Posts by chipstone

Svchost.exe is utilized by many applications duding windows boot-up with different load parameters.

One of the best things to do is a registry search for all the entries associated with svchost.exe. Most of the entries should be native Windows applications using the program. If you see an entry that svchost.exe is being called upon, and you cannot identify: The original application that created the entry was removed but the registry key exist; that will trigger an error message.

Then svchost.exe will execute an error due to the missing application parameter it was called upon to modify, or load and no longer exist.

I am willing to bet that a Norton System Works registry key exist, and with a svchost.exe parameter present; delete the entry, or entire registry key, and re-boot and see if this sis the culprit.

Always backup, or export the registry key you will be deleting, in case you need it back.

JR

Can you use other browsers with AOL service, like FireFox? And see if you can access the secure sites:

Were you accessing a “Trusted Site” or “Restricted Site”?

Or does AOL offers a “Secure Sites” option on their IE browser?

From your description, of not being able to update to spyware files, it seem like you were infected by a virus, one that most likely targeted, deleted or modified critical registry keys. It may have started if you accepted a certificate when accessing a secure site, or may have bypassed you spyware applications.

You have a boat-load of applications that are resident with open ports. Any one cold have been the conduit for a rouge virus that entered your system, did the damage, and deleted itself.

I have re-installed Windows XP for my nephews’ computer several times with corrupted registry and applications.

They used AOL then. Now they converted to a direct DSL provider, I have installed NOD32 antivirus and Acronis Malware configured to alert the user before any registry modifications is called upon, and the users must accept or deny the change. A great line of defense that has proven to be the best combination so far.

If you do not have a backup/snapshot of your system, prior to the problems, it may be very difficult to determine what was altered.

I personally make a daily mirror image of my system with Acronis True Image; I have also looked at all …

I am not sure of the Network cards you have installed, or the DSL carrier & speed limits.

Also, I am not sure the amount of memory you have installed but you have a lot of resident programs that are not critical to load into memory, for proper Windows stability of DSL requirements.

They are usually installed by default by the application, and you may not even are aware of or utilizing these resident load programs; they can be easily be called upon via a manual process: They are memory hogs, and can potentially slow down or interfere with some DSL configurations:

I am also not familiar with your boot-setup; they seem to be geared for a laptop:

You may want to revisit these Windows start-up programs and determine the ones that you really need, or are actually using, and the ones you can manually call for their functionality:

C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TFNF5.exe
C:\WINDOWS\system32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\HTTP-Tunnel\HTTP-TunnelClient.exe

O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 …

The cloning process will utilize the entire size of the new drive. In other words if your c: drive total capacity is 40GB and the drive you want to clone to is 160GB the process will format and utilize the entire 160GB and clone the files from the C: drive. This process keeps intact all the partition markers that the operating system requires in case you need to swap the C: drive with the Clone drive.

If you try to then partition the clone drive into various logical drives you may loose the clone integrity, for boot-up process. This is controlled by hidden files created by Windows on the master boot sector of the primary boot drive. Restructuring the aggregate capacity of the clone dive can have unexpected results if you ever need to use it as a backup source in case of C: drive failure.

Also if you need to update the clone drive in the near future, due to changes in your C: drive the clone process will override any data and create a exact duplicate of the clone, and not retain any additional partitions you may have created.

A clone is a snapshot of your primary boot drive at a given time interval.

I use Acronis True Image software to make clones of my drives. I found the interface and application more reliable than Norton Ghost, and Partition Magic.

However, I did clone of my C: drive for added security; it also contains a “special partition. This partition, in C: drive, is formatted as 8MB FAT and stores system, and diagnostic programs accessible during boot-up. I purchased a Dell and it was preconfigured with this dual partition arrangement: FAT/NTFS

However, I did a C: drive upgrade: from 146GB SCSI to 300GB SCSI. I created a clone from 146GB to my new 300GB SCSI drive, the clone created the 8MB partition in the new drive, but not as a fixed 8MB partition but exponential to the new drive size; in my case it created a 160MB FAT partition to hold less than 8MB of data.

I was not able to resize the partition back to 8MB, and eventually decided to delete the “special diagnostic partition and clone the drive without it: I am petty savvy on system problems and don’t require a tutorial diagnostic tour. There are other tools and disk that you can use if the ‘diagnostic partition is not there.

That procedure will also work if you change boot order in BIOS, boot from the Windows CD and install from there.

All you need do is ensure that you choose the partition to install the new Windows installation to, and the multi-boot menu will be created automatically as part of the installation.

Note, however, that this will only occur if you install anither instance of XP. If Win 98 is the other version wanted it should be installed on the system first, and then XP added later.

I believe you suggestion was encapsulated in response # 2.

Most, if not all new computer system allows to select the boot sequence via a hot-key; usually F12 without the need to rearrange the BIOS boot order.

You must have another function key in order to boot-up from the CD-ROM in my Dell Workstation is F2 (to enter Bios) and F12 (To access CD-ROM) check your manual or during boot-up and see if the screen.

You must have the option, otherwise how can you get into Bios or how did you install the first Windows on C:

Let me know, if not, there is another way you can install a dual Windows XP from within Windows:

To start a second Windows install from Windows without the F12 boot-sequence:

Insert the Windows CD in the CD-ROM from the desktop. The CD will autorun, else go to My Computer, the CD-ROM drive and double click on the "SETUP.EXE" file. The install will begin.

The "WELCOME" screen will appear first, select "INSTALL WINDOWS XP" by clicking on it with the mouse. Windows will now gather some information from your computer.

Now you will be asked which type of install you want. Select "NEW INSTALLATION", click on "NEXT" to continue.

Now the License Agreement, read it and click on "I ACCEPT" and click on "NEXT" to continue.

Now it is time for your product key. The product key will be on the packaging that XP was supplied with. It is 25 digits long. Some OEM computers will have a sticker on the side or back with your product key. Input the key and press "NEXT".

Now the Setup Options: Click on Advance …

Most computer systems allow you to select an alternate boot drive (F12). This is usually done when you want to boot from the CD-ROM; to install the operating system.

If you are going to install a second copy of the Windows XP operating systems on the slave drive, all you need to do is place the Windows XP on the CD-ROM drive, during boot up press F12 the system will prompt you to select from a list of devices, select the CD-ROM and proceed to install.

When prompted to install in the hard drive the installation program will look for a previous Windows XP installation; the one you have on C: and will ask you if you want to repair the installation, press ESC key and then select from the list of the two drives: F: drive as the disk you want to install the operating system.

The program will ask you if you want to format the drive; for a clean installation, select quick format, and proceed with the installation. Make sure you don’t have data that you require on the drive; you will loose it when the quick format is completed.

Once is completed the program will create a boot file with two identical Windows XP entries, the first entry will be your last installation, and the second will be your C: drive. You can change the default operating system C: or F: via the control panel System Icon, Advance Tab, Settings. There you …

EMC firmware drives are usually formatted in 520 sectors and not recognized by Windows/Linux operating systems since they will only read drives formatted into 512 sectors.

That may me your case, and if you are using a Windows operating system, you can download Seagate’s Sea Tools (Enterprise Version) from the Seagate’s Website.

Once installed it will scan the SCSI drives installed in your system and if the ST336704LCV is active you will see it with the Seagate utility even though you can’t see it with disk manager. You can then use the advance tab and the application will allow you to reformat the drive back into 512 sectors, once completed you may need to re-boot and the drive should appear on the disk manager, format and assigned a drive letter.

I believe the Linux operating systems have a similar command to reformat back to 512 sectors, although I am not very familiar with Linux.

Five months ago I was able to acquire four Maxtor’s 300GB 10K drives; retail and at a great price. The drive perform phenomenal, not one problem since the purchase, and I had to run them 24/7 for a few day on a SQL database project.

The drive sticker is pure Maxtor, and the casing is the most futuristic design from the three major brands. The casing looks like is made from titanium.

However the drives temperature is a big issue. I have the drives in an external enclosure that is designed to cool 15K drives, but the Maxtor idle temperature was around 42C and during extensive use the temperature jumped to 50C; with forced air ventilation, it generates way too much heat for a 10K drive. I am trying to find a larger air blower for the enclosure.

I decided to purchase the Fujitsu 300GB MAT3300NC and installed it in the same enclosure, the drive performance is a good as the Maxtor, better in some situations, and the temperature, even at high usage remains around 39C; better that the Maxtor at idle!!

I am now purchasing Fujitsu’s 300GB, I’ve never had a problem with the brand and they operate at the coolest temperature of any SCSI drive I’ve ever purchased.

Also be careful with the drives being offered on EBay. There is a large amount of units being sold and they are labeled ‘evaluation units with “testing firmware being sold as OEM. Make sure you …

Go to the Control Panel under the “System icon “Advanced Option “System Startup Setting the top part indicated the default operating system you want the system to boot-up to.

Since you created two duplicate Operating Systems on two drives you have the same description for both drives. Click “Edit you will see both operating system entries with the same description: WINDOWS="Microsoft Windows XP Professional", the 1 entry is for access to C:\ drive and the second is for your kids drive. Just rename one of the two entries to distinguish them i.e. WINDOWS="Microsoft Windows XP Dad"
WINDOWS="Microsoft Windows XP Kids"

The close the windows and accept changes, again the above is optional, and then select either the first or second entry to be the boot up operating system. You would probably want to use WINDOWS="Microsoft Windows XP Kids" as the default operating system.

As far as preventing access to your primary drive by the kids, you need to go to the C:\ drive right click and under properties you will need to establish control on who has access to that drive. If your logon name is part of the Administrator Group, then under the “Users profile; the one you created for your kids, you can deny or allow access to some or all the functions on C:\ drive.

Remember in order for the above to work you must have the operating system enabled to only be accessed via User Name and Password. Only then will …