Heliosintrism Posted August 16, 2009 Share Posted August 16, 2009 i haven't been able to figure this one out for months! it seems random and doesn't always happen, but occasionally when i try to open windows update, backup center, or almost any windows from the control panel that are windows based ones anyway i get this message. restarting the computer solves the problem, but who wants to restart every time this happens. here is a screen shot below. help please :) Link to comment Share on other sites More sharing options...
kimsland Posted August 16, 2009 Share Posted August 16, 2009 Run CCleaner And which AntiVirus or personal firewall are you using? Have you done a full AntiVirus and Malware scan? Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 16, 2009 Author Share Posted August 16, 2009 i have nod32 4 installed as well as ccleaner, i work on computers on the side, so i know its not a virus it has to be a corrupt file or setting somewhere, i was hoping someone would have had the problem and knew how to fix it or know what might be causing it. Link to comment Share on other sites More sharing options...
kimsland Posted August 16, 2009 Share Posted August 16, 2009 (edited) If someone else had the fault I'd try to resolve it, as I'm doing here with you Have you run IE Reset (as described in the above linked guide?) Also try this: Manual steps to repair or to reset Winsock for Windows Vista users 1. Click , type cmd in the Start Search box, right-click cmd.exe, click Run as administrator, and then press Continue. 2. Type netsh winsock reset at the command prompt, and then press ENTER. 3. Type exit, and then press ENTER. Another option 1. Click , type cmd in the Start Search box, right-click cmd.exe, click Run as administrator, and then press Continue. 2. Type regsvr32.exe wuaueng.dll at the command prompt, and then press ENTER. 3. Type exit, and then press ENTER. Edited August 16, 2009 by kimsland Link to comment Share on other sites More sharing options...
soldier1st Posted August 16, 2009 Share Posted August 16, 2009 run process monitor on ie and see what it does, it sounds like a setting that needs to be changed. Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 17, 2009 Author Share Posted August 17, 2009 ok it just happened again. i tried the winsock thing, and ie settings. i also read while digging on the net that restarting software licensing service fixes it. no luck. although i did notice something if i take the check out of "open folder and windows in separate process" in the folder option settings in control panel reset the problem without having to restart. however i like having the separate processes in case of errors or windows crashing it doesn't bring down the whole ui. any other ideas? Link to comment Share on other sites More sharing options...
kimsland Posted August 17, 2009 Share Posted August 17, 2009 Some more run commands: netsh winsock resetnetsh int ip resetnetsh interface ip delete arpcache Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 17, 2009 Author Share Posted August 17, 2009 i ran those commands and they all went through ok. but often times when i think i get it fixed it slaps me in the face again the next day. ive even tried sfc /scannow but it doesn't seem to fix the problem that's why i think its a setting somewhere Link to comment Share on other sites More sharing options...
kimsland Posted August 17, 2009 Share Posted August 17, 2009 I think we need a HJT log This thread has a link for that: https://www.neowin.net/forum/index.php?act=...p;pid=591255802 You can attach the HJT log by saving it as "All files" HJT.TXT (log doesn't seem to attach at Neowin, I advised a Mod of this a long time ago, but still the same) Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 17, 2009 Author Share Posted August 17, 2009 better yet: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:16:30 PM, on 8/16/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Media Player\wmpnscfg.exe c:\program files\rocketdock\RocketDock.exe C:\Program Files\SliderDock\SliderDock.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Raxco\PerfectDisk10\PDAgentS1.exe C:\Users\JD\AppData\Local\Circle Dock\CircleDock.exe C:\Windows\Explorer.exe C:\Program Files\Rainmeter\Rainmeter.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Convert X To DVD\ConvertXtoDvd.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [Helios GUI Launcher] c:\program files\helios computer technologies\helios-gui.bat O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O8 - Extra context menu item: &NeoTrace It! - C:\PROGRA~1\NEOTRA~1\NTXcontext.htm O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\PROGRA~1\NEOTRA~1\NTXtoolbar.htm (HKCU) O13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{038E8E98-3C50-4FB3-AAE8-14B463140951}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{038E8E98-3C50-4FB3-AAE8-14B463140951}: NameServer = 208.67.222.222,208.67.220.220 O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe -- End of file - 7366 bytes Link to comment Share on other sites More sharing options...
kimsland Posted August 17, 2009 Share Posted August 17, 2009 Close all open programs Re-open HJT and run a scan only Place a check next to the following Before selecting "Fix"; confirm all Internet browsers are closed Select Fix to all, then close HJT, and restart: R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O4 - HKLM\..\Run: [Helios GUI Launcher] c:\program files\helios computer technologies\helios-gui.bat O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{038E8E98-3C50-4FB3-AAE8-14B463140951}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{038E8E98-3C50-4FB3-AAE8-14B463140951}: NameServer = 208.67.222.222,208.67.220.220 Link to comment Share on other sites More sharing options...
JustGeorge Posted August 17, 2009 Share Posted August 17, 2009 Longshot, but could be an intermittent DNS issue. Change your DNS servers and then run "ipconfig /flushdns" from cmd prompt with admin privs. Link to comment Share on other sites More sharing options...
Wilhelmus Posted August 17, 2009 Share Posted August 17, 2009 When this happens next time, try: 1) Launch services.msc from a run command.2) Find the SL UI Notification Service & stop it. 3) Find the Software Licensing service & stop it (it may say that ReadyBoost needs that service to run; stop it anyway). 4) Restart both services, starting with Software Licensing. Then run requested application again. Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 17, 2009 Author Share Posted August 17, 2009 Longshot, but could be an intermittent DNS issue. Change your DNS servers and then run "ipconfig /flushdns" from cmd prompt with admin privs. i'm using opendns. i set the setting myself. i did the fixes with hijack-this that you said, and still no problem. however why would cleaning my ie settings and ip caches have anything to do with windows update, back and restore center, the right click personalize menu, and system settings in control panel? i did try these settings but it always comes back and bites me in the A$$ after i think everything is peachy and ive fixed it. as far as the sl ui notification and software licensing services ive already tried restarting them and problem still existed. im getting so frustrated. Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 18, 2009 Author Share Posted August 18, 2009 ok i just figured out what triggers it! opening individual windows is ok, however is i have windows update open or in the system tray and open another ex: backup and restore center, system properties, programs and features. then i get the message...any ideas? Link to comment Share on other sites More sharing options...
kimsland Posted August 18, 2009 Share Posted August 18, 2009 You may need to Repair (or re-install) IE8: http://support.microsoft.com/kb/318378 The HJT log did not show any Malware, just not required startups, that are now hopefully removed Link to comment Share on other sites More sharing options...
Heliosintrism Posted August 19, 2009 Author Share Posted August 19, 2009 problem resolved!!!! since i was able to figure out what was triggering the effect i then troubleshooted several diffrent things. unpatched system files, uninstalled & reinstalled programs. and even did a few sfc scannows to read the logs. and then i finally found it. logonstudio vista! a stardock program. after the last sfc scannow my logon screen theme files and patched system files were returned to their normal state finally! and i didnt have any problems, so i re patched the theme files, no problem still, re patched the system files, no problem still. then patched the logon with logonstudio vista and bang! so i un patched it and it worked fine again, patched it again and bang! not sure what the issue it with it but now does anyone have and good logon editing apps? :) Link to comment Share on other sites More sharing options...
Recommended Posts