joyful
Topic Starter
GREETINGS!
I have created two topics on this board before, one of the topics was in this folder and dealt with DCOM server issues. (Thanks, catbyte!) Fixed that problem and everything seemed to run fine for a good 2 weeks. Then I noticed when I clicked on known links, I would be directed to advertising pages and I would have to click the back button to acutally see the page I was intending to go to. This lasted for 3 days before my computer just totally stop functioning.
So I decided to restart my computer. BIG MISTAKE! I havent seen my destop since the fatal restart yesterday. I would get to the blue welcome screen without the icons to click to access my account and the computer would freeze. Well I googled my life away and found out that I should do a "manual steps to recover a corrupted registry that prevents Windows XP from starting". The steps seemed easy… Well when I finished the steps microsoft suggested, I got the error that "windows cannot start becuase missing config/system file".
After googling some more, I attemped a system repair, but my comp wouldnt allow it and only had some options about a partioned drive blah blah. So I just install a second copy of XP in a different directory. So I have C:\windows and c:\winxp. I can get c:\winxp to load. After copying the config\system file from 'winxp' to my 'windows' I got the 'windows' to attempt to load.
So I then ran a windows repair on the 'windows' version becuase it finally recongized the 'window' copy of the operating system. Repair was done and i figured I was on my way to surfing the net again!!
If only I was so lucky, when I start 'windows' I get the lsass.exe system error which states, "when trying to update a password the return status indicates the…" and the computer cycles between restarting and showing that error message.
So I just ran the 'winxp' version and did a AVG and malware scan. Comes back clean.
(Even when I have it specifically scan the c:\windows folder)
I have no clue what to do now. I am very close to just driving to best buy and getting another computer. (I am in school and a computer is very necessary.)
Any help is very appreciated. Sorry for the long 'windedness'.
p.s. I really really really dont want to wipe my drive clean since i really really need my files that are in 'windows'. This is a perfect example why you make backups of your files, which I haven't. If I can salvage my drive I PROMISE I will buy an external hardrive and backup EVERYTHING! 
-Still Joyful
Hijack is below (this is from the winxp not the windows, don't know if that makes a difference)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:34:56 AM, on 7/1/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\Explorer.EXE
C:\WINXP\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINXP\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINXP\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINXP\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\My Downloads\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINXP\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
–
End of file - 2076 bytes
I have created two topics on this board before, one of the topics was in this folder and dealt with DCOM server issues. (Thanks, catbyte!) Fixed that problem and everything seemed to run fine for a good 2 weeks. Then I noticed when I clicked on known links, I would be directed to advertising pages and I would have to click the back button to acutally see the page I was intending to go to. This lasted for 3 days before my computer just totally stop functioning.
So I decided to restart my computer. BIG MISTAKE! I havent seen my destop since the fatal restart yesterday. I would get to the blue welcome screen without the icons to click to access my account and the computer would freeze. Well I googled my life away and found out that I should do a "manual steps to recover a corrupted registry that prevents Windows XP from starting". The steps seemed easy… Well when I finished the steps microsoft suggested, I got the error that "windows cannot start becuase missing config/system file".
After googling some more, I attemped a system repair, but my comp wouldnt allow it and only had some options about a partioned drive blah blah. So I just install a second copy of XP in a different directory. So I have C:\windows and c:\winxp. I can get c:\winxp to load. After copying the config\system file from 'winxp' to my 'windows' I got the 'windows' to attempt to load.
So I then ran a windows repair on the 'windows' version becuase it finally recongized the 'window' copy of the operating system. Repair was done and i figured I was on my way to surfing the net again!!
If only I was so lucky, when I start 'windows' I get the lsass.exe system error which states, "when trying to update a password the return status indicates the…" and the computer cycles between restarting and showing that error message.
So I just ran the 'winxp' version and did a AVG and malware scan. Comes back clean.
(Even when I have it specifically scan the c:\windows folder)
I have no clue what to do now. I am very close to just driving to best buy and getting another computer. (I am in school and a computer is very necessary.)
Any help is very appreciated. Sorry for the long 'windedness'.
p.s. I really really really dont want to wipe my drive clean since i really really need my files that are in 'windows'. This is a perfect example why you make backups of your files, which I haven't. If I can salvage my drive I PROMISE I will buy an external hardrive and backup EVERYTHING!
-Still Joyful
Hijack is below (this is from the winxp not the windows, don't know if that makes a difference)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:34:56 AM, on 7/1/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\Explorer.EXE
C:\WINXP\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINXP\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINXP\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINXP\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\My Downloads\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINXP\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
–
End of file - 2076 bytes
