pazsion Posted January 4, 2012 Share Posted January 4, 2012 defragller crashes my pc, some critical error with ide drivers comes up when windows is restarted. Since the pc crashes i don't think i can get a debug report. i'm gonna try re-installing Link to comment Share on other sites More sharing options...
Moderators Nergal Posted January 4, 2012 Moderators Share Posted January 4, 2012 This topic is about defraggler please post a new thread in the ccleaner help section. And provide MUCH more information ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF. Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark) ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T. Support at https://support.ccleaner.com/s/?language=en_US Pro users file a PRIORITY SUPPORT via email support@ccleaner.com Link to comment Share on other sites More sharing options...
pazsion Posted January 5, 2012 Author Share Posted January 5, 2012 it's hard to provide more info when you don't specify what info would be helpful, and the software does not keep logs on what happens on it's own. If you follow the guide for debug mode, the line given to run won't run properly as is. make sure /debug is outside the quotes that are forced into place. I'm gonna try and get something useing this. windows error correcting freezes and defraggler's error correction doesn't find an issue. SMART health indications say warning. some things are higher (errors) and start and stop are high. the drive is 1500 days of use. an older drive takes more time then usual to become chooseable in the list then normal. but it's smart health is good. and also has no other issues Link to comment Share on other sites More sharing options...
Moderators Nergal Posted January 5, 2012 Moderators Share Posted January 5, 2012 it's hard to provide more info when you don't specify what info would be helpful, and the software does not keep logs on what happens on it's own. If you follow the guide for debug mode, the line given to run won't run properly as is. make sure /debug is outside the quotes that are forced into place. I'm gonna try and get something useing this. Please unless you issue is EXACTLY the same you still need to start your own thread. also it is not fair to make another member look like a fool by changing a previous post without atribution of the change defragller crashes my pc, some critical error with ide drivers comes up when windows is restarted. Since the pc crashes i don't think i can get a debug report. i'm gonna try re-installing Originally stated the issue was with ccleaner. Anyone helping needs to know Operating System Version and Service pack level 32bit or 64bit Version of the software giving you issues (DO NOT JUST SAY latest version, this imparts NO information give the ACTUAL version) some critical error with ide drivers comes up when windows is restarted Means nothing please give an actual error code and the details of the code, and what is happening with the program when the system crashes (analyzing? defragging? opening? closing?) What kind of IDE drive? how big? how old? does it have errors if you run scandisc? are all drivers up to date (usually the issue with PC crashes)? do you get a bluescreen of death? DO NOT REPLY TO THIS TOPIC START YOUR OWN, it is unfair to the original poster for us to keep pinging thier email with "your post has been replied to" when this is (MOST LIKELY) a seperate issue yes to run debug you must type it EXACTLY as "c:\program files\defraggler\defraggler.exe" /debug (replacing the c:\program files\defraggler with the location of your defraggler and replacing defraggler.exe with defraggler64.exe if this is required by the bit level of your Windows) ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF. Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark) ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T. Support at https://support.ccleaner.com/s/?language=en_US Pro users file a PRIORITY SUPPORT via email support@ccleaner.com Link to comment Share on other sites More sharing options...
pazsion Posted January 5, 2012 Author Share Posted January 5, 2012 Starting my own topic would just flood the forums with similar threads, as is happening, so i chose the most recent most similar issue...As i've read from the forums both 64 and 32 bit versions are not working properly. I am using the 32 bit version in windows xp pro sp3 version 2.08.373 the debug3 created a 39MB file. Here is the section where it froze the pc. no blue screen, but randomly windows will report a critcal error happened, that is not documented. And has no specific error code. [2012-01-03] [19:34:47.515] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" vcn: 282:86 to 530585. [2012-01-03] [19:34:47.546] 00bac 3 FileCollection::UpdateFragments#339 File "\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png", before: 368, 2, after: 368, 1. [2012-01-03] [19:34:47.546] 00bac 1 DefragVolumeSinglePassHelper::LayFileAt#273 MoveFileRegionWithMarking for file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" to 530585, 282, 86 finished (hr=0x00000000). Destination block is not free. [2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#292 Found proper fragment vcn:282 for file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" (start at 530303, 0, 368), currentLcn: 530585 [2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#201 Laying file "D:\Documents and Settings\All Users\Application Data\Electronic Arts\Need For Speed World\Data\Media\map_textures\worldmap_texture_mapgadget.png" finished at 530671. [2012-01-03] [19:34:47.546] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 530671 [2012-01-03] [19:34:47.562] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\lang\pintlcsk.dic at lcn: 530671, length: 120 [2012-01-03] [19:34:47.562] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 530791 [2012-01-03] [19:34:47.562] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1090 Detected potential free block of 296 (maximum 12315) clusters at 530791 [2012-01-03] [19:34:47.625] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1183 Searching through files took 0.063s [2012-01-03] [19:34:47.640] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1196 Found "\WINDOWS\system32\urlmon.dll" file, length: 296 [2012-01-03] [19:34:47.640] 00bac 2 DefragVolumeSinglePassHelper::LayFileAt#145 Laying file "D:\WINDOWS\system32\urlmon.dll" (start at 10401488, 0, 296) at 530791, length: 296. [2012-01-03] [19:34:47.640] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\WINDOWS\system32\urlmon.dll" vcn: 0:296 to 530791. [2012-01-03] [19:34:47.750] 00bac 3 FileCollection::UpdateFragments#339 File "\WINDOWS\system32\urlmon.dll", before: 296, 1, after: 296, 1. [2012-01-03] [19:34:47.765] 00bac 1 DefragVolumeSinglePassHelper::LayFileAt#273 MoveFileRegionWithMarking for file "D:\WINDOWS\system32\urlmon.dll" to 530791, 0, 296 finished (hr=0x00000000). Destination block is not free. [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#292 Found proper fragment vcn:0 for file "D:\WINDOWS\system32\urlmon.dll" (start at 530791, 0, 296), currentLcn: 530791 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::LayFileAt#201 Laying file "D:\WINDOWS\system32\urlmon.dll" finished at 531087. [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531087 [2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\$NtServicePackUninstall$\msxml2.dll at lcn: 531087, length: 124 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531211 [2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\fp4apws.dll at lcn: 531211, length: 37 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531248 [2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\atinxbxx.sys at lcn: 531248, length: 8 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531256 [2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\ServicePackFiles\i386\wpnpinst.exe at lcn: 531256, length: 3 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531259 [2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\$NtServicePackUninstall$\msutb.dll at lcn: 531259, length: 34 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531293 [2012-01-03] [19:34:47.765] 00bac 2 DefragVolumeSinglePassHelper::DefragInternal#959 Skipping whole file \WINDOWS\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll at lcn: 531293, length: 14 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#901 Processing cluster 531307 [2012-01-03] [19:34:47.765] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1090 Detected potential free block of 20 (maximum 11799) clusters at 531307 [2012-01-03] [19:34:47.828] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1183 Searching through files took 0.064s [2012-01-03] [19:34:47.828] 00bac 3 DefragVolumeSinglePassHelper::DefragInternal#1196 Found "\cygwin\usr\share\emacs\23.3\lisp\isearch.elc" file, length: 20 [2012-01-03] [19:34:47.828] 00bac 2 DefragVolumeSinglePassHelper::LayFileAt#145 Laying file "D:\cygwin\usr\share\emacs\23.3\lisp\isearch.elc" (start at 7685449, 0, 20) at 531307, length: 20. [2012-01-03] [19:34:47.843] 00bac 3 DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones#2969 Intruder fragment ("D:\Program Files\AGEIA Technologies\v2.7.4\AG1011\pcmp.o", 531307, 208, 20, lcLeft: 20) detected at 531307. [2012-01-03] [19:34:47.859] 00bac 3 DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones#3067 Found free block in zone 0 at 3831849:20, requested: 20 [2012-01-03] [19:34:47.859] 00bac 3 DefragVolumeSinglePassHelper::MoveFileRegionWithMarking#442 Moving file "D:\Program Files\AGEIA Technologies\v2.7.4\AG1011\pcmp.o" vcn: 208:20 to 3831849. More info from the beggining of the file [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#708 D:\Program Files\Defraggler\Defraggler.exe [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#710 CmdLine: "D:\Program Files\Defraggler\Defraggler.exe" /debug3 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#714 Version: 2_8_373 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#740 FileVersion: 2.8.0.373 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#741 ProductVersion: 2.8.0.373 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#742 Flags: 0x00000000, OS: 0x00000004, Type: 0x00000002, Subtype: 0x00000000 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogApplicationInfo#743 Flags description: Release [2012-01-03] [19:21:07.968 2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#776 OEM ID: 0 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#777 Number of processors: 1 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#778 Page size: 4096 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#779 Processor type: 586 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#780 Minimum application address: 10000 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#781 Maximum application address: 7ffeffff [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#782 Active processor mask: 1 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#785 Clean boot: 0 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#786 Monitors: 3, Display: 1152x864, Virtual: 0x0 2592x864 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#796 Major: 0x00000005, Minor: 0x00000001, Build: 2600, PlatformId: 0x00000002 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#797 SPMajor: 0x0003, SPMinor: 0x0000, CSDVersion: "Service Pack 3" [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#798 SuiteMask: 0x00000100, ProductType: 0x00000001 [2012-01-03] [19:21:07.968] 00c94 0 Logger::HostLogger::LogSystemInfo#810 Memory: Load: 28, Physical: 1521704960/2138046464, PageFile: 8057778176/8422174720, Virtual: 2108395520/2147352576, Extended 0 [2012-01-03] [19:21:07.968] 00c94 1 wWinMain#316 /debug3 system stuff Mainboard : Dell Computer Corp. 0G1548 Chipset : Intel i845G Processor : Intel Pentium 4 @ 2200MHz Physical Memory : 2048MB (2 x 1024 DDR-SDRAM ) Video Card : NVIDIA Quadro FX 500/FX 600 Hard Disk : Maxtor 4D060H3 (61GB) Hard Disk : Seagate ST3802110A (80GB) Monitor Type : Dell Computer DELL 1703FP - 17 inches Monitor Type : Unspecified Network Card : Intel 82550/1/7/8/9 EtherExpress PRO/100( Ethernet Adapter Network Card : Broadcom BCM440x 10/100 Integrated Ethernet Controller Operating System : Microsoft Windows XP Professional 5.01.2600 Service Pack 3 (32-bit) DirectX : Version 9.0c (May 2010) There are several dmboot events listed in the event viewer, stateing that 2 hardrives failed to start properly. I did install intel application accelerater, and have recently updated windows components using auto updates. mostly .net updates and visual C++ all drivers are up to date before these errors developed. If you would like the binary etc i can get it for you. But again no error codes were available and it states that it is an unknown error. Link to comment Share on other sites More sharing options...
Moderators Nergal Posted January 5, 2012 Moderators Share Posted January 5, 2012 If a moderator asks you to post a new thread, it's because you need to post a new thread The only similarity your post had to do with the topic is that they both involved Defraggler Thus I have split to a new topic. Nobody asked you to run debug3 it's too verbose and stops you from attaching the file to the thread. Please attach a log from debug (just debug) to this thread. If needed a developer may ask for a debug2 or debug3, but they usually won't and if they do they'll ask for it via PM and have you mail or upload it to them. A partial log does not help the Volunteer members and the developers figure out why you are crashing. I don't even see where the crash is. Why have you placed part of the log then place a part from the beginning What settings do you have set for you Defraggler? Please post the windows system log data, showing the crash, like this Event Type: Error Event Source: W32Time Event Category: None Event ID: 29 Date: 10/13/2011 Time: 6:13:43 PM User: N/A Computer: Computer1 Description: The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 15 minutes. NtpClient has no source of accurate time. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Which of the 2 hard drives are you defragging the Seagate or the Maxtor? I'm assuming this wasn't a one time thing and that the crash can be recreated ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF. Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark) ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T. Support at https://support.ccleaner.com/s/?language=en_US Pro users file a PRIORITY SUPPORT via email support@ccleaner.com Link to comment Share on other sites More sharing options...
pazsion Posted January 6, 2012 Author Share Posted January 6, 2012 yea, i've done it 3 times...I don't like hangs with nothing...i don't wanna keep doing it..I also use something called pcilatency tool...i haven't had issues with my settings before. I even crashed 3 times on default...We haven't abused the pc, I've checked the connections and heat. i'm just !o.0! i want my defraggler to work. Link to comment Share on other sites More sharing options...
Moderators hazelnut Posted January 6, 2012 Moderators Share Posted January 6, 2012 Which drive are you running defraggler on, the Seagate or the Maxtor? Did this problem start after you installed the intel application accelerator? Do you have any problems running Windows defrag? Support contact https://support.ccleaner.com/s/contact-form?language=en_US&form=general or support@ccleaner.com Link to comment Share on other sites More sharing options...
pazsion Posted January 13, 2012 Author Share Posted January 13, 2012 I was assumeing running the windows defrag is what caused this issue in the first place. As it completely scrambles everything and takes defraggler hours to rearrange the drive how i've had it previously. My brother has run windows defrag twice before this error occured. I will try it again after this post. I finally recieved some clue from wiindows error reporting as to what it thinks causes the crash. Intel Storage Driver (IdeChnDr.sys) has stopped working properly. This product is no longer supported by the manufacturer. I'm not sure how a previously working driver suddenly causes crashes with software already configured to use the old drivers, just because a company foolishly refuses to maintain it's drivers without first setting up open source community and free support. I've been trying to defrag the seagate. Link to comment Share on other sites More sharing options...
pazsion Posted January 14, 2012 Author Share Posted January 14, 2012 running windows defrag results in a crash, rebooted to safe mode, and ran it again, crashed, ran windows defrag in command prompt in safe mode, crashed and gave the error PFN_list_corrupt. It appears someone may have released some virus to promote their software again...or maybe not. any idea's? Link to comment Share on other sites More sharing options...
pazsion Posted January 14, 2012 Author Share Posted January 14, 2012 Event Type: Error Event Source: dmboot Event Category: None Event ID: 3 Date: 1/13/2012 Time: 10:45:06 PM User: N/A Computer: WEEEFX-8F5E138E Description: dmboot: Failed to start volume Volume2 (E:) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp.'>http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 03 00 4e 00 ......N. 0008: 00 00 00 00 03 00 50 c0 ......PÀ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 01 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ _________________________________________ Event Type: Error Event Source: dmboot Event Category: None Event ID: 3 Date: 1/13/2012 Time: 10:45:06 PM User: N/A Computer: WEEEFX-8F5E138E Description: dmboot: Failed to start volume Volume1 (D:) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 03 00 4e 00 ......N. 0008: 00 00 00 00 03 00 50 c0 ......PÀ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 01 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ _____________________________________________ Event Type: Error Event Source: System Error Event Category: (102) Event ID: 1003 Date: 1/13/2012 Time: 3:07:37 PM User: N/A Computer: WEEEFX-8F5E138E Description: Error code 100000d1, parameter1 00000034, parameter2 00000002, parameter3 00000000, parameter4 b9ef88f0. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 53 79 73 74 65 6d 20 45 System E 0008: 72 72 6f 72 20 20 45 72 rror Er 0010: 72 6f 72 20 63 6f 64 65 ror code 0018: 20 31 30 30 30 30 30 64 100000d 0020: 31 20 20 50 61 72 61 6d 1 Param 0028: 65 74 65 72 73 20 30 30 eters 00 0030: 30 30 30 30 33 34 2c 20 000034, 0038: 30 30 30 30 30 30 30 32 00000002 0040: 2c 20 30 30 30 30 30 30 , 000000 0048: 30 30 2c 20 62 39 65 66 00, b9ef 0050: 38 38 66 30 88f0 __________________________________________ Event Type: Error Event Source: System Error Event Category: (102) Event ID: 1003 Date: 1/13/2012 Time: 3:07:00 PM User: N/A Computer: WEEEFX-8F5E138E Description: Error code 1000000a, parameter1 00000166, parameter2 00000002, parameter3 00000000, parameter4 804faada. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 53 79 73 74 65 6d 20 45 System E 0008: 72 72 6f 72 20 20 45 72 rror Er 0010: 72 6f 72 20 63 6f 64 65 ror code 0018: 20 31 30 30 30 30 30 30 1000000 0020: 61 20 20 50 61 72 61 6d a Param 0028: 65 74 65 72 73 20 30 30 eters 00 0030: 30 30 30 31 36 36 2c 20 000166, 0038: 30 30 30 30 30 30 30 32 00000002 0040: 2c 20 30 30 30 30 30 30 , 000000 0048: 30 30 2c 20 38 30 34 66 00, 804f 0050: 61 61 64 61 aada ____________________________________________ Event Type: Error Event Source: System Error Event Category: (102) Event ID: 1003 Date: 1/13/2012 Time: 3:06:13 PM User: N/A Computer: WEEEFX-8F5E138E Description: Error code 1000000a, parameter1 00000166, parameter2 00000002, parameter3 00000000, parameter4 804faada. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 53 79 73 74 65 6d 20 45 System E 0008: 72 72 6f 72 20 20 45 72 rror Er 0010: 72 6f 72 20 63 6f 64 65 ror code 0018: 20 31 30 30 30 30 30 30 1000000 0020: 61 20 20 50 61 72 61 6d a Param 0028: 65 74 65 72 73 20 30 30 eters 00 0030: 30 30 30 31 36 36 2c 20 000166, 0038: 30 30 30 30 30 30 30 32 00000002 0040: 2c 20 30 30 30 30 30 30 , 000000 0048: 30 30 2c 20 38 30 34 66 00, 804f 0050: 61 61 64 61 aada ________________________________________and now w32time Event Type: Error Event Source: W32Time Event Category: None Event ID: 34 Date: 1/4/2012 Time: 10:10:35 AM User: N/A Computer: WEEEFX-8F5E138E Description: The time service has detected that the system time needs to be changed by +75622 seconds. The time service will not change the system time by more than +54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|69.69.69.15:123->65.55.21.19:123) is working properly. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Link to comment Share on other sites More sharing options...
Moderators hazelnut Posted January 14, 2012 Moderators Share Posted January 14, 2012 If you suspect a virus please see here as soon as possible http://forum.piriform.com/index.php?showtopic=34786 Also do a memory test . Support contact https://support.ccleaner.com/s/contact-form?language=en_US&form=general or support@ccleaner.com Link to comment Share on other sites More sharing options...
pazsion Posted January 14, 2012 Author Share Posted January 14, 2012 Some strange things i saw in event viewer/application Event Type: Error Event Source: DCOM Event Category: None Event ID: 10005 Date: 1/13/2012 Time: 9:01:19 PM User: NT AUTHORITY\SYSTEM Computer: WEEEFX-8F5E138E Description: DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} For more information, see Help and Support Center at http://go.microsoft....ink/events.asp. Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7026 Date: 1/13/2012 Time: 9:00:27 PM User: N/A Computer: WEEEFX-8F5E138E Description: The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MpFilter MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip For more information, see Help and Support Center at http://go.microsoft....ink/events.asp. I believe ^^ this is safe mode loading??? i don't normally see these after booting in safe mode. Event Type: Information Event Source: MPSampleSubmission Event Category: None Event ID: 5001 Date: 1/13/2012 Time: 5:21:27 PM User: N/A Computer: WEEEFX-8F5E138E Description: Bucket 1913344444, bucket table 5, EventType mptelemetry, P1 0, P2 moaccapability, P3 3.0.8402.0, P4 2, P5 0, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL. For more information, see Help and Support Center at http://go.microsoft....ink/events.asp. Data: 0000: 42 00 75 00 63 00 6b 00 B.u.c.k. 0008: 65 00 74 00 3a 00 20 00 e.t.:. . 0010: 31 00 39 00 31 00 33 00 1.9.1.3. 0018: 33 00 34 00 34 00 34 00 3.4.4.4. 0020: 34 00 34 00 0d 00 0a 00 4.4..... 0028: 42 00 75 00 63 00 6b 00 B.u.c.k. 0030: 65 00 74 00 54 00 61 00 e.t.T.a. 0038: 62 00 6c 00 65 00 20 00 b.l.e. . 0040: 35 00 0d 00 0a 00 5..... Event Type: Information Event Source: crypt32 Event Category: None Event ID: 7 Date: 1/13/2012 Time: 5:08:30 PM User: N/A Computer: WEEEFX-8F5E138E Description: Successful auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> For more information, see Help and Support Center at http://go.microsoft....ink/events.asp. Event Type: Information Event Source: Microsoft Security Client Event Category: None Event ID: 5001 Date: 1/13/2012 Time: 5:03:28 PM User: N/A Computer: WEEEFX-8F5E138E Description: The description for Event ID ( 5001 ) in Source ( Microsoft Security Client ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 2078499399, 5, mssecurityclient, setup.exe, 2.1.1116.0, 0x8000ffff, morrobootstraper__cinstallflow__internalrun - getenablefirewallaction, morrobootstraper__cflow__processflowactionresult, 0, security essentials, NIL, NIL, NIL. Data: 0000: 42 00 75 00 63 00 6b 00 B.u.c.k. 0008: 65 00 74 00 3a 00 20 00 e.t.:. . 0010: 32 00 30 00 37 00 38 00 2.0.7.8. 0018: 34 00 39 00 39 00 33 00 4.9.9.3. 0020: 39 00 39 00 0d 00 0a 00 9.9..... 0028: 42 00 75 00 63 00 6b 00 B.u.c.k. 0030: 65 00 74 00 54 00 61 00 e.t.T.a. 0038: 62 00 6c 00 65 00 20 00 b.l.e. . 0040: 35 00 0d 00 0a 00 5..... not sure if this is normal or not, but no one should be attempting a remote connection. Link to comment Share on other sites More sharing options...
pazsion Posted January 14, 2012 Author Share Posted January 14, 2012 thx for the reply hazelnut, unfortunatly all of these sites are untrusted, offer little help...and recommend software i am avoiding for numerous reasons. mainly it never works or get exploited and targeted. Some of the threads on some sites even tell you to install malware/fake software. I can't believe piriform doesn't fight malware. and hasn't developed software to do so aside from the benefits of defrag and reg cleaning... Even closed the section for it. hmmmmm I tried to do a system restore and it crashed...BSOD windows detected this error and offered to run it again. I didn't. And this was not logged in the events logs. Before we go on a virus hunt here...remember I came here for help with defraggler not running and freezeing my pc. I bet if we find the issue there, we could likely also remove or disable associated threats if present. Often this unstealths crafty codeing. So that anti-v can do it's job. So far i've used 5 different anti-v's i trust. I will continue. I see no reasons thus far for defraggler not to be able to run normally, and windows defrag also does not run and results in a freeze with no BSOD. windows has not detected a hard fault/crash or even logged an event when windows defrag was run. It only shows it was started. Link to comment Share on other sites More sharing options...
Moderators hazelnut Posted January 14, 2012 Moderators Share Posted January 14, 2012 The sites that are linked to are not untrustworthy. They are some of the top malware fighting sites in the world. One of them, malwarebytes malware help for instance which is listed, how can you say it is untrustworthy? You are being totally off course here, just get yourself some help from one of those listed sites. As for the fact about why we have stopped doing malware removal on the forum, unfortunately our spyware moderator died just before xmas. Support contact https://support.ccleaner.com/s/contact-form?language=en_US&form=general or support@ccleaner.com Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now