happens on it's own. If you follow the guide for debug mode, the line given to run won't run properly as is. make sure /debug is outside the quotes that are forced into place. I'm gonna try and get something useing this.

 

Please unless you issue is EXACTLY the same you still need to start your own thread. also it is not fair to make another member look like a fool by changing a previous post without atribution of the change

defragller crashes my pc, some critical error with ide drivers comes up when windows is restarted. Since the pc crashes i don't think i can get a debug report. i'm gonna try re-installing

Originally stated the issue was with ccleaner.

Anyone helping needs to know

Operating System Version and Service pack level

32bit or 64bit

Version of the software giving you issues (DO NOT JUST SAY latest version, this imparts NO information give the ACTUAL version)

some critical error with ide drivers comes up when windows is restarted

Means nothing please give an actual error code and the details of the code, and what is happening with the program when the system crashes (analyzing? defragging? opening? closing?)

What kind of IDE drive? how big? how old? does it have errors if you run scandisc? are all drivers up to date (usually the issue with PC crashes)? do you get a bluescreen of death?

 

DO NOT REPLY TO THIS TOPIC START YOUR OWN, it is unfair to the original poster for us to keep pinging thier email with "your post has been replied to" when this is (MOST LIKELY) a seperate issue

 

yes to run debug you must type it EXACTLY as "c:\program files\defraggler\defraggler.exe" /debug (replacing the c:\program files\defraggler with the location of your defraggler and replacing defraggler.exe with defraggler64.exe if this is required by the bit level of your Windows)

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

Support at https://support.ccleaner.com/s/?language=en_US

Pro users file a PRIORITY SUPPORT via email support@ccleaner.com

Link to comment
Share on other sites

Starting my own topic would just flood the forums with similar threads, as is happening, so i chose the most recent most similar issue...As i've read from the forums both 64 and 32 bit versions are not working properly. I am using the 32 bit version in windows xp pro sp3 version 2.08.373

 

the debug3 created a 39MB file. Here is the section where it froze the pc. no blue screen, but randomly windows will report a critcal error happened, that is not documented. And has no specific error code.

 

[2012-01-03] [19:34:47.515] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" vcn: 282:86 to 530585.
[2012-01-03] [19:34:47.546] 00bac 3 FileCollection::UpdateFragments#339 File "\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png", before: 368, 2, after: 368, 1.
[2012-01-03] [19:34:47.546] 00bac 1 DefragVolumeSinglePassHelper::LayFileAt#273 MoveFileRegionWithMarking for file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" to 530585, 282, 86 finished (hr=0x00000000). Destination block is not free.
[2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#292 Found proper fragment vcn:282 for file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" (start at 530303, 0, 368), currentLcn: 530585
[2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#201 Laying file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" finished at 530671.
[2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 530671
[2012-01-03] [19:34:47.562] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\lang\pintlcsk.dic at lcn: 530671, length: 120
[2012-01-03] [19:34:47.562] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 530791
[2012-01-03] [19:34:47.562] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1090 Detected potential free block of 296 (maximum 12315) clusters at 530791
[2012-01-03] [19:34:47.625] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1183 Searching through files took 0.063s
[2012-01-03] [19:34:47.640] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1196 Found "\WINDOWS\system32\urlmon.dll" file, length: 296
[2012-01-03] [19:34:47.640] 00bac 2 DefragVolumeSinglePassHelper::LayFileAt#145 Laying file "D:\WINDOWS\system32\urlmon.dll" (start at 10401488, 0, 296) at 530791, length: 296.
[2012-01-03] [19:34:47.640] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\WINDOWS\system32\urlmon.dll" vcn: 0:296 to 530791.
[2012-01-03] [19:34:47.750] 00bac 3 FileCollection::UpdateFragments#339 File "\WINDOWS\system32\urlmon.dll", before: 296, 1, after: 296, 1.
[2012-01-03] [19:34:47.765] 00bac 1 DefragVolumeSinglePassHelper::LayFileAt#273 MoveFileRegionWithMarking for file "D:\WINDOWS\system32\urlmon.dll" to 530791, 0, 296 finished (hr=0x00000000). Destination block is not free.
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#292 Found proper fragment vcn:0 for file "D:\WINDOWS\system32\urlmon.dll" (start at 530791, 0, 296), currentLcn: 530791
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#201 Laying file "D:\WINDOWS\system32\urlmon.dll" finished at 531087.
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531087
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\$NtServicePackUninstall$\msxml2.dll at lcn: 531087, length: 124
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531211
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\fp4apws.dll at lcn: 531211, length: 37
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531248
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\atinxbxx.sys at lcn: 531248, length: 8
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531256
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\wpnpinst.exe at lcn: 531256, length: 3
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531259
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\$NtServicePackUninstall$\msutb.dll at lcn: 531259, length: 34
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531293
[2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll at lcn: 531293, length: 14
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531307
[2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1090 Detected potential free block of 20 (maximum 11799) clusters at 531307
[2012-01-03] [19:34:47.828] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1183 Searching through files took 0.064s
[2012-01-03] [19:34:47.828] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1196 Found "\cygwin\usr\share\emacs\23.3\lisp\isearch.elc" file, length: 20
[2012-01-03] [19:34:47.828] 00bac 2 DefragVolumeSinglePassHelper::LayFileAt#145 Laying file "D:\cygwin\usr\share\emacs\23.3\lisp\isearch.elc" (start at 7685449, 0, 20) at 531307, length: 20.
[2012-01-03] [19:34:47.843] 00bac 3 DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones#2969 Intruder fragment ("D:\Program Files\AGEIA Technologies\v2.7.4\AG1011\pcmp.o", 531307, 208, 20, lcLeft: 20) detected at 531307.
[2012-01-03] [19:34:47.859] 00bac 3 DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones#3067 Found free block in zone 0 at 3831849:20, requested: 20
[2012-01-03] [19:34:47.859] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\Program Files\AGEIA Technologies\v2.7.4\AG1011\pcmp.o" vcn: 208:20 to 3831849.

More info from the beggining of the file

[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#708 D:\Program Files\Defraggler\Defraggler.exe
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#710 CmdLine: "D:\Program Files\Defraggler\Defraggler.exe" /debug3
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#714 Version: 2_8_373
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#740 FileVersion: 2.8.0.373
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#741 ProductVersion: 2.8.0.373
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#742 Flags: 0x00000000, OS: 0x00000004, Type: 0x00000002, Subtype: 0x00000000
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#743 Flags description: Release
[2012-01-03] [19:21:07.968

2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#776 OEM ID: 0
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#777 Number of processors: 1
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#778 Page size: 4096
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#779 Processor type: 586
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#780 Minimum application address: 10000
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#781 Maximum application address: 7ffeffff
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#782 Active processor mask: 1
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#785 Clean boot: 0
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#786 Monitors: 3, Display: 1152x864, Virtual: 0x0 2592x864
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#796 Major: 0x00000005, Minor: 0x00000001, Build: 2600, PlatformId: 0x00000002
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#797 SPMajor: 0x0003, SPMinor: 0x0000, CSDVersion: "Service Pack 3"
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#798 SuiteMask: 0x00000100, ProductType: 0x00000001
[2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#810 Memory: Load: 28, Physical: 1521704960/2138046464, PageFile: 8057778176/8422174720, Virtual: 2108395520/2147352576, Extended 0
[2012-01-03] [19:21:07.968] 00c94 1 wWinMain#316 /debug3

 

system stuff

Mainboard :	Dell Computer Corp. 0G1548
Chipset :	Intel i845G
Processor :	Intel Pentium 4 @ 2200MHz
Physical Memory :	2048MB (2 x 1024 DDR-SDRAM )
Video Card :	NVIDIA Quadro FX 500/FX 600
Hard Disk :	Maxtor 4D060H3 (61GB)
Hard Disk :	Seagate ST3802110A (80GB)
Monitor Type :	Dell Computer DELL 1703FP - 17 inches
Monitor Type :	Unspecified
Network Card :	Intel 82550/1/7/8/9 EtherExpress PRO/100( Ethernet Adapter
Network Card :	Broadcom BCM440x 10/100 Integrated Ethernet Controller
Operating System :	Microsoft Windows XP Professional 5.01.2600 Service Pack 3 (32-bit)
DirectX :	Version 9.0c  (May 2010)

 

There are several dmboot events listed in the event viewer, stateing that 2 hardrives failed to start properly. I did install intel application accelerater, and have recently updated windows components using auto updates. mostly .net updates and visual C++ all drivers are up to date before these errors developed. If you would like the binary etc i can get it for you. But again no error codes were available and it states that it is an unknown error.

Link to comment
Share on other sites

  • Moderators

  1. If a moderator asks you to post a new thread, it's because you need to post a new thread The only similarity your post had to do with the topic is that they both involved Defraggler Thus I have split to a new topic.
  2. Nobody asked you to run debug3 it's too verbose and stops you from attaching the file to the thread. Please attach a log from debug (just debug) to this thread. If needed a developer may ask for a debug2 or debug3, but they usually won't and if they do they'll ask for it via PM and have you mail or upload it to them.
  3. A partial log does not help the Volunteer members and the developers figure out why you are crashing. I don't even see where the crash is. Why have you placed part of the log then place a part from the beginning

 

What settings do you have set for you Defraggler?

Please post the windows system log data, showing the crash, like this

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date:  10/13/2011
Time:  6:13:43 PM
User:  N/A
Computer: Computer1
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible.  No attempt to contact a source will be made for 15 minutes. NtpClient has no source of accurate time.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Which of the 2 hard drives are you defragging the Seagate or the Maxtor? I'm assuming this wasn't a one time thing and that the crash can be recreated

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

Support at https://support.ccleaner.com/s/?language=en_US

Pro users file a PRIORITY SUPPORT via email support@ccleaner.com

Link to comment
Share on other sites

yea, i've done it 3 times...I don't like hangs with nothing...i don't wanna keep doing it..I also use something called pcilatency tool...i haven't had issues with my settings before. I even crashed 3 times on default...We haven't abused the pc, I've checked the connections and heat. i'm just !o.0! i want my defraggler to work. :(

Link to comment
Share on other sites

  • Moderators

Which drive are you running defraggler on, the Seagate or the Maxtor?

 

Did this problem start after you installed the intel application accelerator?

 

Do you have any problems running Windows defrag?

 

Support contact

https://support.ccleaner.com/s/contact-form?language=en_US&form=general

or

support@ccleaner.com

 

Link to comment
Share on other sites

I was assumeing running the windows defrag is what caused this issue in the first place. As it completely scrambles everything and takes defraggler hours to rearrange the drive how i've had it previously. My brother has run windows defrag twice before this error occured. I will try it again after this post.

 

I finally recieved some clue from wiindows error reporting as to what it thinks causes the crash.

 

Intel Storage Driver (IdeChnDr.sys) has stopped working properly.

This product is no longer supported by the manufacturer.

 

I'm not sure how a previously working driver suddenly causes crashes with software already configured to use the old drivers, just because a company foolishly refuses to maintain it's drivers without first setting up open source community and free support.

 

I've been trying to defrag the seagate.

Link to comment
Share on other sites

running windows defrag results in a crash, rebooted to safe mode, and ran it again, crashed, ran windows defrag in command prompt in safe mode, crashed and gave the error PFN_list_corrupt. It appears someone may have released some virus to promote their software again...or maybe not. any idea's?

Link to comment
Share on other sites

Event Type: Error

Event Source: dmboot

Event Category: None

Event ID: 3

Date: 1/13/2012

Time: 10:45:06 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

dmboot: Failed to start volume Volume2 (E:)

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 00 00 00 00 03 00 4e 00 ......N.

0008: 00 00 00 00 03 00 50 c0 ......PÀ

0010: 00 00 00 00 00 00 00 00 ........

0018: 01 00 00 00 00 00 00 00 ........

0020: 00 00 00 00 00 00 00 00 ........

 

_________________________________________

 

Event Type: Error

Event Source: dmboot

Event Category: None

Event ID: 3

Date: 1/13/2012

Time: 10:45:06 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

dmboot: Failed to start volume Volume1 (D:)

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 00 00 00 00 03 00 4e 00 ......N.

0008: 00 00 00 00 03 00 50 c0 ......PÀ

0010: 00 00 00 00 00 00 00 00 ........

0018: 01 00 00 00 00 00 00 00 ........

0020: 00 00 00 00 00 00 00 00 ........

 

_____________________________________________

 

Event Type: Error

Event Source: System Error

Event Category: (102)

Event ID: 1003

Date: 1/13/2012

Time: 3:07:37 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

Error code 100000d1, parameter1 00000034, parameter2 00000002, parameter3 00000000, parameter4 b9ef88f0.

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 53 79 73 74 65 6d 20 45 System E

0008: 72 72 6f 72 20 20 45 72 rror Er

0010: 72 6f 72 20 63 6f 64 65 ror code

0018: 20 31 30 30 30 30 30 64 100000d

0020: 31 20 20 50 61 72 61 6d 1 Param

0028: 65 74 65 72 73 20 30 30 eters 00

0030: 30 30 30 30 33 34 2c 20 000034,

0038: 30 30 30 30 30 30 30 32 00000002

0040: 2c 20 30 30 30 30 30 30 , 000000

0048: 30 30 2c 20 62 39 65 66 00, b9ef

0050: 38 38 66 30 88f0

 

__________________________________________

 

Event Type: Error

Event Source: System Error

Event Category: (102)

Event ID: 1003

Date: 1/13/2012

Time: 3:07:00 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

Error code 1000000a, parameter1 00000166, parameter2 00000002, parameter3 00000000, parameter4 804faada.

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 53 79 73 74 65 6d 20 45 System E

0008: 72 72 6f 72 20 20 45 72 rror Er

0010: 72 6f 72 20 63 6f 64 65 ror code

0018: 20 31 30 30 30 30 30 30 1000000

0020: 61 20 20 50 61 72 61 6d a Param

0028: 65 74 65 72 73 20 30 30 eters 00

0030: 30 30 30 31 36 36 2c 20 000166,

0038: 30 30 30 30 30 30 30 32 00000002

0040: 2c 20 30 30 30 30 30 30 , 000000

0048: 30 30 2c 20 38 30 34 66 00, 804f

0050: 61 61 64 61 aada

 

____________________________________________

 

Event Type: Error

Event Source: System Error

Event Category: (102)

Event ID: 1003

Date: 1/13/2012

Time: 3:06:13 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

Error code 1000000a, parameter1 00000166, parameter2 00000002, parameter3 00000000, parameter4 804faada.

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 53 79 73 74 65 6d 20 45 System E

0008: 72 72 6f 72 20 20 45 72 rror Er

0010: 72 6f 72 20 63 6f 64 65 ror code

0018: 20 31 30 30 30 30 30 30 1000000

0020: 61 20 20 50 61 72 61 6d a Param

0028: 65 74 65 72 73 20 30 30 eters 00

0030: 30 30 30 31 36 36 2c 20 000166,

0038: 30 30 30 30 30 30 30 32 00000002

0040: 2c 20 30 30 30 30 30 30 , 000000

0048: 30 30 2c 20 38 30 34 66 00, 804f

0050: 61 61 64 61 aada

________________________________________and now w32time

 

Event Type: Error

Event Source: W32Time

Event Category: None

Event ID: 34

Date: 1/4/2012

Time: 10:10:35 AM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

The time service has detected that the system time needs to be changed by +75622 seconds. The time service will not change the system time by more than +54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|69.69.69.15:123->65.55.21.19:123) is working properly.

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Link to comment
Share on other sites

Some strange things i saw in event viewer/application

 

Event Type: Error

Event Source: DCOM

Event Category: None

Event ID: 10005

Date: 1/13/2012

Time: 9:01:19 PM

User: NT AUTHORITY\SYSTEM

Computer: WEEEFX-8F5E138E

Description:

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}

 

For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.

 

 

Event Type: Error

Event Source: Service Control Manager

Event Category: None

Event ID: 7026

Date: 1/13/2012

Time: 9:00:27 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

The following boot-start or system-start driver(s) failed to load:

AFD

Fips

intelppm

IPSec

MpFilter

MRxSmb

NetBIOS

NetBT

RasAcd

Rdbss

Tcpip

 

For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.

 

I believe ^^ this is safe mode loading??? i don't normally see these after booting in safe mode.

 

 

Event Type: Information

Event Source: MPSampleSubmission

Event Category: None

Event ID: 5001

Date: 1/13/2012

Time: 5:21:27 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

Bucket 1913344444, bucket table 5, EventType mptelemetry, P1 0, P2 moaccapability, P3 3.0.8402.0, P4 2, P5 0, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.

 

For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.

Data:

0000: 42 00 75 00 63 00 6b 00 B.u.c.k.

0008: 65 00 74 00 3a 00 20 00 e.t.:. .

0010: 31 00 39 00 31 00 33 00 1.9.1.3.

0018: 33 00 34 00 34 00 34 00 3.4.4.4.

0020: 34 00 34 00 0d 00 0a 00 4.4.....

0028: 42 00 75 00 63 00 6b 00 B.u.c.k.

0030: 65 00 74 00 54 00 61 00 e.t.T.a.

0038: 62 00 6c 00 65 00 20 00 b.l.e. .

0040: 35 00 0d 00 0a 00 5.....

 

Event Type: Information

Event Source: crypt32

Event Category: None

Event ID: 7

Date: 1/13/2012

Time: 5:08:30 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

Successful auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>

 

For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.

 

Event Type: Information

Event Source: Microsoft Security Client

Event Category: None

Event ID: 5001

Date: 1/13/2012

Time: 5:03:28 PM

User: N/A

Computer: WEEEFX-8F5E138E

Description:

The description for Event ID ( 5001 ) in Source ( Microsoft Security Client ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 2078499399, 5, mssecurityclient, setup.exe, 2.1.1116.0, 0x8000ffff, morrobootstraper__cinstallflow__internalrun - getenablefirewallaction, morrobootstraper__cflow__processflowactionresult, 0, security essentials, NIL, NIL, NIL.

Data:

0000: 42 00 75 00 63 00 6b 00 B.u.c.k.

0008: 65 00 74 00 3a 00 20 00 e.t.:. .

0010: 32 00 30 00 37 00 38 00 2.0.7.8.

0018: 34 00 39 00 39 00 33 00 4.9.9.3.

0020: 39 00 39 00 0d 00 0a 00 9.9.....

0028: 42 00 75 00 63 00 6b 00 B.u.c.k.

0030: 65 00 74 00 54 00 61 00 e.t.T.a.

0038: 62 00 6c 00 65 00 20 00 b.l.e. .

0040: 35 00 0d 00 0a 00 5.....

 

not sure if this is normal or not, but no one should be attempting a remote connection.

Link to comment
Share on other sites

thx for the reply hazelnut, unfortunatly all of these sites are untrusted, offer little help...and recommend software i am avoiding for numerous reasons. mainly it never works or get exploited and targeted. Some of the threads on some sites even tell you to install malware/fake software.

 

I can't believe piriform doesn't fight malware. and hasn't developed software to do so aside from the benefits of defrag and reg cleaning... Even closed the section for it. hmmmmm

 

I tried to do a system restore and it crashed...BSOD windows detected this error and offered to run it again. I didn't. And this was not logged in the events logs.

 

Before we go on a virus hunt here...remember I came here for help with defraggler not running and freezeing my pc. I bet if we find the issue there, we could likely also remove or disable associated threats if present. Often this unstealths crafty codeing. So that anti-v can do it's job. So far i've used 5 different anti-v's i trust. I will continue. I see no reasons thus far for defraggler not to be able to run normally, and windows defrag also does not run and results in a freeze with no BSOD. windows has not detected a hard fault/crash or even logged an event when windows defrag was run. It only shows it was started.

Link to comment
Share on other sites

  • Moderators

The sites that are linked to are not untrustworthy. They are some of the top malware fighting sites in the world.

 

One of them, malwarebytes malware help for instance which is listed, how can you say it is untrustworthy?

 

You are being totally off course here, just get yourself some help from one of those listed sites.

 

As for the fact about why we have stopped doing malware removal on the forum, unfortunately our spyware moderator died just before xmas.

 

Support contact

https://support.ccleaner.com/s/contact-form?language=en_US&form=general

or

support@ccleaner.com

 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.