Applications hang, many errors in event log

[dqhendricks]

I just bought a new ASUS laptop with Windows 7 and I am so disapppointed. I got an error on reboot after updating Windows. I get hangs all the time. Application consitantly stop responding. The event log is chalk ful of errors, some dated from before I even bought this computer.

I attached a screenshot of the event log. I suspect there is more than one thing wrong. I expect an out of the box product to work. I am so upset and am about to return this and go mac...

Unless you know what is wrong here?

 

[usasma]

What do the errors that say "Disk" refer to?
If it seems that it may be a hardware problem, try these free diagnostics:

H/W Diagnostics:
Please start by running these bootable hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Malware (read the details at the link)

Beyond that, please include the reports from this post (even though you're not having BSOD's the reports will help us get started): http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[dqhendricks]

I don't know if I feel comfortable running a bunch of exes.

This morning I've had 5 errors.

Two errors state (twice in the same second):
ACPI: ACPI BIOS is attempting to write to an illegal PCI Operation Region (0x4), Please contact your system vendor for technical assistance.

Two errors stating:
Faulting application name: regsvr32.exe, version: 6.1.7600.16385, time stamp: 0x4a5bca28
Faulting module name: ntdll.dll, version: 6.1.7600.16559, time stamp: 0x4ba9b29c
Exception code: 0xc0000374
Fault offset: 0x000cdc9b
Faulting process id: 0xc14
Faulting application start time: 0x01cb5a1d4dda2705
Faulting application path: C:\Windows\SysWOW64\regsvr32.exe
Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report Id: 8cc80bab-c610-11df-aa02-485b396dd572

One error stating:
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x001E64529123. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

Altho the last one may be the fault of the wrieless router, as i got routinely dropped from this wrieless network with my old computer as well.

 

[dqhendricks]

Aslo two warnings:

LMS Service cannot connect to Intel(R) MEI driver

And a big one...

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
33 user registry handles leaked from \Registry\User\S-1-5-21-189571967-802801610-1941328225-1000:
Process 1136 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000
Process 1136 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000
Process 1136 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\RunService
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunService
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Search Assistant
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\RunServices
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist
Process 1136 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Run
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 1136 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Explorer
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Search Assistant
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Windows\CurrentVersion\Policies
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Process 1840 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-189571967-802801610-1941328225-1000\Software\Microsoft\Internet Explorer

 

[usasma]

Your call on running the reports. FYI, you can download the .exe (in .zip form) and then scan it with an antivirus to ensure that it's not infected.

As for the information in the reports, you can open each of the reports and see what's included in them (to see if you want to share that info). If unsure how to open the reports, post back here for instructions on what to use to open each report.

But, without the information, there's not much that I can do to help you.

2 posts ago tells me that a hardware problem is still likely
- The ACPI error tells me that you might need a BIOS flash - but we'll need more info to determine this.
- The regsvr32.exe error indicates that someone is editing your registry. Are you doing that, or could it be a virus? Combine this with the next issue and I really do wonder if you're infected and the infection has corrupted your Trend Micro.
1 post ago tells me that there may be issues with your TrendMicro Internet Security (and it functions on a low enough level that it can be mistaken for some hardware errors). I'd suggest this procedure for ruling it out:

Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the TrendMicro Internet Security from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of TrendMicro Internet Security using this free tool: How to uninstall my Trend Micro program using the Trend Micro Diagnostic Toolkit
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's

Since we suspect a virus, immediately scan the system with the free antivirus. If you run into troubles with it, you can try these free, online scanners: Malware

 

[dqhendricks]

Okay well I uninstalled trend micro with their utility and installed microsoft security essentials instead. A full scan with that did not reveal any infections.

As for the memory test, I burned the image, but cannot get my pc to boot from the dvd drive... pressed f2 during boot but get no options.

As for the harddrive test, I cannot figure out what harddrive is in this laptop? I searched the internet high and low for this info. The driver installed for it is just some generic windows driver.

I have an ASUS U52 notebook from best buy. ASUS does not have any mention of it on their website...

 

[usasma]

Asus boot menu is F8. On some systems I have to toggle the Esc and Tab keys as it boots to get the BIOS screen, then rapidly tap F8 to get the boot menu.

Go to Device Manager, expand the Disk Drives category, and let us know what the name is. A google of that name will usually reveal the manufacturer. If that doesn't work, try the Seagate Seatools or the Hitachi Drive Fitness Test (DFT).

 

[papagym]

Just visiting

Hi,
I'm new to the forum and I may have looked in the wrong place. I was just curious as to what BSOD is all about. I have no idea how or why I got this message.
Sorry

 

[usasma]

papagym - each BSOD is different, so we'll need you to start your own topic if you'd like assistance with it.