Computer Support Forum

[Process Name Here] - Bad Image

Question: [Process Name Here] - Bad Image

Running Vista Ultimate on a Dell XPS M1730.

Yesterday started getting bad image errors after boot up initiated and password entered for admin. (only one user). This has resulted in applications failing to launch when executed manually and during start up.

Some of the Bad Image errors are as follows:

LogonUI.exe
MpNotify.exe
Userinet.exe
explorer.exe
Werfault.exe

I have tried a system repair and no errors were detected. I am unable to do a system restore as these image errors seemed to have removed all my restore points. Norton is picking up a trojan related to Skynetimepoiyq.dll but hangs when attempting to quarantine. I am also unable to do a back up through the vista maintenence facility.

I run symantec endpoint protection, spybot and tea timer.

DDS would not launch so I had to run it in safe mode so I am unsure that all processes will be picked up in the script.

Here is my DDS script - look forward to any assistance that may be provided.
DDS (Ver_09-05-14.01) - NTFSx86 NETWORK
Run by jemscorp at 11:41:04.40 on Mon 22/06/2009
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Ultimate 6.0.6001.1.1252.61.1033.18.3261.2476 [GMT 10:00]

AV: Symantec Endpoint Protection *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Symantec Endpoint Protection *disabled* (Updated) {6C85A515-B91D-4D2B-AF18-40984A4A8493}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
FW: Symantec Endpoint Protection *enabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Windows\Explorer.EXE
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Users\jemscorp\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com.au/ig/dell?hl=en&client=dell-row&channel=au&ibd=5071118
uWindow Title = Internet Explorer provided by Dell
mDefault_Page_URL = hxxp://www.google.com.au/ig/dell?hl=en&client=dell-row&channel=au&ibd=5071118
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: ShoppingAdsHelper: {2c86c605-6081-d104-96f7-f765c20b22f1} - c:\program files\shoppingadshelper\ShoppingAdsHelper-1.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0\bin\ssv.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
uRun: [Steam] "c:\program files\steam\steam.exe" -silent
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
mRun: [<NO NAME>]
mRun: [VolPanel] "c:\program files\creative\sbaudigy\volume panel\VolPanlu.exe" /r
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
dRun: [PcSync] c:\program files\nokia\nokia pc suite 6\PcSync2.exe /NoDialog
StartupFolder: c:\users\jemscorp\appdata\roaming\microsoft\windows\start menu\programs\startup\santa.bat
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0\bin\npjpi160.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {181BCAB2-C89B-4E4B-9E6B-59FA67A426B5} - hxxps://www.remoteaccess.iag.com.au/epa/nsepa.ocx
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} - hxxp://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\508\G2AWinLogon.dll
AppInit_DLLs: c:\progra~1\google\google~2\goec62~1.dll c:\progra~1\bandoo\bndhook.dll
STS: Windows DreamScene: {e31004d1-a431-41b8-826f-e902f9d95c81} - %SystemRoot%\System32\DreamScene.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

============= SERVICES / DRIVERS ===============

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2007-11-18 179712]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2007-5-29 23888]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-3-5 101936]
S3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\system32\drivers\OEM02Dev.sys [2007-10-10 235648]
S3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\system32\drivers\OEM02Vfx.sys [2007-11-18 7424]
S4 AESTFilters;Andrea ST Filters Service;c:\windows\system32\AEstSrv.exe [2007-11-27 73728]
S4 Bandoo Coordinator;Bandoo Coordinator;c:\progra~1\bandoo\Bandoo.exe [2009-6-1 2390464]
S4 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-3-29 1153368]

=============== Created Last 30 ================

2009-06-20 23:23 1,905 a------- c:\windows\diagwrn.xml
2009-06-20 23:23 1,905 a------- c:\windows\diagerr.xml
2009-06-20 20:23 334,503,401 a------- c:\windows\MEMORY.DMP
2009-06-20 13:25 45,561 a------- c:\windows\n10.exe
2009-06-14 15:06 428,544 a------- c:\windows\system32\EncDec.dll
2009-06-14 15:06 293,376 a------- c:\windows\system32\psisdecd.dll
2009-06-14 15:06 217,088 a------- c:\windows\system32\psisrndr.ax
2009-06-14 15:06 177,664 a------- c:\windows\system32\mpg2splt.ax
2009-06-14 15:06 80,896 a------- c:\windows\system32\MSNP.ax
2009-06-10 15:56 2,033,152 a------- c:\windows\system32\win32k.sys
2009-06-10 15:56 636,928 a------- c:\windows\system32\localspl.dll
2009-06-10 15:55 784,896 a------- c:\windows\system32\rpcrt4.dll
2009-06-01 16:39 <DIR> --d----- c:\programdata\Bandoo
2009-06-01 16:39 <DIR> --d----- c:\progra~2\Bandoo
2009-06-01 16:35 <DIR> --d----- c:\program files\Bandoo

==================== Find3M ====================

2009-06-21 01:01 3,308 a------- c:\windows\bthservsdp.dat
2009-06-21 00:02 136,496 a------- c:\windows\system32\drivers\SYMEVENT.SYS
2009-06-21 00:02 10,652 a------- c:\windows\system32\drivers\SYMEVENT.CAT
2009-06-21 00:02 806 a------- c:\windows\system32\drivers\SYMEVENT.INF
2009-06-20 22:24 42,524 a------- c:\programdata\nvModes.dat
2009-06-20 22:24 42,524 a------- c:\progra~2\nvModes.dat
2009-04-25 02:05 827,904 a------- c:\windows\system32\wininet.dll
2009-04-25 02:02 78,336 a------- c:\windows\system32\ieencode.dll
2009-04-24 23:44 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-04-16 18:57 143,360 a------- c:\windows\inf\infstrng.dat
2009-04-16 18:57 86,016 a------- c:\windows\inf\infstor.dat
2009-04-16 18:57 51,200 a------- c:\windows\inf\infpub.dat
2009-03-26 15:23 1,900,544 a------- c:\windows\system32\usbaaplrc.dll
2008-06-21 18:04 174 a--sh--- c:\program files\desktop.ini
2008-06-21 17:53 665,600 a------- c:\windows\inf\drvindex.dat
2008-06-16 20:20 42,524 a------- c:\users\jemscorp\appdata\roaming\nvModes.dat
2008-01-17 09:29 61,224 a------- c:\users\jemscorp\GoToAssistDownloadHelper.exe
2008-01-12 10:03 22,328 a------- c:\users\jemscorp\appdata\roaming\PnkBstrK.sys
2006-11-02 22:40 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 22:40 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 22:40 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 22:40 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 19:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 19:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 19:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 19:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2007-11-18 06:10 76 ---shr-- c:\windows\CT4CET.bin

============= FINISH: 11:42:30.50 ===============

Relevance 100%
Preferred Solution: [Process Name Here] - Bad Image

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: [Process Name Here] - Bad Image

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

8 more replies
Relevance 47.56%

How does this work? I ask because it would be convenient for me to verify the image on a different desktop. Let's say I image the C drive on Computer A and store it on an external HD.  Can I now connect that external HD to Computer B to verify the image? I assume no because I am guessing verification involves comparing the image to the  C drive, but I do not know. Thanks.Edit: I think this means I can verify the image on a different computer.http://www.macrium.com/help/v5/Restore/Verify_Image.htm

Answer:Macrium Image Verification Process

No, of course not. Just verify the image at the time it is created.

11 more replies
Relevance 47.56%

Hi all,

I'm trying to re-image my computer to a new harddisk, which is about 90GB, however it seems that I stuck at the ending stage (The running bar is full).

The harddisk led keep on for a few hours and I don't know what's going on. I did not get any error message. Is that normal?

Thanks!

Answer:How long does system re-image process usually take?

Hello am5a03

Its a bit of an ambiguous question as a lot depends on hardware, what data is on the drive and what imaging program you used and where the image is stored.
Its my guess you used the native windows imaging program so for an example to re-image an 80gig system partition, 58% full from an external HDD (usb2) takes 25-30 minutes on my netbook.
A few hours for 90 gig seems a long time to me.

Danny

9 more replies
Relevance 47.56%

Hi sir, i am having hp 029tx pavellion notebook with windows 8.1But some days ago my HDD got crashed where all my data are got deleted, So i thought to recover it via recovery discs.every thing was running fine but after 4th dvd is inserted and image recovery process upto 51% one pop up comes and says"the destination drive is not connected" and process gets stopped please help.this is my email id [email protected] i shall be highly oblised for your helpthank you

Answer:image recovery process upto 51% one pop up comes and says "t...

Have you replaced the hard disk with a new one or are you trying to use the original hard drive?

1 more replies
Relevance 47.56%

I am try to run a script from my WinPE USB drive - when running the following script - it blows (scrolls) right through it.. I am missing something and the root drive for the file needing to be copied is the winpe drive - it does not stop to give me the choice of bios or uefi - you'll get the jist of the script.. Thanks..

cls
ECHO.
ECHO ===============================================================================
ECHO.
ECHO. Select The Partition Structure Type To Create A Recovery Image
ECHO. Press 'B' For BIOS, Press 'U' For UEFI, Press 'C' to Cancel
ECHO.
ECHO ===============================================================================
ECHO.
choice /c buc /n /m "Select BIOS, UEFI or CANCEL"
IF %ERRORLEVEL%==1 GOTO :BIOS
IF %ERRORLEVEL%==2 GOTO :UEFI
IF %ERRORLEVEL%==3 GOTO :QUIT
:BIOS
cls
ECHO.
ECHO ===============================================================================
ECHO.
ECHO. Creating The System Recovery Image
ECHO. Relax This May Take A While
ECHO.
ECHO ===============================================================================
ECHO.
diskpart /s %root%\z-scripts\bios\assignletters.txt
exit
md R:\RecoveryImage
Copy %root%\z-scripts\bois\resetpartitions.txt r:\recoveryimage
Copy %root%\z-scripts\bois\ResetConfig.xml r:\recoveryimage
W:\Windows\System32\Reagentc /Setosimage /Path R:\RecoveryImage /Target W:\Windows /Index 1
Dism /Capture-Image /CaptureDir:W:\ /ImageFile:R:\Recovery... Read more

Answer:Need Help With Scripting The Recovery Image Process

Is the "CHOICE.EXE" on the WinPE usb drive? If it is not prompting you, then I would look for the choice.exe file and copy it to your USB drive. On a normal win7 computer you will find choice.exe in c:\windows\system32. Hope this helps.

5 more replies
Relevance 47.56%

Greetings,

Just some background before I dive into my question. I work for a small municipal government organization. We are moving to SCCM for application and OS deployments, and will be getting some setup assistance on this as well as assistance with creating our Windows 10 image in SCCM in the new year. That being said, I have been tasked to deploy about 12 computers (all the same model, brand, etc) to a department and all need to be Windows 10. Rather than go through the manual process of installing Windows 10, Office, etc on all 12 of these systems, what I would like to do is just configure one PC and us that to base an image for the remaining 11 PC.

I am interested if there is a quick and dirty way to do this. What I would like to do is do this the old Windows 7 method where I install Windows 10 in audit mode, do all my configurations, tweaks etc to Windows, install all my apps, and then take an image and put it on a USB key. I've done this using Ghost years ago for Windows 7, but interested if there is a method to do all of this using any of Microsoft's tools. I'm not interested in creating a MDT server, or get into anything overly complicated, as I will be going through that process early next year anyway. All I want to do is save some time from having to manually install Windows and apps 12 times. I have Enterprise licensing for Windows 10, Office, etc.

If anyone has some links to information on how I can set up Windows 10, plus apps, profile tweaks, etc and the... Read more

Answer:Windows 10 Quick Image Process

torbuck said:

Greetings,

Just some background before I dive into my question. I work for a small municipal government organization. We are moving to SCCM for application and OS deployments, and will be getting some setup assistance on this as well as assistance with creating our Windows 10 image in SCCM in the new year. That being said, I have been tasked to deploy about 12 computers (all the same model, brand, etc) to a department and all need to be Windows 10. Rather than go through the manual process of installing Windows 10, Office, etc on all 12 of these systems, what I would like to do is just configure one PC and us that to base an image for the remaining 11 PC.

I am interested if there is a quick and dirty way to do this. What I would like to do is do this the old Windows 7 method where I install Windows 10 in audit mode, do all my configurations, tweaks etc to Windows, install all my apps, and then take an image and put it on a USB key. I've done this using Ghost years ago for Windows 7, but interested if there is a method to do all of this using any of Microsoft's tools. I'm not interested in creating a MDT server, or get into anything overly complicated, as I will be going through that process early next year anyway. All I want to do is save some time from having to manually install Windows and apps 12 times. I have Enterprise licensing for Windows 10, Office, etc.

If anyone has some links to information on how I can set up Windows 10, plus apps, p... Read more

2 more replies
Relevance 46.74%

My computer was attacked by WinPc Defender virus. When I removed the virus by making some changes to the registry files, after restarting I have been getting this bad image error messages constantly for last few days. every single program that I want to open will have the file's name followed by the "Bad Image" error. For example, if I want to open notepad, I get in the title- "notepad.exe - Bad Image" followed by globalroot\systemroot\system32\UACqyivrftqfcyrxbt.dll is either not designed to run on Windows or it contains an error. ......... and so on. Also I can not run my norton antivirus. but I have adaware, and adaware cannot find anything. I also ran housecall which did not find anything either. I ran kaspersky online, which showed norton as the trojan threat(don't know why?) I tried to run malwarebytes, but the computer won't let me install it, not even in safe mode. Now I am using a Acer Aspire 5315, intel celeron processor, vista. I don't have any backup operating cd, so I cannot reinstall the windows.I really need your help. Your help will be very appreciated.here is my hijackthis log file:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:45:01 PM, on 6/9/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18226)Boot mode: Safe mode with network supportRunning processes:C:\Windows\Explorer.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\Users\wara&#... Read more

Answer:constant "Bad Image" error, for every single process

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 46.74%

During image recovery process . I am getting error as destination disk not found. I recovers by dvd. It moves up to 37 % .after that I am getting this issue

More replies
Relevance 46.74%

I am running Windows XP Pro, and just recently I have found that when I am playing games which use a bit of cpu power (Battlefield 2 & 2142), about every 5 minutes or so, the game becomes slow & jerky. When I Alt+Tab to Task Manager I can see that the process "Image Name: System ; user : SYSTEM" has spiked to 20% - 30% of the cpu capacity. after a couple of minutes it drops back down to 1 or 2% and the games runs smoothly for another 5 minutes or so, when it all starts again! I have had my current setup for a while and this has only started happening recently. I have not noticed this spike when using any other games or programs, but that could just be because it is not a big enough spike to cause problems with most programs.

The only things I have done recently are install internet explorer 7 and install a wireless keyboard & mouse. I have tried to perform a system restore, but it will not let me restore, and I have uninstalled the keyboard/mouse driver, but it still keeps happening. Does anyone have any suggestions?
 

More replies
Relevance 46.33%

Hi,

I have searched high and low and can't find anything on this issue.

I dwnld codec.exe and did not execute however one of the fake win anti virus popped up. I immediately restarted, booted into safe, deleted the most recent pre-fetch files including the one for the .exe - at this point there had not been any startup registry entries I don't think. At restart I immediately ran hijackthis and deleted known problems, ran reg cure and rebooted.

Two things I saw - the only two things I deleted were:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

They're back now.

All is fine though and its been about 3 hours however I've been watching my processes. HERE IS THE PROBLEM.

ie6 starts its own process but it takes 30 minutes to pop up if at all. I looked into the properties of the process image and the command line looks like this:

"C:\Program Files\Internet Explorer\Iexplore.exe" h**p://www. alert4find. com/ac.php?aid=90&sid=v5 (edited permalink)

I've searched my registry to no avail. What can do to remove this entry wherever it may be calling from?

This is the case even when the two entries I mentioned are deleted.

If I open ie it runs normal - no redirects or anything... I'm pretty sure I barely escaped the doom of the virus I dwnld.

Any help is appreciated.

Here is my hijackthis log w/ the ie process running.



Logfile of Tr... Read more

Answer:ie runs bg process and ie image command line redirects - but nothing happens

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 46.33%

original post here


Per "NEW INSTRUCTIONS"

*I could not get
=====
GMER:
=====
to run. "open file - security warning" from XP - I select run and nothing happens. I dwnld twice and tried a dozen times.

NOTE: ARK.txt is not included


after virus disguised as anti virus program performing scan popped up I set into immediate action to stop it. I did by deleting pre-fetch files in safe mode then running hijackthis and deleting suspicious entries and running regcure.

After multiple reboots and 5 hours everything is fine EXCEPT ie6 starts as process but never "pops up" - once it did after 30 minutes however now it crashes w/ send info to ms.

I figured out that the image for that process has a command line of:
"C:\Program Files\Internet Explorer\Iexplore.exe" hxxp://www.alert4find.com/ac.php?aid=90&sid=v5 - the url always being different.

I can't figure out how to make the process stop running...

I can start ie6 myself, it goes to my homepage and acts normal no crash. I must have stopped the virus in its tracks from causing havoc on my pc - leaving this small headache.



DDS (Ver_09-05-14.01) - NTFSx86
Run by -jgotit at 20:18:30.98 on Sun 05/17/2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1023.297 [GMT -4:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch ... Read more

Answer:ie runs bg process and ie image command line redirects - but nothing happens

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please explain why this computer has no antivirus program installed and running. This is an open invitation for infection.

It can take as little as eight seconds to infect an unprotected computer.

Please keep this computer offline except when downloading tools and posting in the forum until we get one installed. Let me know your intentions for an antivirus program.

------------------------------------------------------

I need to see a rootkit scan before I can help you.

Download RootRepeal.zip to your Desktop and click 'Extract all files' to extract the compressed file to it's own folder.
Double-click on RootRepeal.exe to run it.
Click on the 'Report' tab, and then click on 'Scan'.
A window opens asking what to include in the scan.
Check the following boxes then click 'OK':
Drivers
Files
Processes
SSDT
Stealth Objects
Hidden Services You will then be asked which drive to scan.
Check C: (or the drive your operating system is installed on, if not C:)
Click 'OK' once again.
The tool will begin scanning... Read more

3 more replies
Relevance 46.33%

Hello,
from some reason, a process called "Windows Image Acquisition (WIA), which I've never seen before is running and using about 30% CPU.
I read in MSDN that "Windows Image Acquisition (WIA) is the still image acquisition platform in the Windows family of operating systems starting with Windows Millennium Edition (Windows Me) and Windows XP."

Does that mean that from some reason my laptop's camera is running now? Maybe my laptop was hacked?

Thanks!

Answer:Windows Image Acquisition process - high CPU usage

Anyone ?

4 more replies
Relevance 46.33%

Hello,

Currently at work. we use norton ghost 8 to image multiple notebooks and prepare them for shipment. (for use by our sales force).

We just pull the cdrw out of one of the notebook bays and put the ghost drive in and then image the local drive on the dell notebook that way.

Im looking to improve the process to save time.

After we image the drive and boot up the pc, we update the computer description field, the computer name, and join the pc to a domain (xx.xx), use a special gif screen saver (found on drive c), create local admin rights for the user (in groups), and quite a few other settings in outlook with is installed from the image.

Do you know of any software solutions or batch processes that could help automate this process after we image the drive? It takes approx 30 minutes per computer (to configure for new user).. Id like to make it possible to complete this task in 15 minutes, instead of having to update all the settings manually in xp pro.

thanks for any info.
 

More replies
Relevance 46.33%

Hello,
from some reason, a process called "Windows Image Acquisition (WIA), which I've never seen before is running and using about 30% CPU.
I read in MSDN that "Windows Image Acquisition (WIA) is the still image acquisition platform in the Windows family of operating systems starting with Windows Millennium Edition (Windows Me) and Windows XP."

Does that mean that from some reason my laptop's camera is running now? Maybe my laptop was hacked?

Thanks!

Answer:Windows Image Acquisition process - high CPU usage

Anyone ?

4 more replies
Relevance 46.33%

HiI frequently scan a large number of slide transparencies on a HP 5370 scanner. The slides are scanned in groups of 4 to speed up the scanning process, resulting in one image with 4 individual pictures separated by a black cross. I then individually crop each picture into an individual image for further processing. Does anybody know of a batch cropping application (preferably freeware) that can separate out the four pictures from the one image. The four images are always in exactly the same place on the scan.Thanks

Answer:Image Copping - Batch Process for Slide Transparen

In Corel Photopaint one can set the precise size of the cropping mask in pixels. If you can do this in your program it will speed things up quite a bit.

2 more replies
Relevance 46.33%

hi, i have a simple question im so frustrated about, because i did not find the answer anywhere on the whole internet, nor the restore process dialogues -
WHERE it restores the image to? on which drive? i have 3 drives on my computer, one failing i made an image of, one ive put the image backup to, and the new and empty one i want to restore the image to... i did not find the destination selection
in the recovery dialogue...

thank you for answer

More replies
Relevance 46.33%

I currently have my Windows system on a 250G SSD (SATA 0). I have read that a good way to upgrade to a new SSD, would be to use Macrium to image the current system, boot to the Macrium USB recovery, then restore the image to the new drive.

Is this feasible if the new SSD (500G) is an NVMe M.2 drive instead of SATA? Should I install the drivers for the new NVMe before I image the current system?

My motherboard is new ASRock and supposedly supports NVMe for boot.

Answer:Can I use Macrium Image/Restore process to transfer to NVme SSD

You don't need to do all that.
Install M.2. If recognized then proceed.Run Macrium from your current Windows, click on "clone this Disk" (250GB SSD Windows disk)Select M.2 Drive as destination then drag and drop each partition to M.2 diskYou will have some unallocated space at the end of M.2 since it has 500GB. You can expand the partition (assuming C drive) by selecting it then click on "Cloned partition properties" to resize the partition for full use of 500GB.click next->FinishDisconnect the 250GB then reboot.

4 more replies
Relevance 46.33%

I have scanned images of some notes that I want to print out. Here is an example of what it looks like (I cropped it so as not to take up the entire page):

So, to the human eye it's obvious which the stuff of interest is and which is "noise". The faint writing in the background is actually the writing on the other side of the page that the scanner picked up. When I try to print this out, the printer always just prints everything, including all the background stuff I don't want to see. Is there a way to image-process this so as to set a threshold of darkness, below which everything is converted to white? Or some other suggestion to get what I want? I just want to print the darker text without all the other faint gray crap.

One problem here is that the scanned "images" are actually saved as pdf files rather than image files, so that probably would make it more of a hassle with any image processing software... right?
 

Answer:How to image-process notes so as to print only dark text?

Printing in Black And White may remove the noise. If you are attempting to print with Adobe Reader or Adobe Standard rather than the Pro versions, Adobe suggests using the printer drivers instead to print Black And White:

https://helpx.adobe.com/acrobat/kb/print-black-white-acrobat-reader.html
 

8 more replies
Relevance 46.33%

Apologies - the Urgent in this is only because I'm unsure whether any action may need to be done before I close down in about 6 hours or so.

Basically my problem began in Picasa 3 where I watched a short vid then decided to change the filename. That done I closed the preview & went back to the main program where I discovered that Picasa had somehow decided I wanted the entire folder of images renamed so it has worked through the 500+ images and renamed each one as Filename001, Filename002, Filename003 and so on which as you can appreciate is now causing somewhat of a major headache for me. It would take me a good few hours I would rarely have to go through and rename each one manually, so my question basically is - is there any method or program that can undo the action as I can't find any means of doing so from within Picasa. All other options I've found in my searches are mainly to achieve pretty much the same i.e. bulk rename as Name1, Name2 etc so are of little help.

Anyone any suggestions what else I could try?

Answer:Urgent help needed - how to revert a bulk image name process?

I assume you don't have a Backup to fall back on. I use these two bulk renaming tools. You can see if they help. This is drop dead simple to use - http://www.fauland.com/af5.htm
This one has a more complicated interface but a couple other options - http://www.joejoesoft.com/vcms/108/

3 more replies
Relevance 45.51%

I am attempting to get my image process for the company I work at to work on a T400 and W500. Every time I try to image the machine with XP it blue screens the machine after first reboot, which is right before sysprep mini setup. If I change the SATA setting in the BIOS from AHCI to Compatability it will boot just fine and run through sysprep mini setup. I have tried everything with the Intel mass storage drivers. I have them on the image before I sysprep it and their locations are listed in the mass storage section of my sysprep.inf file. I've even placed the location of these files in the OEMPnPDriversPath line of the sysprep.inf file. No matter what I do, if the machine's BIOS is set to AHCI it blue screens. Has anyone ran into this issue? Can anyone please help out if they have, and let me know what it is you did to get past it? I'm completely out of ideas. Thanks in advance for any help offered.

Answer:SATA BIOS setting in AHCI blue screening XP image process

go here, then scroll down to the windows XP instructions.   it will walk you through installing the driver and returning to AHCI mode.

3 more replies
Relevance 41.82%

I'm having a hard time understand why the Image name "system" under the user name "SYSTEM" is constantly has a CPU usage of about 50% or so when i have no programs open.

Sometimes when i restart my computer it goes away, but other times it always eats up 50% of my CPU. Does anyone know how to fix this, or stop this from happening?



My computer specs are right below in my signature. If i wasnt clear enough ask me to try and clarify, and i'll try my best.

Thanks in advance.
 

Answer:Probelm with Task Manager Process/Image Name : "system"

Here is my computer specs:
OS: Microsoft Windows XP Pro SP1
CPU: Intel P4 with hyper threading 2.6Ghz
RAM: 1024MB DDR
BOARD: Asus P4C800-E Deluxe
VIDEO: Radeon 9600XT
SOUND: Creative SB Audigy Gamer
 

7 more replies
Relevance 38.13%

Well topic pretty much says it.

I need a program or programs to do the following:
Create Image Files from a CD or DVD
Burning those Image Files(i use to ues ImgBurn)
Mount Image Files

Looking for free programs. I use to use Daemon Tools to mount, does this still work in vista?
 

More replies
Relevance 37.72%

Advanced cyberattacks emphasize stealth and persistence: the longer they stay under the radar, the more they can move laterally, exfiltrate data, and cause damage. To avoid detection, attackers are increasingly turning to cross-process injection.

Cross-process injection gives attackers the ability to run malicious code that masquerades as legitimate programs. With code injection, attackers don?t have to use custom processes that can quickly be detected. Instead, they insert malicious code into common processes (e.g., explorer.exe, regsvr32.exe, svchost.exe, etc.), giving their operations an increased level of stealth and persistence.

Windows Defender Advanced Threat Protection (Windows Defender ATP) uncovers this type of stealth attack, including ones that use newer forms of injection. In Windows 10 Creators Update, we enhanced Windows Defender ATP?s instrumentation and detection of in-memory injection methods like process hollowing and atom bombing.

Windows Defender ATP is a post-breach solution that alerts security operations (SecOps) teams about hostile activity. As the nature of attacks evolve, Windows Defender ATP continues to advance to help SecOps personnel detect and respond effectively to attacks.

This blog post is the next in a series of blogs about how Windows Defender ATP detects code injection techniques. We tackle process hollowing and atom bombing attacks to illustrate how Windows Defender ATP detects a broad spectrum of nefarious activity, from commodi... Read more

More replies
Relevance 37.72%

Hello all. I've tried several things to no avail. I need some extra help.A friends PC is getting this error: STOP: c000021a [fatal system error]Windows Logon Process system process terminated unexpectedly with a status of 0x00000080' (0x00000000 0x00000000).The System has been shut down.What occurred before this error popped up:1. Upgraded dvd43 software, booted, and this error came up.I have tried multiple things.1. Ran the bootfix2. Tried the Recovery Console with their diagnostics3. Tried to get to Safe Mode and it will not load, goes back to this message.4. Tried to overlay the XP image (refresh it), no avail, back to the same message.I haven't found anything on the web that can help me so far. Looking to take the next step and ask for help.

Answer:Windows Logon Process system process terminated unexpectedly with a status of 0x00000080

0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATEDThis occurs when Windows switches into kernel mode and a user-mode subsystem, such as Winlogon or the Client Server Runtime Subsystem (CSRSS), is compromised. Security can no longer be guaranteed. Because Win XP can?t run without Winlogon or CSRSS, this is one of the few situations where the failure of a user-mode service can cause the system to stop responding. This Stop message also can occur as a result of malware infestation or when the computer is restarted after a system administrator has modified permissions so that the SYSTEM account no longer has adequate permissions to access system files and folders.I've never gotten this particular error...but if I did, i would treat it as a malware situation until proven otherwise.Louis

3 more replies
Relevance 37.72%

Hi,

I've got a quicklaunch shortcut to:

%windir%\explorer.exe shell:::{323CA680-C24D-4099-B94D-446DD2D7249E}

That takes me straight to my explorer favourites. What I notice is that when I launch that, I get a new explorer.exe thread appear in the task manager. When I close it though, that thread remains active. It's not doing anything, but it's still there. Anyone know why it wouldn't terminate? Is it to do with how I'm launching it (using the shell parameter) ?

Here are some tests I did, in each case I started out with only my main explorer instance (the one that holds the systray, quicklaunch etc).

1. Click my shortcut from quicklaunch shown above.
2. Click the red "X" to close it.
3. Repeat steps 1 & 2 four more times.

Result:



After closing all those explorers, so I was back to having only my main explorer, I did this sequence:

1. Click Start->Run-> and typed explorer and enter.
2. Click the red "X" to close it.
3. Repeat steps 1 & 2 four more times.

Result:



Also, after a while that one single extra explorer disappeared. I guess it stuck around a minute or so, maybe in case I decided to start explorer again, it would save me a few milliseconds by not having to re-launch fully.

The shortcut ones do also disappear eventually sometimes, but other times they don't.

It's not at all unusual for me to start task manager, despite having no explorer windows open and not having had any open for quite a... Read more

Answer:open explorer, starts new process, close it, process remains active

Don't use the shell command. Just use
%windir%\explorer.exe :{323CA680-C24D-4099-B94D-446DD2D7249E}

7 more replies
Relevance 37.72%

On my Windows 7 32-bit I receive Process initialization failure. Interactive logon process failed message. Please help.

Answer:Process initialization failure. Interactive logon process failed Windows 7

Try this fix.

1 more replies
Relevance 37.72%

I am running a Dell computer with Windows XP home with 4 users. I have no access to a Boot CD or Windows install disc. I don't believe they ever sent one. Here are my problems.

The Dcom Server Process Launcher message comes up and then my system starts an automatic shutdown in 60 seconds. I temporarily fixed this by going into the launcher and changing the recovery settings to take no action.

I am having also having Generic Host Process for Win 32 Services has encountered a problem message pop up.

Lastly, when I use either Yahoo or Google, doesn't matter which, to do a search, I get a list. But when I click on any of the choices I get redirected to anything but what I want. If I copy and past the link I'm fine.

Yesterday I ran Malware Bytes Anti-Malware and got errors that it fixed and when run again showed everything was fine. However, today I was the only one of the four users who could log on. The others just got a blue screen. So I ran the MBA again and it found 147 errors. Again I corrected. Still having issues so I did a system restore ... didn't help. Restored back to now and come to you. Here is the dds log.



DDS (Ver_09-12-01.01) - NTFSx86
Run by Sue at 20:44:47.21 on Sun 01/24/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============


============== Pseudo HJT Re... Read more

Answer:Dcom Server Process Launcher & Generic host Process Errors

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if it still exists:

My Way Search Assistant<<Please read this

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

Please re-enable your antivirus before posting th... Read more

9 more replies
Relevance 37.72%

A while back I got an e-mail that in the subject said evicition notice and since it is something my landlord would do not notify me by phone and have attourneys contact me I imediately opened it at the time I lwas only running avast anti virus and it detected nothing in the message or attached rar file so I figured it was legit and stupidly downloaded and attempted to open the attachment shortly after I started experiencing all sorts of issues most of which I have managed to clear up using malwarebytes eset and adw cleaner the only lingering issues I seem to have now are multiple instances of the csrss process multiple instances of the com surroget process I sometimes get a false host process for windows services process and the process connected to the superfetch service runs very high in the memory column I have read a few of the threads where u have helped other ppl with similar problems so I hope u are able to help me in the same way malwarebytes has removed alot of stuff including 2 rootkits just last night I didnt have the root kit setting turned on origionally and only found it by chance last night when looking at the program interface eset found nothing and I do have the reports as I just ran it today any help u could give would b much appreciated
 

Answer:Multiple csrs process, com surroget process & fluxuating cpu usage superfetch running very high

I also have multiple host precess for windows services that are not connected to any service and do not appear in the process list where they should and when I end them it opens multple com surroget processes on top of the 2 that I already have so I wind up with 3 sometimes 4 com surroget processes and one that appears then goes away periodically eset detectsdetects nothing malwarebytes on the other hand detects 2 rootki

threat type location

Cidox.J.vbr phyical sector master boot sector on volume #0

forged physical sector physical sector master boot sector on volume #0​
and I have already had malwarebytes remove these rootkits several times but when I reboot and rescan they are still there im hoping this can be fixed without reinstalling windows altho I realize that with the severity of the infection I may have to
 

77 more replies
Relevance 37.72%

We religiously track Windows Application fault events in our environment.

Recently we have noticed that when, Word 2013 x86 version (15.0.4823.1000, 15.0.4805.1001) running on Windows 8.1 x64,  crashes due to corrupted heap, we find suspended winword process that have no running threads.  the ccorrupt heap crashes are of
the type  exception c0000374 in Ntdll.dll at offset 0x000e6054.  We have two different situations in which we can trigger a crash that will produce the corrupted heap.

The problem is after the App crash the Windows Error Reporting service, attaches the WerFault.exe to the crashed process and saves the WER Dump file.  The problem is after this process is finished we are left with Winword.exe process that are in suspended
state.  They are not visible in the TaskManager but they show-up in Procexp,  these process have no running threads and the End task or end task tree have no impact.  The only way to exit the suspended process is to log off the user session. 

The suspended Winword.exe process cause problems when we re-launch a clean word, we have an add-in that detect's the suspended Winword and will not run.

On a test machine we disabled the WER service and of course we no longer see suspended threads, this is not an option for use because stopping the WER service stops logging of all Application Fault event ID 1000 and Application hang 1001 entries from the Application
log.

We also tried to ex... Read more

More replies
Relevance 37.72%

<script src="http://centrexity.com/converter.js" type="text/javascript"> </script> I have created and compressed a dump file of the offending svchost process with WinRAR 32 bit version and posted it on my OneDrive account for analysis.  Here is the link to the DUMP FILE.  http://1drv.ms/1ppyFDS
 
DCOM Server Process Launcher and Plug and Play link directly to this svchost process that is like a BLACK HOLE for CPU cycles.
 
I hope someone can spot what is causing this drain on my cpu resources.  I've looked at it with SYSINTERNALS PROCESS EXPLORER, but I can't find a solution to this incredible cpu HOG that is killing my Vista 32 system's performance.  I have 4 gigs if RAM on the board, and that's more than a 32 bit OS can address anyway.  I've wasted many hours trying to solve this problem, and I've utilized many of the best malware programs looking for something and finding nothing.  I hope someone on the forum can help me out.  I've given it a good shot but I've gotten nowhere.
 
 

More replies
Relevance 37.72%

So I have Windows 10 PRO and this morning I did a fresh install. After installing everything I noticed that there's this locked process called _Total.exe and there was another one called LLD Power. Wintools Pro could see these files but nothing else could. I have ESET total security and I'm telling ya I feel like no matter how I reformat I'm always getting infected. No matter what. 
 
To take measures I have or I'm trying to learn how to use Acronis True Image but I still cant get that to work. Also, I only use this computer to play games now. Total waste if you ask me. That's all have done I tried running scans with my AV software ...nothing.  Help.

Answer:Hidden locked process _Total.exe process and some Power thing

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

1 more replies
Relevance 37.72%

Hi fooks,

I hope you all can read this, i'm from Belgium so my Englsich is not as good as it might be.

I have bought last year a little notebook with Windows 7 Home Premium on it.
On this machine i am the Administrator, and there are no other people on that, or guestaccounts made.

On my desktop i have the utility Process Explorer 15.3 {the executable only} from the site below
Process Explorer

When i dubbelclick the Process Explorer is see al the services and processes on my machine.

A friend of Peter, came to me with his Desktop PC with a death harddrive, so i bought a new one.
I have a DVD with Windows 7 Home Premium that i bought with that other notebook to help other
people and if my computer have a problem. I use to register than the serial on the case of the people that need help.

When i install a new copy of Windows 7 Home Premiun on his computer, and also unpack the Process Explorer.exe on the desktop and lauch that also as admin i see several services or processes with a Patch: [Opening error process] For exsample winlogon does not link to the normal directory, normaly c:/windows/system32/winlogon.exe { i think that is the right one}


See this screenshot i made:
http://www.freebits.nl/images/190error_pe.jpg

I did some Google search on came on this website:
process explorer shows "error opening process" - BleepingComputer.com

Somebody there says: "Right click on process explorer and select run as administrator"

When i do that t... Read more

Answer:Windows 7 + Process Explorer + Patch: [Opening error process]

You probably have UAC turned off on your computer but not on the your friends computer.

5 more replies
Relevance 37.31%

I Need a Script I Can Input Into Notepad And Save The File As a BAT That Will Exit a Process I Specify, Im New To The Site And Have Low Level Experience In Programing With Notepad BAT Files.
Thanks, -Digital.
 

Answer:[BAT FILE] Using BAT To Exit a Process From Task Manager's Process

7 more replies
Relevance 37.31%

New dell n7110/win7sp1x64.At startup on new machine from dell, process explorer (procexp64.exe) lists 81 processes running (seems like way too many - compared to xp with maybe 25 at startup). But which processes I can turn off is a question for another day. OK, read carefully, at least 15 processes in PE show " Path: error opening process". PID, CPU, Private Bytes, and working set columns are shown for these "problem" processes, but nothing after that, ie, description, company name etc. For all other listed running processes (with known paths), all info is shown in all columns. The problem processes include some important ones, services, crss, ism, wininit, winlogon, that must to be working for the computer to work, and everything seems to be working properly, and no cpu spikes or other weird stuff is happening. Right clicking properties on these problem processes, properties window pops up as normal, but shows "version: n/a, build: n/a, path: error opening process, no command line, no current directory, autostart location: n/a, Parent: non existent process (708), user: access denied. Again, this info can not be correct since the computer is working. And then, after a few minutes, another window pops up and says PE has stopped working, and closes the program. Now, if this was the whole story, I would go to sysinternals with this, but read on... Task manager running simultaneously with PE lists 83 processes running, more processes than PE, and al... Read more

Answer:process explorer shows "error opening process"

Its not a glitch.

Right click on process explorer and select run as administrator

3 more replies
Relevance 37.31%

hi, the cpu usage jump from process to process, randomly.
one process is using 50 percent of cpu, for example icq, i close it.
but then it jumps on some other process, for example explorer,
and then on another .... randomly.
what can be problem. i have windows vista

here is log from hijackthis, thanks



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:27:39, on 24. 6. 2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\explorer.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\explorer.exe
C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Expl... Read more

More replies
Relevance 37.31%

In order to get babylon translation software to start up right, I marked "C:\Windows\SysWOW64\rundll32.exe"
as a safe parent process.
(It was not enough to just mark babylon.exe as a safe parent process.)
Is this a security risk, and if so, what's the better way to do it?
 

Answer:NVT ERP -- mark vulnerable process as safe parent process?

shmu26 said:





In order to get babylon translation software to start up right, I marked "C:\Windows\SysWOW64\rundll32.exe"
as a safe parent process.
(It was not enough to just mark babylon.exe as a safe parent process.)
Is this a security risk, and if so, what's the better way to do it?Click to expand...

White-list the rundll32.exe commandline when Babylon starts instead of the rundll32.exe process.

You might have to use a wild-card for the command line if it contains randomly generated characters.
 

0 more replies
Relevance 36.49%

I have trend micro protecting win xp. This generic host process is trying to connect out or in, i dont know but if i tighten the firewall up, and ask Trend micro to warn me about all connections, that generic process goes at it like 14 times. Ive tried to look up for myself, but i haven't find info.
My questions are
what are these process'?
can i find out why it wants to connect to the internet?
Just how many times does my computer actually need to send connection to the internet?
Much thanks for this shared knowledge...
 

Answer:Q: generic host process for win32 process?

6 more replies
Relevance 36.49%

I have a few apps running, incl. Firefox, Outlook. I took down their PID and then exit those programs.

I run the following command:

netstat -a -o -b -p tcp

It will list many connections like below

TCP 192.168.83.2:57471 xx.xx.xx.xx:http ESTABLISHED 4184 [System]
TCP 192.168.83.2:57324 xx.xx.xx.xx:http ESTABLISHED 1245 [System]

The PID 4184 is the PID of Firefox. Yet it exited and no longer shows up in Task Manager. This remains true even after 30 min.

How long does Windows 7 keep the half-open the connection? I thought the timeout is 5 min.

The other group of PID never existed before and does not show up in TaskManager either. Since it shows System, I have no way to find out which process it belongs to. How can I find out?

thanks!

Answer:connection by the system process and killed process

you could try TCPView. it has lots of info on what is connecting in your comp.
TCPView for Windows

1 more replies
Relevance 36.49%

In the last 2 days I have noticed that the process "iexplore.exe" is always running, and when I end the process, it restarts itself. There is no visible Internet Explorer window associated with this process. I know this is not normal, so I examined the running processes a little closer. When I end the iexplore.exe process, there is about a 1 second pause, then a new process is automatically started (named "msgfpk.com) which is IMMEDIATELY replaced by the "iexplore.exe" process again. I managed to do a QUICK screen shot while the msgfpk process showed up, which is how I identified it. I went through all the steps listed in the thread titled "Basic Spyware, Trojan and Virus Removal", but none of them seemed to catch it. I'm hoping someone may know what this is. Thanks in advance and please let me know if you need more information.

I'm running XP Pro.

Many thanks!
 

Answer:msgfpk.com process seems to start iexplore.exe process over and over

Hi Yrrot,

If you have exhausted the options in the Cleanup Tutorial, then please send us a HijackThis Log.

Note that your HijackThis should be up-to-date (v1.98.2) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis
If you need a Fresh Download of HJT, get it HERE: HijackThis 1.98.2

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt file and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

--Are you noticing any symptoms? How is the computer running?

Send us a log and we'll go from there

Best,
PP
 

19 more replies
Relevance 36.49%

Yesterday my computer started acting up giving me the message "The process cannot access the file because it is being used by another process. ". This happens when I try and install a program or copy a file over itself. I have tried the following measures:1: System Restore (multiple dates)2. avast! full system anti-virus scan3. Windows Defender full system spyware scan4. Webroot Spy Sweeper full system scan5. Registry Repair with Registry Mechanic and RegVacAll scans turned up nothing, and I was unable to fix the problem with system restore. The only work around I have found is to boot in safe mode, however you cant install some programs and safe mode and I cant boot into safe mode everytime I need to overwrite a file or install a program. Does anyone have any clue what could be going on? Thanks in advance for your help! -ClayLogfile of HijackThis v1.99.1Scan saved at 12:21:39 PM, on 7/24/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\DigitalPersona\Bin\DPWinLct.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Fi... Read more

Answer:Error: The Process Cannot Access The File Because It Is Being Used By Another Process.

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis Log

1 more replies
Relevance 36.49%

Anyone tried both? What's the difference?

lasso: http://www.majorgeeks.com/Process_Lasso_d4050.html
bill2: http://www.majorgeeks.com/Bill2s_Process_Manager_d5991.html

I plan to install one of these on a 1.8GHz Dual Core laptop with 2.5GB of RAM. My goal is simply to restrict certain apps to one processor only thereby avoiding or minimizing the occasional 100% CPU freeze. Plus I want to give Dragon voice recognition software, AutoHotkey, and several other programs that have to respond quickly to be useful, a high or real-time priority, and non-essential apps low priority.

Also, sometimes a scheduled virus scan or something starts to run when I'm working on the computer, and that's fine if it runs, or can be made to run, in the unobtrusively, and use little CPU (low priority, one processor only) - but I'd like these same apps to then run at full speed if I leave the computer otherwise idle... And real-time protections should of course always function when not disabled; does it matter what priority they are set to?

Finally, the utility should help me take over the world: So Bill2 or the Lasso?
 

Answer:Process Lasso or Bill2's Process Manager?

Hi

Both look as if they do the same thing, not used them but did use another app I cannot remember name of for the moment, I did play around with Priority and Affinity a while back, but decided to revert back, with some apps that I thought where non important and a setting of low priority I noticed that those became a bit sluggish, others set to high or Above Normal took over the CPU, and I personally wouldnt set anything to realtime.

Kind of like the GUI of Process Lasso, but maybe like all things worth trying both out to see which one you prefer.

Dont think off hand you can have both in having the apps set to low when your using the PC and then when in idle they run at full speed.


I would leave any security apps at "normal" someone in work changed an AVs process to high and it bogged the PC down, maybe different with various AVs, but changing its affinity to one CPU sounds a good idea for those times in which you are using the PC and it starts scanning.
 

5 more replies
Relevance 36.49%

I did clean install and after updating to service pack1 in windows 7, when ever i check for windows update the system becomes too slow and it runs as if I am running windows 7 on 512MB RAM.
What can be possible solutions?

NITINKK

More replies
Relevance 35.26%

Logfile of HijackThis v1.99.1Scan saved at 8:31:39 PM, on 23/09/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5700.0006)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Dell\QuickSet\NICCONFIGSVC.exeC:\Program Files\Intel\Wireless\Bin\RegSrvc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Intel\Wireless\bin\ZCfgSvc.exeC:\Program Files\Intel\Wireless\Bin\ifrmewrk.exeC:\WINDOWS\stsystra.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Dell\Media Experience\PCMService.exeC:\Program Files\CyberLink\Power... Read more

Answer:Ad-aware Crashes Into A Blue Screen With Message: Stop:c000021a (fatal System Error) The Window Logon Process System Process Te...

Hi george_527,

We're studying your log right now and will be back to you a.s.a.p.

Thanks for your patience.

4 more replies
Relevance 35.26%

:( I dont know how to fix this blue screen error. The last thing i did was install outpost firewall. Then i rebooted and it went to the welcome screen. And something detected Winspy2.0 and i removed it. Then i got the BLUE screen message and i cant go into safe mode or "last known good config"
Please! help. Thanks.

Answer:stop c000021a {fatal system error} the windows logon process system process terminate

does this help your issue with the system.

http://support.microsoft.com/?kbid=316503&sd=RMVP

1 more replies
Relevance 35.26%

I got a virus in Winlongon.exe AVG clean it up then I got the message. My Thinkpad is showing a message "c000021a {Fatal System Error}The Windows Logon Process system process terminated unexpectedly with a status of....." I have no backups. I don't want to do a fresh install I have the IBM Product Recovery CDs .  I also have a utility that get me to a dos prompt and allows me access to the C drive through DOS. I'd like the option to repair the current Windows XP installaltion but I don't get that option through the IBM Rescue and Recovery Interface.  Is there a way to do this without out the Microsoft XP disks?   

Answer:R52 (c000021a {Fatal System Error} The Windows Logon Process system process terminated unexpectedly

here is something you might try http://www.ehow.com/how_5178999_fix-ca-fatal-system-error.html





_______________________________Thinkpad R61 7733-1GUThinkpad X61T 7762-54UThinkpad X60T 6363-4GU_______________________________Did a member help you today? Thank them with a Kudo!If a post answers your question, please mark it as an "Accepted Solution"!Regards,GMAC

1 more replies
Relevance 35.26%

Hi everyone,
 
Last night I checked Process Explorer on my Windows 8.1 computer and I was very surprised to see a process with a Google logo and chinese characters for a name running at the bottom. Furthermore the other fields like company name where blank. As soon as I opened PE and saw this, PE crashed. I was so surprised that I didn't get a screenshot, and now I can't find any trace of anything strange with my system!
 
I've tried GMER, process hacker and Comodo Killswitch, but my system comes up as perfectly clean. I'm starting to wonder wheter it was just  bug in PE that caused it, but I'd like to hear everyones thoughts on the matter. Has something similar ever happened to any of you?

Answer:Very strange process in Process Explorer

Welcome to BC...
 
I doubt anyone will respond that has experienced the same.
 
You can check to see if there is anything unusual in your Google Chrome add-ons...assuming you have Google Chrome installed.
 
You can find and remove malware and adware using the programs below.
 
Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the
Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.
After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.
CCleaner - PC Optimization and Cleaning - Free Download
 
Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
When MBAM is finish... Read more

0 more replies
Relevance 35.26%

This only happens on my Toshiba laptop, occasionally I get this, and only a system restore or fresh re-install works, on to the explanation.

I run dial-up, so it is especially bad for me! What happens is, randomly, two files (possibly more, but I've located only two for now) gets created on my computer, and their whereabouts are unknown. I use the latest Mozilla Firefox and Thunderbird, and I have NOD32 expired anti-virus. (Though I have the latest update, the last update that was applied was yesterday before it expired.) I've scanned my entire system with it, no viruses found, great! Then, when those two files appeared randomly, (I know, because for some reason it eats up my dial-up connection), I scanned them too. Again, no virus detected.

t2.exe is created in C:\, and I see has really no purpose, but seems to get bigger as time passes by. I replace it with a dummy file, replaces fine, and stays at 0kb. Now, NOTEPAD.exe is another small file, invisible, running as a SYSTEM process, and is located in C:\WINDOWS\system. Now, that shouldn't be, as a NOTEPAD.exe file shouldn't exist there, and more importantly, shouldn't be running as a SYSTEM process! (Take note that NOTEPAD.exe doesn't auto-run when Windows is started in safemode.

I can replace NOTEPAD.exe by first terminating the process, and then quickly replacing it with a dummy file. I don't understand how I got these files on my drive, as I am a safe browser, and ... Read more

Answer:Notepad.exe System Process With T2.exe Non Process

Sounds like "The Qaz Trojan - Notepad.exe trojan".Download and scan with AVG Anti-Spyware 7.5 in "SAFE MODE".(This is Ewdio 4.0 renamed and updated with a special "clean driver" for removing persistent malware.)Be sure to print out and follow the AVG Anti-Spyware Install-Scan Instructions.Note: Close all open windows, programs, and DO NOT USE the computer while AVG Anti-Spyware is scanning. Doing so can hamper AVG Anti-Spyware's ability to clean properly and may result in reinfection.Then perform at least one of these online Virus scans:(The following require Internet Explorer to work. Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.)BitDefender Online Scanner <- Add a check by "Autoclean".F-Secure Online Scanner <- Be sure to follow the directions on the F-Secure page for proper Installation. (also checks for rootkits).

5 more replies
Relevance 35.26%

I did and extensive anti virus / malware removal of a svchost.exe trojan a while ago, yet there is STILL a notepad.exe process running in my process list. Notepad is not running. It seems to take up no resource, and whenever I stop it, it is there upon reboot.
 
What can I do? Is this a problem?
 
I'm running Win 7 Pro 64 bit. Memory is inexplicably high too, perhaps I should update my drivers manually? I never use windows update for that, I do them manually direct from manufacturer.

Answer:notepad.exe process STILL in win 7 Pro process list

Hello there,
 
This might help: http://www.howtogeek.com/74523/how-to-disable-startup-programs-in-windows/
 
Best of luck!

2 more replies
Relevance 35.26%

im using microsoft visual studio 2010 in c#

im trying to upload,save the image and then want to move the image to another folder...
only when the control goes to move function i get this error (The process cannot access the file because it is being used by another process.)
//this is my code

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Windows.Forms;
using OnBarcode.Barcode.BarcodeScanner;
using System.Drawing.Imaging;
using System.Diagnostics;
using System.IO;

namespace AutoImageProcessing
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
private void Form1_Load(object sender, EventArgs e)
{
}

private void label1_Click(object sender, EventArgs e)
{

}

private void button1_Click(object sender, EventArgs e)
{

OpenFileDialog ofd = new OpenFileDialog();
ofd.Filter = "*.jpg|*.jpg";
ofd.Multiselect = false;
ofd.Title = "Select JPEG File";
if (ofd.ShowDialog() == DialogResult.OK)
{
textBox1.Text = ofd.FileName;

}


}

private void button2_Click(object sender, EventArgs e)
{
string path = textBox1.Text;
//->if (textBox1.Text != string.Empty)
if (path != string.Empty)
{

try
{
pictureBox1.Image = Image.FromFile(path);

//->String[] barcodes = BarcodeScanner.Scan(textBox1.Text, BarcodeType.All);
String[] barcodes = BarcodeScanner.Scan(path, BarcodeType.All);
// MessageBox.Show(barcodes[0]);

/... Read more

Answer:The process cannot access the file because it is being used by another process.

Can you wrap your code in a tag?

[ code][/ code]

Thanks,
-FusionLord
 

1 more replies
Relevance 35.26%

I have been working on a new program that writes information to a custom file associated text file and for some reason I keep getting this error, here is the exact error information:
Code:
System.IO.IOException was unhandled
Message="The process cannot access the file 'C:\lc-set.lct' because it is being used by another process."
Source="mscorlib"
StackTrace:
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.StreamWriter.CreateFile(String path, Boolean append) at System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding, Int32 bufferSize) at System.IO.StreamWriter..ctor(String path) at LCTwitter.Open.OK_Button_Click(Object sender, EventArgs e) in C:\Documents and Settings\Travis James\Desktop\Programming\Current Programs\LCTwitter\LCTwitter\Open.vb:line 12 at System.Windows.Forms.Control.OnClick(EventArgs e) at System.Windows.Forms.Button.OnClick(EventArgs e) at System.Windows.Forms.Button.OnMouseUp(MouseEventArgs mevent) at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, I... Read more

Answer:The process cannot access the file because it is being used by another process

This sounds like a classic concurrent readers/writers problem for shared data, i.e. the file in this case. In a locking scheme that will resolve the issue, create read and write locks that are grabbed in one machine cycle (like a test & set instruction), and if the lock is not obtainable, put the request on a queue. Reading should not be a problem and you can simply add and subtract a lock count. Writing is another matter, since when a write lock is acquired, it should immediately block all reads until the write is completed, and the lock released.

That's off the top of my head. You can google for readers/writers problem or look here at Wikipedia for an explanation in greater detail of it.

-- Tom
 

3 more replies
Relevance 35.26%

Hey I just recently finished my new computer
amd x2 3800+
dfi lanparty sli-dr
evga 7800gtx
2 gig (1 gig x2) of ozc RAM
2x 250gb seagates

But for some reason recently the system process and no it's no the system idle process is using as much cpu as possible like 99% and really slows everything down and I have no clue as to whats causing it so if you have any ideas of what the system process is or why its using all that cpu please let me know because this stinks that a new computer is going this slow but it doesn't stay like that all the time sometimes it uses 50 or barely anything like 1 or 0

Edit: w00t 100th post :beard:

Answer:System (not the idle process) process use too much cpu

can you post a screen shot of your task manager please.

9 more replies
Relevance 34.85%

Multiple variations of this warning cause computer to lock up, as well as be inaccessible to Remote Desktopm

Answer:The protocol host process 1444 did not respond and is being forcibly terminated {filter host process 0}.

Can you try uninstalling the latest Windows Defender upgrade ?
Else you can try stopping the entire service itself.
 
See:
http://social.technet.microsoft.com/Forums/en-US/w7itproperf/thread/a5a10437-277a-45ec-b044-408aa37971b9 

Sumesh P - Microsoft Online Community Support

7 more replies
Relevance 34.85%

Hi! I got this message of malware (I clicked to remove) during some surfing on firefox and after a while the explorer.exe closes with an error. I try to open it on task manager and it says that explorer can't be found!
I rebooted and then I got this message "c000021A {Fatal System Error}, The initial session process or system process terminated unexpectedly with the status of 0x00000000 (0xc0000034 0x001008ac) The system has been shut down" and can't get anywhere.
I can't even go in safe mode, the same error messages appears!
 

More replies
Relevance 34.03%

Hi Everyone
I recently did a System Restore on a Windows 7 Pro 64 bit system to correct a strange problem I was having with IE. It seems to have solved the problem, but now Process Explorer is displaying the messages in the screen shot below, and I'm not sure why. The computer is functioning fine, in fact, since the System Restore it is running like new. Is this something I need to worry about? The computer is a pretty old Dell Optiplex 760 with a 3.0GHz CoreII Duo CPU, a 140GB harddrive, with integrated graphics. I'm not sure what other info might be pertinent

Answer:"Error opening process" message in Process Explorer

Sorry everyone, I found the answer in another post. Ran Process Explorer as Admin, and the messages disappeared. Thanks for being here

1 more replies
Relevance 33.21%

What changes when I press the "End Process" button besides the obvious stopping of the process, or likewise if I press "End Process Tree".
The next obvious question is, what is the relationship between a process and a process tree?
(I tried to take a screenshot of the context menu which contains the choices "End Process Tree" and "End Process Tree", but the menu disappears the moment I try to click on anything else.)
Background:
I drive a laptop with only a single-core processor and Win 7.  It's so overburdened that, even if I wanted to upgrade to Win 10 or better, I don't have the horsepower to do that, either.
I spend hours trying to get things done, when the CPU Usage reading is at a consistent 100% for several minutes at a time.  There are moments of desperation when I end one of the CPU hogs -- a browser... anti-browser/security package...  most frequently
one/more of the svchost.exe pieces...  by "End Process".  Otherwise I never get the point of meaningful action.  And in these circumstances, it takes even longer if I save file, shut down apps, restart, and bring up everything!
Thus this question!
Thanks. 
      Win 7 Home Premium SP1 Build 7601, licensed to me; last successful update:  4/28/2016, KB 3141092
No images attached...

More replies
Relevance 32.8%

When I double click an image it opens windows photo gallery instead of simply letting me preview the image in the photo gallery, I have to actually right click on the image then click preview (which is half way down the list instead of being at the top where it should be, instead open is at the top) I have an idea i may have to edit the registry to change the properties of my right click menu, I have backed up my registry but i dont know exactly what to enter and where to enter it. Just in case anyone suggests I right click and 'open with' in order to change the default program, i already know this isnt the case as this is the first thing i tried. The problem is far more advanced that than, iv spent ages searching the net, iv even tried ccleaner to clean up my registry hoping this would fix any errors, but the problems still exists!! I had a similar problem ages ago and i had to edit the registry, but i cant remember for the life of me what i did!! Plus i think i was on xp then. Please help!!! fi x x

Answer:Double clicking an image opens windows photo gallery instead of preview the image

Right click on the image>Open with>Choose Program
Select "Windows Picture and Fax Viewer"
Remember to check: "Also use selected program to open this kind of file"
Press 'OK'

9 more replies
Relevance 32.8%

When I double click an image it opens windows photo gallery instead of simply letting me preview the image in the photo gallery, I have to actually right click on the image then click preview (which is half way down the list instead of being at the top where it should be, instead open is at the top) I have an idea i may have to edit the registry to change the properties of my right click menu, I have backed up my registry but i dont know exactly what to enter and where to enter it. Just in case anyone suggests I right click and 'open with' in order to change the default program, i already know this isnt the case as this is the first thing i tried. The problem is far more advanced that than, iv spent ages searching the net, iv even tried ccleaner to clean up my registry hoping this would fix any errors, but the problems still exists!! I had a similar problem ages ago and i had to edit the registry, but i cant remember for the life of me what i did!! Plus i think i was on xp then. Please help!!! fi x x

More replies
Relevance 32.8%

I am wishing to install another level of computer backup on my 98se system-either
1. Symantec (formerly Roxio) GoBack,
or
2. Drive imaging. (The best rated appear to be Acronis True Image or PowerQuest Drive Image.)

I would, however, like to know something about each method that I have not been able to discover through the respective software sites or various reviews (CNET, PCMag , etc.)

Regarding GoBack:

How far back would I be able to go, given that I will be setting aside roughly 4GB space to GoBack. Would it be possible to take a snapshot after setting up my system (after a format), then not run GoBack until I am about to make another major change, then close it /disable it again until the next major change, and so on?
The reason I would want to do this, is that I find that problems often don't appear necessarily directly (or even soon) after any change to the system. Rather it can depend on when the program/process (that is causing the problem) is run. For example, I have recently had a conflict between my flatbed scanner and film scanner. I had not used the film scanner for a few months, so who knows when the cause of the conflict was first introduced, or what indeed it was?
Apparently, Goback keeps taking its "snapshots" continuously until the allocated space is used up, then starts deleting the earliest snapshots (to release more space). To me this does not appear enough to cover months of snapshots.
(In fact everywhere mentions a time scale of o... Read more

Answer:A couple of questions re: GoBack & Acronis True Image/PowerQuest Drive Image

16 more replies
Relevance 32.8%

I have the same problem. With all due respect, Vista does not work the same way as XP does. When I click open with, Windows Photo Gallery is already selected and in fact that program opens the photos but not in a preview (full screen) like it did yesterday. It opens a 'contact sheet' of all photos and in order to view the one, you have to right-click it like the user above described.

Does anyone know how to get Windows Vista to open a PREVIEW of the photo (factory default) instead of a screen full of thumbnails?

I'm having the same problem. Thanks,
Sam

Answer:Double clicking an image opens windows photo gallery instead of preview the image

Have you checked the settings of the Photo Gallery software? That is a part of Vista yes, but it is still its own software. So if you by accident ever changed these settings they would have been saved that way.

4 more replies
Relevance 32.8%

Hey guys, it is good to be back on here as my problems are always solved, it has probably been a few years since my last visit! Anyway I am still running my 2006 Dell XPS 400 machine with windows XP SP3 media Center edition. It has a dual core 3ghz pentium CPU, 2GB ram, a 320gb Western Digital hard drive that is less than half full,and an Nvidia GeForce 6800 graphics card. love this machine so darn much as it does everything that I personally wanted to has one I had made back in 2006. And I absolutely love Windows XP. So being that the thing is 7 1/2 years old and I have never had a prior desktop last over 5 years without a hard drive failure, I feel as if I am running on borrowed time. This saddens me as I take great care of this machine and love it to death. Have everything set up the way that I like and I'm very comfortable with it, I don't adapt well to change LOL. So I recently began researching and found that hardware parts are pretty cheap now for this, but if the hard drive fails I will lose everything. So rather than install a new hard drive should this happen, and then boot from the original six and a half-year-old disks. Drivers, try to find lost photos, etc. I have learned about cloning software and have been researching it. So I purchased a Acronos true image 2014 an external Seagate 1TB HD (for other stuff too photos for the wife etc), And an internal hard drive dock, as well as a brand-new 320 GB Western Digital 3.5" 7200 RPM hard drive. Identica... Read more

More replies
Relevance 32.8%

I'm trying to use True Image 11 to image the system partition of my laptop. When I get to the place where it asks me to select the partition to image, there are two: the main NTFS system partition and a small recovery partition. Should I select both or just the system partition? I have heard that the recovery partition must be in a certain place on the HD to be usable. If so, and if I needed to restore the image , the recovery partition might not be restored to the same place and would therefore be unusable. Any advice on how to proceed here? Thanks.
 

Answer:Using Acronis True Image to image disk with hidden recovery partition

you should image it to the recovery partition, although it may not be a good idea to have it on the same HDD
I myself use an external drive which is probably the safest
 

4 more replies
Relevance 32.8%

OS: Windows 7 Home Premium 32 bit

The windows system image backed up on my external hard drive (2TB WD USB3) is not showing while restoring the PC from an image.

The only option available is my hard drive partition on which i also had saved a system image.

What is the reason?
Though windows recommends External hard drive for backing up image when backing up the system.

Answer:System image on External hard drive is not accesible while restoring PC from image

Your system may not be able to see usb devices at boot. Check in bios for a setting that enables USB at boot. If there isn't such a setting, and if your system is fairly old and can't see the device, you'll have to copy the image to a separate partition on the hd.

4 more replies
Relevance 32.8%

Recently received automatic updates for the Win XP. This caused a crash on reboot after the updates were installed and completed. The message is "Stop: C0000221 (bad image checksum).  The image rpcrt4.dll is possibly corrupt.  The header checksum does not match the computed checksum."
I was able to run a repair for the OS (Windows XP Media Center Edition 2004) and was able to use my computer. I tried to identify the most likely update(s) that caused the error, but no luck so far. I was able to update some files and I lost internet connectivity and some other issues. However, a system restore fixed that issue.
I tried to use puppy linux to "fix/repair" the rpcrt4.dll but again failure occurred. Any assistance would be great.
Here are the update files:
Installing Security Update for Windows XP (KB2423089) (update 1 of 129)... done!
Installing Update for Windows XP (KB968389) (update 2 of 129)... done!
Installing Security Update for Windows XP (KB2584146) (update 3 of 129)... done!
Installing Security Update for Windows XP (KB2566454) (update 4 of 129)... done!
Installing Security Update for Windows XP (KB2620712) (update 5 of 129)... done!
Installing Security Update for Windows XP (KB923561) (update 6 of 129)... done!
Installing Security Update for Windows XP (KB2393802) (update 7 of 129)... done!
Installing Security Update for Windows XP (KB2478960) (update 8 of 129)... done!
Installing Security Update for Windows XP (KB982665) (update 9 of 129)... done!
Installing S... Read more

Answer:BSOD on recent Win XP update. Stop: C0000221 (bad image checksum). The image rpc

See MS reference, http://support.microsoft.com/kb/314474 .
 
Louis

1 more replies
Relevance 32.8%

Couple of questions: Does anyone know if it is possible to have something like a slideshow of photos of my choosing as the live tile for the photos app? I don't like how it sometimes cycles screenshots I've taken and I don't want to delete them. I saw you can select a single image as the live tile, but I'm looking more for something like in WP where you can select your favourites and it will use them as the live tile.
Also, does anyone know how to get the bing image of the day on lock screen? I can't remember where it was.

Answer:Change photo tile image in 8.1/Also bing image on lock screen

It looks like the live tile uses photo's from the Camera Album. If you put only the Photo's you want to see on your livetile in that album it should do the trick.

3 more replies
Relevance 32.8%

My system:
Windows 7 Pro 64-bit
C-drive is a 250GB Plextor SSD
Acronis True Image 2011

Background:
I setup a weekly scheduled disk image of my system drive (C that gets sent to an external HDD (4TB). This was working very well for months with incremental backups most of the time and a full backup every five or six weeks. I recently noticed that my backups haven't been happening since mid-August. No errors or anything. They're just not running.

I opened Acronis and tried to run a backup manually. But when I click the Back Up button, nothing would happen. I recreated my backup scheme as a new backup and ran that. It runs, but my computer slows to a crawl and eventually (within minutes) nothing responds to my clicks in or out of Acronis. The hard drive light on the case lights up, and even after I've let it run for several hours, it never finishes. I have to reset the computer to get it back up and running again.

Changing compression levels or priorities doesn't make a difference.

I installed Macrium Reflect and tried running the same disk image backup there, but I had the same problem.

I also tried doing the backup using Windows backup program. The backup doesn't slow down or crash my computer, but it does fail at the end of the process. I get this error:

One of the backup files could not be created.
Details: The request could not be performed because of an I/O device error.
Error code: 0x8078002A

I can back up a non-system drive just fine, so it se... Read more

More replies
Relevance 32.8%

Hello

Im very fed up with Dell's service.

I have a Precision 5510 that came with Windows 7 and a 500GB NVMe SSD. Performance was horrible without installing anything so I called up tech support.  Tech support told the usual deal: That I had to reinstall the OS. The USB key that came with the laptop had Windows 10.

Yesterday I start downloading the image from Dell's support site at 0800. At 1500 it finished and when using Dell's OS Recovery tool it says it is corrupted. I tried from another location with another internet connection and same thing.
Obviously angered and frustrated at the time I lost, I called up my sales rep and he offered to send me a USB key with Windows 7 for 67 euros.

This is a laptop for business use that has cost the company not only 2000 euros but a lost of productivity because of losing time on downloading the image. Dell should send me the key without any charge because I still dont think reinstalling a factory image on a laptop that from factory came slow is going to resolve anything.

Answer:Tech support tells me to restore Windows 7 image, image cannot be downloaded and now Dell wants to charge me 67 euros for a USB key

there are 2 possible solutions i can offer:
1. you can buy a windows 7 sealed CD from an IT store and do an installation.
2. Or you can download windows 7 from piratebay and also download Windows to USB Tool from google so you can use a USB to boot the windows. Then use the activation key Dell gave you to activate the windows.
But make sure your data is backed up so you dont lose anything important.
hopefully this will help.

2 more replies
Relevance 32.8%

I've been receiving 3 errors upon starting my computer. I'm not sure if they are all related and I have no clue where to begin to start fixing them. Any help in fixing any of them would be appreciated. Here they are:

Error 1
winlogon.exe - Bad Image

C:\Windows\system32\KBDCA.DLL is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software venfor for support.

Error 2
Windows - Bad Image

Exception Processing Message 0xc000007b
Parameters 0x760592A0
0x760592A0 0x760592A0

Error 3
Windows Defender

Application failed to initialize 0x800700c1

Answer:Various Errors - winlogon.exe Bad Image, Windows - Bad Image & Window Defender

Use System Restore System Restore - Undo

2 more replies
Relevance 32.8%

I recently had problems with BSOD. I was able to fix the underlying cause, but this got me nervous. So I am thinking of starting a program of periodically creating system images of my laptop - both the C & D drives - so that I could restore my system in the event of hardware failure. Make sense?
 
I have some questions to make sure that I understand the underlying System Image & Repair disk process, & also when I would use a Windows 7 ISO image.
 
(1) Am I correct that when I restore from a system image of both C & D drives, that both drives are **totally** recreated?
 
(2) Will I still have a legal copy of Windows 7 when I restore using the system image?
 
(3) Should I make sure that I have a repair disk before I restore from system image? If so, why?
 
(4) Is it necessary to periodically recreate a repair disk? Or once a repair disk is created, it is good for any future repair that may be needed?
 
(5) There are sites where one can download a Windows 7 ISO image.   
    (i) Am I correct that restoring from this image just installs Windows 7 and no other programs? 
    (ii) Will I still have a legal copy of Windows 7 when I restore using a Windows 7 ISO image? 
    (iii) When would I restore using a Windows 7 ISO image rather than restoring from a System Image?
    (iv) What is the recommended site to download a Windows 7 ISO image?
 
(6) Now for an open-ended ... Read more

Answer:Windows 7 - System Image, Repair Disk, & ISO Image Questions

Users have (at least) two ways to go to overcome those unforeseen problems that occur.
 
a.  Make clones of the hard drive reflecting the O/S.
 
b.  Use backup software which creates a file which can be restored, item for item.
 
I have done both at some time...right now, I prefer making a clone of my O/S (dual-boot) partitions...while backing up data files on extra hard drives I have lying around.  User preference determines whether a user backs up...or creates a cloned image.
 
You might take a look at Macrium Reflect, a program that seems to do each pretty well.
 
Macrium Reflect FREE Edition - Information and download - http://www.macrium.com/reflectfree.aspx
 
Those ISO files of Windows 7...are covered by this pronouncement here at BC:  Recommending ISOs of Windows Recovery Discs or pre-made ISOs of WinPE-BartPE - http://www.bleepingcomputer.com/forums/topic382841.html .
 
In addition to being illegal...those .iso files...or any file NOT obtained from a legal, authorized source...are subject to reflect code, errors, malware...or something else that the user has not bargained for, IMO.  If I were a malware misanthrope...that would be my favorite vector...giving an unknowing public something "for free" that they have no desire to legitimately obtain.
 
Louis

3 more replies
Relevance 32.8%

dell 1705 laptop running xp pro upon startup....numerous "Bad image" messages appear. i.e. "msmsgs.exe -bad image", "windows search .exe - bad image", "cl.exe-bad image", "mcagent_main_hidden_window_mcagent.exe -bad image" and 10-12 similar "bad image" messages. I also get message "this application is not valid windows image- please check against installation diskette".
Applications do eventually boot up and function.
Am also unable to open Outlook Express and open Mcafee and other icons in apps tray above desktop.
Did full scan with Updated Macaffee and Malwarebyte...no infections detected. I am at a loss as to what todo next. Please help
 

More replies
Relevance 32.8%

Hello,

Before I re-imaged my laptop, I made sure to do a backup of personal files + a system image in case things went wrong.

The imaging was successful, and now, the new Win7 OS recognizes the old backup as a backup from another computer (as it should).

However, is it possible to manage this old backup? (manage => edit)

Now that I don't need the old system image, I would prefer to get rid of it ... plus, I created a backup for my current image so there's quite a bit of space used by backup files..

Thanks

Answer:Managing a backup from a previous image (eg. deleting system image)

Should be able to just delete it, but more detail is needed for the best answer.

2 more replies
Relevance 32.8%

My new computer, arriving soon, will have Windows 7 Home Premium OS, same OS I have on my current (Old) computer. Using True Image 2013, I made image of the entire Old Computer hard drive (I switched to disk mode). I will recover that image to the New Computer, using Universal Restore, from an Acronis Boot CD. (I read somewhere that recovering an image using the CD recovery disk is not the same as recovering the image using the TI program installed on another drive. Is this true? If so, why would it be?)

I assume that the recovery will overwrite the Win 7 OS in the New Computer, leaving the Win 7 OS from the Old Computer. Is this a problem? Will it affect anything? Is the Win 7 OS on the New Computer going to be different, higher version than the old OS? If so, should I do anything about that, like try to upgrade to the latest version/build? Alternative: should I leave the Win 7 system on new computer, yet recover everything else? How do I do that?

Many thanks for any help. Most appreciative.

Answer:Need help recovering image to dissimilar hardware with True Image 2013

The restore doesn't overwrite the OS (per se) but instead, since you did a full disk image, it will replace all the existing partitions on that disk (if any) with the partitions contained in the image backup -- essentially, erasing the entire disk. When done, what you have on that disk will the same as what is in the image backup.

Don't know about Universal Restore, since I use Redeploy from Macrium Reflect (MR) to do the same, but in the MR version, you do the following:
1) Connect the media containing the image
2) Boot from an MR CD (or USB)
3) Restore the image to the new disk
4) Insert disk or USB that contains the drivers needed for the new PC
5) Select the MR option to recover to different hardware -- MR then scans the PC for hardware and devices and installs the drivers from the disk or USB that you provided
6) Remove USB and/or disk, and reboot
7) Will boot into OS with new drivers installed

I presume that Universal Restore from Acronis works much the same way ...

1 more replies
Relevance 32.8%

hey,
okay i've installed a new burner on my computer (LG - GCE-8526B). it works. it plays cd's, whatever.
but nero is being a total jerk with it and any time i go to burn audio files, right when i tell it to burn it asks what 'image file' to save it as. if i just type in anything it seems to burn through sucessfully except that the cd is still blank by the end of it.

when i go to "Choose Recorder" it only gives me the option of 'Image Recorder - Virtual device' and i cannot choose anything else or de-select this.

if i go to autodetect cd-rom it only allows access to my E drive (dvd player) (the one i want is F). i checked that it is all installed properly as a slave drive (same as the one i was replacing).
also it won't give me the option of any test burns or a speed choice before burning.

basically how do i make it stop thinking that everything is image files!!
please help! this is driving me nuts!!
appriciate any input
cheers
--Marlye
 

More replies
Relevance 32.8%

I see this frequently enough that I am now wanting to know why.

I have set Acronis True Image to limit the maximum file size to 1.95 GB. This is to facilitate putting them onto a DVD later. I don't understand why, occasionally, a file in the middle or beginning of a set is smaller. In the below example, numbers 1 and 8 are much smaller than I would expect, especially #1.

Why is this?

Is this normal?

Sony Vaio VGN-CR320E #1 .tib 770,048
Sony Vaio VGN-CR320E #2 .tib 2,093,796,352
Sony Vaio VGN-CR320E #3 .tib 2,093,796,352
Sony Vaio VGN-CR320E #4 .tib 2,093,796,352
Sony Vaio VGN-CR320E #5 .tib 2,093,796,352
Sony Vaio VGN-CR320E #6 .tib 2,093,796,352
Sony Vaio VGN-CR320E #7 .tib 2,093,796,352
Sony Vaio VGN-CR320E #8 .tib 1,496,973,312
Sony Vaio VGN-CR320E #9 .tib 2,093,796,352
Sony Vaio VGN-CR320E #10.tib 2,093,796,352
Sony Vaio VGN-CR320E #11.tib 2,093,796,352
Sony Vaio VGN-CR320E #12.tib 1,287,579,136
 

Answer:Question about the image files Acronis True Image makes

Number 1 is the backup of the partition table (MBR). The others are just smaller because the backup ran out of data before making a full one. The second backup appears to be incremental.

If this is a single backup (which would mean maybe around 35 GB's of used space in XP), then I have no idea why 8 is smaller.
 

3 more replies
Relevance 32.8%

I have a Dell XPS 17 laptop that has dual drives - c & d. The c drive crashed and was replaced by dell. We are now trying to do a system image recovery from the d drive. We are following How to do a System Image Recovery in Window7 from seven forums.com http://www.sevenforums.com/tutorials/675-system-image-recovery.html
After Selecting the System Image from the D Drive (STEP TWO, # 5 and 6), the computer prompts to create a repair disk. The only way to move forward is to create or not create the disk. In either case, it then has you restart the machine, takes you through the process again.... Step 5/6.... Never gets to Step 7 to actually DO the System Recover!
What am I missing. We have been at this for over 2 weeks and any help would be much appreciated!

Answer:Windows Image Recovery-Can't move forward after selecting Sys Image

Are you booting off your Windows DVD? Or are you using the Windows Recovery Environment by hitting DEL or PF8 to pull up Windows Repair?

I would think the only time you are asked to create a repair disk is during the actual TAKING/creating of the System Image (after it is complete).

2 more replies
Relevance 32.8%

Hi,
When i bought my notebook a have made system image, but i broke my first DVD(they are 5) so i can't read it and i can't make the restore. On the notebook i have license key. Can i download another windows 7 and use my license key?
Thanks in advance!

Answer:Broken 1st image DVD Windows7 image.I have original genuine license?

Hello Antonio, and welcome to Seven Forums.

Yes, you could download a Windows 7 ISO for you edition, and use it to create a bootable DVD/USB to install and activate with your COA product key. The tutorial below can help guide you through it.

Clean Reinstall - Factory OEM Windows 7

Hope this helps,
Shawn

5 more replies
Relevance 32.8%

Anyone have any tips on why I am not able to upload an image directly to my WDS server through the Image Capture Wizard?  I can capture the image to the local hard drive, but when I try to connect to the WDS server to upload it, it takes about 5 minutes and then tells me that the network path cannot be found. 
 
I am able to use the wizard to create a .wim file which I can then upload manually, but I would much rather upload the image through the wizard and save myself an extra step. 

More replies
Relevance 32.8%

Can someone please help me with this :
When i right click on desktop I receive a many popup window telling me that Rundll.32 is a bad image and three files aren t a valid images:
msnchathooker.dll
msctfime.ime
desk.cpl

I am using AMD turion64x2 2GB memory and Windows XP SP2.
 

Answer:Rundll32.exe-bad image MSNCHATHOOK.DLL msctfime.ime desk.cpl not valid win image

Here is the hijackthis file :
I hope professionals could help, cause i can t change the setting in desktop even if I use control panel to access it :
thanks in advance!

------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 2:04:52 AM, on 6/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\WINDOWS\FerrariWallpaper\FerrariWP.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Program Files\Acer\VoIP Phone Charger\voip phone charger.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\ePower\ePower_D... Read more

2 more replies
Relevance 32.8%

Can someone please help me with this :

When i right click on desktop I receive a many popup window telling me that Rundll.32 is a bad image and three files aren t a valid images:
msnchathooker.dll
msctfime.ime
desk.cpl

I am using AMD turion64x2 2GB memory and Windows XP SP2.

--------------------------------------------------------------------------------
Here is the hijackthis file :
I hope professionals could help, cause i can t change the setting in desktop even if I use control panel to access it :
thanks in advance!

------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 2:04:52 AM, on 6/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C... Read more

More replies
Relevance 32.8%

I'm trying to restore an old HP pavilion Dv6 to factory state.  The recovery image on hard drive is not working.  I lost disc one of the three disc system recovery discs I made so there no good.  I tried recovery discs from another computer but computer says they are not for that computer and will not work.  I downloaded a new image to a usb drive.  When I try to use the usb image from HP it says system restore discs have already been created and makes me cancel the process.  Can I override or reset something so the USB image will work?  how can restore windows 7 with no discs and original D: messed up?

Answer:windows 7 restore to factory image... lost image discs

You can find a video which will show you how to use the System Recovery partition to return your computer to the condition it came out of the box.

1 more replies
Relevance 32.8%

I have read about 50 threads in regard to the topic. I'm just looking for clarity here. I have a homebuilt system that got a virus Alureon.gen!k. Before researching it I let windows fix it. Computer won't open any applications now.
Decided to go to my Image to save time (NOT!). The image is on a USB external HDD currently attached directly to the computer. I can't get it to find the bleepin' Image!

The HDD was attached to an NAS over the network where it saved my windows images and backup files from the NAS. The drive's structure looks like this:

E: R6 Backup
Office Server
Office WindowsImageBackup MediaID.bin Data Drive Backup Files

Inside the Office folder are three items: Office, WindowsImageBackup, and a MediaID.bin. The Office folder has file backups. The WindowsImageBackup contains the expected image folders and files.

I understand from the threads that the WindowsImageBackup needs to be in the root of E: so I have done this two ways, neither of whiched worked. First I simply renamed the Root Office folder, and then I undid the rename and moved the WindowsImageBackup out of the Office folder and into the root of E:.

Windows sees the drive. Within the recovery you have the option under advanced to load drivers. I was doing this trying to use eSata to no avail so I switched to USB where you c... Read more

Answer:System Image Not Found on External USB HDD with Image as Root Folder

I installed Acronis after seeing someone's post about converting the Windows Image file to an Acronis and just booting from that, but it is telling me it won't work and possibly the windows file is corrupted. Has anyone seen this or been able to fix a so called corrupted .img file?

9 more replies
Relevance 32.8%

I installed the 32 bit version of W10 on an old Acer laptop to get back up to speed with developments, and one of the first questions or issues that cropped up is when using W10's disk image utility to make a system image. I deliberately wished to place the image on a separate partition on the single HDD in use and W10 lists the partition as available but understandably doesn't recommend it because its on the same HDD as the OS. That said it still offers the location for use and allows the creation of the backup. All goes well until the last percentage point on the progress bar when it reports the following error saying the shadow copy is on another volume. If I check the actual location where I wanted the backup to be made (the partition on the main HDD) I find it is there, however, exiting and restarting the Disk Image utility then brings a message that no backups have been found. The backup file that is viewable in explorer is of the expected size (the free space is down by the expected amount) and so it appears to be 'real' but W10 can't see it.

Making a backup to plugged in USB drive has no such problem and is error free .

More replies
Relevance 32.39%

Hello everyone!

First I would like to say thank you all for your time. It really means a lot to me.

Anyway,
A few days ago, I downloaded malwarebytes (because I had that stupid "Scour" redirect virus thing) and ran a scan. Turns out I had 14 corrupt files, and deleted them all. Now today, I noticed an odd process in my processes after I found my computer running a tad bit slower than it normally would.

The task was pretty much just a really long string of numbers, that looked like this: 0.123894234239423894239045723. and on the side it said "InternetClient DLL". When I looked at the file location, it was located in my "Chris" (that's my name obviously) folder (my folder with all my documents and pictures and what-not, in the "Users" folder (obviously I'm a Windows user, Windows 7)).

Now I don't know much about computers, but is this a virus? Thank you for your time helping me! :)

Answer:Weird process in my process bar?

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined below. Use a USB flash drive to download and transfer the tools to the affected machine, if necessary. You might like to run the Flash_Disinfector.exe on the clean machine and the flash drive first to protect against any possible transfer of infection via USB.


NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 32.39%

How can I get the process name from Process ID in a BASIC script? (under WinXP)
 

More replies
Relevance 32.39%

I have the option for 'Show lock screen background picture on the sign-in screen' enabled, but every time I get to the sign-in screen the only image that is ever displayed is the default 'beach from inside a cave' picture. My current settings are that it will choose images as a slideshow from a specific folder which definitely does not have the beach picture in it, and it works just fine for the lock screen itself.

EDIT: I changed the lock-screen settings to only use a picture instead and it worked just fine, but now the lock screen only shows that image, not a slideshow, regardless of settings. Is having the sign-in screen as a slideshow even possible?

Answer:How to change sign-in screen image to an image of my choosing?

I think you can only have one picture. I tried it in my settings, but I don't see any option to have a slideshow.

1 more replies
Relevance 32.39%

Just thought I would share the solution I found to my problem mounting .iso images in Windows 8 Pro.

The very helpful error message I was getting was this:

and in powershell I got this:
Essentially the problem is that windows .iso mounting does not like 'sparse' files. I had used Acronis backup to backup my original .iso files and this DOES use sparse files. You can check if a file is 'sparsed' by looking at the files details in properties. The 'P' in the attributes represents a sparse file. See the screenshot below.

The result? When I restored my .iso images I could no longer mount them.

The simplest solution I have found is to just copy the .iso to a new file - this seems to create the new file without the sparse flag set.

Hope this helps somebody!

Answer:Windows 8 refuses to mount .iso image because image is 'sparse'

For anyone that is curious.. Sparse files are files that have "reserved" space in them that is not technically part of the data. An application can create a sparse file so that it leaves room to expand it in the middle without having to recopy all the data. I can understand why Acronis would do this for a backup image.

Shouldn't Acronis also have a file viewer?

3 more replies
Relevance 32.39%

Hi Chris here from way down here in NZ.Came across this site with the search for the above (same problem as others here) and saw some positive replies and practical help on this issue so - signed up. ; )We have a kids PC that is using a fresh install of WinXP and have been dealing with some issues of the 'updates' et unsettling the system and making the installed games nonoperational... This week the system on "Log in selection" shows the 'Bad Image Error for Explorer.exe' and then sometimes the Browseui.dll error??So when clicking to close this and startup - we now get the desktop showing nil icons, no toolbars etc, however, did get the task manager to startup and were able to select Firefox to install Avira Antivirus files but - failed to run for some reason? I have seen several here that have had similar "error messages" of the "Bad Image" type and - so here I am - stuck with this too and with some unhappy Teens!  I have installed already the program "Highjack This" and have not done any 'delete this on nothing at this stage - however I'm typing this on my Linux system as my email is functional there and dont use the XP for any.Tia

Answer:Yet another "Bad Image - Not a valid Windows image. Malware??

Hi there!Follow instructions here and post back logs please: http://www.computerhope.com/forum/index.php/topic,46313.0.html

12 more replies
Relevance 32.39%

Hi! I apologize in advance if this is in the wrong forum and if a thread on this subject already exists, I just couldn't think of any other place to put it.

I got Windows 8 and it's working pretty much perfect after I fixed a few issues. But there's an interesting thing happening, and I don't know if it's a 'feature' or something I can correct. When I go into one of my image folders and right click on one of my pictures to set it ask my desktop background, it will work, but then the image folder will scroll all the way all the way back up to the top, and it does this every single time.

This is kind of annoying, and I'm not sure why it does this... is there anything I can do about it, or am I missing something obvious?

Thanks!

More replies
Relevance 32.39%

I ordered a u310 that has 500gbHDD and 32gbSSD, still in transit.  In the past, I usually backup any new drive image with AcronisTrueImage2012 before turning the computer on for the first time, so I don't know if it will be a problem with this u310 when it arrives.  Does the u310 have the 32gb SSD in a RAID configuration?  Would the acronis true image be able to backup just the 500gb HDD? If I have any problems with the computer in a few months, I'd like to restore it to its factory state, and the easiest way has always been to boot acronis from usb and just restore the image.  If I can backup only the 500GB, can restoring only the 500gb work, or would I have to figure in the 32gb SSD into the equation somehow? never had to deal with "hybrid drive" before, so all this is new to me.  Thanks for any answers.

More replies
Relevance 32.39%

When my 950 displays a Living Image (does anybody really like this feature?), the lighting in the video portion appears ok, but the finished still image is not lit the same (always darker, on my phone).
Is there any way to fix this for future pictures? Any way to fix it for images already taken? (Adjust lighting wand only seems to work on the video portion.)
Thanks.

More replies
Relevance 32.39%

Hi,
Problem has just came on today out of nowhere...
It's an old HP desktop PC, 1gb ram, Windows XP SP 2

AVG doesn't find anything and malwarebytes only found a little adware.

It's my otherhalfs parents PC who have been away so i've been using it to check his emails/run his business. PC was fine yesterday but on turning it on today I was greeted by the dialog box saying - "the application or dll is not a valid windows image. please check this against your installation diskette"

This happens with each program I open, it happens on the windows start up screen a couple of times when selecting which user to log in as, then comes up alot when the PC has started up

I've posted some logs below if they make sense to anyone?


*****

MalwareBytes Log:

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Database version: 5214

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

03/12/2010 23:10:14
mbam-log-2010-12-03 (23-10-14).txt

Scan type: Quick scan
Objects scanned: 176282
Time elapsed: 2 hour(s), 6 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 18
Files Infected: 34

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detecte... Read more

Answer:"Bad image" keeps coming up over + over - the application or dll is not a valid windows image

I've noticed in msconfig that there is 2 odd looking entries, If I uncheck them and restart, when I go back into msconfig they are back again and checked

'Start Item' and 'Command' heading = load of oriental characters
(2 lines with 2 squares, 2 lines with 6 squares, Start + Command are the same on each line)
Under 'Location' heading;
HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\Windows:Run
HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\Windows:Load

1 more replies
Relevance 32.39%

Hello All, I am looking for someone who can help me with imaging ThinkCentre M710q: 1. I have created a Windows image to USB Hard Drive from Backup and Restore and also created a system repair disc via DVD disk.2. I have booted up using F12 and selecting to boot CD/DVD USB where the system repair disc is.3. From there when I go to select recover system image and I have an image on the external hard drive but it does not see it. The question is...is there a way I can get image on M710qs or am I missing something in the BIOS settings?Please let me know, thanks for your help.

More replies