MCSTRM service failed to start

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

While looking at the Event Viewer on my XP Pro SP2 system, I found this
Failure Audit message under Security over and over again, I assume during
reboot. What is MCSTRM and what should I do about it? The error message was
a little annoying because it did not specify the file it cannot find. Thanks.

Source: Service Control Manager
The MCSTRM service failed to start due to the following error: The system
cannot find the file specified.
 
MCSTRM is probably MCSTRM.sys, located in C:\Windows\System32\drivers

Some malware may camouflage themselves as MCSTRM.sys, particularly if they
are located in c:\windows or c:\windows\system32 folder.

File: mcstrm.sys
Name: RealNetworks Virtual Path Manager®
Product: RealNetworks Virtual Path Manager® (32-bit)
Company: RealNetworks, Inc.
http://www.anti-spy.info/process/mcstrm.sys.html

Do a Search for MCSTRM ans see what the file extension is and what foulder
MCSTRM is in.
HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Oh boy, I searched for MCSTRM even including hidden files and found nothing.
That explains the error message! I think I'll have to contact Real because
it is their file. At least I know what the problem is now, thanks. Or maybe
I will uninstall Real Player and just use Media Player.
--


Pete



Wesley Vogel said:
MCSTRM is probably MCSTRM.sys, located in C:\Windows\System32\drivers

Some malware may camouflage themselves as MCSTRM.sys, particularly if they
are located in c:\windows or c:\windows\system32 folder.

File: mcstrm.sys
Name: RealNetworks Virtual Path Manager®
Product: RealNetworks Virtual Path Manager® (32-bit)
Company: RealNetworks, Inc.
http://www.anti-spy.info/process/mcstrm.sys.html

Do a Search for MCSTRM ans see what the file extension is and what foulder
MCSTRM is in.
HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Or maybe I will uninstall Real Player and just use Media Player

I refuse to have RealPlayer, QuickTime or Flash player. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
How do you get by without Flash and QuickTime? Many websites seem to require
it to view their contents. Do alternatives exist to these plug-ins or do you
avoid websites that require them? I'm really not trying to be sarcastic.
 
How do you get by without Flash and QuickTime? Many websites seem to
require it to view their contents.

QuickTime is only good for playing .mov files or the like. If I see that a
file is a .mov file, I ingnore it. And swear a bit. ;-)

I hate Flash and do not have the POS installed.

I never get reminders, or invitations, just big holes in some web pages. If
the page designers are going to use Flash, they deserve big holes in their
web pages. LOL

I hate the extension .swf.

I see this on a lot of web pages in View | Source:

hXXp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

That normally gets you the File Download popup for swflash.cab, the install
file for Flash.

I can even visit
http://www.adobe.com/products/flash/about/
and not get any invitation. Just a big hole, where Flash should display my
version.

Maybe because I do not have Java either. Another POS.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
QuickTime is only good for playing .mov files or the like.

I tried to uninstall it and the popup had the text "Click Uninstall
Everything to remove the system extensions as well (not recommended)." Why
is this not recommended? Is there any way to know in advance if some
application will barf if QuickTime is uninstalled?
I hate the extension .swf.

Why and where is it used?
 
Click Uninstall Everything to remove the system extensions as well (not
recommended)

<quote>
U got a box that says "Removing Quick Time system extensions can cause
applications to malfunction".

That's a stock warning that is typical of many programs. When you uninstall
it they will issue some type of warning that it may affect other uses, etc.
It can be ignored in almost all cases.

In the case of QT, it has it's own proprietary media file formats and you
need QT or the QT alternative to play those formats - other than that, and
possibly ITunes, it's not needed for any other media format.

I got along fine without QT installed on my PC for 4 years, until I found
the QT alternative program. There was very little that I would have needed
QT for and even then I really didn't miss anything by not playing the QT
media file. The only reason I have the QT alternative installed is so I can
listen to Mike Gross' "Swingin West" webcast. They originally had both QT
and Windows Media streaming links but then had some software problems and
removed the Windows Media link so the only option is QT for this broadcast.
<quote>
http://bb.steelguitarforum.com/viewtopic.php?p=881768&sid=cb89ede070e72d88093812a428168ce1

<quote>
Nothing unrecoverable. The likeliest thing would be that QT decided that it
had to be the launch application for any sound or picture file type, and
that removing it would leave them orphaned, but you can always revert to
using something else whenever you found such a file type that'd been
hijacked.
<quote>
http://www.drkeyboard.net/viewtopic.php?t=3041&sid=a3f4e591e1a58d45a40535f8bb3a55b9

If you want to look through more yourself....
Click Uninstall Everything to remove the system extensions
http://www.google.com/search?as_q=&...as_dt=i&as_sitesearch=&as_rights=&safe=images

If you have iTunes or any other apple crap you may need it...
How to uninstall QuickTime on a Windows PC
http://docs.info.apple.com/article.html?artnum=60342

I saw this phrase and I wondered...
I personally hate quickTime
http://www.google.com/search?as_q=&...as_dt=i&as_sitesearch=&as_rights=&safe=images
Why and where is it used?


Shock Wave Flash. Macromedia Flash Format File. Keep in mind that Adobe
bought Macromedia. QuickTime also uses the swf extension.

movie value="/swf/software/flash/about/flashAbout_info_small.swf"
is the movie that I cannot see here...
http://www.adobe.com/products/flash/about/

This is the actual link...
http://www.adobe.com/swf/software/flash/about/flashAbout_info_small.swf

..swf file extension is not listed in my registry any more either. I removed
everything related to Flash. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
ROTFL You just have use the proper terms.

Results 1 - 10 of about 3,860 for "I hate QuickTime".
http://www.google.com/search?hl=en&lr=&as_qdr=all&q=+"I+hate+quickTime"&btnG=Search

Results 1 - 10 of about 29,400 for "I hate flash".
http://www.google.com/search?hl=en&lr=&as_qdr=all&q=+"I+hate+flash"

Results 1 - 10 of about 1,430 for "I hate realplayer".
http://www.google.com/search?hl=en&lr=&as_qdr=all&q=+"I+hate+realplayer"

Results 1 - 10 of about 2,930 for "I hate real player".
http://www.google.com/search?hl=en&lr=&as_qdr=all&q=+"I+hate+real+player"&btnG=Search

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
I liked your idea about removing Flash Player and QuickTime, so I uninstalled
them the usual Control Panel way. In my registry I still have three entries
in HKEY_LOCAL_MACHINE / SOFTWARE:
- Apple / QuickTime32
- Apple Computer, Inc. / QuickTime
- Macromedia / Flash Player

Do you see any problem with removing the above?

I also see an entry for RichFX / Player. I don't suppose you know what that
is?
Thanks again.
--


Pete



Wesley Vogel said:
Click Uninstall Everything to remove the system extensions as well (not
recommended)

<quote>
U got a box that says "Removing Quick Time system extensions can cause
applications to malfunction".

That's a stock warning that is typical of many programs. When you uninstall
it they will issue some type of warning that it may affect other uses, etc.
It can be ignored in almost all cases.

In the case of QT, it has it's own proprietary media file formats and you
need QT or the QT alternative to play those formats - other than that, and
possibly ITunes, it's not needed for any other media format.

I got along fine without QT installed on my PC for 4 years, until I found
the QT alternative program. There was very little that I would have needed
QT for and even then I really didn't miss anything by not playing the QT
media file. The only reason I have the QT alternative installed is so I can
listen to Mike Gross' "Swingin West" webcast. They originally had both QT
and Windows Media streaming links but then had some software problems and
removed the Windows Media link so the only option is QT for this broadcast.
<quote>
http://bb.steelguitarforum.com/viewtopic.php?p=881768&sid=cb89ede070e72d88093812a428168ce1

<quote>
Nothing unrecoverable. The likeliest thing would be that QT decided that it
had to be the launch application for any sound or picture file type, and
that removing it would leave them orphaned, but you can always revert to
using something else whenever you found such a file type that'd been
hijacked.
<quote>
http://www.drkeyboard.net/viewtopic.php?t=3041&sid=a3f4e591e1a58d45a40535f8bb3a55b9

If you want to look through more yourself....
Click Uninstall Everything to remove the system extensions
http://www.google.com/search?as_q=&...as_dt=i&as_sitesearch=&as_rights=&safe=images

If you have iTunes or any other apple crap you may need it...
How to uninstall QuickTime on a Windows PC
http://docs.info.apple.com/article.html?artnum=60342

I saw this phrase and I wondered...
I personally hate quickTime
http://www.google.com/search?as_q=&...as_dt=i&as_sitesearch=&as_rights=&safe=images
Why and where is it used?


Shock Wave Flash. Macromedia Flash Format File. Keep in mind that Adobe
bought Macromedia. QuickTime also uses the swf extension.

movie value="/swf/software/flash/about/flashAbout_info_small.swf"
is the movie that I cannot see here...
http://www.adobe.com/products/flash/about/

This is the actual link...
http://www.adobe.com/swf/software/flash/about/flashAbout_info_small.swf

..swf file extension is not listed in my registry any more either. I removed
everything related to Flash. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Hi pete,

I do not have anything Apple or Macromedia in...
HKEY_LOCAL_MACHINE\SOFTWARE

I never heard of RichFX / Player, but, they apparently make media player
plugins..
RichFX Player By RichFX Inc.plugins for Netscape.
RichFX Plugin for RealPlayer.
RichFX Plugin for Internet Explorer.

Probably got downloaded when you visted a web page and you didn't pay
attention to what you clicked on and you clicked YES to it. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Sorry, the resolution to this issue is NOT to install RealSpy and
Crapsody. The Typical Home User has no inclination to edit the registy
in order to get Badware installed.

RealAlternative
http://www.free-codecs.com/download/Real_alternative.htm

Original article:
http://www.stopbadware.org/reports/reportdisplay?reportname=realplayer01282008
We find that RealPlayer 10.5 is badware because it fails to accurately and completely disclose
the fact that it installs advertising software on the user's computer. We additionally find that
RealPlayer 11 is badware because it does not disclose the fact that it installs Rhapsody Player
Engine software, and fails to remove this software when RealPlayer is uninstalled.

Real's response
http://rws-blog.rhapsody.com/realplayer/2008/02/reals-response.html

Responding to RealPlayer
http://blogs.stopbadware.org/articles/2008/02/21/responding-to-realplayer

Caveat emptor.

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
Back
Top