I had Avast do a scan last night and the errors I'm seeing are "Unable to
scan:
Ärchive is password protected." for some reg, ini, bin, ico, htm, css, dll,
and txt files,
among various others. I think they're installation files? One error says
"Unable to
scan: The file is a decompression bomb."
The Machine Debug Manager service was also Disabled. I've set it to Manual.
Yeah, a few weeks back I deleted a file called npkcrypt because it came up
as a
keylogger when I googled it. There are still traces of it on my system like
it's
startup command and it's driver which I uninstalled yesterday.
Here's another set of errors since last night. After the scan, I put the
computer into
hiberate and when I went to start it up, it had trouble detecting the disk
and Intel
Boot Agent kept starting up.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 3/31/2009
Time: 8:45:00 PM
User: TOMOYO\Amirh
Computer: TOMOYO
Description:
DCOM got error "The service cannot be started, either because it is disabled
or
because it has no enabled devices associated with it. " attempting to start
the
service MDM with arguments "" in order to run the server:
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
For more information, see Help
and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 3/31/2009
Time: 8:45:06 PM
User: TOMOYO\Amirh
Computer: TOMOYO
Description:
DCOM got error "The service cannot be started, either because it is disabled
or
because it has no enabled devices associated with it. " attempting to start
the
service MDM with arguments "" in order to run the server:
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
For more information, see Help
and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 3/31/2009
Time: 9:54:41 PM
User: TOMOYO\Amirh
Computer: TOMOYO
Description:
DCOM got error "The service cannot be started, either because it is disabled
or
because it has no enabled devices associated with it. " attempting to start
the
service MDM with arguments "" in order to run the server:
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
For more information, see Help
and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 3/31/2009
Time: 9:54:51 PM
User: TOMOYO\Amirh
Computer: TOMOYO
Description:
DCOM got error "The service cannot be started, either because it is disabled
or
because it has no enabled devices associated with it. " attempting to start
the
service MDM with arguments "" in order to run the server:
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
For more information, see Help
and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Disk
Event Category: None
Event ID: 11
Date: 4/1/2009
Time: 12:05:27 PM
User: N/A
Computer: TOMOYO
Description:
The driver detected a controller error on \Device\Harddisk0\D.
For more
information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 0b 00 04 c0 .......À
0010: 01 01 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 5e 6a d7 04 00 00 00 .^j×....
0028: ad 17 3b 00 00 00 00 00 Â.;.....
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 8f 02 00 00 00 @..Â....
0040: 00 20 0a 12 80 03 20 40 . ..€. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 a8 03 2f 82 ....¨./‚
0058: 00 00 00 00 e0 e9 30 82 ....à é0‚
0060: 02 00 00 00 2f b5 6b 02 ..../µk.
0068: 2a 00 02 6b b5 2f 00 00 *..kµ/..
0070: 80 00 00 00 00 00 00 00 €.......
0078: f0 00 04 00 00 00 00 0b ð.......
0080: 00 00 00 00 08 03 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........
The disk error is shown in Event Vieweer quite a few times. Should I post
them
all?
Event Type: Error
Event Source: atapi
Event Category: None
Event ID: 5
Date: 4/1/2009
Time: 12:06:43 PM
User: N/A
Computer: TOMOYO
Description:
A parity error was detected on \Device\Ide\IdePort0.
For more information, see Help
and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 50 00 01 00 a4 00 ..P...¤.
0008: 00 00 00 00 05 00 04 c0 .......À
0010: 03 00 00 80 00 00 00 00 ...€....
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 06 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 07 00 00 00 ........
0038: 40 00 00 8f 02 00 00 00 @..Â....
0040: ff 20 0a 12 8c 01 20 40 ÿ ..Œ. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 30 43 82 a0 40 3b 82 .0C‚ @;‚
0058: 00 00 00 00 40 2b 13 82 ....@+.‚
0060: 02 00 00 00 57 f0 b7 04 ....Wð·.
0068: 2a 08 04 b7 f0 57 00 00 *..·ðW..
0070: 38 00 00 00 00 00 00 00 8.......
Event Type: Error
Event Source: atapi
Event Category: None
Event ID: 9
Date: 4/1/2009
Time: 12:07:39 PM
User: N/A
Computer: TOMOYO
Description:
The device, \Device\Ide\IdePort0, did not respond within the timeout period.
For
more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 50 00 01 00 a4 00 ..P...¤.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 00 01 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 07 00 00 00 ........
0038: 40 00 00 0e 00 00 00 00 @.......
0040: 00 20 0a 12 40 03 20 40 . ..@. @
0048: 00 10 00 00 0a 00 00 00 ........
0050: 00 70 cb 00 58 f5 c8 82 .pË.XõȂ
0058: 00 00 00 00 f8 2b 35 82 ....ø+5‚
0060: 02 00 00 00 1f 28 6d 02 .....(m.
0068: 28 00 02 6d 28 1f 00 00 (..m(...
0070: 08 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: atapi
Event Category: None
Event ID: 9
Date: 4/1/2009
Time: 12:13:30 PM
User: N/A
Computer: TOMOYO
Description:
The device, \Device\Ide\IdePort0, did not respond within the timeout period.
For
more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 50 00 01 00 a4 00 ..P...¤.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 00 01 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 07 00 00 00 ........
0038: 40 00 00 0e 00 00 00 00 @.......
0040: 00 20 0a 12 40 03 20 40 . ..@. @
0048: 00 10 00 00 0a 00 00 00 ........
0050: 00 00 00 00 d8 86 1e 82 ....؆.‚
0058: 00 00 00 00 a8 b5 35 82 ....¨µ5‚
0060: 02 00 00 00 7f e3 1a 03 ....ã..
0068: 28 00 03 1a e3 7f 00 00 (...ã..
0070: 08 00 00 00 00 00 00 00 ........
This DCOM error occured just before another 0x8E BSOD at 12:43pm.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 4/1/2009
Time: 12:38:35 PM
User: TOMOYO\Amirh
Computer: TOMOYO
Description:
DCOM got error "The service cannot be started, either because it is disabled
or
because it has no enabled devices associated with it. " attempting to start
the
service MDM with arguments "" in order to run the server:
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
For more information, see Help
and Support Center at
http://go.microsoft.com/fwlink/events.asp.
And here are the errors after:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 4/1/2009
Time: 12:42:51 PM
User: N/A
Computer: TOMOYO
Description:
The Computer Browser service depends on the Server service which failed to
start
because of the following error:
The service cannot be started, either because it is disabled or because it
has no
enabled devices associated with it.
For more information, see Help and Support
Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 4/1/2009
Time: 12:42:51 PM
User: N/A
Computer: TOMOYO
Description:
The npkcrypt service failed to start due to the following error:
The system cannot find the path specified.
For more information, see Help and
Support Center at
http://go.microsoft.com/fwlink/events.asp.
Peter Foldes
Thank you. I couldn't find info about this for the life of me. I'm not
sure how RAM
works but I'll research more about it.