Hi guys … i was recently given a system to use, if cleaned up, and have run into a few issues that i'm hoping you can help resolve. This is an older Compaq Presario system with the following:
HD: 40G ~ Ram: 512 ~ 1.53Ghz AMD Athlon processor ~ XPHome ~ SP3 ~ IE8 ~ fully updated.
Issues:
Boot normal presents error notice: nview.dll ~~ proceeds to desktop with seemingly full operations
for about 15-30 minutes, then system freezes, both keyboard/mouse dysfunctional. Seems to freeze regardless of active process. Task Mgr unaccessible, shut down via power button required.
*** error notice provided: RUNDLL error: The specified module could not be found. Error loading nview.dll ***
Note: This is currently a single view system and i'm not convinced this dll is even necessary.
Boot in Safe w/Networking seems to function without freeze or delay.
No infections, malware, spyware identified.
CCleaner registry analyzer ran and identified multiple 'problems', some listed below. NO action was taken, just evaluated. am not skilled enough to alter registry entries without guidance.
Ran with all hidden files visible:
System Defrag
CCleaner
ATF Cleaner
Malwarebytes
Zone Alarm - 'super scan' ~ all files & folders + root kit
Kaspersky Online Scanner 7.0
All fresh updated prior to running - all negative findings
After finding no spyware/malware issues, i ran CCleaners' registry analyzer just to see what it reports and to my surprise … quite a number of 'problems' were listed. Here's a sample (transcribed) of that report. I believe several things should be corrected but am not sure where to begin.
CCleaner Registry Analyzer: the following were all checked as 'problems'
Missing/Shared DLL
C:\Windows\DownloadedProgramFiles\sysreqlab2.dll
C:\Windows\DownloadedProgramFiles\popcaploader.dll
C:\Windows\DownloadedProgramFiles\gp.ocx
C:\Windows\System32\ZoneLabs\isafeif.dll
C:\Windows\System32\ZoneLabs\vetredir.dll
C:\Windows\System32\atl71.dll
C:\ProgramFiles\CommonFiles\LogiShrd\KAudP\FltrInst.exe
C:\ProgramFiles\CommonFiles\LogiShrd\LComMgr\DevMngr.dll
C:\ProgramFiles\CommonFiles\LogiShrd\MV\fltrinst.exe
C:\ProgramFiles\CommonFiles\LogiShrd\SrvLnch\SrvLnch.exe
C:\ProgramFiles\CommonFiles\LogiShrd\LVMVFM\fltrinst.exe
C:\ProgramFiles\CommonFiles\LogiShrd\UMVPLChainUpdater.exe
UNUSED File Extensions
.ADE .PCD .lavs .pdf .rm .rsml
.ADP .ppi .lmsff .pf .rmj .rt
.BAS .RAR .lqt .pls .rmm .rv
.DBX .VB .m4e .r3t .rmp .sdp
.MDA .mnd .ra .rms .smi SysmonLogManager.Snapin
.MDE WMPCD .mns .ram .rmvb .smil
.MDZ .acp .mp1 .rec .rmx .ssm
.MST .la1 .mp4 .rjs .rnx .vpg
.NCH .lar .mpga .rjt .rp .xpl
Invalid Default Icon C:\windows\System32\CMMGR32.EXE,1
Open with Application C:\windows\System32\CMMGR32.EXE "%1"
Open with Application C:\windows\System32\CMMGR32.EXE/settings"%1"
Open with Application "C:\ProgramFiles\CompuServe7.0\cs.exe" -u"%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe" "%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe" "%1"
Invalid Default Icon %SystemRoot%\system32\ntbackup.exe,10
Open with Application %SystemRoot%\system32\ntbackup.exe
Invalid Default Icon %SystemRoot%\system32\msppcnfg.exe,1
Open with Application %SystemRoot%\system32\msppcnfg.exe/Config%1
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe "%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe "%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe "%1"
Invalid Default Icon C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe,1
Open with Application "C:\ProgramFiles\Real\RealOnePlayer\RealPlay.exe""%1"
Invalid Default Icon "C:\ProgramFiles\SecondLife\SecondLife.exe"
Open with Application "C:\ProgramFiles\SecondLife\SecondLife.exe" -setSystemLanguage e…
Invalid Default Icon %SystemRoot%\system32\appmgr.dll,-218
Active X/COM Issue InProcServer32\C:\ProgramFiles\ZoneAlarmSB\bar\1.bin\Z4POPBLK.DLL
InProcServer32\C:\PROGRA~1\ArcSoft\Showbiz\1pcmdec.ax
InProcServer32\C:\WINDOWS\System32\plugin.ocx
InProcServer32\C:\ProgramFiles\Verizon\VerizonInternetSecuritySuite
InProcServer32\C:\WINDOWS\system32\LVUI2.dll
InProcServer32\C:\WINDOWS\system32\LVUI2.dll
InProcServer32\C:\PROGRA~1\ArcSoft\ShowBiz\MPEGWriter.ax
InProcServer32\C:\WINDOWS\system32\LVUI2.dll
InProcServer32\C:\PROGRA~1\AMERIC~1.0\media\PATHFI~1.DLL
InProcServer32\C:\%SystemRoot%\system32\eapa3hst.dll
InProcServer32\C:\PROGRA~1\AMERIC~1.0\media\phobos.dll
InProcServer32\C:\PROGRA~1\AMERIC~1.0\media\g2p.dll
InProcServer32\C:\PROGRA~1\AMERIC~1.0\media\CDDBCD~1.DLL
*** —-> repeat above entry 23 times ***
InProcServer32\C:\PROGRA~1\AMERIC~1.0\CTABRI~1.DLL
InProcServer32\C:\ProgramFiles\ZoneAlarmSB\bar\1.bin\Z4SPYBLK.DLL
InProcServer32\C:\PROGRA~1\Yahoo!\MESSEN~1\ycrwin32.dll
LocalServer32\C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
LocalServer32\C:\PROGRA~1\Sonic\MyDVD\MyDVD.exe -autoplay
InProcServer32\C:\HP\KBD\RUNCLOSE.OCX
LocalServer32\c:\DOCUME~1\ALLUSE~1\APPLIC~1\54ea435\PC54ea.exe
InProcServer32\C:\Program Files\Yahoo!\Messenger\asw.dll
InProcServer32\C:\WINDOWS\system32\LVUI2.dll
InProcServer32\C:\WINDOWS\system32\LVUI2.dll
InProcServer32\C:\WINDOWS\system32\LVUI2.dll
Obsolete Software
GTek
lameme
Linden Research, Inc
RtlWake
RtWLanP
**** Please note, this is not the complete list. No actions or adjustments of any kind made. am noticing many extensions are for soft/hardware no longer affiliated with this machine and would be happy to eliminate unnecessary items.
After surfing in safe mode, MalwareBytes was run again and quarantined the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ImageFileExecutionOptions\brastk.exe (Security.Hijack) – successfully deleted, however, this is a repeat offender within the last 2 weeks..
I have downloaded/run the program 'FileCure' (suggested on one of your pgs) - it suggested downloading '7zip' and i did but it has not been installed or run, yet. No suggested fixes were applied in FileCure because i am not sure where to begin.
Any assistance or guidance would be greatly appreciated. Thank you in advance for your time and attention.
Erin
nview.dll belongs to nVidia, your video card.
Boot to the Windows Advanced Options menu (sometimes called the Safe Mode menu) by pressing F8 during boot.
Select Enable VGA Mode:
Once booted, open Device Manager and expand Display Adapter.
Right click on the nVidia adapter shown and select Uninstall.
Reboot normally and let XP rediscover the nVidia device and reload the drivers.
If that doesn't fix it, download the latest nVidia driver for your computer, either form the computer manufacturers web site or the nVidia web site and install it.
If you post the model number of the Compaq Presario I or someone else here can help you locate the latest driver. It would also help if you posted th4e PCI/VEN info for your video device from Device Manager.
Open Device Manager and expand Display Adapter.
Double click on the nVidia adapter show.
Click on the Details tab.
In the Property drop down, select Hardware Ids
Copy and paste the PCI\VEN information here (you can right click on each and select Copy I believe).
If necessary we can use that to search on.
First, scan your hard drive for nview.dll. If it's still there then there is some residue left over from when you had a nVidia display adapter.
I don't like CCleaner's registry tools. I think they are way to aggressive. I prefer to use RegSeeker's "Clean The Registry". Once it finishes, click on Select at the bottom and choose Select all Green items. This only deletes entries for files or folders that no longer exist. I've used it for a long time and never had it cause me any grief. Additionally, it will make a backup of anything it's going to delete.
**PC54ea.exe (no idea)
**plugin.ocx (there is one on the XP CD so could be part of XP)
I would not mess with anything in the winsxs folder. See here: xp winsxs folder
**WINDOWS\winsxs\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_6a201697
**WINDOWS\winsxs\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.363_x-ww_c9ba3671
**msppcnfg.exe,1 (Passport Manager Admin - part of Windows OS)
**ntbackup.exe,10 (Google is your friend)
**MyDVD.exe (Part of Sonic RecordNow)
ok, ERUNT successfully installed and ran … nothing done with NTREGOPT - you don't recommend using this optimizer, do you?
REGSEEKER successfully installed but not yet run as of this posting.
Ran searches again for nview.dll, nvidia, nvid, and nvie. The last 2 abbreviated generated many results but none were the dll or software indicated. At this point, i'm wondering what is looking for the dll. Surprisingly, the RUNDLL error regarding nview.dll does Not appear when booting in safe mode.
i must have typed ntbackup wrong cause i didn't get the info u did … thank you.
agreed regarding plugin.ocx, winsxs, msppcnfg & ntbackup … didn't think messing with any
of them would be advisable.
ok, question regarding RegSeeker: once the process is finished … i presume a re-boot is necessary. Since this system does not have Recovery Console currently installed, would it be wise to do so, first? The installation cd is 2002 and RC isn't included. Previously, it was installed from Microsoft support.
will await your response Before running RegSeeker … to prevent unnecessary mishap.
Sorry for the late response. My cable modem died. The tech just left after replacing it.
There is no need to install the Recovery Console unless you want to. If you don't have an XP CD, download and create a bootable CD from the .iso file XP Recovery Console
You don't burn the iso file itself to CD., you create a CD from the iso file using your CD burning software. There is a good freeware burner called ImgBurn which will
do this.
Boot the CD and at the first opportunity, enter R to start the Recovery Console.
Next, choose which XP installation you want to login to. Normally this will be 1.
Lastly you will be asked for the Administrator password. Just press the Enter key as the Administrator does not have a password (unless you gave it one, then you would enter it).
The RUNDLL error for nview.dll is being triggered by an entry in the registry, so it's quite likely that running RegSeeker will remove that entry and fix the problem. If not, search the registry for nvidia and nview, see what shows up. Use RegSeeker to do this also, a lot easier then using regedit.
Remember, once the RegSeeker scan completes, click on Select at the bottom and choose Select all green items. Reboot and see if it's fixed.
Hey there, what a S w e e t & amazing tool that is … Thank You !!! Glad to hear you're back up and running, bummer you were down at all. Hardware/software, they both add up to a headache
Have good news, bad news and more questions … you ready?
Good news - 1203 issues found first run, 831 greenies deleted
Bad News: i hit the 'export selected' option by accident (w/backup) – but have no idea where they 'exported' to ??
Good News - found 7 Nvidia and 2 Nview entries remaining. deleted all
Bad News: can't find any 'help' file associated with the program … will U be my guru??
Good news - ran it a second time and deleted all greens again
More good news - computer is running better in terms of 'normal mode' BUT, it still froze last evening.
Good news - after a re-boot, i looked in My Computer and noticed an icon i hadn't seen before ~~ D: drive and the icon looks like a USB Flash Drive with ((( like wireless notations. Opened the drive for a looksee and it appears a Recovery partition, however, many but not all of the folders appear locked … i haven't seen anything quite like this before so i'm not sure what i'm looking at. Tried to access a couple of the files - some opened, some were empty and some prompted 'file cure' to appear requesting a new application to proceed. (???? to file cure also, it's installed but i haven't learned it, yet)
ok, so to not be confusing, this system is parted together … Compaq hd, NEC screen, Dell mouse/keyboard, NetGear 3.0 wireless, Logitech USB speakers, -0- peripherals (printer, cam, scan, fax, x-monitor, Nothing) Single hd, no externals or secondary drives currently connected – was gifted – 'to clean-up' for my child. Nothing fancy attached, however … when trying to get imgburn to cooperate with the DVD rom (only drive / HL-DT-ST DVD ROM GDR8162B) … encountered failure.
*** got the RC burned via neighbor *** however, the drive is lit and DevMgr reports functionality, but it isn't reading or writing anything.
So, back to the current issues, 'Nvidia and Nview RUNDLL error notice' are no longer a problem. Thanks !!
system freeze during operations and/or idle ~~ still a conflict, somewhere.
since 2nd running of RegSeeker, registry is now reporting less than 270 total entries although several that are marked red, seem like they should be deleted also (suppose that'd be at my own risk ?)
Overall, the computer seems to be performing better and this is currently the longest i have been active on it without it freezing (about 1.5hrs), in normal mode and actively typing or scanning (Zone Alarm) — so, i'd call that good news, too !!
ok, i feel like i'm forgetting to mention something but if it comes back to me, i'll post again.
thanks again for all the success so far, RegSeeker sure is a handy tool. (especially for amateur persons like myself)
in the meantime, i'm looking into this DVD issue and will report back. have a great week.
Thanks for the tip. Fortunately, it is freezing less and less (still cleaning out the registry) … have gotten better than 12hrs straight before it froze. The event viewer is reporting both 'error' and 'warning' notices in all 3 folders (application, security, system).
following your instructions, the event viewer has produced several 'warnings' in both the system and application folders. The most frequent error code is 7000, regarding the system service called mrtRate. Cannot locate it on the service listing and the 'help link' gives instructions that confuses me more.
Event Viewer Findings:
System: event #7000 - mrtRate service failed to start due to the following error:
System cannot find the specified file.
event #7011 - Timeout … waiting for response from dnscache
Security: IPSec Services failed to get the complete list of network interfaces on the machine.
This can be a potential security hazard to the machine since some of the network interfaces
may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in
to further diagnose the problem.
Applications: Fax service failed to initialize any assigned fax devices
(virtual or TAP) No faxes can be sent or received until a fax device is installed.
The COM+Event System failed to create an instance of the subscriber partition:
{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{58FC39EB-9DBD-4EA7-B7B4-9404CC6ACFAB}. CoGetObject returned
HRESULT 80080005.
Followed the 'help link' regarding mrtRate and this is what it says:
Explanation
Service Control Manager (SCM) could not start the specified service, probably because the service is not configured correctly.
User Action
Do one or all of the following:
Review the error information displayed in the message. ~~ ok, is how i got here
Verify that the service password has not expired. ~~ am guessing no file = no password
Verify that the service is in the correct location. ~~ ?? have no clue
Verify that the service is not infected with a virus. ~~ no file should = no virus
To display the WIN32_EXIT_CODE error that SCM encountered when trying to start the program, at the command prompt, type
sc query service name ~~ tried this but not fast enough to read it
The information displayed can help you troubleshoot possible causes for the error. ~~ how do you pause the display?
If the WIN32_EXIT_CODE is zero, then SCM did not attempt to start the service because the error was detected first.
So, event #7000 seems to be the most frequent occurrence following a freeze … please advise.
IPSec Services - i don't know where to begin. and the fax service is nothing i've ever used or installed … is it necessary?
As for for the DVDrom player, am lost. It won't provide an output, yet all diagnostics say it's working fine. Even tried an audio cd and nothing. Green light appears, sounds like the drive is engaging but no output. Troubleshooter doesn't detect a malfunction. Any suggestions??
Have good news, bad news and more questions … you ready?
Good news - 1203 issues found first run, 831 greenies deleted
Bad News: i hit the 'export selected' option by accident (w/backup) – but have no idea where they 'exported' to ??
Good News - found 7 Nvidia and 2 Nview entries remaining. deleted all
Bad News: can't find any 'help' file associated with the program … will U be my guru??
Good news - ran it a second time and deleted all greens again
More good news - computer is running better in terms of 'normal mode' BUT, it still froze last evening.
Good news - after a re-boot, i looked in My Computer and noticed an icon i hadn't seen before ~~ D: drive and the icon looks like a USB Flash Drive with ((( like wireless notations. Opened the drive for a looksee and it appears a Recovery partition, however, many but not all of the folders appear locked … i haven't seen anything quite like this before so i'm not sure what i'm looking at. Tried to access a couple of the files - some opened, some were empty and some prompted 'file cure' to appear requesting a new application to proceed. (???? to file cure also, it's installed but i haven't learned it, yet)
ok, so to not be confusing, this system is parted together … Compaq hd, NEC screen, Dell mouse/keyboard, NetGear 3.0 wireless, Logitech USB speakers, -0- peripherals (printer, cam, scan, fax, x-monitor, Nothing) Single hd, no externals or secondary drives currently connected – was gifted – 'to clean-up' for my child. Nothing fancy attached, however … when trying to get imgburn to cooperate with the DVD rom (only drive / HL-DT-ST DVD ROM GDR8162B) … encountered failure.
*** got the RC burned via neighbor *** however, the drive is lit and DevMgr reports functionality, but it isn't reading or writing anything.
So, back to the current issues, 'Nvidia and Nview RUNDLL error notice' are no longer a problem. Thanks !!