more and more errors

[phoenix]

hey i'm back
i now get errors when i'm using explorer......again. here are some of the messages:

KERNEL32 caused a general protection fault in module KRNL386.EXE at 0001:000075a2.

BLUE SCREEN-A fatal exception 0E has ocurred at 017F:BFF9DFFF

help!

[Spider]

Have you been to Windows Update?

Check the "Drivers" category especially.

[phoenix]

thanks for that.
anyways i have another problem. this just happened yesterday.
i free'd up some room in my computer yesterday morning(i have 9.24GB of room and i free'd up about 2 GB) and i let me sis play on the net for a while, once i came back on i realised that i only have 200MB!! left. this did not make any sence. So i clicked on c drive and then highlighted every file and folder and it all equal up to 6.91GB!.
WHat happened to the other 3 GB i had?
help

[HKEd]

Hi phoenix...a few things to try:

1) Reboot...you'd be surprised how often this cures things that go skewiffy...

2) Run an online virus scan at HouseCall

3) Download, unzip and run StartupList from HERE. Copy and paste the text file it generates in your reply.

[HKEd]

Hi again phoenix...with newer, more sophisticated viruses and worms being released every day, the old maxim of "reboot and many problems will go away" no longer holds water. Run the virus scan first, then run StartupList and post the generated file in your reply.

A moderator here has advised that this is the best plan of action, having read about some new viruses that may be causing the problem you are experiencing.

[jtdoom]

Hi

it really is getting ugly out there...

At symantec I read about a few nasties.
I recall reading up on winevar, where the advice they give implies that you stand a far better chance of succesful repair when you do NOT reboot before the nastie is disabled/removed.

a fat lot of good that does, when you don't know you have the thing.
But if you know something bad just got on, and you find out, the first thing to do is look up what to do about it.

One may have to pull the modemline out, (for example; to get rid of an opaserv variant) when one sees that the machine is taken over, and then use a non-compromised machine to look up what to do and get the tools for it...

Like HkEd says, I told him it is getting harder to give correct advice when the reason for the "issue" is not known.
When things can go wrong by rebooting, it could be a good idea to scan before one reboots.
On the other hand, there are some nasties that execute and start killing a drive immediately after spreading from the mail app...

this way, we don't really know what advice to give no more, eh?
Yep, It's really getting ugly out there.

[jtdoom]

For what it is worth

a ten giga drive in one partition can have more than one giga of slack

after you scan for virus and post the startuplist, get this from karenware
plenty good tools there!
http://www.karenware.com/powertools/ptslack.asp

a bit of documentation on slack
http://www.dewassoc.com/kbase/hard_drives/fat_slack.htm

http://www.infinisource.com/techfiles/partitn.html

[phoenix]

when u mean reboot does that mean completly deleting everything o its back to a fresh start?
Here me start up list:

StartupList report, 17/01/03, 9:37:42 AM
StartupList version: 1.40.1
Started from : C:\WINDOWS\DESKTOP\DOWNLOADS\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATICWD32.EXE
C:\WINDOWS\SYSTEM\ATITASK.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\DESKTOP\DOWNLOADS\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
AtiCwd32 = Aticwd32.exe
AtiKey = Atitask.exe
QuickTime Task = "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
LoadQM = loadqm.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

SchedulingAgent = mstask.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

msnmsgr = "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}

[>PerUser_MSN_Clean] *
StubPath = C:\WINDOWS\msnmgsr1.exe

[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 16/1/2003, 14:57:0)

[rename]
nul=C:\WINDOWS\TEMP\~ef7194.tmp
nul=C:\WINDOWS\TEMP\~ef7194.tmp

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

@ECHO OFF
rem
rem *** DO NOT EDIT THIS FILE! ***
rem
rem This file was created by the System Configuration Utility as
rem a placeholder for your AUTOEXEC.BAT file. Your actual
rem AUTOEXEC.BAT file has been saved under the name AUTOEXEC.TSH.
rem
SET PATH=%PATH%;C:\PROGRA~1\COMMON~1\AUTODE~1

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Scan for Viruses.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job
Run LiveUpdate (for Norton AntiVirus).job

--------------------------------------------------

Enumerating Download Program Files:

[VivoActive Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\VVWEB.OCX
CODEBASE = http://player.vivo.com/ie/vvweb.cab

[AutoRegister Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MBAUTREG.DLL
CODEBASE = http://www.mediabrowserapp.com/regis...g/mbAutReg.cab

[OPUCatalog Class]
InProcServer32 = C:\WINDOWS\SYSTEM\OPUC.DLL
CODEBASE = http://office.microsoft.com/ProductU...ntent/opuc.cab

[CV3 Class]
InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
CODEBASE = http://windowsupdate.microsoft.com/R...n/actsetup.cab

[NAScheduler Class]
InProcServer32 = C:\WINDOWS\NASCHEDULERCONTROL.DLL
CODEBASE = http://www.arushgames.com/gamecapsule/scheduler.cab

[Yahoo! Audio Conferencing]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YACSCOM.DLL
CODEBASE = http://us.chat1.yimg.com/us.yimg.com...43/yacscom.cab

[InstallShield International Setup Player]
InProcServer32 = c:\WINDOWS\DOWNLO~1\ISETUP.DLL
CODEBASE = http://www.installengine.com/engine/isetup.cab

[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[FlashXControl Object]
InProcServer32 = C:\WINDOWS\SYSTEM\FLASHAX\FLASHAX.OCX
CODEBASE = https://flash.ladbrokescasino.com/ladbrokes/FlashAX.cab

[OTAutoInstall Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\OTAICONTROL.DLL
CODEBASE = http://pointa.autodesk.com/local/enu...nload/OTAI.CAB

[AcPreview Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CONFLICT.1\ACPREV~1.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\AcPreview.ocx

[NOXLATE-BANR]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CONFLICT.1\INSTBANR.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\InstBanr.ocx

[InstaFred]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CONFLICT.1\INSTFRED.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\InstFred.ocx

[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
CODEBASE = http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT45.OCX
CODEBASE = http://fdl.msn.com/public/chat/msnchat45.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/s...irector/sw.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/s...sh/swflash.cab

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.co...636.5494560185

--------------------------------------------------
End of report, 8,243 bytes
Report generated in 0.383 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[phoenix]

hey with this "disk slack checker" thingly it found up to 1.5GB of slack room. how do i get that room?

[John54]

I'm experiencing trouble with this error message, and having to hard restart after MS Word fails to load.
I have updated drivers at windows update and reloaded Word 2000 and also
reload the entire Works package in which it is bundled.

Suggestions please?