To
Richard &
Frostmourne
I have run all my security programs and other than the usual low threat adware cookies there doesn't seem to be any type of spyware or trojans etc on this Os. I think I am going to go ahead and do a clean re-install of Win 7 ultimate on this machine.
My other two Os' (Win xp pro and Win vista home premium are running fine) They are on separate hard drives.
Also there are other issues with this OS such as when I cold start into Win 7 It brings me into my splash screen fine and then I get dark screens for 30 minutes or so before my Password screen finally opens and lets me into Win 7.
I checked out the event viewer and under critical errors I got a message informing me that custom dynamic link libraries are being loaded for every application.System administrator should review the list of libraries to insure they are related to trusted applications.
also:Log Name: System
Source: Service Control Manager
Date: 1/11/2010 1:18:46 PM
Event ID: 7044
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: ranger72-3
Description:
The following service is taking more than 4 minutes to start and may have stopped responding: PC Tools Security Service
Contact your system administrator or service vendor for approximate startup times for this service.
If you think this service might be slowing system response or logon time, talk to your system administrator about whether the service should be disabled until the problem is identified.
You may have to restart the computer in safe mode before you can disable the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="32768">7044</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-01-11T18:18:46.932800000Z" />
<EventRecordID>38014</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="520" />
<Channel>System</Channel>
<Computer>ranger72-3</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">PC Tools Security Service</Data>
<Data Name="param2">4</Data>
</EventData>
</Event>
Additionally: Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 1/10/2010 11:42:37 AM
Event ID: 1530
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: ranger72-3
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
18 user registry handles leaked from \Registry\User\S-1-5-21-1613795188-3394671239-2133895069-1001:
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\My
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\CA
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\Root
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Internet Explorer\IETld
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Policies
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\trust
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Policies\Microsoft\SystemCertificates
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Policies\Microsoft\SystemCertificates
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2010-01-10T16:42:37.045000000Z" />
<EventRecordID>8967</EventRecordID>
<Correlation />
<Execution ProcessID="1076" ThreadID="4216" />
<Channel>Application</Channel>
<Computer>ranger72-3</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">18 user registry handles leaked from \Registry\User\S-1-5-21-1613795188-3394671239-2133895069-1001:
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\My
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\CA
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\Root
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Internet Explorer\IETld
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Policies
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Microsoft\SystemCertificates\trust
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Policies\Microsoft\SystemCertificates
Process 4936 (\Device\HarddiskVolume3\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-1613795188-3394671239-2133895069-1001\Software\Policies\Microsoft\SystemCertificates
</Data>
</EventData>
</Event>
So I think a number of things are happening here; There are conflicts between some of these apps as you both have suggested and I think there are many corrupted files in this OS.
So I think the easiest thing to do at this point is to do a clean re-instll of Win 7 Ultimate after re-formatting this hard drive. What do you think?
I also apologize for the delay in my response to you I have been away from home. I am going to go ahead and give reps to you both for your assistance.
After a clean install maybe these issues will be resolved.
Thank you for your help!
ranger72
