These are error messages i got from

[taylorj]

These are error messages i got from eventvwr.msc. I'm
running xp pro and my computer freezes after logon, and
sometimes during it. I turned off all progs at startup
from msconfig. I think its something to do with services
trying to startup so i put most of them to automatic in
services.msc. Other then that i'm stuffed. I can start up
in safe mode ok. All replies appreciated.

Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 31012
Date: 30/10/2003
Time: 19:26:46
User: N/A
Computer: GERRY
Description:
The DNS proxy agent encountered an error while obtaining the local list of name-resolution servers. Some DNS or WINS servers may be inaccessible to clients on the local network. The data is the error code.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:
0000: e8 00 00 00 è...

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 30/10/2003
Time: 19:34:37
User: NT AUTHORITY\SYSTEM
Computer: GERRY
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 30/10/2003
Time: 19:35:05
User: NT AUTHORITY\SYSTEM
Computer: GERRY
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 30/10/2003
Time: 20:37:28
User: N/A
Computer: GERRY
Description:
The following boot-start or system-start driver(s) failed to load:
AmdK7
Fips
IPSec
KmxFw
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Last Error Sequence:
System


Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 31012
Date: 30/10/2003
Time: 21:40:45
User: N/A
Computer: GERRY
Description:
The DNS proxy agent encountered an error while obtaining the local list of name-resolution servers. Some DNS or WINS servers may be inaccessible to clients on the local network. The data is the error code.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:
0000: e8 00 00 00 è...

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 30/10/2003
Time: 21:41:46
User: N/A
Computer: GERRY
Description:
The ELSA CAPI 2.0 service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 30/10/2003
Time: 21:41:46
User: N/A
Computer: GERRY
Description:
The ELSAWAN (Ver. 3.02.0005) service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 30/10/2003
Time: 21:41:46
User: N/A
Computer: GERRY
Description:
The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Last Error Sequence:
Application

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 30/10/2003
Time: 21:56:23
User: N/A
Computer: GERRY
Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043C from line 44 of d:\nt\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 8193
Date: 30/10/2003
Time: 21:56:23
User: N/A
Computer: GERRY
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040206.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 57 52 54 57 52 54 49 43 WRTWRTIC
0008: 32 31 31 33 00 00 00 00 2113....
0010: 57 52 54 57 52 54 49 43 WRTWRTIC
0018: 32 30 37 38 00 00 00 00 2078....

 

[bcastner]

From Safe Mode, use Device Manager to uninstall the ISDN PCI adapter. Turn the machine off.
Remove the ISDN adapter for the time being to test.

Download from BlackViper's site a .reg file to restore your service entries to their defaults:

http://www.blackviper.com/WinXP/registry.htm

The file is called "DefaultProAll.zip"

Apply the registry entries. Reboot.

If things appear reasonably normal, turn the machine off and reinstall the ISDN adapter. Let the Hardware Wizard reinstall.

Your machine shows a lot of symptoms of having been infected with msblast or a variant. If you can get to the internet now, head immediately to the MS Update site.

Use a keyword search here for "msblast" or "blaster" or Google to find worm testing and removal tools, or use two of the online virus scans from smah's faq: faq760-3862

 

[linney]

Your list from the Event Viewer is a bit confusing as many errors relate to the fact you are/were in Safe Mode. And as you are aware lots of things don't get loaded while in Safe Mode. Can you sort out what errors are generated by Safe Mode and what are genuine errors?

It might be helpful for you to save your current Event Log File in some other location. Then clear the Event Log and let it restart recording your errors (don't go into Safe Mode or you will generate lots of false errors).

Let your machine run (if it will) for a while and then check the Event Viewer and see what genuine errors are recorded. If you do have to enter Safe Mode because of freezing problems, ignore any messages in the Event Viewer from the time you entered Safe Mode and concentrate on the pre Safe Mode errors.

(If anyone can understand my last 3 paragraphs it will be a miracle).

Take any error ID. and search on these sites.

http://www.microsoft.com/technet/tr.../prodtechnol/winxppro/support/EE_winxppro.asp

http://www.eventid.net/events.asp

These may help you too.

310353 - How to Perform a Clean Boot in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;310353&FR=1&PA=1&SD=HSCH

316434 - HOW TO: Perform Advanced Clean-Boot Troubleshooting in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;316434&FR=1&PA=1&SD=HSCH

Some general things to try.

See if System Restore will get you back to a restore point before your problem with Windows.

Try running ChkDsk to check your drive for errors. Right click your Drive icon/ Properties/ Tools/ Error Checking.

Run the System File Checker program from the Run Box by typing.....Sfc /Scannow in it and have your XP CD handy.

HOW TO: Verify Unsigned Device Drivers in Windows XP

http://support.microsoft.com/support/kb/articles/q308/5/14.asp

If they don't work you could try repairing windows itself by running it over itself. You will lose all your windows updates but your files will be untouched.

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)

http://support.microsoft.com/support/kb/articles/q315/3/41.asp