wininit.exe download

It may help to look at the minidump files from the crashes with a debugger. Can you zip up the minidump files in the C:\Windows\Minidump folder and make available (provide link) via Windows Live SkyDrive or similar site? The following link has information on using Windows Live SkyDrive: http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65 If you have problems zipping the minidump files copy the minidump files to another location such as a folder on the Desktop Also, you do not necessarily have to zip up the minidump files, you can upload them one at a time.

You may have a rootkit. Everything in Google says that message relates to either a keylogger or a rootkit Run tddskiller . If it picks anything up select cure then reboot Also the firmware for that hdd maybe up to CC4H now . You may want to update it once you remove this rootkit. If you have one

You may have a rootkit. Everything in Google says that message relates to either a keylogger or a rootkit Run tddskiller . If it picks anything up select cure then reboot Also the firmware for that hdd maybe up to CC4H now . You may want to update it once you remove this rootkit. If you have one No Sorry Still Have the same issue, any other thoughts?  Thank you for being the 1st to try.

I have got the answer https://social.technet.microsoft.com/Forums/en-US/0b610346-fc53-4b39-8cfd-9737d265c3f4/physical-memory-leak-by-terminated-processes?forum=winservergen#0f4158fb-050b-477d-9489-ee7afb602d2e. Aladdin (sentinel) drivers blocked the process distruction after it is removed from the process list.

Hi, Thank you for sharing the information with us. It will help other people, who has similar issue. If you face any issue with Windows. Please fell free to contact us. Thank you.

thanks for your help rami this is info you requested Microsoft Windows [Version 6.0.6001] Copyright (c) 2006 Microsoft Corporation.  All rights reserved. C:\Windows\system32>wmic startup get caption,command Caption                                Command pl.exe C:\Windows\system32>

Hi Kieth, thanks for the info.  I did all the things you put forward,  I deleted the Bit torrent,  run a separate virus scan,  created a new ID, and the computer still used the full 100% CPU.   This thing whatever it is has been here for a while.  I thought the computer was just slowing up because of the ammount of stuff I have on it .   I have deleted all unnecessary programs etc, but the problem still exists.   I also have another one, windows photogallery.  The programme did not work so I deleted it and tried to re download the new programme, but the computer tells me i still have it and won't load the new download.  Can you please help with this one too. Regards.  Joe  (DragonKing)

Hi Brent, thanks for your answer.   There were 77 processes running at 0% except svchost SYSTEM which was runnung 87%  which made a total of 100% CPU usage.   I have done all the things Rami asked and it is still at 100%.   There was a small change but it only lasted for 5 mins.  It went down to 45% till i opened another programme and it went back.   Joe

Hi Dragon King, Thank you for taking the time to post. Forgive me if I overlooked this but Rami had asked if this was happening in other profiles on the computer, have you had a chance to check? If you do not have another profile, you can follow the below steps to create a “test” profile. ·         Click the Microsoft Answers Feedback Forum and let us know what you think.

Hi Rami,  thanks for the info.  I have run several malicious software scans and found nothing.  One of my main worries now is that programmes add/remove will not delete windows messenger programmes.   It has left some threads which are stopping a new download of the programme from installing.  Keeps telling me the old one is still there, and all that i can find on comp. is 2 items, windows live family safety and windows live Photo Gallery, which is unuseable and cannot be deleted or removed.   The comp. is still running 100% CPU all the time.   As i mentioned last email, the Company making my comp. has gone into receivership, that is why i asked about the fix it disk.   Is there anything i can do to replace this Vista programme seeing as the manufacturer no longer exists?  I have asked other Companies and all they say is contact your supplier (manufacturer), but i can't , and there is nothing they can do.   Can i purchase a new version or get one on compashionate grounds from Microsoft

Joe, Please clarify, when you run clean boot, is your computer running high on resources? Click Start , type Microsoft Answers Feedback Forum and let us know what you think.

Dragon King, It seems that you have several startup applications that are running that could be taking up valuable resources, is this usage a recent development or has it been around since you have had the computer? I am suspecting programs that were installed since have slowly began to use up more of your system resources as the are set to start up with your computer. If you desire disabling these startup items let us know, and go ahead and setup a restore point: Create a Restore Point: Microsoft Answers Feedback Forum and let us know what you think.

Hi Rami,  I have done all the things you suggested.  The only startup programmes are my email, McAffee,  Internet Explorer, Firefox and Majentic.(wallpaper and Screensaverprogramme)   The rest I have removed from start up.   There are 77 processes running, Comp. is still using 100% CPU.  As you suggest, this problem was always with the comp. from the beginning.  As programmes were added I just thought it was natural.  I increased the RAM from  512 to 1500 and it made a big difference.  But as time has passed it seems to be running slow, and thats when i found CPU running at 100%.   I also quite some time ago added another hard drive, 10Gig to remove photos and other stuff from the main hard drive 80gig.  There is 25% free space on main, and 12% free on other.   I am a novice 68yr old, only been using computers for 10 - 12 yrs. and anything i know is self taught or picked up from experienced users.   The reason I contacted the forum was because the Company i bought the comp. from is now

Joe, It seems that your computer might have picked up other corruptions over time, this is most likely contributing to what you are experiencing, we unfortunately here do not have the ability or authorization to send any Windows Setup disks, OEM copies have a specific licensing that only they can provide you the installation means for. What I will recommend for the time being is for you to run the following test: Run an Online Scan of Your PC for Malicious Software: If you would like to scan your computer for malicious and potentially unwanted software from a website, please use the Windows Live OneCare safety scanner . Windows Live OneCare safety scanner is an online service that lets you scan your computer to help protect, clean, and keep it running at its best. Use our free protection scan to check for and remove viruses, spyware, and other potentially unwanted software and to find vulnerabilities in your Internet connection. Rami Microsoft Answers Support Engineer Visit our Microso

Dragon King, Svchost is a generic host process that allows other services and programs that use DLLs to run. Thus there are many dependencies that could be effecting this performance that only use svchost for their resources / access permissions. First, what is your system specifications? Have you recently noticed a spike in your computer resources or is this something that has been going on for a while? Please provide a list of your startup programs with the following command: Microsoft Answers Feedback Forum and let us know what you think.

I can also run other softwares, and post the log here if it is helpful, such as OTL etc. or if you have any recommended softwares to use. let me know. I will reply as soon as I get an email notification on my mobile. Thanks!

I'm moving your question to the Windows 7 topic area. Since this is a new install, I suspect you have a bad install, bad hardware, or have not loaded all required drivers. -steve

I managed to isolate the problem. Disabling "AuthenTec Fingerprint Service" created the delay. Re-enabling it removed the delay, regardless of what I did with the other services.

Oh. Wow. Just to see what happened, I re-enabled every single service there was. (I'm talking about the non-Microsoft services that Toshiba bundled with the laptop.) And the problem went away. Now I can login super fast. So, I assume one of the non-Microsoft services I disabled actually was important. I'll go through and disable them one by one. To be clear, I didn't disable any of the services that came with Windows 7 (except briefly to test out if that would help). The services I'm talking about are not part of Windows 7, but rather Toshiba's bundled ones.

I moved your post to the System Repair and Recovery area. The Virus & Malware forum here is not geared for log analysis. -steve

And now all of my restore points are gone.

The Windows Vista Business disk I used the upgrade part was disabled it let me do a new install I did a chkdsk 3 times already it reboots no changes I also ran that diagnostic software from Western Digital it found bad sectors when I clicked the repair button it said "error was detected while repairing bad sectors" I also forgot to mention the Windows Vista Business disk I used was for a Dell computer mine is not a Dell should I just try to return the hard drive back to the store Megan You do not use a Dell DVD (the borrowed Vista Business 64bit) on any other Computer than the Computer it was designed for; namely a Dell. Dell disks are tied to Dell Motherboards. You can not Activate a Dell disk on a non Dell Computer for those reasons. You then did an "Upgrade" to Vista Home Premium, which is not possible by normal upgrade methods.

My computer freezes whether or not I'm on the internet I bought a new SATA 500GB hard drive I don't know anything about SATA  I'm thinking I didn't install it correctly any help would be greatly appreciated Thank You Megan Fisher

Hello Megan, IMO you have sufficient grounds to return the unit citing WD disk diagnostic results. New disks should not be displaying bad sectors that the manufacturer's own diagnostics cannot fix. Back up your data first. Tricky

One thing tricky300 may like to consider as well is how you reinstalled Vista. "Windows Vista Business 64bit disk that he had found it formatted the SATA hard drive and installed the OS without any problems" You borrowed that disk from a friend. Then you say you did this: "I then put my Windows Vista Home Premium 32bit upgrade disk in and it installed ok" What was originally on your orignal failed Hard Drive before you used a Vista Home Premium Upgrade Disk. You must have had something to Upgrade from to use the Vista Home Premium Upgrade. And you do not upgrade from your "borrowed" Vista Business 64bit to Vista Home Premiun 32bit. If you install a new Hard Drive you reinstall the original Operating System > then you do the upgrade. Would you please explain this. Cheers.

Hi, I suspect your 'new' SATA drive of having problems reading and/or writing at least certain portions of the file system. First of all, if you can, I would make sure any important data is backed up. Then you could run a chkdsk on your hard drive - see http://www.vistax64.com/tutorials/67612-check-disk-chkdsk.html . Method 1 would be the preferred way because it would be less dependant on your PC behaving itself. Reboot the PC immediately after scheduling the disk check and you should see the disk check commence. This may take hours, be patient. It may find lots of errors that it fixes or attempts to fix. This is why you should back up your data first . Following this, if you can, run the WD diagnostics from the link previously supplied. Depending on the results it may be appropriate to ask the supplier for a warranty replacement. It is entirely conceivable that this is the only real problem with your PC, though there may be some consequences to deal with. It would also be worth manua

The Windows Vista Business disk I used the upgrade part was disabled it let me do a new install I did a chkdsk 3 times already it reboots no changes I also ran that diagnostic software from Western Digital it found bad sectors when I clicked the repair button it said "error was detected while repairing bad sectors" I also forgot to mention the Windows Vista Business disk I used was for a Dell computer mine is not a Dell should I just try to return the hard drive back to the store Megan

I bought the SATA hard drive because my other one stopped working I didn't have the same problems as the first hard drive the first one worked great up until it stopped working I was having problems trying to format the SATA hard drive to NTFS I didn't have an OS disk that would format it until a friend gave me a Windows Vista Business 64bit disk that he had found it formatted the SATA hard drive and installed the OS without any problems I then put my Windows Vista Home Premium 32bit upgrade disk in and it installed ok but after i activated the OS and Windows Update started updating thats when the problems started and it's getting worse while I was reading your reply my computer shut down and said it had to do a crash dump my computer has been up and running not even a month anyways Thank You for your help I will download that and get back to you Megan

I confess to being a little puzzled by that aspect of Megan's reply, but on first consideration, it didn't seem relevant to the likelihood of bad sectors on the hard drive as indicated by the event log entries in the original question. Lke you, I await Megan's reply to your post with interest. Tricky

Hi, Thanks for all this info about your PC but you have neglected to tell us about any of the problems that you are encountering. Why don't you start by telling us about what you consider to be the single most significant problem? Then somebody, not necessarily me, may provide you with a solution. Ideally each problem should be addressed by starting a new question. By all means refer to the info above by posting a link to this thread in other questions. Tricky

Hello Megan, What did you do with this SATA hard drive? Why did you buy it? Were you having the same problems with the original drive? Was it to replace the existing hard drive or was it supposed to be a supplementary drive, presumably just to give increased storage capacity?  From the above information, the source of which I am not familiar with, it would seem that the new SATA drive was a replacement, if that is the case how did you re-establish the Vista operating system? The event log entries shown above are showing problems with your C partition, assuming this to be the new drive, WD diagnostics can be downloaded here... http://support.wdc.com/product/download.asp?groupid=608&lang=en Start with the Windows version (assuming that your PC can stay operative long enough to run them). If it won't stay working long enough try burning a bootable CD from the DOS (CD) version. When answering these questions it is important to give as much information as you can. Too much is better than no

To start resolve this , please restart infected system and press F8 key repeatedly and then chose Safemode with Networking If you are Microsoft Security Essentials installed then update it and run full system scan in safemode and remove threats and if problem not resolved contact support: https://support.microsoftsecurityessentials.com/ and chose: I thing my computer is infected If you are NOT using Microsoft Security Essentials in infected PC  , then restart in Safemode with Networking and login to: http://onecare.live.com/site/en-us/default.htm And run full system scan and remove threats, if still same problem contact support: https://consumersecuritysupport.microsoft.com/default.aspx?productkey=pcsafetymalware&faq=1&task=diagnostics&st=1&wfxredirect=1

We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

Unless when it fails it also crashes the computer there will not be DMP files. Your best bet is to contact the developer.  Would would have no idea how it works.

Another thing to mention is that half a year ago I have played 2 different games that use EAC and it worked flawless back then. Now even these games dont start hence the EAC error..

https://1drv.ms/u/s!AgybzZZD1SY5gmrD-p9JIBmQNcnm I hope this works.

This one crash was from June 5.  If you have newer dumps upload them Old drivers needing updating for as far back as 2009 How To Find Drivers: Do not use device manager it may tell you the device is up to date but will not tell you if it is corrupt Search Google for the name of the driver, or go to the computer makers site. Compare the Google results with what's installed on your system to figure out which device/program it belongs to Visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager). If there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program The most common drivers are listed on these pages: http://www.carrona.org/dvrref.php http://sysnative.com/drivers/ Driver manufacturer links are on this page: http://www.carrona.org

Thank you very much! I will get right on it after I come back from work tomorrow. I will let you know if it helped :) THANKS!

at the end of the crash report it shows: Windows Crash Dump: C:\WINDOWS\Minidump\060616-67953-01.dmp I didnt copy and paste it i guess..

Bump....

the changes I made were relative to...8 different AV programs that were no longer installed. Such as...? Has a Norton application or a McAfee application EVER been installed on the computer since she bought it? Did a Norton free-trial or a McAfee free-trial [pick one] come preinstalled on the computer when she bought it? (Doesn't matter if it was never used or Activated.) Fact: Norton (and McAfee) applications are notorious for not uninstalling (or upgrading) cleanly! Did any of today's updates successfully install? cf. https://technet.microsoft.com/library/security/ms15-Jul Tip: You'd be much better off posting in the Win7 IT Pro-specific forums => https://social.technet.microsoft.com/Forums/windows/en-US/home?category=w7itpro

Mostly free stuff ... Malware Bytes, Avira, AVG, etc, tho Norton was on the list.  There are no associated files, and no registry entries, startup files etc.   I don't know what was on the machine originally and she doesn't remember.  Mostly the result of "helpful" family members I assume.   I have battled with Norton, McAfee and Panda before and successfully removed, sometimes manually. In the past I have used the: Norton Removal Tool Kapersky Removal Tool ZoneAlarm Removal Tool AppRemover - http://www.appremover.com/ But there's no evidence of a problem related to an uninstalled AV or a infection.   Just TrustedInstaller.exe popping up and being annoying every now and then.   Haven't seen it since last post tho.  I didn't intend to instal latest Patch Tuesday stuff.... I usually give it a week, or at least 2 days to see if any bugaboos appear. To get an answer tho, went looking for updates this morn...I know this is slow lappie (Celeron, 4GB IIRC) but it took an hour to find the 14 u

You need to share your System Information files and Event Viewer log files to get meaningful interpretation. You can use other files sharing media, except for me I will access files through Mediafire.

Upon loading today , Windows Install Compatibility Manager was eating 22% now.   Saw ALU.exe also today which I must assume is Acer live Updater.  my son worked as an upper tier tech support specialist and he confirmed my assumption.  It was immediately followed by the Application Block Detector (queryappblock.exe) which ran for about 45 seconds I assume this is related to a)  I never see this stiff on other boxes because they are fast machines and it only gets nortice here because it's so low end. and b)  pre Windows 10 stuff which I thot I wouldn't see not having reserved anything. No warnings in event viewer (system) other than DNS message when logging into checkpoint's server for a definitions update and a crash dump initialization failure and that a service "successfully stopped" Applog has a=just 1 warming telling me that Cvhsvc.exe is 'trusted" and that the application virtualization client core initialized correctly I am stopping a lot of service and turning them back on so cle

Wish there was another option to OneDrive.  Very inconvenient for those who otherwise have no use for it. Logs were all wiped after I had completed my cleaning efforts.  Had years of problems in there, many prolly due to having 4 different AVs installed at one time or another whose uninstalls left various tidbits.  TrustedInstaller now gone; whether changing to notify  instead of install in WU took care of it, Ccleaner registry edits, editing startup actions, disabling various unneeded services or some of the other efforts .... not sure but glad it's gone. Current logs after restarting twice ....System has: Warning - WLAN AutoConfig service has been successfully stopped (3) Errors - Crash Dump initialization Failed Warning - Broadcom Netlink is down.  Cable is not connected, working off wireless In 1 of the 2 boots I had to start wireless manually (clicking in icon in system try, then hitting Connect) Application Log has Warning - The Application Virtualization Client Core initialized

Please provide a copy of your System Information file. Type System Information in the Search Box above the start Button and press the ENTER key (alternative is Select Start, All Programs, Accessories, System Tools, System Information). Select File, Export and give the file a name noting where it is located. Do not place the cursor within the body of the report before exporting the file. The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload the file to your OneDrive, share with everyone and post a link here. Reports in normal mode preferred. Please say if the report has been obtained in safe mode. Please upload and share with everyone fresh copies of your System log and your Application log (two files) from your Event Viewer to your One Drive and post a link here. You can remove any earlier copies of the logs from your OneDrive. To access the S

Working on my 83 year old MIL's laptop...Cleaned Junk off, cleaned registry of old programs, disabled / uninstalled most of the Acer Bloatware keeping just what was necessary to use the thing. How have you determined that the computer is no longer infected? Do you have backups of ALL the changes you made to the registry? Is KB3058515, KB3033890, KB3059317, KB3057839 and/or KB3063858 listed in Installed Updates ( not Update History )? How about KB3035583, KB2952664 and/or KB2990214?

1.  It never was infected.  TrustedInstaller.exe is not an infection.  It was just real insistent on getting that missing update and didn't mind easting 70-100% of the CPU time all day long trying to do it.  Changed the setting to notify, not download / install. It's had Checkpoint ZA Internet Security Suite from Day 1 and deep scan shows no issues.  I'll yank the HD and test w/ Bit Defender in another box in a HD docking station tomorrow 2.  No... the changes I made were relative to: a) 8 different AV programs that were no longer installed. b) Links to other programs that were no longer installed. c)  hardware that was no longer installed. I never have made backups of registry deletions for programs that I have positively identified no longer exist.  Firefox 3.6 was in there :) 3.  Most of the effort was in autostart programs that were either uninstalled or just prevented from starting 4.  According to WU, Windows is completely up to date KB3058515, - yes KB3033890 - yes KB3059317 - y

This is the software causing the problem: http://forums.techarena.in/windows-software/1353696.htm Try uninstalling and reinstalling. If that doesn't work download and run the Windows 7 Upgrade Advisor and see what that reports. http://windows.microsoft.com/upgradeadvisor

Hi Gerry, I've included an .nfo with the System Information. Furthermore I've now also uploaded txt from nirsoft. And I've also included System Information from Speccy. Make and model. HP Probook 650 G2. Thanks in advance for having a look. Kind regards, Davy

What is your computer make and model? If not a branded computer what is your motherboard make and model? Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Selected Items. Text file format please. http://www.nirsoft.net/utils/driverview.html

Anyone?

We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

DMP Files

JB These were related to cfosspeed6 . sys . Driver Description: cFosSpeed - The Internet Accelerator.   I would remove it.

The manufacturer was required to provide a way to reinstall Windows. If a set of disks didn't come with the laptop, there will be a hidden Recovery partition ( not to be confused with System Restore) you would use to do the clean install of Vista. Again, begin a new thread here for assistance: http://social.answers.microsoft.com/Forums/en-US/vistarepair/threads ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

I had Norton free trail pre-installed on my computer and when it ended it kept bugging me to buy the full version so i deleted it seeing that it was doing nothing and just used windows defender for a while, I got "MSE" on 28th Feb 2010 after it was suggested too by a friend to download it.

My laptop came with Vista pre-installed and i don't have the CD to re-instal it... Is there anyway of getting round this without having to buy it again?

You should have uninstalled the Norton free trial, downloaded/run the Norton Removal Tool, and then installed MSE before the Norton free trial expired! Since you didn't, start by reading... Help: I Got Hacked. Now What Do I Do? http://technet.microsoft.com/en-us/library/cc700813.aspx Back-up any personal data (none of which should be considered 100% trustworthy at this point) then format the HDD & do a clean install of Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT fix this! HOW TO do a clean install of Vista: See the "If you want to reinstall Windows Vista by performing a clean installation..." section of http://windows.microsoft.com/en-us/windows-vista/Installing-and-reinstalling-Windows-Vista After the clean install, you'll have the equivalent of a "new computer" so take care of everything on the following page before otherwise connecting the machine to the internet or a local network  (i.e., other computers) and before using a flash drive or SDCard that

Do you have any good forums to suggest how to back up my computer. How much memory will i need on a flash drive etc will i need? The System Repair & Recovery forum's ideal for your questions: http://social.answers.microsoft.com/Forums/en-US/vistarepair/threads Remember, you do NOT want to do a Repair Install! I would strongly recommend backing up your data to CD or DVD to avoid reinfection. If your computer's infected, it could infect any flash drive inserted (if it's not infected already). What data you back up is up to you, of course, but at minimum I should think you'd want to back up My Documents folder, your IE Favorites, and any Mail Client (e.g., Outlook Express; Outlook; Windows Live Mail) data. If you take the computer to a shop, expect to pay $150 USD & up. ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

i think i will try myself, the only problem is my product key on the back of my computer has been worn away and i can barely read it. I can make all off it out but there is 1 letter in particular that may be a 3 or an 8, what will happen if i put in the wrong key ? will it let me try again (as you can tell im heart scared of me making a mistake and ruining my computer =(  ) Do you have any good forums to suggest how to back up my computer. How much memory will i need on a flash drive etc will i need?

When (approx. date) did you install Microsoft Security Essentials (MSE)? Was your Norton/Symantec subscription still current when you installed MSE or had it already expired? Did you uninstall the Norton/Symantec application and then download/run the Norton Removal Tool before you installed MSE? =================== Unlimited installation and compatibility support for Vista SP1 has been extended a third time & now runs through 10 August 2010. Some issues may require more advanced support for which there is a charge. • US: http://support.microsoft.com/oas/default.aspx?ln=en-us&prid=11274&gprid=500921 • CA: http://support.microsoft.com/oas/default.aspx?ln=en-ca&prid=11274&gprid=500921 • UK: http://support.microsoft.com/oas/default.aspx?ln=en-gb&prid=11274&gprid=500921 • AU: http://support.microsoft.com/oas/default.aspx?ln=en-au&prid=11274&gprid=500921 • Other: http://support.microsoft.com/select/default.aspx?target=assistance&c1=509 | select your Windows Vista version | select Service Pac

Hi Sunniva, What is your computer’s rating? To check this, follow the steps below: 1.       Click Start 2. Microsoft Answers Feedback Forum and let us know what you think.

I have the same type of problem - I have a file 'mysqld.exe *32' which is the Remote access DB that consistently uses 98-100% of my CPU. I have run virus software and all of the other security suites but it is still showing up. How can I eliminate this problem?

Hi Sunniva, According to your HijackThis log, there are quite a few applications running.  You have Windows Defender and Spybot's Tea Timer scanning for malware at the same time.  I see a few tool bars loaded that will do nothing but slow down your system.  You have a "registry booster" and a "registry mechanic"  running every time you start your computer.  There are 2 versions of Adobe Acrobat pre-loading on bootup.  Many auto updaters for different software all running at the same time. I notice that this computer is also on a domain.  You probably need to check with your system administrator to have it cleaned up. Brent Microsoft Answers Support Engineer Visit our Microsoft Answers Feedback Forum and let us know what you think.

YOUR POST SAVED MY LIFE!!! THANKS FOR LEAVING THIS MESSAGE UP.  I HAVE BEEN INFECTED WITH CONFICKER FOR A WEEK NOW AND NOTHING WAS EVEN FINDING IT, LET ALONE SWEEPING IT.  ESET FOUND IT IN TWO MINUTES AND DIDN'T EVEN TAX MY SYSTEM.  GREAT SCANNER! USED IT FOR ALL OTHER INFECTED BACK UPS AND ANOTHER COMPUTER IN THE HOUSE.  GREAT INFORMATION YOU POSTED.  THIS THING WAS TURNING OFF SERVICES AS FAST AS i COULD RESET THINGS.  NEARLY LOST IT FOR GOOD..... ANY ADVISE FOR ME NOW THAT I'VE CLEANED THE VIRUSES?  MSE HAS BEEN SCANNING FOR TWO DAYS AND IT NEVER CAUGHT THE VIRUSES.  NORTON NEVER FOUND IT.  I UNINSTALLED IT IMMEDIATELY AND WENT SEARCHING.  YOUR FREE SITES ARE BETTER THEN THE ONES PEOPLE ARE PAYING GOOD MONEY FOR.....WHAT A RACKET? SHOULD I SCAN MY INTERNAL BACK UP DRIVES, PORTABLE DRIVES AND ALL USBS WTH THE SAME THING?

you forgot to put on your page that after you install the malware it will scan your computer but will not remove any spy ware untill you buy it

Hi GeorgeKedi, You should try the ANSWER in this thread and if no help then start you own thread using these guidelines. How to ask a question http://support.microsoft.com/kb/555375 Hope this helps. Rob - Bicycle - Mark Twain said it right.

what should i do?

Hi mom47kids, The answer above is 10 months old and some things could have easily changed. At the time of that posting all the suggested software was free or offered a full trial which would be enough to help solve the issues. What exactly did you see where there was something that required you to buy it other than the malware itself which of course is a bogus offer. If you need specific help please start a new thread with the information we need to help us help you. How to ask a question http://support.microsoft.com/kb/555375 Hope this helps. Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.

i down loaded the the malware and scanded my computer after it it found malware on my computer i hit the fix it , it said i had to BUY the malware to remove the infections , SO THERE FOR IT IS NOT FREE ONLY THE DOWN TO YOUR COMPUTER IS.

Hi, Can you get to Microsoft.com, McAffee.com, Symatec.com? Thinking you could have a conficker. Check with this site http://www.confickerworkinggroup.org/infection_test/cfeyechart.html Virus alert about the Win32/Conficker worm Hope this helps. Rob - Bicycle - Mark Twain said it right.

i have malwarebytes cant update just installed spybot and that wont update either

Are you doing all the updating, etc. it in Safe Mode with Networking, as advised? Also, try this: http://www.gmer.net/ Cheers. Mick Murphy - Microsoft Partner

This is the Vista Repair and Recovery Forum. For the best help for Security/Malware issues, you should post here: http://social.answers.microsoft.com/Forums/en-US/vistasecurity/threads Scan  your System for Malware: Download, install, update and scan with each of the two programs below to check for/remove Malware/spyware. Cheers. Mick Murphy - Microsoft Partner

I too have similar issue with Windows 7 SP1.. What I see is leaving the auto update on makes the CPU goes high in that SVCHost, where as simply turning off the auto update solves the issue for me.. What I do is, I manually update the system.. :(

I have opened a ticket with MS, after 30 days still no solution.  It has been escalated twice since then.  I will update as soon as they figure out a solution.

Bump! Having the same issue with Windows Server 2008 Standard SP2. Didn't start having problem until we virtualized it. Nslookup defaults to itself, so no external DNS resolution. We can however ping outside. A reboot will fix this but the problem resurfaces quickly.

Hello , same problem here , I have a filecluster win2008 R2 latest patches . It has 24gb mem and all is used . Most mem goes to svchost.exe 1004 Dhcp, eventlog, lmhosts= svchost localservicenetworkrestricted and trustedinstaller. Antivirus , scom etc are stopt , same issue it takes all memory. On the other node all runs fine and it takes only 4 gb of ram . Is there any progress in your case ? Kr Stephan

We still have this issue.

So did you get a solution for this problem ? I have the exact same scenario. Host is server 2012.

Hi, Do all other games on the PC work correctly? I would suggest you to follow the troubleshooting steps from the KB article provided below and check if it helps: Game crashes or closes unexpectedly http://support.microsoft.com/kb/303032 Note: After performing a clean boot(clean startup procedure troubleshooting, place the computer to boot back in normal startup mode. As this is an Alpha release, there could be some issues. It is best to contact DayZ support. I would suggest you to post your query in the DayZ forum.s http://forums.dayzgame.com/ Let us know if it helps.

i too have notice this the game tom clancys ghost recon wildlands is 64 bit but ubisoft is 32 bit my windows is 64 bit is there a fix or patch did not "update" to get a worse build and so do i have go through the hassle of formatting my system if i can how do i un update i can not rollback that far we need an update to fix the update

I too have an issue! Only after updating to the new redstone release. 17666 and the previous one. I believe there is an issue with a 32bit uplay and easyanticheat.exe verse the OS picking up as 64bit? I dont see a 32bit manifest in easyanticheats folder. only a x64. I played the game the other day, it failed. Rolled back to previous version and it worked. Computer updated again  today and its not working. Ive uninstalled the game, reinstalled it and verified. I also think this has something to do with the certificate the anticheat program issues. Under its properties, there are some warnings.

I too have an issue! Only after updating to the new redstone release. 17666 and the previous one. I believe there is an issue with a 32bit uplay and easyanticheat.exe verse the OS picking up as 64bit? I dont see a 32bit manifest in easyanticheats folder. only a x64. I played the game the other day, it failed. Rolled back to previous version and it worked. Computer updated again  today and its not working. Ive uninstalled the game, reinstalled it and verified. I also think this has something to do with the certificate the anticheat program issues. Under its properties, there are some warnings. Same problem here, will be clean installing Windows soon... Currently on Insiders build 17672.1

Hi, It is possible that the app became incompatible or outdated that is why it is not working as it's supposed to be. To troubleshoot this issue, we recommend that you uninstall the app (if you can still see the shortcut), and then reinstall it to see if it will still show the same behavior. Feel free to contact us if you need assistance with Windows.

Hi, Your question regarding your Windows embedded 7 standard is more complex than what is typically answered in the Microsoft Community forums. It is better suited for the IT Pro audience on MSDN. Kindly post your question in the MSDN forum . Thank you.

Hi Mouneshwar, My display driver: nvlddmkm.sys (8.17.11.9562, 13.06 MB  updated from Nvidia driver download site. The first thing i did was disable Norton antivirus and the game played through without crashing.  I take it i will need to contact Norton now that I have found the conflict. Thank  you very much for your help!!!! Happy Holidays, Tom

Hi mj_tom42, Welcome to Microsoft Answers! May I know your display driver manufacturer? I would also suggest you to turn off your Security software and check if you’re able to run the game properly. NVidia drivers have issues while running Links 2003. I would suggest you to perform a clean boot and then try to run the game You can start Windows Vista or Windows 7 by using a minimal set of drivers and startup programs. This kind of startup is known as a "clean boot." A clean boot helps eliminate software conflicts. http://support.microsoft.com/kb/929135 If this did not help, you can try reducing the hardware acceleration and then try to run Links 2003 Check DirectX diagnostic utility to check if the Hardware Acceleration is fully enabled. If it is enabled, you can try disabling it. 1. Click START 2. Type 'dxdiag' (without quotes) and press enter 3. Click 'NO' to the driver popup 4. Click the 'Display' tab Under DirectX Features, are all three set to 'enable'? If  yes, try disabling by c

Hi Tom, Glad to hear that your game worked. If you've any issues in the future, please feel free to post in. We'll be more glad to assist you. Regards, Mouneshwar R - Microsoft Support ------------------------------------------------------------------------------------------------------------------------------------------------------------------ Visit our Microsoft Answers feedback forum and let us know what you think

Sorry Vincenzo I'll do that, i have left a more detailed   message on the Technet Forum,but went to this second. Just wonderingso why is there similiar forums at microsoft  and which is better ! eg technet or answers. Regards Mozfab

I just became a hijack victim.  I do not know how else to describe it.  I am trying to go to certain places, and suddenly I am somewhere else,  It happened seven times JUST NOW.   I am flummoxed.   and frustrated.   I do not go to weird places on the net---I don't randomly click unknown things.  I have lost control!!!  (YIKES!!!)  Please help. Donna

Hi Michael, thanks for the reply have tried Spybot prior to using the Malware removal proceedure that's on the forum, it did find some culprits but, did not improve the internet redirecting part of the problem. But now seem to be good  i used malwarebytes and the others recommended on this forum. and all seems good. I have only one prob left  this always comes up when i boot up the PC on the desktop in a Notepad. Don't know what it is [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787 --- hoping someone can help. where i can find it in the system, have gone to Msconfig/ startup but not there. Thanks In advance. Mozfab. has become a link when pasted here.

Hi Maurizio, Don't worry, no problem. Cheers and good luck, Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & Security - Since 2003. ~~~ My MVP Profile: https://mvp.support.microsoft.com/profile/Vincenzo

Download, install, update and scan with each of the two programs below to check for/remove Malware/spyware. If necessary, do all the above work in Safe Mode with Networking. To get into Safe Mode with Networking , tap F8 right at Power On / Startup, and use UP arrow key to get to Safe Mode with Networking from list of options, then hit ENTER. Read all info below before starting: http://www.malwarebytes.org/mbam.php Malwarebytes is as the name says, a Malware Remover! Download the Free Version from the link above. Download, install, update and scan once a fortnight. http://www.spybot.info/en/index.html Spybot Search & Destroy 1.6.2 is a very good, FREE Anti-Spyware Program. Download, install and update it. Then SCAN with it. Update it, and scan your System once a fortnight. . Important re: Safe Mode If you happen to find a problem that you can’t uninstall / delete, reboot the computer, and go into Safe Mode. To get into Safe Mode, tap F8 right at Power On / Startup, and use UP arrow key

See Mick's reply. In addition see my reply in your other thread: Internet hijacking Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & Security - Since 2003. ~~~ My MVP Profile: https://mvp.support.microsoft.com/profile/Vincenzo

Hi, Thank you for the update. I would suggest you to perform a Clean Boot to see if there is any software conflict as clean boot helps to eliminate software conflicts. Note: After performing the troubleshooting steps in clean boot, follow How to reset the computer to start as usual after troubleshooting with clean boot section from the article to start the computer to Normal startup mode . Reply with the results.

Hi and Thanks for fast response. I did check my pc for viruses and spayware.i used programs : AVG antivirus,Malwarebytes and Microsoft Safety Scanner. From all softwares only malwarebytes detected 4 trojan viruses and celan it sucssessfuly. I run troubleshooting for performance and i only got to disable some of programs that is startiing with my system.Only  error report is in windows Logs/System and error codes are : 7031,7011,7006,7001.7003,7006,7000,8003,7034,703217011,2019 and warrning codes: 11,219. I did do regulary disck clean,regystry clean and repair. So basicly i did prety much all i could do and i stil have same memory leek problem.Is there any more options about this problem? Thanks

Hi Filip Cenic, Welcome to the Microsoft Community. As per the description svhost.exe is using to much of ram. Provide the following information: · Have you made any changes on the computer prior to the issue? · Do you get any error message? · What is the make and model of the computer? I will help you with this issue. The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. I would suggest you to follow these methods. Method 1: Follow the steps from the article. Optimize Windows 7 for better performance Method 2: Perform a scan using Microsoft safety scanner. http://www.microsoft.com/security/scanner/en-us/default.aspx Note: Any data files that are infe

"Does anything seen here determine what could cause these occasional lag spikes? " Sorry - but not really. These sort of reports (similarly - dxdiag ) are tedious, and most of the content useless  to humans. But - Use SkyDrive to upload collected files and post screen shot/picture. (Updated: 1/16/2012) .

Thank you very much for your time. I ended up switching to my dlink1200 router and it solved the issue completely, still curious as to the error state but as long as im not lagging in game any longer im happy. Cheers! (=

I think that your question belongs in the Windows 7 - System Repair and Recovery topic area, but let's first deal with the suspicion of an infection. What is your installed antivirus software? What happens when you try to start Windows normally? To check for an infection: Try Hitman Pro Trial Version: http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/how-to-get-rid-of-malware/ba80504b-61f1-4d71-960f-b561798b7b42 -steve

Do you actually have a problem with your sys, or are you just curious/exploring using third party utilities? The system File checker will report on the status of origonal sys files http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Hi Arup, Do not delete anything in the registry or do anything else until you've completed all of the following INCLUDING obtaining assistance from Microsoft Support.  You may do far more harm than good and using normal procedures and resolving it with expert advice is MUCH safer.  You can try the suggested programs first or skip right to the bold section and start with expert help right from the start (which is faster, safer, easier, better, more likely to work and be more thorough, and be confirmed by a specialist in malware-removal - so I recommend you do that - though there's probably little harm in trying the other options if you want but you'll still need to contact support even if they seem to have worked to get it verified anyway). First, try the following programs if you haven't as they may help. I recommend you download, install, update, and run full scans with Malwarebytes: http://www.malwarebytes.org/ and SuperAntiSpyware: I hope this helps. Good luck!

Nothing notable under power.  Thanks for your help though, much appreciated.  What I will do is turn off the task scheduler service and see if the issue continues.  That should at least narrow it down.

But nothing in Power options [including advanced options] that is set for 1 hour or 1 hour plus the delay before sleeping.  I was half expecting something under Hard disk, Display or Sleep to be triggering an event at the relevant time. Sorry I can't be of any help then.

So I finally fixed the issue, but what it was exactly I'm not sure since I removed/disabled a few programs.  I had trackpad++ running (this is a macbook) which I removed and there was an nvidia update service which I disabled.  I don't recall what else I might have removed but it looks like one of those two is a good possibility. Bottom line watch out what you install.

Is there anything at all in Power options [including advanced options] that is set for 1 hour or 1 hour plus the delay before sleeping?  You'd think it should be over-ridden by the sleep command but please do check.  If you find anything, confirm that it really is the culprit by changing it to, say, 30 mins then sleep the PC again to see if the wake happens at that stage. If you have managed to identify a culprit then update associated drivers in Device manager, including the display driver as that accounts for many sleep-related problems [not because it is designed to do so but just because it does]. I cannot tell if you have run powercfg -lastwake or not.  It can yield sometimes useful info but does not always do so [in this case I would not actually expect any help from it at all].

The symptoms are identical to the original poster's.  No smoking gun to the cause anywhere... the regularity of the event suggests it must be some process setting a wake schedule as opposed to a hardware trigger (plus the "unkown" wake source), but windows just doesn't identify this in the event logs.

Simon Type Task Scheduler in the Search Box above the Start Button and press the ENTER key. A look around here may reveal what you are looking for. I just did and found more going on than I realised.

Simon With Window 7 the system can generate enormous numbers of Information reports. If you know the time it wakes up you could look to see what your system is doing just before and just after sleep ends. I suspect you may have an awful lot of reports in this period of time, which may make finding the one you want too large a task to take on. It may , however, get you the clue you want.

Good point, I never thought of looking there.  I deleted some old schedules but didn't find anything that was set to wake the computer.  Thing to note is it wakes exactly one hour after sleep, not on a specific minute of the hour.

What a useless answer, copy paste out of the generic trouble shooting guide.  First off, bad video drivers would not wake the computer from sleep, a hardware interrupt is required to wake since no software is running at that time. Who ever heard of a video card designed to wake a computer from sleep????   Dido for security software, computer is not running applications so how would security software wake it????  The rest of the answer, disabling startup apps, etc., way too general for troubleshooting a wake from sleep issue, a good time waster though.

Hi Tony W. BEFORE STARTING: Make sure you have the latest display drivers and BIOS installed for your motherboard. Regards, Divya R – Microsoft Support.

Problem solved, after a little bit of research and talking to some local technicians, and one has seen it happen.  The system restore screwed up a setting that doesnt hurt the system. the solution was eather leave as is and when updating make sure to end it, repair windows or reinstall cleanly on another hard drive.  Option one is what im on since its only activated by windows update.  Auto updates are off and i can end the process when it acts up with out a problem.

yah i aint going your site is getting blocked by my other 2 computer's antivirus', which are avast and norton and registering bugs on there.

Hi, make a xperf trace [1] to diagnostic the high CPU usage. Please upload the etl file to your SkyDrive [2] and post a link here. I'll take a look at it. André [1] http://www.msfn.org/board/index.php?showtopic=140264 [2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65 "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

the site is fine. Disable norton/avast when going to msfn.org "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Hello, I am facing the same problem of 100% CPU usage due to svchost. I am not at all a tech guy and not good with computers. How do I resolve the issue. I did not understand a word you said in the previous post. Please help!! UdyB

Install the WPT and run the xperf command I posted in my guide at msfn.org and upload the ETL file. Register at msfn if you want to see the pictures. "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

You could try adding the executable for Real Temp to the MSE scan exclusions. Additionally I would submit a support case to report this conflict. You can submit a support case here - http://www.microsoft.com/security_essentials/support.aspx?mkt=en-us&s=3#mainNav Jim - MVP Windows Live - Forum Moderator - Live One Care - Live Mesh - Microsoft Security Essentials

I just built this pc a week ago today, fresh formatting of Windows 7 Ultimate X64, a few days ago I started having an issue with a pop up window saying "windows explorer has stopped working", followed by "windows explorer will restart". ...I would like to continue using MSE but I guess I could switch to AVG if this can't be fixed. What anti-virus application was installed before you installed MSE and was the subscription still current? Has a(another) Norton or McAfee application ever been installed on this machine (e.g., a free-trial version that came preinstalled when you bought it)? Is RealTemp 3.4 supported in Win7 64-bit? Have you tried excluding RealTemp 3.4 from MSE's real-time monitoring? ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

Indeed I have two processes called csrss.exe. Is this normal? They are both verified by Process Explorer as signed by Microsoft. I am running in normal (not in safe) mode though. They both run from the same path "c:\Windows\System32". This is what Process Explorer reports though, it might be spoofed. Strangely, the one has memory working set of around 1-2 mb whilst the other around 8-12 mb. When I try to suspend the larger one using Process Explorer, my computer stops working immediately and I have to hard reset it. When I suspend the smaller one though, the computer continues to work for around 3 minutes normally. Only then it decides to stop responding. What is going on? I doubt that the audio I heard was coming from a website, since it happened twice and I was browsing very different websites at each time. The second time it happened I had just rebooted and as soon as I heard it I had closed my IE windows completely and it carried on for minutes. No other audio or communications pro

Hi, If it is not still happening then it probably was a background sound on a website or similar. I see nothing in the list and the issue might not have been driver related. To check drivers easily use DriverView - View - Hide Microsoft Drivers. DriverView - Free - utility displays the list of all device drivers currently loaded on your system. For each driver in the list, additional useful information is displayed: load address of the driver, description, version, product name, company that created the driver, and more. http://www.nirsoft.net/utils/driverview.html Hope this helps.

You have two instances of csrss.exe listed as processes seen in Process Explorer where there should only be one. This is one that malware imitates to allude detection as Perhaps you would like to call MS Support to confirm the above and/or advise them of results.  If you are in North America, you can call 866-727-2338 for free help  from Microsoft for virus and spyware infections. Hope this helps.

Using Process Explorer (not running in safe mode), I found the following drivers which I don't know what they are: dump_dumpata.sys dump_dumpfve.sys dump_msahci.sys The following are all my drivers loaded. Anything suspicious? WMILIB.SYS (Verified) Microsoft Windows WMILIB WMI support library Dll 6.1.7600.16385 C:\Windows\system32\drivers\WMILIB.SYS Microsoft Corporation WudfPf.sys (Verified) Microsoft Windows Windows Driver Foundation - User-mode Driver Framework Platform Driver 6.1.7601.17514 C:\Windows\system32\drivers\WudfPf.sys Microsoft Corporation

Nothing in your list stands out however keep in mind that Svchost could be loading something, malware can hide as a common program, and there may be nothing really wrong (or it has been eliminated). I went through  all svchost instances and all their DLLs loaded are signed by Microsoft. Can somebody spoof MS signatures? Did it ever happen in the past? Unless I was imagining, though, the VOIP-like audio broadcast I experienced two days ago really happened. There surely must be something there hiding. What do you think? If the thread has been eliminated, shouldn't the antivirus have told me about it? It seems that I am running out of ideas to do. Thanks though.

Hi, Two csrss.exe are not unusual. Also notice -> Microsoft Corporation (Verified) csrss.exe 376  1,336 K 2,744 K Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows csrss.exe 428 0.45 12,308 K 8,536 K Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Since you have performed all those scans there is no reason to suspect these are any part of a malware issue. In Task Manager - Processes tab - Right Click on csrss.exe and Open File Location - do on both. It may not take you to a location however if if does check to see it is the correct Windows location. Also in Task Manager - Processes tab - Right Click on END PROCESS - if it gives this warning it is the Windows version of csrss.exe. A virus or other malware will not give the warning and just complete the process. What is csrss.exe Process in Windows? Is it a Virus? How to Identify Orignal file? http://www.trickyways.com/2010/03/what-is-csrss-exe-process-in-windows-is-it-a-vir

Hi, Nothing in your list stands out however keep in mind that Svchost could be loading something, malware can hide as a common program, and there may be nothing really wrong (or it has been eliminated). Do a very thorough check with the tools below and add Prevx - leave SafeOnLine enabled in it for a while. If you need to check for malware here are my recommendations - these will allow you to do . Hope this helps.

Try downloading and installing them manually by downloading them to your desktop and installing them one-by-one. Insert the KB number to get the right updates and choose the one appropriate for your version of Vista: http://www.microsoft.com/downloads/en/default.aspx . If that doesn't work, try a clean boot http://support.microsoft.com/kb/929135 .  Deactivate your security software. Then try the updates again. Once done (whether or not it worked) be sure to reset Vista back to normal status as explained in the procedures. If the problem occurs in clean mode then just restore the system to normal status and reboot - this solution is not going to work. If that doesn't help (or if it does with those updates but automatic downloading still doesn’t work as will probably be the case since we didn't really do anything to fix whatever is causing that problem), please repost your question in the Windows Update Forum at: http://social.answers.microsoft.com/Forums/en-US/vistawu/threads where expe

Hi, · What was the recent hardware or software change made to the computer? You may try to uninstall the program and reinstall it to check if it helps http://windows.microsoft.com/en-US/windows7/Uninstall-or-change-a-program if the issue persists, please contact the software manufacturer for further assistance regarding the cdisplay issue, using the link mentioned below. Hope this information helps.

Ran Memtest86 five passes, no problem! Going to check if it has something to do with my installed drivers.

It seems to be some update that causes it. I had today 4 or 5 different computers with same symptoms. Maybe Microsoft forces users to change to another antivirus ;) Tiit

This is pretty off-topic, but it looks like a system file. So I think you should not delete it! DO THIS AT YOUR OWN RISK. I DON'T KNOW IF THAT FILE IS NECESSARY FOR NORMAL http://www.geeksaresexy.net/2007/06/04/how-to-delete-an-undeletable-file/

Reinstalled MSE, but apparently the driver verifier doens't dump information. Just like the normal memory dump didn't happen. Again my computer started crashing and no BSOD or anything. Uninstalled MSE and installing Kapersky Internet Security as I'm typing. Apparently, not a **** was given this day ^_^ Good luck if you seem to have the same problem. Regards, Hans

Hi Tiit, Apparently a new update for the engine came out a couple of days ago. Thought I read that somewhere, but I can't seem to find the information anymore. Don't have the time to fiddle with settings until it works. It has already cost me two days of my time, but let me stop complaining about something that is free. Just hoped that someone at Microsoft would see this post and know what to do about it. Regards, Hans

Small update! Both Avira and Avast Free didn't found any viruses on my computer. (Ofcourse I haven't had them installed both at the same time). Regards, Hans

Random_87 please confirm its windows 7 ?

There is a known issue http://answers.microsoft.com/message/ffb7bbc9-d8e9-45e5-a107-d296935e1a62?threadId=e7b8df81-c05e-4d24-be3a-42372307640f

Confirmed! I'm running Windows 7 Enterprise Service Pack 1 updated with all the updates that came through Windows Update

The Essentials scan consistently gets hung up at Windows\System32\caroot2\dberr.txt I can't seem to delete this .txt file in Safe mode. What do I do??

I have already tried TDSSKiller, and HitmanPro - both which came up with nothing. I might give RogueKiller a try. I will post this to the Avast Forums, thanks! Andrew

You're welcome. Thanks for the feedback, much appreciated. Good luck! bhringer

Some additional information possibly related to your font issue. MS14-045: Description of the security update for kernel-mode drivers: August 27, 2014 http://support.microsoft.com/kb/2993651 http://securitygarden.blogspot.ca/2014/08/microsoft-security-bulletin-ms14-045-re.html

Since you're using Avast you should consider going through their support options. http://www.avast.com/en-ca/support Did you try an Avast boot scan? Alternatively try the following: TDSSKiller http://support.kaspersky.com/faq/?qid=208283363 (Note: Change parameters to include additional options.) HitmanPro http://www.surfright.nl/en/downloads/ RogueKiller (download and tutorial) http://www.adlice.com/softwares/roguekiller/ For interpretation and further assistance with RogueKiller I suggest posting Adlice (RogueKiller) forum. RogueKiller Forum (in case you wish to post a log before taking actions) http://forum.adlice.com/index.php?action=forum

Hi, Your Windows 7 question is more complex than what is typically answered in the Microsoft Answers forums. It is better suited for the audience on TechNet. Please post your question in the following link for better assistance: Link to the forum: http://social.technet.microsoft.com/Forums/en-us/w7itprogeneral/threads

Microsoft changed memory management in Windows starting with Windows Vista. It treats it more like cache where all available is in use if its readily available. The following article gives a good introduction to how it works: https://blog.codinghorror.com/why-does-vista-us...

What I see is a Dell Factory install with AVG. Most tech enthusiasts won't even run a Factory or Upgrade install because they're so inferior that they'd expect endless issues. And no expert in forums (where we see the most cases) has recommended AVG since it bloated up and started causing issue ten years ago. I would at minimum go over this Checklist to make sure the install is set up correctly, optimized for best performance, and any needed repairs get done: http://answers.microsoft.com/en-us/windows/wiki... But remember that a factory or Upgrade install are inferior installs that most enthusiasts would never run in the first place because they'd expect endless issues. Most prefer to do the gold standard Clean install from this link: http://answers.microsoft.com/en-us/windows/wiki... There is also an automated Windows 10 Refresh which reinstalls Windows while leaving out the factory bloatware that throttles Windows and causes endless issues, and lets you save your files. https://www.h

In order to diagnose your problem we need to run Windows performance toolkit the instructions for which can be found in this wiki If you have any questions feel free to ask Please run the trace when you are experiencing the problem

There was a problem with the trace.  It did not start to collect data until it was well into it shutdown and PID 968 only affected a small amount of time and memory. (see snip) I would suggest you run another trace using the configuration specified in the wiki (this trace was missing a couple of parameters)

Hmm, that's odd. I'll see what I can do. It's tough, I dunno if I will be able to get it to capture what it needs to without it crashing out like it has been. Which procedure on the wiki should I follow? I followed the first one but I did see I missed some from it.

I do have a firmware update available, maybe that might help too. I'll try everything I can do before the scan which I can do tomorrow.

Here you go: http://1drv.ms/1hCplgR

And because it will likely come up, yes, I've scanned the particular files and file location for viruses and such, and haven't found anything of the sort, so I don't believe it's an svchost.exe virus, but I could be wrong.

Well, I ran through all my updates and checks, but the problem is fixed. I don't know if it was the last round of windows updates or the sound driver update, but it was one of those two for sure. I think it's more likely that it was the sound driver.

Thanks a lot for your reply. My OS is Windows7 (64bit). The Automatic upload installed  lots of drivers, patches and definetely a SP2 - but now I reckon it may refer to Office... The Software I have is Office Home Premium and Norton Antivirus 2010. I will run chkdsk and load the minidump on Skydrive later. I have never tried to boot in safe mode because after a while and a few BSOD, Window 7 manages to start. I have run memtest86 on all the RAM (8GB) but only for an hour or so. How long should I run it for to be a significative test? Anyway it reported no error.

Here is the link to the minidump: http://cid-0f2ed6f4bf1927d6.skydrive.live.com/browse.aspx/.Public/minidump%20Windows%207?uc=4

More details on ReadyBoost are here . Both bugchecks are SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M, one due to an access violation (looks to be corruption), and another due to an invalid instruction.  In the latter bugcheck, hardware is implicated.  This is consistent with the MEMORY_MANAGEMENT bugchecks ( the notion of "corruption" ). Try cycling through RAM modules to try to identify one that may be faulty - consider systematically eliminating RAM from the system - run with a couple of  modules for a while, and see how things go. Then try the other modules.

FWIW, Windows 7 doesn't yet have any service packs.  Perhaps you are referring to Windows Vista, then? Since this is a new system, I recommend contacting the manufacturer for support.  For the problems you report, they would likely need to be involved, any way. The details you provided and the characteristics of the bugchecks suggest you are experiencing memory corruption. This could be due to faulty hardware, or a buggy/incompatible driver.  When did the behavior start - any recent hardware or software changes? Can you upload the contents of c:\windows\minidump your SkyDrive , and provide a link? For dealing with Blue Screens, general guidance follows: Consider running chkdsk on all partitions.  Let chkdsk complete on each partition and see if that helps. Also consider running SFC /SCANNOW. For memory corruption cases such as you seem to be experiencing, it can be helpful to use Driver Verifier.  To enable Driver Verifier... start->verifier.exe->OK->Create standard settings- >Next->se

I run ckd disk and y/day it looked like it sorted the problem. I rebooted several times and run ok. Unfortunately today I got BSOD again! I enabled driver verifier and obtanied the following minidumps: http://cid-0f2ed6f4bf1927d6.skydrive.live.com/browse.aspx/.Public/minidum%20with%20verifier?uc=2 Next step will be to uninstall Symantec or uninstall the Windows automatic updates... what is readyboost by the way?

Ah, OK - Office 2007 SP2 makes sense.  The service pack is for the Office product, not for Windows. Run extensive memory tests. Note that memory that passes tests is not necessarily  good memory - it just hasn't failed a test. Consider systematically eliminating RAM from the system - run with a couple of  modules for a while, and see how things go. Then try the other modules. Again - since this is a new system, I recommend contacting the manufacturer for support.  For the problems you report, they would likely need to be involved, any way.   The MEMORY_MANAGEMENT bugcheck you report is often associated with faulty or misconfigured hardware, such as RAM.

Latest bugchecks are MEMORY_MANAGEMENT. Not may third-party drivers loaded in the latest dumps - pretty much, just Symantec/Norton drivers.  I'd suggest uninstalling (to remove the drivers) the Norton software and seeing if that impacts the problem. Do you use readyboost ?  If so, consider keeping the USB device removed from the system for a while and see if things improve.

no help

Hello I have a Toshiba Satellite A205 laptop Specifications: 2gb Ram 1.86 GHz Celeron use http://www.javacoolsoftware.com/spywareblaster.html  to protect ur pc from spyware , adware etc and keep it uptodate then use firefox as ur browser for firefox use ad block plus, no script and mcafee siteadviser for safer web browsing.

Hello Khawaja Hussain You have posted in the XP forum, but this seems to be a Vista system? Check all the Task Manager processes at the sites below. http://www.answersthatwork.com/Tasklist_pages/tasklist.htm http://www.tasklist.org/ http://www.processlibrary.com/ Also check msconfig and disable everything not needed to run at start up 1. Click on the Vista start icon in the bottom left corner of your screen. 2. Type MSCONFIG in the search box and then either press enter on your keyboard or double-click on the MSCONFIG program that appears in the search results. 3. Vista will ask you for permission to continue. You may see a box asking you to key in your computer's administrator user name and password. Or, if you're already logged into Vista as an administrator, you may see a box asking you if you would like to continue. Either way, follow the on-screen prompts to give Vista permission to continue. 4. Microsoft's System Configuration Utility will launch. Click on the Startup tab. Keep t

Hello I have a Toshiba Satellite A205 laptop Specifications: 2gb Ram 1.86 GHz Celeron http://www.avast.com/en-gb/free-antivirus-download make sure ur system is clean first

I don't remember the names of all the trojans. I scanned with Malwarebytes, then Kaspersky Rescue Disk. Supposedly they all got deleted. I just ran Avast and it reported a rootkit in the System32 \Drivers folder--some file with a random name that Google has never heard of. I tried to delete it but it shows an error message: A device attached to the system is not working. I tried windows repair; it detected no problems. So I had to try "upgrading" to reinstall the whole OS. If that doesn't work, I will try sfc /scannow

firstly run system file checker by opening command prompt with administrative privileges and type sfc /scannow let this scan to complete. It will repair any damaged system files. Also if the shutdown message comes up run "shutdown -a" command using run (windows key + R). Hope that it will help. But if some trojan earlier messed up with your registry then you might have to run windows repair by booting from dvd using windows installation dvd. Good Luck! Vanshaj Daga [If this post was helpful, please click the "Vote as Helpful" (green triangle) button. If it helps in resolving your issue, click "Propose As Answer" or "Mark as Answer" button. By proposing/marking a post as Answered, or Helpful you help others find the answer faster.]

firstly run system file checker by opening command prompt with administrative privileges and type sfc /scannow let this scan to complete. It will repair any damaged system files. Also if the shutdown message comes up run "shutdown -a" command using run (windows key + R). Hope that it will help. But if some trojan earlier messed up with your registry then you might have to run windows repair by booting from dvd using windows installation dvd. Good Luck! Vanshaj Daga [If this post was helpful, please click the "Vote as Helpful" (green triangle) button. If it helps in resolving your issue, click "Propose As Answer" or "Mark as Answer" button. By proposing/marking a post as Answered, or Helpful you help others find the answer faster.] sfc/scannow did not find anything wrong for me and "shutdown -a" did not work either.

On Thu, 12 Aug 2010 18:56:31 +0000, AlanFru wrote: I recently had a bunch of trojans How many? What Trojans were they? on my computer, and after removing them, Exactly how did you remove them? Using what software? How do you know that they have been removed? Windows displays the message "Windows has encountered a critical problem and will restart in one minute" whenever I turn on the wireless network switch. It happens in safemode with networking as well. Almost certainly, they have not all been removed. Bear in mind that if you have multiple infections, it is very difficult to thoroughly remove them all and in practice, you often can not. With multiple infections, the only possible cure is usually to reinstall Windows cleanly. Ken Blake

So reinstalling windows seems to have solved the problem. The mysterious driver file is gone now, but I will scan again with Avast to make sure. Still no idea what happened.

Hi, Do you receive any error number while trying to install Office 2010? Method 1: You may restart the computer in Clean Boot and check if you are able to install Office. Refer the article on How to restart the computer in Clean Boot: http://support.microsoft.com/kb/929135 Note : After you have finished troubleshooting in clean boot, ensure you restart the computer in normal mode. Method 2: If you are still facing issues installing Office, let's create a new Windows user account and check if it works. http://windows.microsoft.com/en-us/windows/create-user-account#create-user-account=windows-7 Hope the above steps are helpful. Let us know if you need any further assistance and we will be happy to help you. Thank you.

I have gone way deeper than this, and  tried every single method i found on microsoft forums related to that return code. I'm now reseting the ACLs of all files, using icacls to grant full control to all users, and linux to clean the ACLs that can't be changed within windows.

Probably too late now :( The error relates to permissions, usually There is an MS kb article on how to uninstall Office , both manually and using an MS FixIt if the usual Programs & Features uninstall doesn't function Using a registry cleaner is not required and could have had unintended consequences Do you have a restore point for a period prior to using Revo and your registry edits? Have you run the system file checker?

Hi Srinivas, Thanks very much for your prompt and detailed response. I was able to reboot the computer into safe mode without any problems and was then able to restart the computer from the user interface. I then restarted the computer from a standard session and could no longer replicate the "winit.exe" behavior. So it looks like the problem is resolved. If there are any logs or data files that I can supply that might be helpful, please let me know as I would be happy to supply them in case it can assist someone else. Cheers, Damian.

Alternative Solution for Windows 8 "SHUTDOWN PROBLEM" Download it here: http://www.mediafire.com/?qf2zrwi67rfse47 ScreenShot http://www.facebook.com/photo.php?fbid=508776585811574&set=a.494345923921307.104854.100000377118019&type=1&theater

Hi, Thank you for posting in Microsoft Community. I understand that you are facing shut down issues in Windows 8. I can imagine the inconvenience you have experienced. I will certainly help you with this. Were there any changes made to the computer prior to the issue? NOTE : Note: Any data files that are infected may only be cleaned by deleting the file entirely, which means there is a potential for data loss

I had the same problem and went through all the troubleshooting suggestions in these forums (including the disable services SOP) but may have found the cause: I had a problem with my old version of Photoshop Elements (6) not opening up properly in Windows 8.  I uninstalled it and installed the trial version of PSE 11.   Now the computer shuts down immediately! I'm sure there are different causes, but you might try uninstalling the oldest programs you have and see what happens.

Hi, Thank you for replying. I would suggest you to provide us any error logs related to issue from Event Viewer. Try the following steps: a) Move the mouse to the bottom left of the screen and right-click to get see a list of options. b) Select ‘Event Viewer’. c) Click an event log in the left pane. d) Double-click an event to view the details of the event. Events are classified as error, warning, or information, depending on the severity of the event.

In response to the original poster (Rui), below is what I found on my windows 7 home premium : c:\windows\system32\smss.exe is signed c:\windows\system32\csrss.exe is signed C:\Windows\system32\wininit.exe is signed c:\windows\system32\wbem\wmiprvse.exe is signed c:\windows\system32\services.exe is signed no dllhosts.exe, dllhost.exe instead is not signed C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE is signed On the other hand following microsoft process on my box are not digitally signed: c:\windows\system32\dllhost.exe c:\windows\system32\searchindexer.exe c:\windows\system32\svchost.exe c:\windows\system32\taskhost.exe c:\windows\system32\taskmgr.exe Will someone (preferably from microsoft) confirm which of the processes from the above two lists are really signed (or not singed) by Microsoft. Is there a repository where one could possibly check for fingerprints or hashes for these microsoft process. Thanks in advance.

I think this happens when you don't run Process Explorer elevated. If it's not elevated it can see that processes in different sessions are running, but can't get details about it.

Hello Rui, Where are you looking for the digital signatures? A digital signature is an electronic security mark that can be added to files. It allows you to verify the publisher of a file and helps verify that the file has not changed since it was digitally signed. Regards, Savan – Microsoft Support.

I would be really greatful if someone could provide me with the SHA hashes for the files mentioned in my earlier post. I am on windows 7 home premium SP1 (oem version) with all the latest updates.

Hi, I'm sorry to resurrect this old thread, but I have the exact same problem and no definitive solution can be found anywhere. http://i.eho.st/pp129w7j.png http://i.eho.st/ppw4fo5p.png Resource Monitor shows the memory space used by processes OK, but Task Manager refuses to do so. SFC /scannow didn't find anything wrong with the system files. Maybe a missing registry key is causing this ?

Hi, a. Did you face this issue earlier? b. Did you make any recent changes to your computer? Method 1: Try this. It should help: I. Suuresh Kumar - Microsoft Support. Visit our Microsoft Answers Feedback Forum and let us know what you think.

Hi Everyone! I have the solution to fix this problem, Go to: Control Panel -> Region and Language, in Formats -> Format, i choose English(United Kingdom) or US. OK, and open your Task Manager  -> Processes, Ta da.. your memory usage will appear again. You can change the Format in Region and Language to your Language again, this will take no effect to task manager. Perharps, when we install or config something that has link with the Region and language. It was take effect to Task Manager/Format to show the number of memory usage. I just don't know why this thing(s) can take effect to the task manager, perharps the registry or something. Hope this help :) Cheers!

The answer isn't work. I have the same problem, but, not solved yet until now. Is there any solution for this problem? I haven't found any answer to solve it.

same here and I not yet a solution.

Thanks for your reply and no its never been like this, I can normally game/stream/browse simultaneously at about 67% fans are going at full speed now, temps are normal (cpu temp about +5c increase) I tried what you asked : but utilization is still at 100% , Clean boot is not a viable option .. this was an old windows 7 os upgraded to 8/8.1 and now 10 and do not have original key. any other ideas? and why is utilization reading differently in perfmonitor2 ?

Hi, Tell us more about your concern. Has it always been like this before? Do you notice any change in terms of performance? Review this article and check if it will make a difference. Specifically, adjust the performance of Windows and check if the issue replicates. : Changing paging file size into larger than which was recommended by Windows is not going to be helpful. Let us know how it goes.

Its ok i found the solution, seems something changed in the power settings after recent update I simply reset all power plans back to default hope this helps someone

We appreciate that you shared the step that worked for you. It would certainly help other members who might stumble upon the same scenario. Let us know if you encounter any issues in the future. Have a good one!

In order to diagnose your problem we need to run Windows performance toolkit the instructions for which can be found in this wiki If you have any questions feel free to ask Please run the trace when you are experiencing the problem

Thanks JS. The only child process of wininit.exe using any CPU is SearchIndexer.exe which uses between 3-9%. wininit.exe is still reported as using 48-51% all the time but even with the process tree fully expanded I can't see any processes to account for it.

You're welcome. Nice to hear that my guide helped you to fix it :) "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Hi, make a xperf trace [1] to diagnostic the high CPU usage. Please upload the etl file to your SkyDrive [2] and post a link here. I'll take a look at it. André [1] http://www.msfn.org/board/index.php?showtopic=140264 [2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65 "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Yep, as I said, I've scanned with AVG Free and Panda Activescan.

Have you run a Virus scan and if so what AV software did you use? JS http://www.pagestart.com Never be afraid to ask. This forum has some of the best people in the world available to help.

Ran MalwareBytes Anti-malware which found a Security.Hijack: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe (Security.Hijack) -> Quarantined and deleted successfully. Looks like a false alarm to me but removed and rebooted anyway with no effect. Any other ideas? By the way I don't have two anti virus installed: Panda Activescan is a web-based active x thing which I ran with AVG switched off for a second opinion.

On Tue, 10 Aug 2010 15:01:08 +0000, Tamlyn wrote: My Windows 7 Dell laptop has recently become really slow. CPU load is way up high, the fan is on full speed and the hard disk is very busy. Task Manager shows that wininit.exe is permanently using 50% of the CPU with other processes mostly using no more than a few percent. In safe mode, wininit behaves itself and CPU load remains low. In fact I'm writing this post in safe mode because the computer is too slow to use in normal mode. I've run virus scans with AVG and Panda and both came back clean. The most likely problem these days is malware infection, and that's what you should check first. Neither AVG nor Panda are among the best anti-virus programs. And a virus is only one type of malware; spyware infection is very common. I recommend that you begin by downloading and running MalwareBytes AntiMalware and SuperAntiSpyware (both free). And I also recommend that you replace your two antivirus program (you should never have more than one

Try Process Explorer: http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx SysInternals Forums: http://forum.sysinternals.com/ Once you have Process Explorer installed and running: In the taskbar select View and check 'Show Process Tree' and the 'Show Lower Pane' options. Move your mouse cursor over any column in the right hand pane and right click and check the following boxes: 'Command Line' and 'Version'. (This will provide some of the detailed info you need) Next click on the CPU column to sort processes by %CPU usage. Then click on and expand the process to identify the specific sub-process that's using most or all the resources. Next click on the sub-process or process listed under the System Process that's using most or all the CPU %. Once the process or sub-process is highlighted, right click and from the options listed select: Search Online. This should display what out there on the web about that process. Note: some entries like Explorer, System process (as explained

Thanks Andre. Looking at the xperf trace I noticed AirfoilInject3.dll using up a few percent of wininit's CPU time so i tried uninstalling Airfoil and that seems to have fixed it! What's weird is I've had Airfoil installed before with no problems. Thanks everyone for your help.

yes i am having the same problem. screen freezes after any amount of time. the only way out of it is if i power down...purchase computer at best buy and its only 1 1/2 old. they tell me its windows???????????? help

Can you check one more thing in your power settings? Is you hard drive set to powerdown after 20 mins? You will find this in the advanced power settings.

You need to post a link here to the files in your OneDrive.

Gerry, Here it is, Dell Latitude E5470, its system information, driver lists and its associated 5 minidump files are put in zipfiles: https://onedrive.live.com/redir?resid=96C10C60401390B9!1049&authkey=!AN9QVVkkviWy63I&ithint=file%2czipx

Gerry, I have proceeded further to upload information that you have requested. Are you able to download them? Thank you.

Please upload copies of your dump files as shared files to your OneDrive with a link here. Please include only those less than 14 days old and limit the number to no more than five. The dump file will be created at c:\windows\minidump. You may need to change your settings in Windows to be able to see the file. To show hidden files type Folder Options in the search box above the Start button and select View, Advanced Settings and verify that the box before "Show hidden files and folders" is checked and "Hide protected operating system files" is unchecked. You may need to scroll down to see the second item. You should also make certain that the box before "Hide extensions for known file types" is not checked. What is your computer make and model? If not a branded computer what is your motherboard make and model? Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Se

I've had this problem for about five days.  It started the moment I saw a pop-up that used some black magic to infect my computer with Malware Doctor (scamware).  I got rid of the virus through MalwareBytes Anti-Malware, AVG, and Kaspersky.  I am now left with the destruction from the virus. I booted with Disable automatic restart on system failure and my computer still displayed the error message "Windows has encountered a critical problem and will restart automatically in one minute. Please save your work now."  It then restarted automatically after one minute. Any other ideas?

Hi, Virus might have damaged system files which cannot be fixed. Since the system restarts as soon as turn on your computer, I would suggest you to perform custom install of windows 7. Performing custom install will move all the files and folders on the installation drive to a folder named Windows.old. later you can recover files and folders from the same. Refer: http://windows.microsoft.com/en-us/windows7/Installing-and-reinstalling-Windows-7 Thanks and Regards Umesh P - Microsoft Support. Visit our Microsoft Answers Feedback Forum and let us know what you think. [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

Hi, How long have you been facing this issue? Step 1: This might also be because of virus or malware. Disable the automatic restart on system failure and then, run an online malware/virus scan on the computer. Here is how you do it: a. When your computer starts keep pressing F8 on your keyboard till you get the Advanced Boot Options screen. b. Now, use arrow keys, select Disable automatic restart on system failure and press Enter. http://windows.microsoft.com/en-US/windows7/Advanced-startup-options-including-safe-mode http://onecare.live.com/site/en-US/default.htm http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356 Step 2: Install all updates through windows update and check for the issue. Refer: http://windows.microsoft.com/en-US/windows7/Install-Windows-updates Error in Windows 7 or Windows Server 2008 R2 when unlocking a computer or switching users http://support.microsoft.com/kb/976586 What is System Restore? http://windows.m

Hi Andrey, Your question is beyond the intended scope of these consumer level forums. The issue you posted would be better suited in the TechNet Forum. I would recommend posting your query in the TechNet Forum. http://social.technet.microsoft.com/Forums/windows/en-US/home?category=w8itpro Thanks and regards,

Hi, I would suggest you to post your query in the Technet Forum for better assistance. http://social.technet.microsoft.com/Forums/en-US/category/windowsserver

DP The verified dmp was related to the NETwbw02.sys Intel® Wireless WiFi Link Driver from Intel Corporation.  I would remove the current driver and install the newest driver available.  Yours is from 2013

I ran both tests, but there was a problem with the driver verifier. The memtest showed no errors and passed all tests. Driver verifier threw a new exception when trying to boot. After the reboot windows was stuck on the spinning dots so I couldn't get any results. I had to reset the verifier because I couldn't enter Windows. There were a couple crashes these days so here's a link as they might say something else (as far as I can remember the exceptions were different) - http://1drv.ms/1G3DzAA

I installed the latest Intel wireless drivers and software and it seems that the problem is gone. Thank you very much for the help.

Sorry for not reading the instructions. Here's the whole zip containing the system info, pc specs and dumps: http://1drv.ms/1DUHAoJ

DP No worries I appreciate the work you did.  There were 3 different errors so please run driver verifier to find the underlying cause.  I suspect it is acpi.sys (an OS driver) These crashes were related to memory corruption ( probably caused by a driver ). Please run these two tests to verify your memory and find which driver is causing the problem.  Please run verifier first.  You do not need to run memtest yet unless you want to. If you are over-clocking anything reset to default before running these tests. In other words STOP!!! If you do not know what this means you probably are not 1-Driver verifier ( for complete directions see our wiki here ) 2-Memtest. ( You can read more about running memtest here )

Kudo's on the windbg & symbols We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

Hi, Your question is beyond the scope of these Forums This Community is mainly for home users and their computer problems, not business systems. Kindly post your question in the TechNet Server Forums. http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver TechNet Forums: https://social.technet.microsoft.com/Forums/en-US/home MSDN Forums: https://social.msdn.microsoft.com/Forums/en-US/home Cheers.

My wininit.exe file is in C: /windows/system32 1. Why does it listen for TCP traffic? 2. would there be any problem if I blocked it at port 49152? 3. Like if I made a firewall rukle that blocked all inbound connecftions to port 49152, Could it cause problems on my system? Not sure if this posted,  let me say again This concerns me because about 7 months ago, an unsolicited IP address came through my firewall and was allowed to make contact with wininite.exe. Right after that, my security product gave me the following message "IP address XXXXX is requesting to access wininite.exe" there were several of these within a minute, all different IP address. I declined the requests of course and then set a firewall rule to block port 49152 So it concerns me that this file would be open to cconnection from unsolicited IPs. Plus since it is usually a port for file sharing, that makes me even more concerned. I don't p2p or file share

Hi BossyX22 , 1. Do you experience any error message regarding this Wininit.exe file? 2. Where is the Wininit.exe file located? It is normal for Wininit.exe to listen to TCP traffic . If the Wininit.exe file is located in the path other than C: /windows/system32 then it is a virus. NOte: the PORT 49152 is used for custom or temporary purposes and allocation of ephemeral ports. Thanks and Regards: I. Suuresh Kumar - Microsoft Support. Visit our Microsoft Answers Feedback Forum and let us know what you think.

(bump) Is anyone running IPv6 at all with W10?

this is the last thread-bump - I'm very curious about IPv6 experience in W10.  but if nobody's doing it, what else can I say?

Hello, I suggest you to create new Windows User account and check if Office 2016 application get installed. Kindly refer the following link to create new user account. http://windows.microsoft.com/en-us/windows/create-user-account#create-user-account=windows-7 Once the new User account is created, sign out of old account, and sign-in to new User account to check if you are able to install Office 2016. I hope the above information helps. Let us know if you need further assistance. Thank you.

I also tried installing Visio 2016 and had the same result. Got to 90% and then told me another program is installing.. When I go to eventvwr I do see these messages after a series of Office Software Protestion Platform Service events: EventID: 11708 Product: Office 16 Click-to-Run Licensing Component -- Installation operation failed. EventID: 1033 Windows Installer installed the product. Product Name: Office 16 Click-to-Run Licensing Component. Product Version: 16.0.4266.1003. Product Language: 0. Manufacturer: Microsoft Corporation. Installation success or error status: 1603. EventID: 1042 Ending a Windows Installer transaction: C:\Program Files (x86)\Microsoft Office\root\Integration\SPPRedist64.msi. Client Process Id: 4060.

Hello, I suggest you to create new Windows User account and check if Office 2016 application get installed. Kindly refer the following link to create new user account. http://windows.microsoft.com/en-us/windows/create-user-account#create-user-account=windows-7 Once the new User account is created, sign out of old account, and sign-in to new User account to check if you are able to install Office 2016. I hope the above information helps. Let us know if you need further assistance. Thank you. Sadly this did not work.

"Nothing has changed majorly to my PC at all I did a clean install around 2-3 weeks ago as I had a problem with an old HDD" Reinstalling Window is something major as there are many possible differences in the way you setup and tweak the OS plus differences in software. I'm still learning how to use the dmp stuff but - I see you have Alcohol 120. Alcohol and Daemon Tools are know for causing problems. (btw - did you use Alcohol to burn your copy of Skyrim ? ) Try uninstalling this, or at least stop it from launching with Windows - You can do this in Start > Run - then type msconfig to bring up System Configuration  Then go to the Startup tab. Clear the tick box next to Alcohol and anything else you don't want/need to have running in the background all the time. More in the link below - BSOD at high memory usage, fltmgr.sys - Windows 7 Forums fltmgr.sys  (one of the errors in the dmp) can also relate to HDD but may just be corrupt files in the games install. Do you have mods installed ?

SP1 isn't installed, please do the following: [quote] Installing Windows 7 Service Pack 1 1.  Visit the PC manufacturer's website and update ALL SystemProductName = System Product Name ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

If you have problems with the 470 GTX, but not with the 7900 GS - what's the only difference? See if you can find another video card to try.  If the 470 GTX is still under warranty, see if you can get an RMA on it.  If not, see if you can borrow a high end card to test.  If not that, then try buying one from a store that will let you return it for a refund if you don't need it.

Thanks again for the replies guys! Okay, so I've uninstalled Msi afterburner ( was just using for monitoring and manual fan control) and Alcohol 120% ( with the method suggested by usasma) but the problem still persists. No blue screens this time though just hard resets. About skyrim I have reinstalled it many times and the problem still persists. I used alcohol 120% to mount a virtual copy of my cd. Thinking of what you might have been saying about alcohol corrupting some of the files I also installed skyrim 2-3 times with my original cd. The same problems occured. I've installed all of windows updates available for my system Inc SP1. I have also ran various HDD diagnostic tests, Including WD own "Data lifegaurd diagnostics." None of these have came up with any errors, regarding my ram I have ran memtest86  which also found no problems. I will try this extra test you have suggested. I'm starting to get very confused as to what the problem could be so I interchanged some hardware to se

Thanks for the replies guys! :) I've uploaded all the files you have asked for to skydrive, here is the link https://skydrive.live.com/#cid=0BC789D39E6ECD91&id=BC789D39E6ECD91%21161 Nothing has changed majorly to my PC at all I did a clean install around 2-3 weeks ago as I had a problem with an old HDD, which I just replaced with the Caviar Blue so I'm hoping that isn't dying already :/ I've already done a chkdsk scan, as after it crashed and restarted ( no bsod this time just full restart) It did a scan as windows started up and found no errors on the Caviar Blue. I will run some of these diagnostics you mentioned and some other steps. Thanks for the help again guys! Anonter

Hi, - Were there any recent changes made to the computer prior to the issue? I would suggest you to try the steps mentioned in the Microsoft help article and check. Method 1: http://windows.microsoft.com/en-US/windows7/Update-a-driver-for-hardware-that-isnt-working-properly Hope this information is helpful.

It's odd that the 470 has no problem running BF3 and does have a problem with Skyrim. When using the 470 are you enabling Anti-aliasing or other resource sapping settings like  HBAO or SSAO (whichever type of ambient occlusion Skyrim uses)  that you may not have enabled in BF3 ? Have you tried disabling your Anti-Virus while running Skyrim ? Have you tried installing to a non-default location ? When you re-installed Skyrim did you go for a 'clean' install ? ie. - did  you also delete any folders it made in your User \ My Documents \ My Games -  or  App Data \ Local folders before reinstalling (you can backup the save is you like) ? Also deleting relevant  registry files can help, as there may have been a corruption or link to the original install in the registry as well. Look in  HKEY_LOCAL_MACHINE \ SOFTWARE \ WOW6432Node \ Bethesda. Have you tried the Skyrim forums at  the Nexus ? Skyrim Technical Support - The Nexus Forums While not directly related to the current issue - If you use

Please provide the following information to help us figure out the problem: - Please zip up the contents of the C:\Windows\Minidump directory - Upload it to the Public area of a SkyDrive account ( https://skydrive.live.com ) - Post a link here so we can download it. and - Go to Start (or press the “Win” and “R” keys at the same time), type in "msinfo32" and press Enter - When the utility opens, save a copy of it as an .nfo file, and another copy as a .txt file (in case the .nfo is corrupted - which happens fairly often) - Zip them up and upload them to the Public area of a SkyDrive account ( https:/ /skydrive.live.com ) - Post a link here so we can download it. Use SkyDrive to upload the collected files: http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65 While waiting for a reply, please run these free diagnostic tests: http://www.carrona.org/hwdiag.html In particular, run the hard drive diagnostics on ALL hard drives (as I suspect th

Not sure what you mean by "what's the only difference?" My 470GTX is still under warrenty by EVGA and I have already contacted them about an RMA. Unfortunately I lack the funds to try the method you have suggested and none of my friends have a spare high end card. I will just have to wait until I can get an RMA. I am still shocked that this is a GPU problem.

What's the difference was rhetorical - the difference was the 2 different video cards.  If one card has failures and the other doesn't - then the most likely cause is the card that's having failures.

Hi There two kind of activities shown by TCPView. Activities that use the ports for an outside connection. They can be identified by the remote address. As in this line, LoJackNotifier.exe:2124    TCP    192.168.1.142:49201    209.53.113.180:80    ESTABLISHED The second IP 209.53.113.180:80 is an Internet IP and thus it means a connection going out. Looking at your output there is only two lines connecting out an thus directly relted to Interent activity. The rest of the activites are LAN activities that depend on whatever the computer does internally at the time. In addition, the list is Not an active only list. It shows all the recent activities which means that many-listed items might being active for few seconds, and already gone. However they are recorded toward the end of the list. ------------------------------------ A lot of the enthusiasts chatter over forums is based on users that think that computers are working similar to the house hold plumbing , so if there is too many Sv

Hi oldmuttonhead, Try the steps below and check if it helps. 1. Go to the command prompt. 2. Type “notepad.exe” 3. Go to file open and browse to the cbs.log files.

The partitions on the drive are normal for HP but the System partition, which contains the files needed to boot, has been modified by the virus. The instructions at the end of this article show you how to repair it. http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=DOS/Alureon If you can't get the Recovery partition to boot, you will need a Windows disk or a repair disk.

Hi LydiaNM, You may contact the Internet Service Provider and have them come out and check the Internet Connection. You may also perform clean installation if you think someone is spying on there. Note: Back up all of your data before performing the clean installation as you will lose everything. Installing and reinstalling Windows 7 http://windows.microsoft.com/en-US/windows7/Installing-and-reinstalling-Windows-7 Hope this information helps.

Hi, If you think your computer is infected, try following the steps in this virus/malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide It contains instructions that will remove most malware infections. I hope this helps you. Brian

Malware ????????? Oho. Thats really gettin interesting. I use Avira free version. I aint got much software, all i have is the standard + a couple of professional soft, no malware for sure. And also the driver software came with computer, but also not much and i didnt install all extra helper stuff. So, No extra apps or speedupmypc etc. Is it really not a standard file? As I have googled, it seems to live in System32\ subfolder-> the lang is the current windows ui language installed. What am I supposed to do now ? If i scan it with avira, and also the above mentioned Malwarebytes,  they dont find anything. Please let me know what i should do, Thanx a lot.

It does on the systems here

winlogin.exe is from MS and it will be a running process, as expected nvvsvc.exe is from Nvidia csrss.exe is from MS, as are the others. This is a free malware detection tool, if you want to use it http://www.malwarebytes.org/products/malwarebytes_free So what other security software are you using? and why should you be overly concerned? Other software that you have installed may appear as a running process, or service

Thanks, Ill try the program. By the way... there's also winlogon.exe.mui in a subfolder of system. I guess its a standart system file eather, im i right? Thanx guys.

Both are core ms win apps, when located in \system32, winlogon.exe will remain a running process

I know, they ought to be win apps, i didnt know they keep running, and i havent noticed it before, and if you google get info that they must disappear at some point, winlogon.exe at least... otherwise its most probably infected... Are you 100% sure that winlogon.exe remans a running process all the time? Thanx.

Thanx, but it doesnt look safe, or is too complicated. The only important question is, if -> winlogon.exe remains all the time running, is that only on my and on the Palcouk ' s system or its a standard behaviour of system ??? also... wininit.exe csrss.exe nvvsvc.exe I think the windows guys must know "exactly" what they've programmed, and whats the system behaviour, let alone winlogon... The system works fine, but it IS possible, and there's a good reason for that, i could be spied. Thats why Im so worried. And as Ive never noticed winlogon running after the system fully started, seemed suspicious... If any new ideas, would be thankful, but thank's anyway.

winlogon.exe.mui is reported as malware, installed by a rogue anti-spyware/AV program I did previously ask what other security software are you using, in addition have you installed any 'SpeedUpMyPC' type of program, free or paid for?

Set of test utilities for DIY computer builders: Note: If you are OverClocking or use any automatic overclocking BIOS features, Intel EIST or Turbo Mode (Disable it), then drop back to the stock speed as a starting point. First try running Memtest86+, http://www.pagestart.com Never be afraid to ask. This forum has some of the best people in the world available to help.

We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

I have done all as you suggested in Services.  I have figured out what the issue is.  My 10 year compaq computer is running as a "THIN CLIENT." I confirmed this when I disabled remote access and my Desk Top Icons vanished in addition to my task back.  Any help on how I can convert my system back to a independent fucntioning computer would be very appreciated. Thank you. your log on account could be corrupted or maybe not . make another admin account with a different password . then make a different password for the old account  . shut down . restart in safe mode with networking , in your new admin account , do as brian said  with every anti malware you can find . that may  not be what other people would say to do , but in my opinion it is allways safer to have two admin accounts  .

I have done all as you suggested in Services.  I have figured out what the issue is.  My 10 year compaq computer is running as a "THIN CLIENT." I confirmed this when I disabled remote access and my Desk Top Icons vanished in addition to my task back.  Any help on how I can convert my system back to a independent fucntioning computer would be very appreciated. Thank you.

Hi, If you think your computer is infected with malware, try following Step 1 and 2 in this virus/malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide It provides simple instructions on how to remove malware from a computer. If you have any questions, just ask. I hope this helps you. Brian

if you do not have any wireless internet none should be listed in device manager or internet connections . have you turned off anything in services that would let others access your computer? in safe mode   run virus scans. and as brian said .

Hi, If you think your computer is infected with malware, try following Step 1 and 2 in this virus/malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide It provides simple instructions on how to remove malware from a computer. If you have any questions, just ask. I hope this helps you. Brian Brian, How can I find any hidden virtural wireless Network Addapters running on my PC?   Brian, I appreciate your help. I know some thing very "weird" is going on with my computer.  This not a malware issue.   I was in my fire wall blocking ports for programs and apps I don't use, the moment I blocked something, A brand new one "installed " itselft and Was not blocked.   Brian, my next door neighbor doesn't like me and for my saftey i felt it was necessary to do a little research on him and came to find out , he has a degree in Computer science from Virgina Tech.  My computer issues interesting enough, didn't start until after a very LOUD conversation I had with Time warner

Hi James, Welcome to Microsoft Community and thank you for posting your query. I understand your inconvenience that you are facing an issues with BSOD errors on your system, we will help you to resolve this issue. As of now I suggest to follow the steps below and check if it helps, and also we will analyze the dump files and get back to u. Before performing any troubleshooting steps, please let us know if you have made any recent changes to your computer prior to the issue. Please perform the above troubleshooting steps and kindly get back with the status of the issue, we will be happy to help you. Thank you.

Hi, ntoskrnlmp.exe is a Windows component which means something else drove it into Fault. We need the actual minidumps - and there may be information to help in it - and maybe not. If DriverVerifier creates a minidump upload it and post the link here so we can analyze it. Rob - SpiritX

I've been trying to upload the 2 files to SkyDrive but each time it says that I cannot upload folders or empty files.

Hi, Resolving stop (blue screen) errors in Windows 7 - has a section for if you can or can't start Windows. http://windows.microsoft.com/en-us/windows7/Resolving-stop-blue-screen-errors-in-Windows-7 Check this thread for information using BlueScreenView, MyEventViewer and other methods to troubleshoot BlueScreens - top 3 replies (+1 other). Microsoft MVP

Or at least it should be on skydrive now.

You need to post the link to the file in a message here. Here is mine as an example. https://skydrive.live.com/?cid=9AC481C015DAEE85&id=9AC481C015DAEE85%21125 Rob - SpiritX

Hi, Copy the files to another folder or the Desktop then upload them from there. Rob - SpiritX

https://skydrive.live.com/#cid=7BA1FF09DE947DDF&id=7BA1FF09DE947DDF%21196 Sorry about that, I thought you could just get to it by my username/account.

Alright it worked

This is what i got from bluescreenview 100413-82384-01.dmp 04/10/2013 4:06:42 PM CRITICAL_OBJECT_TERMINATION 0x000000f4 00000000`00000003 fffffa80`10995b30 fffffa80`10995e10 fffff800`035c50d0 ntoskrnl.exe ntoskrnl.exe+75b80 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.18229 (win7sp1_gdr.130801-1533) x64 ntoskrnl.exe+75b80 C:\Windows\Minidump\100413-82384-01.dmp 8 15 7601 292,880 04/10/2013 4:11:21 PM I'd rather not have to read every single post that was created in the link, I'd like to know what's wrong with mine without installing a bunch of programs and trying to figure out where to find this and that.

Incorrect link - put the file in your public folder and the copy the url in the browser's address bar - then past it in here. Your view should look like my example before you copy the link. Rob - SpiritX

Hi there Varun, thanks for your question. Hopefully I can help! Please try performing a clean boot: https://support.microsoft.com/en-au/help/929135... After this, please check the CPU usage again. If it doesn't resolve the issue, try booting into Safe Mode: https://support.microsoft.com/en-au/help/12376/... If the CPU usage goes back to normal in Safe Mode, this may indicate a service or background task causing wininit.exe to run at high CPU usage. If this is the case, please let me know and we can diagnose further! Thanks!

Yes CPU usage goes back to normal safe mode. I've even tried resetting my windows, it was only a help for a few days but then again after a few days this became an issue.

It's AVG Free. But I'm a little sceptical about it because a while back, something similar happened like that and it was the virus itself doing something weird. On another note: I did as I said and left the computer alone for a while. I started up some scans, includding the one Srinivas R posted, then turned off my monitor and went to do other things. After waiting an hour or so, I came back to my computer restarting itself and figured it was part of the clean-up from one of the scans. Of course, it was not. Now my computer is in a prepetual state of restarting itself and I can not do anything. I've tried to start it up in "Safe Mode", but it just repeats the process of restarting itself. The system is off now and has been off for a little while now... Currently on another computer. Is there anything that can be done at this point?

Be careful. Completely valid system files are occasionally identified as malware. These are called "false positives" You were wise to check further. I would recommend using an alternate scan tool. Here's one that can me run from the web... http://www.superantispyware.com/onlinescan.html Alternately I would suggest Malwarebyte's Anti-malware (free download) You can also upload your wininit.exe for instant evaluation here: http://www.virustotal.com/ and here: http://www.kaspersky.com/scanforvirus "aburningman" wrote in message news:8b18f1f5-19cc-447e-9a53-c4c4461cc703... > I was browsing the internet as I normally do when I got an error message > telling me "Explorer had stopped working." > Knowing this shouldn't happen out of nowhere, I ran a computer scan and > the results came back as a file called "wininit.exe" had a Trojan Horse > in/on it. I tried removing it but could not so I searched around to see if > the file itself was the problem. Found out that the file is system > critical

Start a new thread about the continuing restarts you're seeing. That's a frequent topic here. Although I can't offer much on that topic, there's others who can. If it's buried in this trojan thread, you won't have as many "eyes" looking in on your problem. "aburningman" wrote in message news:71f38bbf-1eab-41c8-ab50-b99e43e4a848... > It's AVG Free. But I'm a little sceptical about it because a while back, > something similar happened like that and it was the virus itself doing > something weird. > > On another note: I did as I said and left the computer alone for a while. > I started up some scans, includding the one Srinivas R posted, then turned > off my monitor and went to do other things. After waiting an hour or so, I > came back to my computer restarting itself and figured it was part of the > clean-up from one of the scans. Of course, it was not. Now my computer is > in a prepetual state of restarting itself and I can not do anything. I've > tried to start it up in "Safe Mode", b

I would suggest going via the official Microsoft Virus Support route (via email or phone) as in the past they have been fantastic in manually helping remove viruses: https://consumersecuritysupport.microsoft.com/default.aspx?altbrand=true&SD=gn&mkt=en-gb&st=1&wfxredirect=1&gssnb=1&entrypt=vssc

What program did this screen shot come from? You might want to post for help here: http://www.malwareremoval.com/forum/index.php They are working with that same trojan on another machine. "aburningman" wrote in message news:330b8505-3414-46e2-bb62-1de6711373c0... > > Thank you for the respond. > > I did what you mentioned and ran some more scans with the two programs you > gave as well as scanned the file directly with those virus scanners. > The scanners came back with these results: > Kaspersky says it's called "Trojan.Win32.Patched.kl" but has no more info > on it. > VirusTotal came back with a 32/42 (76.2%) scan. The majority of them > saying the same as Kaspersky. > As for the two anti-virus programs, they ran full scans on my computer and > both mentioned there was some bad stuff on my PC. I let them do their > thing and after all the scanning, they cleaned everything up and said they > had to restart. > After all that, this keeps coming up: > http://i4.photobucket.com/albums/y13

Thank you for the respond. I did what you mentioned and ran some more scans with the two programs you gave as well as scanned the file directly with those virus scanners. The scanners came back with these results: Kaspersky says it's called "Trojan.Win32.Patched.kl" but has no more info on it. VirusTotal came back with a 32/42 (76.2%) scan. The majority of them saying the same as Kaspersky. As for the two anti-virus programs, they ran full scans on my computer and both mentioned there was some bad stuff on my PC. I let them do their thing and after all the scanning, they cleaned everything up and said they had to restart. After all that, this keeps coming up: http://i4.photobucket.com/albums/y132/vincent_00/Untitled-2-1.jpg I don't really know where to go from here so I'm not even gonna touch my computer until I know what's going on.

Hi Aburningman, Which is the security software installed on the computer? Have you tried to update the Anti virus program on your computer and remove the infection? However, I would suggest you to run a online virus scan on your computer and try to remove the infection on your computer. Access the link below to run a online virus scan. http://onecare.live.com/site/en-us/default.htm Hope this helps. Let us know the result. Thanks and Regards, Srinivas R Microsoft Support. Visit our Microsoft Answers Feedback Forum and let us know what you think.

Can you be more specific? What is the underlying issue you are trying to fix?

The model of the laptop in question is a  "HP Probook 650G2".  Also I used Dropbox to upload the driver file I hope that is okay. Here is the link to the driver list. Driver View 650G2

What is your computer make and model? If not a branded computer what is your motherboard make and model? Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Selected Items. Text file format please. http://www.nirsoft.net/utils/driverview.html

should it be in C:\Windows\System32 Yes it should. It’s 95KB in size, dated Jan 21 2008 at 2:23 (SP2). If it’s also stored in, say, \Windows, it’s a rogue so run your AV program.

I ran Check Disk and it did not seem like anything was wrong.I checked the results in event viewer and the only things that were out of the ordinary was this: Cleaning up 213 unused index entries from index $SDH of file 0x9. Cleaning up 213 unused security descriptors. Not sure if that is the answer. Also something interesting.... In the Event Viewer, the source of the check disk was the wininit.exe file. hmm... The startup from sleep overnight did not cause a restart, however, I did get a blank black screen that required a restart about an hour into use. I have not seen that one before. Last night I changed the power settings from "Balanced" to "Samsung High Performance". This was recommended by Samsung. That may have done the trick as well. Time will have to tell if the problem is solved. Just to double check for my sanity.... Could all of this be because of the use of an old TV as a monitor?

Looks like my chipset and ADHI drivers were not up to date. Updating them has solved the crash. I have gone about a week without. Looks like we are all good.

Hi Mlancelot, Sorry for the delay in replying. Happy to know that after updating the drivers the crash issue is resolved. Your efforts to work on this issue is very much appreciated. Feel free to post your questions here and we will be glad to help you.

So now this is happening without the machine going to sleep. Twice today in about a 2 hour period. Seems to be getting worse. I am wonder if a system restore will do anything as I have had this problem since the get go. I reseated all components in the machine as well.

Hi Mlancelot, Thank you for posting your question in the Microsoft Community. Sorry to know that you are facing this issue. Stop errors (also sometimes called blue screen or black screen errors) can occur if a serious problem causes Windows 7 to shut down or restart unexpectedly. You might see a message that says, "Windows has been shut down to prevent damage to your computer”. These errors can be caused by both hardware and software issues, and it can be difficult to troubleshoot the problem. Wininit EXE is a core process that is present in Windows. Wininit EXE's job is to start some of the main background services (programs) like Service Central Manager (SCM), the Local Security Authority Subsystem (LSASS) and the Local Session Manager (LSM.EXE). Wininit EXE is a critical Windows background program that should never be stopped through the Task Manager system. I would suggest you to refer to this article to check if this helps. Resolving stop (blue screen) errors in Windows 7 http://w

Hi, Sorry for the delay in reply. You may perform a full computer virus scan to ensure that the computer is free from virus. Once this is done restart the computer and check if this helps. Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx Safety Scanner Disclaimer: There could be a loss of data while performing a scan using Microsoft safety scanner to eliminate virus if any. You may run the SFC scannow tool and check if the issue persists. SFC /scannow is a super-useful command you can use in any Windows version. When the SFC (System File Checker) command is used with the /scannow switch, the tool will scan all of the important Windows files on your computer and replace them as necessary. Missing and corrupt operating system files (like many DLL files) are arguably the biggest cause of major Windows issues. The SFC /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. Once the SFC scan is

Hi, 1. Are you using Metro App/Desktop Internet Explorer? 2. What is the complete error message you are receiving? d) Click Reset and click apply and ok. Note: The Reset Internet Explorer Settings feature might reset security settings or privacy settings that you added to the list of Trusted Sites. The Reset Internet Explorer Settings feature might also reset parental control settings. We recommend that you note these sites before you use the Reset Internet Explorer Settings feature.

Hi, AVG is no longer on my list of recommendations, causes too many issues and lower effectiveness. If you decide to remove any antivirus/security program be sure to run their maker's Removal Tool as well as check for special instructions. List of anti-malware program cleanup/uninstall tools Hope this helps. Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.

No backups, eh? Thinking that might change after this... (Seagate Replica 500GB might be something to look into for the future.) -- Shenan Stanley MS-MVP -- How To Ask Questions The Smart Way http://www.catb.org/~esr/faqs/smart-questions.html

Hi, ComboFix is supposed to remove that, and others probably can. How to use ComboFix http://www.bleepingcomputer.com/combofix/how-to-use-combofix -------------------------- Hope this helps. Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.

Yeah i have a HD to backup too. But its full, i have allot of really important stuff on this pc aswell. Would be great if somebody would tell me how to remove it!. Do you think i could download a non infected copy of wininit.exe ? and replace it? Cheers!

I have the same problem too

I've tried all the methods above ... no luck

I have this exact same problem. I have tried disabling hibernate/fast startup and also the boiler plate recommendations by the MS staff. Nothing helps.

I have exact same pb! Installed Win 8 64 bits on a new SSD and it never ever allowed me to shutdown.  Restart method is by pulling the plug. It will only allow reboot if the "Shut down" command has not been requested. Meanwhile, only "sleep" mode is available with 14% CPU used at all times by Wininit, even idle.

Hi Sobitthen, I would suggest you to create a new thread with the Forum link mentioned below. We will be happy to assist you. http://answers.microsoft.com/en-us/Page/gettingstarted

Same issue, unable to reboot or shutdown without pressing either power button and hard rebooting, or reset button. Just sits on a screen saying either rebooting or shutting down with an active mouse icon. If the computer is up less than 30 minutes it will reboot/shutdown, over 30 minutes it will hang, tried all the steps, no success. Also if the computer is up over 30 minutes I cannot install any new applications, they will either hang or the process will run hidden and hang. Not ready for prime time OS... Will post my other bug with Media Center recording repeats when only new selected too on another thread...

I Have the same problem, in safe mode. the method above does not explain how to diagnose this in safe mode. That's Microsoft...

I have the same problem.

Hi iamjoseph04, I understand how it feels when you receive an error while restarting the computer and it doesn’t work properly as expected. I will be happy to help you with this issue. - What is the exact error message you are receiving? - Have you made any changes on the computer prior to this issue? You may perform the methods suggested below and check if they help you fix the issue. http://windows.microsoft.com/is-IS/windows-8/how-shut-down-turn-off-pc I hope it helps. If you have any issues in future please let us know. We will be happy to help you

I have the same problem too I have the same problem too! Win8 is so unstable... :-)

Hi, · What is the make and model number of the computer? · Were there any changes made on the computer prior to the issue? · Which is the service pack installed? · Do you have Windows XP disk? You may try the steps listed in the link: How to recover from a corrupted registry that prevents Windows XP from starting: http://support.microsoft.com/kb/307545 You may also refer: Description of the Windows Registry Checker Tool (Scanreg.exe): http://support.microsoft.com/kb/183887

There is no such site. Here are two alternative sources: - Your Windows 7 installation DVD (if you ever received one) - Various subfolders of c:\Windows. The command dir  /s  c:\windows\wininit.* shows you where they are hiding.

Try running this command under elevated admin privileges: sfc  /scannow What this command does? If error find then does it automatically change the corrupt file? Please donate for Pakistan's Flood Victims at: 1- http://www.dec.org.uk 2- http://www.google.com/crisisresponse/pakistan_floods.html

When you boot from the Windows DVD sfc must know which drive is the Windows drive. To understand what sfc is, read this: http://support.microsoft.com/kb/929833 "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

You are all saying well but I want a site where from I should download every System32 file (fully updated). So the I want to replace with previous one. Please donate for Pakistan's Flood Victims at: 1- http://www.dec.org.uk 2- http://www.google.com/crisisresponse/pakistan_floods.html

Don't download files from such sites. Run the sfc command or extract the file from your Windows DVD: http://blog.nirsoft.net/2009/09/17/how-to-extract-missing-system-files-from-the-dvd-of-windows-7vista/ "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/ Would this 7-Zip File Manager automatically replace the file that we have selected? I mean will it says this is locked file and cannot be replaced or not? OR will an option of taking an honorship of that file? Please donate for Pakistan's Flood Victims at: 1- http://www.dec.org.uk 2- http://www.google.com/crisisresponse/pakistan_floods.html

Try running this command under elevated admin privileges: sfc  /scannow

Don't download files from such sites. Run the sfc command or extract the file from your Windows DVD: http://blog.nirsoft.net/2009/09/17/how-to-extract-missing-system-files-from-the-dvd-of-windows-7vista/ "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Here you go: d:\>sfc /? Microsoft (R) Windows (R) Resource Checker Version 6.0 Copyright (c) 2006 Microsoft Corporation. All rights reserved. Scans the integrity of all protected system files and replaces incorrect versions with correct Microsoft versions. SFC [/SCANNOW] [/VERIFYONLY] [/SCANFILE=] [/VERIFYFILE=] [/OFFWINDIR= /OFFBOOTDIR=] /SCANNOW        Scans integrity of all protected system files and repairs files with problems when possible. /VERIFYONLY     Scans integrity of all protected system files. No repair operation is performed. /SCANFILE       Scans integrity of the referenced file, repairs file if problems are identified. Specify full path /VERIFYFILE     Verifies the integrity of the file with full path .  No repair operation is performed. /OFFBOOTDIR     For offline repair specify the location of the offline boot directory /OFFWINDIR      For offline repair specify the location of the offline wi

boot from the Windows DVD, select the Repairoptions and open the command pompt and run this: sfc /SCANNOW /OFFBOOTDIR=c:\ /OFFWINDIR=c:\windows "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/ What this command does? Please explain me. Please donate for Pakistan's Flood Victims at: 1- http://www.dec.org.uk 2- http://www.google.com/crisisresponse/pakistan_floods.html

boot from the Windows DVD, select the Repairoptions and open the command pompt and run this: sfc /SCANNOW /OFFBOOTDIR=c:\ /OFFWINDIR=c:\windows "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

The MEMORY.DMP has been zipped up and can be downloaded from here: https://alaska0-my.sharepoint.com/personal/mbyoung_alaska_edu/_layouts/15/guestaccess.aspx?guestaccesstoken=3d%2beKK%2biX4DeFt%2bEtF2L0hrGsrsyCMoFfyJx26FT6%2bk%3d&docid=0631eb2dbe3ec4f89b59d1a1d41e1eb77 The system specs are: Dell Latitude E6530 notebook, i7, 8GB RAM, 128GB SSD, Windows 7 Ultimate 64-bit I am unable to get past the BSOD even in safe mode, so cannot run MSinfo32 or Speccy. Thanks!

Hi, First of all I would like to apologize for the delay in responding. I would like to know if you are still facing this issue. If you are still facing this issue, then I suggest you to try the steps in the following Microsoft Help article to resolve the BlueScreen errors. http://windows.microsoft.com/en-us/windows7/Resolving-stop-blue-screen-errors-in-Windows-7 Disclaimer: While performing chkdsk on the hard drive if any bad sectors are found on the hard drive when chkdsk tries to repair that sector if any data available on that might be lost. Please reply with the status of the issue so that we can help you better.

No worries, I bit the bullet and replaced the SSD and reimaged, reinstalled apps, and copied over user data from the old drive weeks ago. None of those steps worked, tried them all first thing.

Here are my onedrive link. https://1drv.ms/f/s!Ahdp2L3RSIj-hA8LfccozolbbSh0 Thanks your help.

Please upload no more than three copies of your dump files as shared files to your OneDrive with a link here The dump file will be created at c:\windows\minidump. You may need to change your settings in Windows to be able to see the file. To show hidden files type Folder Options in the search box above the Start button and select View, Advanced Settings and verify that the box before "Show hidden files and folders" is checked and "Hide protected operating system files" is unchecked. You may need to scroll down to see the second item. You should also make certain that the box before "Hide extensions for known file types" is not checked. What is your computer make and model? If not a branded computer what is your motherboard make and model? Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Selected Items. Text file format please. http://www.nirsoft.net/utils/drive

Five years later...

Please check your RAM for errors (use memtest86+ for testing). "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

If blue screen comes after installation then.............. Two solutions : first install windows 7 again and when installation finalizing comes then press shutdown button untill pc completely off...............then start pc again and remove ur installation media and go into safe mode, safe mode with command line and safe mode with network and start normally screen comes and then go into safe mode and then restart and go into normal................................ second install ubuntu in that drive and then install windows 7 in that drive(first remove ubunutu) If blue screen comes after update then.................. restore it to previous point (means updates create a point, after this, critical updates are usually installed)

Hello Yehor, We realize your concern in this regard. Thank you for bringing this information to your kind notice. The error message logs that are appearing in the event viewer with respect to keyboard layout designed using Microsoft Keyboard Layout Creator v 1.4, might be ignorable. I mean to say, these are runtime exceptions that which are ignorable and it won't impact the working status of keyboard layout. These are System raised and exception raised through the runtime. Most exceptions of this type are predefine as classes in base library. i.e. assertion violations, no memory exceptions and routine failures. You can get in touch with our TechNet Forums support team for more information on this. You can post your query there, so that they will assist you accordingly. Keep posted if you require further assistance. Thank you.

Hello Yehor, Microsoft Community is a free community and discussion forum for asking and answering questions about using your Microsoft products. This deals with the basic technical troubleshooting for Windows and other Microsoft Products. On other hand, TechNet comprises free support and troubleshooting resources for IT professionals, paid subscription services, community resources, technical libraries, downloads, training resources, and much more. I mean say, they are good at handling too technical issues. Hope this will address your query.

Thanks, I have copied this question to TechNet, hope there will be some assistance. But what's the difference between these sites?

from http://social.technet.microsoft.com/Forums/en-US/w8itprogeneral/thread/cbafcfbd-1b36-43f5-a779-656457ef1bd4 create a shortcut with "C:\Windows\System32\shutdown.exe -s -f -t 00"

I've try with different USB Storage and the result is the same. I can't download again the ISO from DreamSpark since i already reach the limit. I did a restore the first time and didn't work out. Anyway i found a way to shutdown the computer without pressing on power button for 5 secs or end a important task and cause a blue screen. Now i use PowerShell with Stop-Computer command. It always work and making a shortcut to execute Stop-Computer is pretty easy so i kinda solve the problem by not solving at 100%. About the problem, for example ALT+F4 and ShutDown it does not work. If i try Setting » Power » ShutDown it will not work too. Log Out » Power » ShutDown it will make my computer freeze. Maybe the problem is in shutdown.exe but if the problem where in shutdown.exe the command shutdown.exe -r (restart computer) should not work but it work. But if i try ShutDown first (With any examples i give above like ALF+F4 etc etc) and he does not shutdown, then the Restart stop working as well

Simple fix--open Power Options and 'Change what the power buttons do.' Select change Unavailable options and uncheck Fast Start. OK it and reboot.

Thanks for the fast reply, I finally found some time to try out everything (It is very time-consumpting due to the high count of restarts in connection with holding the power button for ages...) System informations: - Stationary, self-build. Connected to an Microsoft-Account - ATI HD5870 - AMD 965 BE - kingston snv425s2128gb SSD (System-Drive) - 2TB WD Caviar Green for a single data-partition - Asrock M3A790GXH/USB3 motherboard There is nothing "special" about the system, all parts were available in a small, local computer store I still did not dare to install anything important, because if my courses start before I solve the problem I will try to reinstall Windows 8. But until then this machine is just used for playing one game and browsing Further testings by my side: - Restarting works. BUT it only works if I do it before calling for a shutdown. If I try to restart after going for a shutdown, nothing happens - If I log out from my user and try to shut down from the Metro-Loginscreen

Did you ever get this problem resolved? If no, can you download the ISO from DreamSpark again? Are you putting the extraction from the ISO on to a DVD or  onto a USB stick? You might also want to try: WIN + W WIN + D you will see a msg on your DESKTOP screen about the completion of the restore.

same issue, nothing helped

Hi, Since these thread is so well explain i will ask for some help here. I have download exactly the same OS as Devbey from the same place. Im now thinking that DreamSpark Premium have a corrupt ISO. I have a laptop Asus N53jq and i have exactly the same problem and i can't find a solution anywhere. Also like Devbey i already try all solution posted and none work.

Hi, 1. Are you getting any error message or error code? 2. What is the make and model of the computer? Try the following methods and check if it helps. Method 1: refer the steps provided by John Rubdy replied on September 7, 2012. http://answers.microsoft.com/en-us/windows/forum/windows_8-performance/when-shutdown-windows-8-get-error-there-is-no-disk/205f27a8-f546-44b0-b76e-5c0165795624

Hi Drew, Thank you for reaching out to the Microsoft Community! Based on the description, it appears that you are getting a blue screen of death while using Python script on the computer. Since you are receiving Blue Screen of Death while using Python Script in Windows 7 and Python being free source software, you may have to check with third party forum discussions on Python Scripts causing Blue Screen of Death. If you have further questions on Windows, please do not hesitate to let us know. It is our pleasure to be of assistance.

1. The computer will BSOD on every boot while loading winint.exe. The MEMORY.DMP is the same everytime. 2. The computer was writing to the registery when my dog managed to unplug computer from UPS, this was not caused by a virus. They are not this effeciant. The computer will not allow any interaction in windows invirment. However I did modify the win.ini from CMD and it had no effect.

Anyone have any ideas, thoughts or suggestions? Please any help is appreciated.

Hi philosopherssage, Thanks for the update. We recommend you to try the following steps and check the result. Step 1: Perform startup repair a. Insert the Windows 7 installation disc in the disc drive, and then start the computer. b. Press a key when you are prompted. c. Select a language, a time, a currency, a keyboard or an input method, and then click Next. d. Click Repair your computer. e. Click the operating system that you want to repair, and then click Next. f. In the System Recovery Options dialog box, click Startup Repair g. Once the startup repair completes, click Finish to restart the computer. h. Remove the DVD and restart the computer to see if the system starts fine. Step 2: If the issue still persists, follow Step 1 and select System Restore on System Recovery Options menu to perform system restore. See What are the system recovery options in Windows 7? Visit our Microsoft Answers Feedback Forum and let us know what you think.

I downloaded the system development kit and loaded memory.dmp it says crash caused by wininit.exe but have no clue where to go from here? Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [G:\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available THREAD fffffa800554d760  Cid 01b4.0208  Teb: 000007fffffae000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable fffffa800542b5d0  QueueObject

Hi philosopherssage, 1. Do you get any error message when you boot the computer to the desktop? 2. Was your computer infected by virus? After checking the information you posted, it's confirmed that the issue is mainly caused by wininit.exe. Try the following step and check the result. Step 1: Modify win.ini file a. Click Start, type win.ini and hit enter. b. When you hit enter, a notepad file should open. c. Find the line that begins with "load=", and then type a semicolon (;) at the beginning of this line. d. Click Close, and then click Yes to save the file when you are prompted. e. Restart your computer for the changes to take effect. Visit our Microsoft Answers Feedback Forum and let us know what you think.

Hi, Looks like you've done all the basic troubleshooting that we could have provided. It seems that the issue you're having requires advanced troubleshooting steps. Thus, we recommend that you post your query on Microsoft TechNet forum. Let us know if you have any other concerns.

Try Norton Power Eraser http://security.symantec.com/nbrt/npe.asp?lcid=1033 Note: Because the Norton Power Eraser uses aggressive methods to detect these threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully, and only after you have exhausted other options. Microsoft Safety Scanner http://www.microsoft.com/security/scanner/en-us/default.aspx Note: The Microsoft Safety Scanner expires 10 days after being downloaded. To rerun a scan with the latest anti-malware definitions, download and run the Microsoft Safety Scanner again. J W Stuart: http://www.pagestart.com

Big Thanks!  I am looking at the processes in task mgr and actually cheering at what I don't see- an svchost.exe*32.   I had already run the Safety Scanner several times and it showed clean, but the Power Eraser found it.  It was the rpcss file.  Thinking back on this when I ran MalwareBytes it found a Trojan in that file and when it went into fix mode the machine crashed.  I rebooted and scanned again and it was "clean".  Guess it wasn't. Cheers...

You're welcome isitdanny J W Stuart: http://www.pagestart.com

Thanks for your suggestion, Vijay! Unfortunately the suggested methods didn't result is a case resolution. It showed that the issue appears in Safe Mode as well. As to a possibility of a virus - Microsoft Safety Scanner reported that no viruses were found on the system. All in all I continue looking for a solution!

Hi, Glad to know that the problem has disappeared. Your efforts to resolve this issue is very much appreciated. Feel free to post your query here on Windows Forums, we would be happy to assist you.

Hi Kamen, Did you make any changes to the computer prior to the issue? Method 1: Try booting the system in safe mode and perform a clean boot. Step 1: Perform Safe Mode If the issue still persists, please contact your hardware manufacturer for further assistance. Hope this helps to fix the issue, if you have any further queries, please feel free to post. We are here to help you.

Hi, Thank you for your reply. I ran Windows Defender Offline and it didn't fix the problem. However, somehow the problem recently disappeared probably with the updates. -- Best regards, Kamen

Hi, Thanks for the reply. Windows Defender Offline can help remove hard to find malicious and potentially unwanted programs using definitions that recognize threats. Definitions are files that provide an encyclopedia of potential software threats. Armed with definition files, Windows Defender Offline can detect malicious and potentially unwanted software, and then notify you of the risks. What is Windows Defender Offline?: http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline Note: There could be a loss of data while performing a scan using Windows Defender Offline to eliminate virus if any. Feel free to post your query here on Windows Forums, we would be happy to assist you.

We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

Just a thought to throw in that 0x000000F4 with Arg1 0000000000000003 are often hardware problems (or any 0x000000F4 ) Flaky RAM, loose connection, marginal power supply, overheating, even low CMOS battery. But since we don't know your system make and model and I can't tell from your crash dump it might be hard to provide much to go on (if that is the case).

These crashes were related to memory corruption ( probably caused by a driver ). Please run these two tests to verify your memory and find which driver is causing the problem.  Please run verifier first.  You do not need to run memtest yet unless verifier does not find the cause, or you want to. If you are over-clocking anything reset to default before running these tests. In other words STOP!!! If you do not know what this means you probably are not 1-Driver verifier ( for complete directions see our wiki here ) 2-Memtest. ( You can read more about running memtest here )

Hi, I have uploaded the MEMORY.DMP to one drive and the link is https://onedrive.live.com/redir?resid=C3B3A1EEDD6BBA5F!110&authkey=!APOrVRcJV4swhLE&ithint=file%2cDMP. Thanks in advance.

Hi, Try the Fix here http://www.vistax64.com/tutorials/110886-event-viewer-error-4201-a.html Rob - Bicycle - Mark Twain said it right.

What would deleting the keys do? What if you did have those programs previously installed?  Would you do the same? Thanks

You're welcome and thank you for your very kind words, Sergio.

Hi PA Bear, Seems that I'll need to send you something...I've never seen such a competent person in my life.... feel kind of shame to continue bothering you.... 1 - I made a fresh installation of all the programs ( From Windows 'till the last one ) 2 - Regarding Norton, I've found in the registry the following keys and values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\Compatibility\NortonSystemInfo 3 - Regarding McAfee HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5692FA47FB82BD113BA600313DEA14A1 with a file called "mcafee.xml" in its path. NEVER used any McAfee or Norton products in this computer, as far as I know. Thanks again PA Bear, yours, Sergio.

All four (4) of those files & locations are legit. What led you to ask the question, Sergio?

@SergioTokar Lubel only! => I'd very much doubt that those 2 keys were created by a Norton or a McAfee application. That being said, you could download/run the Norton Removal Tool [1] and the McAfee Consumer Products Removal Tool, [2] rebooting after each run, to make sure there are no "leftovers." If you have any further questions, it would be best to post them in this Avast forum instead: http://forum.avast.com/index.php?board=2.0 ==================================================== [1] ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe [2] http://us.mcafee.com/apps/supporttools/mcpr/mcpr.asp

The Avast! Premier has a sub-program called "GrimeFighter" that a bought separately; when you run that program requires to restart and then, instead of functioning normally, appears a message after the boot when the program is loading : INIT: The are no more processes in this errorlevel And the computer get stuck..... This drove me to check the process "Wininit". Thanks again for your help and your patience... Sergio.

Dear PA Bear, Your suggestion plus closing the Lexmark monitor and.....IT WORKED !!!! :) THANK YOU VERY MUCH, I hope this will help people with a very small knowledge like me to solve this problem... No doubts you're an excellent professional, not only highly trained but with an excellent "nose" to detect the origins and possible solutions of problems...In one word: EFFICIENCY !!! Sincerely yours, Sergio Tokar - Lubel.

Has a Norton application or a McAfee application EVER been installed on the computer since you bought it ? Did a Norton free-trial or a McAfee free-trial [PICK ONE] come preinstalled on the computer when you bought it? (Doesn't matter if you never used or Activated it.)

[ A Moderator moved your post from the Virus & Malware forum to the Win7 Performance forum. ] Where is WININIT.EXE appearing in your system (e.g., in C:\Windows\ System32 <=this folder )? What's the full name of your installed anti-virus application, if any, and when does your current subscription (if any) expire? See http://www.bleepingcomputer.com/startups/wininit.exe-14276.html Is wininit.exe a virus? No, the real one is not, it's a Microsoft Windows system process called "Windows Start-Up Application". However, malware writers deliberately give their processes the same name to escape detection. Viruses with the same file name include, e.g., Trojan.Agent.AYBI (detected by F-Secure), and Win32:Malware-gen (detected by Avast).

First of all I want to thank you for your help, 1 - The file appears four times in the following folders: 2 - My antivirus is a registered Avast! Premier, expiration date: 23/05/2015. Thanks in advance, Sergio Tokar-Lubel

Please upload copies of dump files that were created during the last month as shared files to your OneDrive with a link here . The dumpfile will be created at c:\windows\minidump. You may need to change your settings in Windows to be able to see the file. To show hidden files select the keyboard shortcut Win+S , type Folder Options in the Search box and click the Folder Options result. Select View, Advanced Settings and verify that the box before "Show hidden files and folders" is checked and "Hide protected operating system files" is unchecked. You may need to scroll down to see the second item. You should also make certain that the box before "Hide extensions for known file types" is not checked. What is your computer make and model? If not a branded computer what is your motherboard make and model? Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Selected It

Gerry, thanks for your response.  Here are the last two dump files that were generated on that computer.  The computer is an HP 110 desktop.  I currently do not have the computer with me, but will post more of the other things above as soon as I get a chance. Can I attach the dump files to this post or do I just need to copy and paste?

Hello Chris, Thank you for posting your question on Microsoft community. I would like to know some information about the issue so that we could help you better. What is the make and model of your computer? I appreciate you for providing details about the issue and your efforts towards resolving it. This issue may occur either due to bad memory or if hard drive has some errors. I would suggest you to try following methods and check if it helps. Method 1: Run Windows memory diagnostics tool and check. Refer this article: Diagnosing memory problems on your computer http://windows.microsoft.com/en-US/windows7/Diagnosing-memory-problems-on-your-computer If it does not help, use method 2. Method 2: Run check disk and see if it helps. Refer this article: Check a drive for errors http://windows.microsoft.com/en-us/windows7/Check-a-drive-for-errors Note: While performing chkdsk on the hard drive if any bad sectors are found on the hard drive when chkdsk tries to repair that sector if any data a

chkdsk did not find any errors, neither did memtest

Also here is startup repair log Startup Repair diagnosis and repair log --------------------------- Last successful boot time: ‎5/‎6/‎2015 1:24:02 PM (GMT) Number of repair attempts: 4 A patch is preventing the system from starting. ---------------------------