BSOD +Search Function lost +Outlook crashing +services not enabling

mfx said:

If I switch the ethernet off I wouldn't be able to replecate the function that would cause the bsod.

(my point precisely<g>)

I can't help thinking that there's a problem there somewhere.
Please look in Device Manager, and enable 'Show hidden Devices'
UNINSTALL (not just disable) all yellow or red-flagged devices - and ALL the RealTek Ethernet Adapters.
If anything doesn't want to uninstall, reboot to Safe Mode, and try from there.
Reboot to Normal Mode, and let Windows reinstall anything it thinks it needs to - make a note of any that cause problems.

Then re-test.

I also see msseces and msmpeng in running processes - Doesn't eSet switch off Windows Defender? - or do you also have MSE installed? If so, then UNINSTALL either MSE, or eSet.

Uninstalling MSE now.

That should stop an awful lot of problems - have a play and see :)
Having two AV's installed and running will cause all sorts of conflicts as they fight for posession of files as they are opened.

What other AV's have EVER been installed on this machine? - including any preinstalled by the manufacturer?

It would probably be a good idea to use the removal tool for MSE as well - and you may need to think about a reinstall of eSet (or a repair install) - How to manually uninstall Microsoft Security Essentials 1.0.1963 if you cannot uninstall it by using the Add or Remove Programs item

Only MSE. After years of experience (some of it somewhat blinkered and tunnelled) I have learnt quickly that Norton/McAfee are not system friendly.

Will try and use the tool unfortunately my Search has dissapeared of the face of my system...reinstall seems to be the way forward.

Had a look through device manager unhidden. No exclamation marks or ? devices (well one but that's a midi port which is now currently unplugged no issues).

Deinstalled the following :

Virtual Clone ISO manager.
Rebirth (propellerheads legacy software this could be a major issue tbh)
A few other small programs no redundant - Recuvva accidentally deleted 15 years of samples now backed up :)

Thanks for the tip.

Still have other issues to resolve if you care to peruse

Thanks

Lost search function - (Win+F) and "Programs and Features" fail.

Outlook 2007 crashing on running (Safe Mode appears ok)

Peace

mfx said:

Only MSE. After years of experience (some of it somewhat blinkered and tunnelled) I have learnt quickly that Norton/McAfee are not system friendly.

Still have other issues to resolve if you care to peruse

Thanks

Lost search function - (Win+F) and "Programs and Features" fail.

Outlook 2007 crashing on running (Safe Mode appears ok)

Peace

I too have a certain amount of prejudice about those two programs - they tend to get ripped out of any PC I'm asked to work on (and if the owner doesnt want it removed, then I don't work on it).

YOu may find that those problems will also be solved, or at least mitigated.
I'll have a look - but my knowledge of Outlook's foibles cound be written in 24pt on a postage stamp, and as for Windows Search.....

Let's see how the BSOD's go, after a few days, and see if things have settled down.

Hi there,

I found evidence of hard drive/controller trouble all through your logs.

Code:

Event[4]:
  Log Name: System
  Source: atapi
  Date: 2011-11-10T13:58:06.105
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
The driver detected a controller error on \Device\Ide\IdePort5.

Event[3958]:
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2011-11-08T12:56:56.842
  Event ID: 20011
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: MFXSOUND
  Description: 
Device action request for device 'USB\VID_059F&PID_1010\SAMSUNG_HDS0VVJ1MP706377______' was vetoed by 'STORAGE\Volume\{8207a2bf-fbf5-11e0-b574-00113b1137b0}#0000000000007E00' with veto type 5.

Event[3959]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2011-11-08T12:56:56.842
  Event ID: 225
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: MFXSOUND
  Description: 
The application System with process id 4 stopped the removal or ejection for the device USB\VID_059F&PID_1010\SAMSUNG_HDS0VVJ1MP706377______.

Event[13402]:
  Log Name: System
  Source: Disk
  Date: 2011-10-30T23:34:56.282
  Event ID: 51
  Task: N/A
  Level: Warning
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
An error was detected on device \Device\Harddisk6\DR14 during a paging operation.

That could explain the problem with Windows Search:

Code:

Event[0]:
  Log Name: System
  Source: Service Control Manager
  Date: 2011-11-10T13:58:32.989
  Event ID: 7034
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
The Windows Search service terminated unexpectedly.  It has done this 19 time(s).

Start off by running SeaTools: SeaTools for Windows | Seagate

When SeaTools is done, open a command prompt and run:

Code:

chkdsk /r

Please report the results of both tests.

Also, be sure to do a repair install. It shouldn't touch any of your data, and might resolve your Windows Search issue, assuming it is not being caused by a hard drive issue. See this guide: Repair Install

I see evidence of past or present malware on your system:

Code:

Event[2820]:
  Log Name: System
  Source: Microsoft Antimalware
  Date: 2011-11-09T13:52:36.000
  Event ID: 1117
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
Microsoft Antimalware has taken action to protect this machine from malware or other potentially unwanted software.
 For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/OpenCandy&threatid=159633
     Name: Adware:Win32/OpenCandy
     ID: 159633
     Severity: Low
     Category: Adware
     Path: file:_D:\MFX STUDIO\Studio Utilities\Darkwave\DarkWave-Studio-3.0.7.exe;file:_G:\Studio Utilities\Darkwave\DarkWave-Studio-3.0.7.exe;folder:_C:\Users\MFX\AppData\Roaming\OpenCandy\
     Detection Origin: Local machine
     Detection Type: Concrete
     Detection Source: Real-Time Protection
     User: MFXSOUND\MFX
     Process Name: C:\Windows\explorer.exe
     Action: Remove
     Action Status:  To finish removing malware and other potentially unwanted software, restart the computer. 
     Signature Version: AV: 1.115.1486.0, AS: 1.115.1486.0, NIS: 10.7.0.0
     Engine Version: AM: 1.1.7801.0, NIS: 2.0.7707.0

Run a full scan with ESET, including all drives (not just C).

Hi there thanks for the input.

Not sure why DarkWave is malware but nonetheless never installed and was on a seperate data drive now deleted.

SeaTools worked fine and didn't raise any issues but to be honest not sure what options to run?

chkdsk /r (ran as administrator) didn't throw up any issues either.

Wondering if it's a driver issue with the GFX.

To be honest I am homing in on a recovery from August and full reinstall of the system software programs for the studio.

What I am think is have the admin account for the studio and setup another user account for office work and surfing. May even install on a second drive office and other applications as the studio is really where I need the SSD performance tbh.

For SeaTools, run the Short Drive Self Test.

For chkdsk, did you have to reboot the computer in order for it to run? Open event viewer ("eventvwr.msc" in the start menu), go to Windows Logs > Application, and find the latest wininit entry. Could you copy/paste your results here?

Jonathan_King said:

For SeaTools, run the Short Drive Self Test.

For chkdsk, did you have to reboot the computer in order for it to run? Open event viewer ("eventvwr.msc" in the start menu), go to Windows Logs > Application, and find the latest wininit entry. Could you copy/paste your results here?

Will rerun Seatools again tomorrow (midnight now and sleepy).

I have run "eventvwr.msc" and gone to windows logs>applications. Theres a lot in ther and have attached below.

There is a load of errors and yellow ! from TuneUp Utilities 2012. DEFINATELY NOT A PROGRAM I WOULD RECOMMEND IN THE FUTURE by the looks of things.

Attached the event log as a zip, I am unable to locate the winnit.

Hope this helps.