IE and avast problems

susieb

DS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 13/01/2012 14:24:19
System Uptime: 08/03/2012 06:35:43 (2 hours ago)
.
Motherboard: Dell Inc. | | 0G848F
Processor: Intel(R) Celeron(R) CPU 900 @ 2.20GHz | Microprocessor | 2194/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 138 GiB total, 105.569 GiB free.
is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP30: 16/02/2012 08:00:36 - Windows Update
RP31: 21/02/2012 06:44:06 - Windows Update
RP32: 24/02/2012 07:23:40 - Windows Update
RP33: 28/02/2012 06:08:05 - Windows Update
RP34: 02/03/2012 07:17:46 - Windows Update
RP35: 06/03/2012 10:28:55 - Windows Update
RP25: 07/03/2012 17:37:57 - Windows Update
RP26: 07/03/2012 18:03:21 - Windows Update
RP27: 07/03/2012 20:32:55 - Installed Microsoft Fix it 50195
.
==== Installed Programs ======================
.
Adobe Reader X (10.1.2) MUI
Adobe Shockwave Player 11.6
Bing Bar
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dell DataSafe Local Backup
Dell DataSafe Local Backup - Support Software
Google Earth
Google Update Helper
Java Auto Updater
Java(TM) 6 Update 30
Junk Mail filter update
Mesh Runtime
Messenger Companion
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Word MUI (English) 2010
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Mozilla Firefox 10.0.2 (x86 en-GB)
MSVCRT
MSVCRT_amd64
Roxio Burn
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)
Security Update for Microsoft Visio Viewer 2010 (KB2597170) 32-Bit Edition
Skype Click to Call
Skype™ 5.5
swMSM
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition
Update for Microsoft Outlook Social Connector (KB2583935)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
.
==== Event Viewer Messages From Past Week ========
.
08/03/2012 06:12:43, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.
08/03/2012 06:09:42, Error: Microsoft-Windows-Kernel-Processor-Power [35] - Performance power management features on processor 0 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
07/03/2012 20:17:17, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
07/03/2012 20:14:49, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
07/03/2012 20:14:47, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
07/03/2012 20:14:47, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
07/03/2012 20:14:47, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
07/03/2012 20:14:46, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
07/03/2012 20:14:31, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
07/03/2012 20:14:25, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
07/03/2012 20:14:05, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD aswRdr aswSnx aswSP aswTdi DfsC discache MpFilter NetBIOS NetBT nsiproxy Psched rdbss spldr tdx vwififlt Wanarpv6 WfpLwf
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
07/03/2012 20:14:01, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
07/03/2012 20:08:52, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
07/03/2012 20:04:05, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
07/03/2012 17:32:53, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000074 (0x0000000000000002, 0xfffff880030edae0, 0x0000000000000002, 0xffffffffc000014c). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 030712-31059-01.
07/03/2012 17:24:29, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
07/03/2012 17:23:59, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wlidsvc service.
07/03/2012 17:21:47, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Browser service.
07/03/2012 17:21:47, Error: Service Control Manager [7000] - The Computer Browser service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
07/03/2012 14:08:22, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.
.
==== End Of File ===========================

susieb

Thanks for looking at this for me, I do appreciate it

waddler_8

No problem.

There's not a lot there that gives too much cause for concern - A bug check that shows possible registry corruption being responsible for a crash yesterday....

Did things not improve after running the MS fixit to reset IE? (That will have disabled Avasts web rep toolbar along with any other add-ons)


Download this and save it to your desktop.

http://public.avast.com/~gmerek/aswMBR.exe

When you've downloaded it - it should take 1-2 mins to run.

• Double click aswMBR.exe to run it.
  
• Click No the prompt to use Avast virus definitions.
  
• Click the Scan button.
  
  
• When the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
• Click OK when prompted. aswMBR.txt & MBR.dat will be appear on your desktop.
• Click EXIT.
• Copy & paste the contents of aswMBR.txt & post it here.

Don't click to fix anything, just post the log.

susieb

Hi, no nothing improved after running MS fix it, its strange as it will load some pages OK, guess they might be cached pages? but then just locks up totally. Anyhow here is the log from running the above, thanks
aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-03-08 18:39:23

---

18:39:23.144 OS Version: Windows x64 6.1.7601 Service Pack 1
18:39:23.144 Number of processors: 1 586 0x170A
18:39:23.144 ComputerName: SUEHELLARD-PC UserName: Sue Hellard
18:39:23.644 Initialize success
18:39:52.123 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
18:39:52.139 Disk 0 Vendor: WDC_WD16 01.0 Size: 152627MB BusType: 3
18:39:52.139 Disk 0 MBR read successfully
18:39:52.154 Disk 0 MBR scan
18:39:52.154 Disk 0 Windows VISTA default MBR code
18:39:52.154 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 807 MB offset 63
18:39:52.170 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 10942 MB offset 1654784
18:39:52.186 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 140876 MB offset 24064000
18:39:52.201 Disk 0 scanning C:\Windows\system32\drivers
18:39:57.006 Service scanning
18:40:10.188 Service MpNWMon C:\Windows\system32\DRIVERS\MpNWMon.sys **LOCKED** 32
18:40:28.658 Modules scanning
18:40:28.658 Disk 0 trace - called modules:
18:40:28.690 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys
18:40:29.204 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80026f6400]
18:40:29.204 3 CLASSPNP.SYS[fffff88001bd143f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800225c050]
18:40:29.204 Scan finished successfully
18:40:53.681 Disk 0 MBR has been saved successfully to "C:\Users\Sue Hellard\Desktop\MBR.dat"
18:40:53.696 The log file has been saved successfully to "C:\Users\Sue Hellard\Desktop\aswMBR.txt"

waddler_8

Does it load this site (MSE) OK? Does it freeze at all using this site?

susieb

Freezes on this site - I am fine with firefox on here

waddler_8

From a malware perspective I don't see anything wrong - Browsing problems after AV's have been mysteriously turned off are always worthwhile investigating.

Looking at when you installed MSE, the problem was prior to that and after the problem with Avast?

2012-03-07 19:36:53

---

d

---

w- C:\Program Files (x86)\Microsoft Security Client

Was the problem with Avast before - or after - this?

07/03/2012 17:32:53, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000074 (0x0000000000000002, 0xfffff880030edae0, 0x0000000000000002, 0xffffffffc000014c)

It looks like there was a windows update directly after re-starting from that crash.

==== System Restore Points ===================
.
RP30: 16/02/2012 08:00:36 - Windows Update
RP31: 21/02/2012 06:44:06 - Windows Update
RP32: 24/02/2012 07:23:40 - Windows Update
RP33: 28/02/2012 06:08:05 - Windows Update
RP34: 02/03/2012 07:17:46 - Windows Update
RP35: 06/03/2012 10:28:55 - Windows Update
RP25: 07/03/2012 17:37:57 - Windows Update
RP26: 07/03/2012 18:03:21 - Windows Update
RP27: 07/03/2012 20:32:55 - Installed Microsoft Fix it 50195

Unrelated, & I doubt it will solve any problems but needs doing to keep the browser secure, uninstall these and reinstall the latest version of Java.

Java Auto Updater
Java(TM) 6 Update 30

http://java.com/en/download/index.jsp

susieb

I turned it off at about 2.30pm and it was fine, when I turned it back on around 5.30 i got a message saying my pc wasnt secure, I checked avast and it was turned off, tried to turn it on but got a message that it couldnt turn on. Everything seemed to lock up so I pulled the plug, it then started up and gave me a message that it hadnt been shut down correctly. It wouldnt load windows so I pressed the power button and started it in safe mode, which loaded OK and ran a chkdsk, which I remember said something about some space that was empty but had been recorded as allocated.
I then deleted avast with the removal tool and added MSE, plus ran an online virus checker which was clear. Downloaded firefox and realised that was fine but IE still stalling. Tried the ms fix it to reset, but no difference.
I think thats all I have done, I have no idea why avast turned off in the first place which is worrying.

Does the status locked in the above log mean anything?

closed

This should take less than an hour assuming you have blank dvd's and a means of backup (external hard disk or dvds) - backup your data, check you can read your backup, burn a windows disc (dvd) using dell data safe, factory restore it using the restore partition (see the manual), copy data back, reinstall avast or mse, run windows update

waddler_8

susieb wrote: »

Does the status locked in the above log mean anything?

No, that's ok - it's MSE's network monitor.