help to fix error a problem has been detected and windows Results

Sponsored Links:

I have tried startup repair and it doesn't work
i tried to do system restore and an error thing pops up telling to me close my antivirus and try system restore again

I can't go in to safe mode and when i try it loads through the sys files but stops and the last loaded sys file was classpnp.sys

i know it was some sort of virus because for i had shut it down i was hearing music just starting up randomly, sounded like music from commercials. one time it was indian music.

is there any way i can fix this?/

PS I found my windows 7 cd if that helps??

ok i found something that cleared the problem but now everything has changed
i disabled the auto restart and it is a blue screen that says

a problem has been detected and windows has been shut down to prevent damage to your computer
check for viruses on your computer (i have no idea how if i can't boot safe mode) remove any newly installed hard drives or hard drive controllers etc etc

technical information
*** stop: 0x0000007b (0xfffff880009a97e8, 0xffffffffc0000034, 0x0000000000000000, 0x0000000000000000)

If you go to - there you can track down
error codes of all types to help you for any future
probs, however go to Microsoft help and follow links for
your specific problem is the best place for a fix. Billy
-----Original Message-----
When i load up my Win XP Pro
it comes to a screen about choosing the mode to start
windows in when i select normal or any other methods it
follows up by going in to another screen

a blue screen which follows:
"A probem has been detected and windows has been shut
down to prevent damage to your computer.


the later down that same screen it says
Technical Infomation
STOP: 0x000000ED (0x80ED08D0, 0xc0000032, 0x0000000,

what does this mean and how can i reslove this problem
no matter what i start my computer in this crap come up.
I know it all well and good but i need my computer back

thanks to anyone who can help me thankz

Hi all,

Please help me if you can, as my main desktop is down. Thanks a lot for your time. Please read on. Sorry for the lengthy post.

Problem Summary . The machine has only 1 OS: Windows 7 x64 Professional. If I try to boot normally past the Windows logo screen, I'll receive a BSOD and the system will restart.

Details . Last night I right clicked the Windows Explorer button on the Windows 7 taskbar and noticed the button was malfunctioning. I didn't see any pinned short cuts or recently visited folders while I normally had had 6-8 for each category. There were just the generic "Windows Explorer" and "Unpin this program from the taskbar." So I decided to restart the machine hoping the problem would magically vaporize.
The machine finished POST but right after the Windows 7 logo screen, I got a BSOD (screen below). Then it restarted and recommended me to use Startup Repair. I used Startup Repair but was told that Startup Repair couldn't automatically fix the errors (I allowed it to use System Restore). Then, Startup Repair shutted my computer down. When I turned on the power, the cycle repeated: BSOD after logo screen --> restart --> Startup Repair with no result --> shut down.

Things I have Tried .

Booted with Safe Mode with Networking. I got into Windows and was able to transfer personal files to a backup. I haven't tried other Safe Mode options.Ran error checking for my OS drive (right click in safe mode-->properties-->tools-->check now). The check produced and fixed 3 errors. Then I left the computer because something came up. When I returned, I saw Startup Repair telling me it couldn't automatically fixed the errors and wanted to shut the computer down. It seemed disk checking finished, the system restarted but the problem persisted.While in Safe Mode with Networking, uninstalled Nvidia GTX 275 driver. Then I restarted but the problem was still there.Ran a memory test using a tool provided by Windows: spamming F8, I got to the boot menu, I chose Repair this Computer, then selected Memory test. The test returned no error.I tried System Restore using the another option during Repair this Computer (see above). The only point I could return to was before a AVG 9.0 update . Nonetheless, the restore didn't completely successfully . In fact, it returned an error about 10s after it started.
Other Thoughts

The reason I uninstalled the Nvidia display driver was I had been getting screen artifacts for a few weeks. I don't overclock my cards and the artifacts appeared while gaming (playing L4D2 which used the non-demanding source engine) as well as normal desktop use. In the past, I had a few troubles updating the display driver. In particular, I noticed my FPS' went down after installing some 190+ driver (can't remember the exact number). I tried to roll back to 186 by uninstalling the 190+ driver and installing 186. But the 186 installer gave an error saying it couldn't detect my hardware. So I was forced to reinstall the 190+ driver. The installer for the 190+ driver returned no error.AVG 9.0 finished a full scan right before I started to note the aforementioned malfunctioning of the taskbar.I can run check disk again and report the result here, if necessary.Similarly, I can run system restore again and report the error message here, if needed.Finally, I can upload error log files if someone needs them and tells me how to get them and where to upload them.

Relevant System Info

Hardware age: all purchased within less than a yearWindows 7 x64 Professional installed on a SSDA pair of internal mechanical hard drives in RAID 1 along with some external USB hard drivesCPU Core i7 920x58 3x SLI EVGA motherboard2 GTX 275 in SLI850W Corsair PSU (theoretically plenty of wattage to power my system)Creative Labs sound card6GB triple channel 1600 DDR3 RAM running at 1066No overclockingPlenty of air cooling


Startup Repair error

Hello all

I wonder if anyone could help me. I have Windows XP installed on a harddrive that I carry around with me in the office. I come across a PC that I have to fix, plug in my drive and boot. At first I had the issue of having to do repairs on the XP when the hardware was dissimilar to the original I used to make the drive. I went crawling through the web and found the cause of my problem was the drive controller driver (IDE Controllers change across chipsets it would seem). After I got the needed files off the XP CD and the right registry entries, I had a "universal" XP that would work on virutally any computer.

A lot of people would say "But why not use a PE or Hiren Boot" and the answer is simple, they are generally read only and/or give problems when installing new software. With my solution, I can install all the applications I want and keep them up to date with minimal effort. Over time, I have built up a host of drivers in my portable windows for the various hardware configurations around the office. So, 9/10 times, I plug it in and it detects hardware that is in the machine as if it was just unplugged and has now been put back. No need for a repair and within minutes and a single standard reboot, I am on the machine like I was sitting at the original.

I want to switch to Windows 7... This brings forward a whole host of new challenges. I am now using a second drive for testing. On the original machine, it boots and works beautifully. I move it to any other machine and it won't boot. Safe mode won't work either. It keeps asking to boot with the Startup Repair. Ok, lets go. "Startup Repair Failed" or some other error like it. On hunting through the short log I see "Problem Signature 07: BadDriver"

Hey, wait, we have had mention of this before... The harddrive controller driver? Could this be the only thing stopping me from moving the harddrive between the various computers? Someone suggested I get into Windows and just do a Upgrade Install... Ummm... Hello? I can't get into Windows to choose the upgrade option. I REALLY don't want to have to do a full install of Windows 7 each time...

On further hunting and testing, I disabled automatic restart and encountered a BSOD. Error 0x7B which is the code for an inaccessible boot device... Solidifying my theory that it is a harddrive driver error. Apparently the second parameter passed to the error is the one to look out for so... 0xc0000034... That means:
STATUS_OBJECT_NAME_NOT_FOUND This is the most common status code and is usually caused by a missing or corrupt driver.


Can anyone help me solve the driver problem? It is probably just like XP where a small registry entry and maybe one or two files will solve the problem... But I have hunted in a lot of places... No luck yet.

Help would be GREATLY appreciated by me and our office.

Hi all,

We're pretty much stumped as to why we're having this problem.

We've been with our ISP for nearly 2 years without this problem, and about last week suddenly 2 of the 5 desktop PCs on the network suddenly developed the local internet access issue. 3 of the 5 desktop PCs use ethernet/wired, 2 of the 5 desktop PCs use wireless N. The problem seems to happen equally to wired or wireless PCs.

The problem is intermittent, it has since happened on 4 of the 5 desktop PCs on the network.

The problem "symptoms" go roughly like this:
-The affected PC will stop loading web pages (in any browser) message: cannot load web page. The network adapter will STILL think it has internet access.

-The affected PC will stop loading web pages (in any browser) and the network adapter will show local only.

The PCs have shown a range of problems and I believe we've tried most of the fixes out there.

- Enabling/Disabling the adapter will sometimes work. Most of the time it will not work and there will be no internet access.

- Pinging or an address will sometimes work but mostly cannot reach it.
- ipconfig /renew /release /renew6 /release6 etc will sometimes work after multiple attempts and a reboot, but often gives the error "cannot find file.."

- flushdns will complete but doesn't bring back internet access.

- rebooting the modem router will sometimes work, sometimes not. Sometimes it will bring but access on ONE PC but NOT on the other.

- rebooting the PC - same as the router.

- checked for the bonjour / id string service, only one of the PCs has this service and it is disabled anyway.

- Tried the Vista reg fix for forcing DHCP broadcast. Worked on one of the wireless PCs, but the next day after turning on the PC the intermittent/local only was back.

- We have tried 4 different modem routers. ISP provided (thomson BEbox), Belkin modem router F5D8633-4 (we used this one for 2 years+ and never had a problem), and 2 new Belkin F5D8635-4 v1

- We rang our ISP who told us there were no problems detected, they also said they did a 24hr line test and it was fine.

-We've tried setting Google public DNS on all the PC network adapters and the router and the intermittent internet still occurred.

- Tried disabling ipv6 and problem still occurred.

- Checked windows update for recent updates but the only thing prior to the problem was an Microsoft Security Essentials Client update - tried disabling Windows Firewall and MSE and still no access

- Tried updating the wireless driver on one of the PCs that lost access, made no difference.

Our setup looks like this:
Modem Wireless Router --> 2 wired desktop PCs, 1 TP-Link wireless access point --> 1 wired desktop PC, 2 wireless PCs.

All computers are Windows 7 ultimate 64bit

All the computers are custom builds.

I have a Samsung Windows 7 starter netbook which I occasionally turn on and connect wirelessly - have not yet experienced intermittent internet with this.

We are really pulling our hair out here! Not sure why we have been able to use the net for years and suddenly almost all computers on the network have this issue! Sometimes at the same time, sometimes independently. Internet can suddenly drop on one or two PCs just by loading google (router internet lights still on)

Since all the PCs are custom built I'll have to go dig out the motherboard model nos and so on but my PC is:
AMD PhenomII x6 core
6GB ddr3
primary hdd: 500gb sata, x1 seconday hdd: 250gb
mobo: Gigabyte GA-880GMA-UD2H
Ethernet: Realtek

Sorry for the super long post, just trying to put all the info I can think of that might be needed. Many thanks in advance if you can suggest why this is happening and what exactly could be causing it since we've tried changing multiple routers and the problem is happening on more than one PC...

I've tried to list all the "fixes" I've attempted and think that's all of them, but I might have missed one or two and will probably be trying any more that I come across.

In a race to optimize everything, developers often go to extremes to build software that performs routine tasks. MissionControl is a system that allows users to program a control center that stores interfaces with attached hardware sensors, allowing the users to control any other devices that can be activated via the underlying protocol. For demo purposes, the MissionControl build at this point is compatible with the Phidgets IR hybrid sensor.
The system has two core components:

A server application, which is a Win32 console application that handles incoming queries and returns data to the connected clients. This application runs on the desktop machine with the connected sensor.The Windows Phone application that sends requests to the target server and can trigger a variety of pre-programmed commands.
The Basics

Hardware and Communication Infrastructure

One of the most important parts of the project is the signal capture and replication hardware. For the purposes of this project, I decided to use a dual-mode Phidgets IR sensor. It supports both IR code capture and subsequent replication. From a user’s perspective, this device also eliminates a substantial code-learning overhead as well as the potential error rate. Instead of searching for a device-specific hexadecimal sequence that later has to be transformed in a working IR code, the user simply has to point his remote control at the sensor and press the button that he wants accessible from a mobile device. Given that the capturing software is running on the target machine, once the sensor detects that a code can be repeated within an acceptable precision range, it will be automatically captured and stored, with all required transformations worked out in the backend using the free Phidgets SDK.

Even though I can, I don’t have to handle the binary code content received through the sensor—the Phidgets .NET libraries carry built-in types that contain all the processed metadata that I will discuss later in this article.
This sensor is connected through a USB port to a machine that acts as a communication gateway. This server should have port 6169 open for inbound connections.
NOTE: The port number can be changed, but you have to keep it consistent between your server and client applications.
The communication between the phone and the computer running the client is performed via a TCP channel—sockets are used to perform the initial connections and serialized data transfer. You can see the generalized data flow between the devices that are involved in the procedure in the graphic below:

The server (desktop client) handles the local storage and release of all incoming IR codes. The mobile client has to know the location of the server—once specified and confirmed, it can send one of the pre-defined commands to it and either query the server for existing command groups (sets) or invoke one of the stored IR codes. When I pass data between devices, I use JSON for the serializable components. The data is also processed before being sent in order to speed-up the process—for example, on the server side the sets are serialized together with the associated codes. Like this:

"Name":"test command",
"Name":"turn off",

The inherent problem with the JSON data above is the fact that the phone client does not need the information related to the code binary sequence and all the metadata that goes with it. So it is effectively stripped down and reduced to the names of the sets (when a list of sets is requested) and commands (when a list of commands is requested).
The Data Model

As you saw from the description above, the server organizes individual infrared codes in sets. A single set is a bundle of codes that may or may not be related to each other—ultimately, this is the user’s decision. A good example of using sets is organizing IR commands by rooms, devices or code types. Each set has a unique name on the server, therefore eliminating the possibility of a request conflict.
Each set stores individual commands built around the Command model:

namespace Coding4Fun.MissionControl.API.Models
public class Command
public Command()

public string Name { get; set; }
public SerializableIRCode Code { get; set; }

Despite the obvious Name property, you can see that I am using a SerializableIRCode instance that is specific to each model. Before going any further, I need to mention that the Phidgets SDK offers the IRLearnedCode model to store code contents. I could have used it instead, but there is an issue that prevents me from doing that—there is no public constructor defined for IRLearnedCode, therefore there is no way to serialize it, either with the built-in .NET serialization capabilities or JSON.NET, which I am using in the context of the project.
Instead, I have this:

using Phidgets;
namespace Coding4Fun.MissionControl.API.Models
public class SerializableIRCode
public SerializableIRCode()


IRLearnedCode code;
public ToggleMask Mask { get; set; }
public int BitSize { get; set; }
public Phidgets.IRCodeInfo.IREncoding Encoding { get; set; }
public int CarrierFrequency { get; set; }
public int DutyCycle { get; set; }
public int Gap { get; set; }
public int[] Header { get; set; }
public byte[] CodeData { get; set; }
public int MinRepeat { get; set; }
public int[] One { get; set; }
public int[] Repeat { get; set; }
public int Trail { get; set; }
public int[] Zero { get; set; }

It is an almost identical 1:1 copy of the original class, storing both the layout of the IR code and additional information related to its replication mechanism. You can learn more about each property listed in the model above by reading the official document on the topic.
ToggleMask, the identity bit carrier that helps marking the code as repeated or not, is also implemented through a built-in Phidgets SDK model, and it has the same problem as IRLearnedCode. I implemented this model to replace it in the serializable code:

namespace Coding4Fun.MissionControl.API.Models
public class ToggleMask
public ToggleMask()


public int BitSize { get; set; }
public byte[] CodeData { get; set; }

I also needed an easy way to store all sets at once and carry all associated codes in a single instance retrieved from the storage. Here is the Set class:

namespace Coding4Fun.MissionControl.API.Models
public class Set
public Set()
Commands = new List();

public string Name { get; set; }
public bool IsList { get; set; }
public List Commands { get; set; }

Notice that there is an IsList flag that allows me to specify how to display this specific list on the connecting device. This adds some level of flexibility for situations where the user wants to build a virtual remote for closely-related keys, such as digits. With that in mind, displaying those as a list might be inconvenient, wasting visual space on the client. But if the flag is set to false, the list can be displayed as a pad.
Also, when the server performs the data exchange, it provides a single “envelope” that allows the connecting device to easily understand what the server is trying to do:

namespace Coding4Fun.MissionControl.API.Models
public class ServerResponse
public string Identifier { get; set; }
public string Marker { get; set; }
public string Content { get; set; }

The Identifier property carries the server IP address. That way, when a device receives a response, it is able to either accept it, because it knows that a response is requested from a target location, or discard it because the user is no longer using the specific server.
Marker carries the command type of the sent command, therefore giving the Windows Phone application a hint as to what to do with the data. The server can send the following commands:

SET_LIST – returns the list of sets that are currently available on the server.SET_COMMANDS:SET_NAME:IS_LIST – returns the list of commands that are associated with a given set that is currently stored on the server.NOTIFICATION – send a simple notification to the client; no further action is required.
Last but not least, Content is used to push the necessary data that is associated with the given Marker. It can be either a JSON-based string that lists the sets or commands, or a plain-text message that is used as an alert for the end-user.
Server Architecture

The server is the only component of this entire system that does all the heavy lifting. It learns commands, stores them and then generates new IR signal requests, as controlled from any of the connected clients. Let’s take a closer look at what happens behind the scenes—to start, I am going to document the network infrastructure.
The Network Layer

In order to be a reliable system, the server needs to be always ready to accept an incoming connection. For that purpose, it is possible to use the TcpListener class—an “always on” receiver that can handle incoming TCP connections. I integrated it in my CoreStarter class that is used to start the listener when the application is launched:

namespace Coding4Fun.MissionControl.API
public class CoreStarter
static TcpListener listener;

public static void LaunchSocket()
Console.WriteLine("Starting socket server on port {0}...", Constants.DEFAULT_PORT);
listener = new TcpListener(NetworkHelper.GetLocalIPAddress(), Constants.DEFAULT_PORT);

for (int i = 0; i < Constants.MAX_CONCURRENT_CLIENTS; i++)
Thread socketThread = new Thread(new ThreadStart(ListenForData));

private static void ListenForData()
Console.WriteLine("Listener thread started.");

while (true)
Socket acceptedSocket = listener.AcceptSocket();
using (MemoryStream coreStream = new MemoryStream())
Console.WriteLine("Incoming connection: {0}", acceptedSocket.RemoteEndPoint);

using (Stream sourceStream = new NetworkStream(acceptedSocket))
sourceStream.ReadTimeout = Constants.SOCKET_READ_TIMEOUT;

byte[] buffer = new byte[Constants.DEFAULT_BUFFER_SIZE];
int i;

while ((i = sourceStream.Read(buffer, 0, buffer.Length)) != 0)
coreStream.Write(buffer, 0, i);
string data = Encoding.ASCII.GetString(coreStream.ToArray());

CommandHelper.InterpretCommand(data, acceptedSocket.RemoteEndPoint.ToString());

When LaunchSocket is called, the listener is activated on the current machine. As I mentioned above, the port number can be arbitrarily assigned, but has to be consistent between connecting apps in order for the TCP links to be established. Because I expect that more than one device will be connecting to the service at a time, the listener is set as active across a constant number of threads.
NOTE: By default, a there is a maximum limit of 5 simultaneous clients. Although this number can be adjusted, be aware of the requirements of each environment in which a limited number of potential devices can connect. Even though the performance footprint of each thread is minimal, it can have a negative effect if used in unnecessarily large instances.
ListenForData is used to read the incoming stream. When an inbound connection is accepted, the data is read with the help of a fixed content buffer. Then a read timeout is specified to prevent situations where the stream was completely read but the application still waits to pull non-existent data. Once the timeout milestone is hit, an exception is thrown, which marks the end of the stream—at this point, the plain text data that was received (remember that both the server and client exchange text data only) is passed to the command interpreter—CommandHelper, with a reference to the source of the command.
The commands from the device are passed as serialized key-value pairs (KeyValuePair), the key being the command with any possible suffixes, and the value being the contents of the command itself that helps the server identify the specific item in the local storage.
InterpretCommand,in this case, does three things sequentially:

Deserialize the incoming string and create a KeyValuePair instance.Process the command and check whether it is recognizable.Send a response to the client, if deemed necessary by the command type.
The serialization and deserialization is done via JSON.NET. You can install this package in your console managed Win32 project and the Windows Phone application project via NuGet:

The deserialization step is as simple as one line of C# code:

KeyValuePair result = JsonConvert.DeserializeObject(rawCommand.Remove(0, rawCommand.IndexOf('{')));

The string is sanitized to ensure that only JSON content is being passed to the serializer.
Because of a relatively limited command set, I can put together the entire interpretation stack like this:

// Get the initial list of sets on the target server
if (result.Key == Constants.COMMAND_INIT)
// Create a new set on the target server
else if (result.Key.Contains(Constants.COMMAND_CREATE_SET))
CreateSet(result, sourceLocation);
// Get the commands that are associated with a given set.
else if (result.Key == Constants.COMMAND_GET_COMMANDS)
SendCommands(result.Value, sourceLocation);
// The client requested the server to learn a new command.
else if (result.Key.Contains(Constants.COMMAND_LEARN_COMMAND))
LearnCommand(result, sourceLocation);
// The client requested one of the commands to be executed on the
// target server.
else if (result.Key.Contains(Constants.COMMAND_EXECUTE))
// The client has requested a set to be deleted from the target server.
else if (result.Key == Constants.COMMAND_DELETE_SET)
// The client has requested a set to be deleted from the target server.
else if (result.Key.Contains(Constants.COMMAND_DELETE_COMMAND))
SendCommands(result.Key.Split(new char[] { ':' })[1], sourceLocation);

All commands are constants, declared in the local helper class:

public const string COMMAND_INIT = "INIT";

public const string COMMAND_CREATE_SET = "CREATE_SET";

public const string COMMAND_GET_COMMANDS = "GET_COMMANDS";


public const string COMMAND_EXECUTE = "EXECUTE";

public const string COMMAND_DELETE_SET = "DELETE_SET";

Notice that these are not the commands that the server sends back, but rather the commands it receives from connecting Windows Phone devices.
Let’s now take a look at the breakdown for each command.

/// Send the list of sets to the client that requested those.
The location of the requesting client.
private static void SendSets(string sourceLocation)
Console.WriteLine("Received an initial set query from {0}", sourceLocation);
ServerResponse response = new ServerResponse();
response.Marker = "SET_LIST";
response.Content = JsonConvert.SerializeObject(StorageHelper.GetRawSetNames());
response.Identifier = NetworkHelper.GetLocalIPAddress().ToString();
NetworkHelper.SendData(sourceLocation, JsonConvert.SerializeObject(response));
Console.WriteLine("Sent the set list to {0}", sourceLocation);
When this command is received, the server does not have to do much processing. It is only invoked when the client establishes the initiating link and needs to know what possible sets it can get from the target machine. The request is logged in the console and a server response is prepared that contains a serialized list of set names, which is later serialized as well and sent back to the source machine location.
StorageHelper and NetworkHelper will be documented later in this article.

/// Create a new set and store it on the local server.
The original deserialized command.
The location of the requesting client.
private static void CreateSet(KeyValuePair result, string sourceLocation)
bool isSuccessful = false;
string[] data = result.Key.Split(new char[] { ':' });

Console.WriteLine("There is an attempt to create the {0} set from {1}.", result.Value, sourceLocation);

if (data[1].ToLower() == "list")
isSuccessful = StorageHelper.AddSet(result.Value);
isSuccessful = StorageHelper.AddSet(result.Value, false);

if (isSuccessful)
Console.WriteLine("The {0} set was successfully created.", result.Value);
Console.WriteLine("Something happened and the {0} set was not created.", result.Value);
When a mobile device attempts to create a new set on the server, it sends a command in the following format:
CreateSet will get the type of the set that was created, will check whether a set with the same name already exists and will either create it or ignore the command altogether. No notification is sent to the connecting device, but either the failure or the success of the command is registered in the local console.

/// Send a list of commands that are associated with the pushed set.
The original deserialized command.
The location of the requesting client.
private static void SendCommands(string setName, string sourceLocation)
Console.WriteLine("There was a request to get the commands for the {0} set from {1}.", setName, sourceLocation);

bool isList = StorageHelper.IsSetAList(setName);

ServerResponse response = new ServerResponse();
response.Marker = string.Format("SET_COMMANDS:{0}:{1}", setName, isList);
response.Identifier = NetworkHelper.GetLocalIPAddress().ToString();
response.Content = JsonConvert.SerializeObject(StorageHelper.GetRawCommandNames(setName));

NetworkHelper.SendData(sourceLocation, JsonConvert.SerializeObject(response));

Console.WriteLine("Command list for the {0} set were sent to {1}.", setName, sourceLocation);
Commands are sent in the same manner as sets—once the set is recognized, the names of the associated commands are retrieved and serialized inside a ServerResponse instance and then pushed back to the requesting device.

/// Learn a new command and store it on the target server.
The original deserialized command.
The location of the requesting client.
private static void LearnCommand(KeyValuePair result, string sourceLocation)
Console.WriteLine("[!] Server in COMMAND LEARNING MODE! Point the remote towards the sensor and send a command.");

string[] data = result.Key.Split(new char[] { ':' });
var set = StorageHelper.GetSingleSet(StorageHelper.GetSets(), data[1]);

if (set != null)
if ((from c in set.Commands where c.Name == result.Value select c).FirstOrDefault() != null)
Console.WriteLine("Cannot learn command {0} for the following set: {1}. Command already exists.", data[1], result.Value);

ServerResponse response = new ServerResponse();
response.Marker = "NOTIFICATION";
response.Identifier = NetworkHelper.GetLocalIPAddress().ToString();
response.Content = "We could not save the following command - " + result.Value + ". It already exists in the set.";

NetworkHelper.SendData(sourceLocation, JsonConvert.SerializeObject(response));
if (sensor == null)
sensor = new IR();;


sensor.Learn += (sender, args) =>
Console.WriteLine("[!] Server learned the command and is no longer in COMMAND LEARNING MODE.");
IRLearnedCode code = args.LearnedCode;
code.CodeInfo.MinRepeat = 5;

Command command = new Command();
command.Name = result.Value;
command.Code = IRCodeWorker.GetSerializableIRCode(code);

StorageHelper.AddCommand(command, set.Name);

ServerResponse response = new ServerResponse();
response.Marker = "NOTIFICATION";
response.Identifier = NetworkHelper.GetLocalIPAddress().ToString();
response.Content = "The following command has been stored: " + result.Value;

NetworkHelper.SendData(sourceLocation, JsonConvert.SerializeObject(response));
Once a request was received that the server needs to learn a new command, an initial verification is done to make sure that the requested command name and set are not already taken. If neither the command nor the set exist, both will be created.
After the basic setup is complete, the IR sensor is activated and will be waiting for the command to be learned. The way it works is quite simple – the sensor will remain in learning mode until the point where it recognizes a command without error, being 100% sure that it can be reproduced internally. You will need to point your remote towards the sensor and hold the button you want captured for one or two seconds in order for the command to be learned.
NOTE: To ensure that a proper transmission is done, I manually set the minimal repeat value to 5. This is the number of times the sensor will fire the same code towards the target. That is the optimal value for a target device to receive the code if the remote is pointed directly at it without necessarily triggering the same command twice or more.
After the command is learned, the code is processed and transformed into a serializable instance. The connecting client is then notified about whether the command was learned.

/// Execute one of the commands currently stored on the local server.
The original deserialized command.
private static void ExecuteCommand(KeyValuePair result)
string[] data = result.Key.Split(new char[] { ':' });

var set = StorageHelper.GetSingleSet(StorageHelper.GetSets(), data[1]);

if (set != null)
var command = StorageHelper.GetSingleCommand(StorageHelper.GetCommands(set.Name), result.Value);

IRLearnedCode code = IRCodeWorker.GetLearnedCode(command.Code);

if (sensor == null)
sensor = new IR();;
sensor.transmit(code.Code, code.CodeInfo);
Command execution relies on the hardware sensor. The phone sends a command execution request in the following format:
Once the command is parsed out and found in the local storage, the IR code is transformed back to a model that is recognizable by the Phidgets SDK and transmitted towards the location where the sensor is pointed at the time of the execution.

/// Delete a single set and all the associated commands
The name of the set.
private static void DeleteSet(string target)
var sets = StorageHelper.GetSets();
var targetSet = StorageHelper.GetSingleSet(sets, target);

if (targetSet != null)
StorageHelper.RemoveSet(sets, targetSet);
When deleting a set, only the name of the set should be specified. The user will get a warning on the client side that requires a confirmation of the deletion. The server will blindly execute the command.

private static void DeleteCommand(KeyValuePair result)
var sets = StorageHelper.GetSets();
string setName = result.Key.Split(new char[] {':'})[1];
var targetSet = StorageHelper.GetSingleSet(sets, setName);
var command = (from c in targetSet.Commands where c.Name == result.Value select c).FirstOrDefault();

if (command != null)

Not only can the user remove entire sets, but he can also target specific commands from a given set. Once a DELETE_COMMAND directive is recognized, the set name is parsed out from the original string, that follows the DELETE_COMMAND:SET_NAME, COMMAND_NAME format, and a simple LINQ query extracts the command instance, removes it and stores the set content on the local hard drive.
Notice that for some commands, particularly for set creation, deletion and command deletion, the server will return a list of the remaining items. The contents will be automatically updated on the devices, which will be waiting for that response. This measure was deliberately introduced to minimize the chances of a user triggering a command that was already deleted or trying to query a previously removed set.
Transforming Codes

You might have noticed that I am using IRCodeWorker.GetSerializableCodeType to transform a Phidgets SDK native IR code model into a serializable one. This is a helper function that performs a field copy of the existing object. Because of the differences in the model structure, it has to be done manually:

public static SerializableIRCode GetSerializableIRCode(IRLearnedCode code)
SerializableIRCode sCode = new SerializableIRCode();
sCode.BitSize = code.Code.BitCount;
sCode.Encoding = code.CodeInfo.Encoding;
sCode.CarrierFrequency = code.CodeInfo.CarrierFrequency;
sCode.CodeData = code.Code.Data;
sCode.DutyCycle = code.CodeInfo.DutyCycle;
sCode.Gap = code.CodeInfo.Gap;
sCode.Header = code.CodeInfo.Header;
sCode.MinRepeat = 5;
sCode.One = code.CodeInfo.One;
sCode.Repeat = code.CodeInfo.Repeat;
sCode.Trail = code.CodeInfo.Trail;
sCode.Zero = code.CodeInfo.Zero;
sCode.Mask = new ToggleMask()
BitSize = code.CodeInfo.ToggleMask.BitCount,
CodeData = code.CodeInfo.ToggleMask.Data

return sCode;

The reverse process is easier because I can pass each of the existing properties to the IRCodeInfo constructor. The only difference is the fact that I need to use Reflection to create an instance of IRLearnedCode because there is no public constructor defined and a dynamic object has to be created:

internal static IRLearnedCode GetLearnedCode(SerializableIRCode serializableIRCode)
IRCode code = new IRCode(serializableIRCode.CodeData, serializableIRCode.BitSize);
IRCodeInfo info = new IRCodeInfo(serializableIRCode.Encoding, serializableIRCode.BitSize, serializableIRCode.Header,
serializableIRCode.Zero, serializableIRCode.One, serializableIRCode.Trail, serializableIRCode.Gap, serializableIRCode.Repeat,
serializableIRCode.MinRepeat, serializableIRCode.Mask.CodeData, IRCodeInfo.IRCodeLength.Constant,
serializableIRCode.CarrierFrequency, serializableIRCode.DutyCycle);

object[] parameters = new object[] { code, info };

BindingFlags flags = BindingFlags.NonPublic | BindingFlags.Instance;
object instantType = Activator.CreateInstance(typeof(IRLearnedCode), flags, null, parameters, null);

return (IRLearnedCode)instantType;

Command and Set Management

Looking back at the code that I put together for the command interpreter, there is one class that does all local content manipulation—StorageHelper. This is a simple class that performs LINQ queries on set as well as command collections, and makes sure that all the changes are preserved in the sets.xml file in the application folder that is used as the only storage place for all the content that is being manipulated by the server.

namespace Coding4Fun.MissionControl.API.Helpers
public class StorageHelper

/// Lists all available sets that are currently stored on the server.
/// List of sets on the machine.
internal static List GetSets()
List sets = null;

string rawContent = GetRawSets();
sets = JsonConvert.DeserializeObject(rawContent);

return sets;

/// Returns the list of commands that are associated with the given set.
The name of the target set.
/// List of commands associated with the given set.
internal static List GetCommands(string setName)
List commandList = null;

var sets = GetSets();

Set singleSet = null;
if (sets != null)
singleSet = (from c in sets where c.Name == setName select c).FirstOrDefault();

if (singleSet != null)
commandList = singleSet.Commands;

return commandList;

/// Gets the list of names for the commands in the requested set.
The name of the target set.
/// List of commands associated with the given set.
internal static List GetRawCommandNames(string setName)
List commandList = GetCommands(setName);

List stringSet = null;

if (commandList != null)
stringSet = commandList.Select(x => x.Name).ToList();

return stringSet;

/// Get the list of names for all sets on the local server.
/// List of sets on the machine.
internal static List GetRawSetNames()
List sets = GetSets();

List stringSet = null;

if (sets != null)
stringSet = sets.Select(x => x.Name).ToList();

return stringSet;

/// Get the raw string contents of sets.xml. Should only be used in the
/// context of this class.
/// JSON string representing stored sets and commands.
internal static string GetRawSets()
string sets = string.Empty;

if (File.Exists("sets"))
using (StreamReader reader = new StreamReader(File.OpenRead("sets")))
sets = reader.ReadToEnd();
FileStream stream = File.Create("sets.xml");


return sets;

/// Check whether a set is marked with a IsList flag.
The name of the target set.
/// TRUE - set is a list. FALSE - set is not a list.
internal static bool IsSetAList(string setName)
bool isList = true;
var sets = GetSets();
Set set = null;

if (sets != null)
set = (from c in sets where c.Name == setName select c).FirstOrDefault();

if (set != null)
isList = set.IsList;

return isList;

/// Serialize the set collection to sets.xml
Collection to be serialized.
/// true if sets are serialized.
private static bool SerializeSets(List sets)
using (StreamWriter writer = new StreamWriter("sets.xml", false))
string data = JsonConvert.SerializeObject(sets);


return true;
return false;

/// Add a new set to the existing global set collection.
Set name.
/// true if successfully added set.
internal static bool AddSet(string name, bool isList = true)
var sets = GetSets();

if (sets == null)
sets = new List();

var singleSet = GetSingleSet(sets, name);

if (singleSet == null)
sets.Add(new Set { Name = name, IsList = isList });

if (SerializeSets(sets))
return true;
return false;

/// Retrieves a single set from a collection that has a specific name.
The source collection from which to extract the set.
The name of the set to get.
/// An instance of the found set, if any.
internal static Set GetSingleSet(List sets, string name)
if (sets != null)
return (from c in sets where c.Name == name select c).FirstOrDefault();
return null;

/// Add a IR command to an existing set. If the set is not found, it will be created.
The command instance to be added.
The name of the target set.
/// true if the command was successfully added.
internal static bool AddCommand(Command command, string targetSet)
var sets = GetSets();

if (sets == null)
sets = new List();

var singleSet = GetSingleSet(sets, targetSet);

if (singleSet == null)
singleSet = new Set { Name = targetSet };

var singleCommand = (from c in singleSet.Commands where c.Name == command.Name select c).FirstOrDefault();

if (singleCommand == null)

if (SerializeSets(sets))
return true;
return false;
return false;

/// Retrieve a single command instance from one of the sets on the local server.
Original list of commands.
Name of the command to be retrieved.
/// An instance of the command, if found. NULL if not.
internal static Command GetSingleCommand(List commands, string name)
if (commands != null)
return (from c in commands where c.Name == name select c).FirstOrDefault();
return null;

/// Remove a set from a local machine.
Original list of sets.
Name of the set to remove.
internal static void RemoveSet(List sets, Set targetSet)

Sending Data Back to the Client

SendData in the NetworkHelper class handles all outbound connections. Here is its structure:

/// Send data to the target network machine.
The target machine IP.
Data to be sent, in string format.
Determines whether to remove the port from the given IP string.
public static void SendData(string destination, string data, bool sanitizeIp = true)
using (Socket client = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp))
string completeIp = string.Empty;

if (sanitizeIp)
completeIp = destination.Remove(destination.IndexOf(":"), destination.Length - destination.IndexOf(":"));

client.Connect(completeIp, 6169);
A new stream socket is created in order to connect to the target machine over the TCP pipe. If IP sanitization is enabled, the port is stripped from the address in order to pass a valid IP. A Socket instance cannot directly handle IPs of the format:
Later, in a synchronous manner, a connection is established and the data is sent.
At this point, you can see that the barebones service offers a flexible way to manage content. It can be accessed by any application type as long as the server can be accessed and the application can send commands in the pre-defined format and the content requested is actually located on the target server. This allows for high levels of extensibility and interoperability, as the server usage is not limited to a single platform. If I decide to create a Windows Store application that would allow me to control my TV, I simply need to add socket connection layer that will send plain strings to the machine where the IR sensor is connected.
Similarly, if some functionality needs to be added, it is possible to do so without ever touching the client applications. A modification in the endpoint will be reflected with no direct effect on all connection applications as long as all handled returned and requested values are preserved. The only additional requirement is that if the client applications want to take advantage of newly introduced capabilities, they need to have an updated command transmission layer for the new command types.
In Program.cs, I simply need to start the server through the CoreStarter class:

namespace Coding4Fun.MissionControl.API
class Program
static void Main(string[] args)
Console.WriteLine("Coding4Fun MissionControl Server");

Mobile client overview

The mobile client does not have the capability to send commands directly to the IR sensor. Instead, it connects to a remote machine that has the IR sensor plugged in and attempts to invoke a command from the list returned by the service. A single mobile client can support control over multiple servers.
NOTE: Make sure that at the time of working with the Windows Phone client, the server is actually running on your local machine. To make it easier to test, also open port 6169 for incoming connections in Windows Firewall.
When building a Windows Phone application, make sure you have the proper version of the SDK installed, as well as a SLAT-compatible machine if you plan on testing the application in the emulator.
Networking Infrastructure

The Windows Phone application also relies on a network infrastructure somewhat similar to that of the server. There is a TCP listener that is created when the application is started:

// Code to execute when the application is launching (eg, from Start)
// This code will not execute when the application is reactivated
private void Application_Launching(object sender, LaunchingEventArgs e)

listener.OnClientConnected += listener_OnClientConnected;

Here, listener is an instance of TcpSocketListener—a custom class designed to handle incoming network connections:

namespace Coding4Fun.MissionControl.WP.Network
public class TcpSocketListener : SocketConnectorBase
StreamSocketListener coreSocket;

public async void Start(int port)
coreSocket = new StreamSocketListener();
coreSocket.ConnectionReceived += coreSocket_ConnectionReceived;

await coreSocket.BindServiceNameAsync(port.ToString());
catch (Exception ex)

coreSocket = null;
OnConnectionCompleted(new ConnectionEventArgs { IsSuccessful = false, DeviceID = string.Empty });

async void coreSocket_ConnectionReceived(StreamSocketListener sender, StreamSocketListenerConnectionReceivedEventArgs args)
Debug.WriteLine("Connection received!");

DataReader reader = new DataReader(args.Socket.InputStream);

while (true)
StringBuilder builder = new StringBuilder();

uint actualLength = 1;

while (actualLength > 0)
actualLength = await reader.LoadAsync(256);

OnConnectionCompleted(new ConnectionEventArgs
Socket = args.Socket,
IsSuccessful = true,
DeviceID = args.Socket.Information.RemoteHostName.DisplayName,
Token = builder.ToString()
catch (Exception exception)

OnConnectionCompleted(new ConnectionEventArgs { IsSuccessful = false });

A StreamSocketListener is used for the connection core. When a connection is received, a continuous loop reads the entire contents of the incoming stream. OnConnectionCompleted is declared in the base class—SocketConnectorBase.

namespace Coding4Fun.MissionControl.WP.Network
public class SocketConnectorBase
public event EventHandler OnClientConnected;
public virtual void OnConnectionCompleted(ConnectionEventArgs connectionArgs)
if (OnClientConnected != null)
OnClientConnected(this, connectionArgs);

public event EventHandler OnSendCompletedEvent;
public virtual void OnSendCompleted(bool succeeded)
if (OnSendCompletedEvent != null)
OnSendCompletedEvent(this, succeeded);

public class ConnectionEventArgs : EventArgs
public StreamSocket Socket { get; set; }
public string DeviceID { get; set; }
public string Token { get; set; }
public bool IsSuccessful { get; set; }

ConnectionEventArgs here is used to identify the content that is passed to the client. DeviceID gives access to the source IP, IsSuccessful tells the developer whether the established connection is active and the Token carries the raw string if any was received.
Sending data is simplified to the maximum with the help of the SocketClient class, which relies on a StreamSocket instance that handles outbound connections and writing to the output stream:

namespace Coding4Fun.MissionControl.WP.Network
public class SocketClient : SocketConnectorBase
StreamSocket _socket;

public SocketClient()
_socket = new StreamSocket();

public SocketClient(StreamSocket socket)
_socket = socket;

public async void Connect(string hostName, int portNumber)
await _socket.ConnectAsync(new HostName(hostName), portNumber.ToString(), SocketProtectionLevel.PlainSocket);

OnConnectionCompleted(new ConnectionEventArgs { IsSuccessful = true });
catch (Exception ex)

OnConnectionCompleted(new ConnectionEventArgs { IsSuccessful = false });

public async void Send(string dataToSend)
using (DataWriter writer = new DataWriter(_socket.OutputStream))
// Write the length of the binary data that is being
// sent to the client.


// Send the actual data.
await writer.StoreAsync();


_socket = null;

As with the listener class, SocketClient supports OnConnectionCompleted to notify the application that the connection attempt completed.
Back in App.xaml.cs, the data from the incoming connection captured by the TcpSocketListener instance is passed to the ResponseHelper class:

void listener_OnClientConnected(object sender, ConnectionEventArgs e)

This class reads the possible three commands sent by the server and interprets them, creating internal collections from the raw data if the current server IP matches the one obtained in the ServerResponse (the same model in the desktop application):

using Coding4Fun.MissionControl.WP.Models;
using Coding4Fun.MissionControl.WP.ViewModels;
using Newtonsoft.Json;
using System;
using System.Collections.Generic;
using System.Globalization;
using System.Windows;

namespace Coding4Fun.MissionControl.WP.Misc
public class ResponseHelper
public static void HandleIncomingResponse(string rawResponse)
if (rawResponse != null)
ServerResponse response = JsonConvert.DeserializeObject(rawResponse);

if (response.Marker == Constants.COMMAND_SERVER_NOTIFICATION)
Deployment.Current.Dispatcher.BeginInvoke(() =>
MessageBox.Show(response.Content, "Server Response", MessageBoxButton.OK);
if (CommonViewModel.Instance.IsWaiting)
if (response.Identifier == CommonViewModel.Instance.CurrentServer.Location)
// returns the list of sets that are associated with the current server.
if (response.Marker == Constants.COMMAND_SERVER_SET_LIST)

List items = JsonConvert.DeserializeObject(response.Content);

if (items != null)
List groupedItems = Group.CreateGroups(items,
CultureInfo.CurrentCulture, (string s) => { return s[0].ToString(); }, true);
SetsPageViewModel.Instance.Sets = groupedItems;
SetsPageViewModel.Instance.Sets = new List();

Deployment.Current.Dispatcher.BeginInvoke(() =>
CommonViewModel.Instance.IsWaiting = false;

if (!App.RootFrame.CurrentSource.ToString().Contains("SetsPage"))
App.RootFrame.Navigate(new Uri("/Views/SetsPage.xaml", UriKind.Relative));

// returns the list of commands associated with a given set.
else if (response.Marker.Contains(Constants.COMMAND_SERVER_SET_COMMANDS))
string[] data = response.Marker.Split(new char[] { ':' });
if (data[1] == CommonViewModel.Instance.CurrentSet)
bool isList = false;
bool.TryParse(data[2].ToLower(), out isList);

if (isList)
CommonViewModel.Instance.CurrentSetType = "list";
CommonViewModel.Instance.CurrentSetType = "pad";

CommandsPageViewModel.Instance.Commands = new System.Collections.ObjectModel.ObservableCollection(JsonConvert.DeserializeObject(response.Content));

Deployment.Current.Dispatcher.BeginInvoke(() =>
CommonViewModel.Instance.IsWaiting = false;
App.RootFrame.Navigate(new Uri("/Views/CommandsPage.xaml", UriKind.Relative));

If the response comes from a server that is different than the one that is currently active, the data is discarded as the user no longer needs it. Also, for specific commands, the mobile application will be on standby, waiting for a response (unless the user decides to cancel the request) – the IsWaiting flag is an application-wide indicator that a pending server action is in the queue.
Same as with the server, the commands in the Windows Phone application are represented through pre-defined constants:

public const string COMMAND_SERVER_SET_LIST = "SET_LIST";



Let’s now take a closer look at how it is handled internally to build the visual layer.
Handling the Data

The first thing users will see when the application is launched is the list of registered servers:

This is ServiceListPage.xaml

So i play CA (Combat arms, a first person shooter) at around 30-50 frames per second.
sometimes with tweaks i can get to around 43-57 consistent frames per second.
On three different computer i have had One moment of insane and godly frames per second around 300-400frames per second

-First time was on my macbook(Dual core 2.6ish GHz /Nvidia, 256 dedicated RAM/ 4GB RAM/)
I installed bootcamp and after a year or so of consistent lagging around 60 frames per second i was lagging in combat arms more , so i reinstalled my Nvidia graphics driver
After i reinstalled i was able to play CA On full graphics Anti-asling x8 anisotropy x8
overall settings high, and still run at around 200+ frames per second
On CA, fallout 3 new vegas, and some others.
As soon as i restarted my laptop it was back to same old laggy 50-60 frames per second.

-On a Metal laptop I had (for like 3 months before i discovered that buzzing feeling was the comp shocking me for those months)I was playing and randomly one night it started running at insane frames per second, i dont remember too much but it was fallout 3 on low then, full graphics.

And most recent on my current AMD quad core:
I was playing laggy games around 20-30 frames per second with lots of freezes.
I reinstalled my graphics drivers and instantly my games were running full graphics and the insane 200-300 frames per second.
Now currently I am running at 30-50 frames per second with rarely any freezes.

MY current laptop: CA 25-55 frames per second
Gateway - Windows 7 home premium 64 BIT
AMD Quadcore 1.5Ghz A8-3500m
4GB RAM DDR3, I did have 6GB but i gave 2GB to my Brother, it only caused me to be at current lower -10 frames per second.
640GB HardDrive space
AMD 6620G, 512 dedicated ram.
1366 x 768 and my VGA Display 1360 x 768.

Macbook/bootcamp:CA 30-80 frames per second
Windows 7 Ultimate 64Bit
dual core 2.6ish GHz
256 dedicated RAM
250HD space
Gamebooster report has more info

Programs & settings I use
- I sometimes use Gamebooster which gives me +5-10fps
- I also have been trying recently the
windows media player booster program with no signs of fps gain.
- I have fully updated windows 7
- I just now reinstalled my graphics driver with no improvement.
- I reinstalled CA alot and do gain too around consistent 50-65 frames per second frames per second for like 3 days.
-I used overdrive for month and it hurt my comp
It did not boost me and it caused my games to jitter and screech, it also caused my laptop to have other erratic problems
(I even set it to run at just over 100% CPU and had same effects)
I run on the lowest graphics on CA and AMD AMD is set to no v-sync, no antiasling, no anisotropy no triple buffer, and such with 30-50 frames still.
- I have tried in lower resolution screens with only small 10 frames per second.
- I have defragged.

-On the macbook and this AMD quad core i had been playing for over 10 hours
one person told me it takes times for the comp to heat up and then it will run faster
(Problem is I play around 14 hours per day, and it does get faster but only up to around +10 frames and MUCH faster loading speeds)
If this is true, then how could i implement this and keep my comp in correct temperature.
(I have a fan and when i rarely have used it I think it slows my comp down)

-MY CPUs on this quad core never go above 25%
my GPU according to system monitor Gets maxed out during current CA gameplay
Maybe i can somehow get my comp to use my CPUs instead of my GPU?

-I heard the having 3D vision installed on the Nvidia computers sometimes lags people up so i made sure to disable featues like that when i reinstalled, but im not sure if i disabled anything, maybe you know of some feature i should disable.

I think it was prob some feature/setting not being installed with my drivers.
or some setting put in by windows the the AMD/Nvidia driver messed with.
(maybe reinstalling cleared a cache that lags me)

Why it cant be some things.
-I was not running game booster or any program like that.
-I was not running on low graphics i was running on max, after i saw that i was running so fast on low graphics, in attempt to sea how much it could handle.
I had no overdrive.
-I did no hardware changes at all within at least 1-2 months of the 3 incidents.
(probably longer like 1 year)
-I have reinstalled my windows 7 comp and instantly installed CA and then played it with only consistent 50-60 frames.
-Its not CA because i have tried reinstalling and then not installing CA and still ran slow on fallout 3, and even Runescape.
-I have played on no page file, and on 7GB page file
-I have tried turning off themes, running gamebooster, defragging. and it is pretty smooth but still a measly 43-60 frames per second.
-I was playing On 1280 X 800 res during incident.
I defragment.
Current game speeds
Skyrim 30-40frames per second
None of the weak fixes are what im after im after those moments of pure..........insanity...
Where i had 300-400 frames per second.
but maybe a weak fix will be all i need to tide it over.

I got 10 headshots in a row easily on CA where 10 headshots in a row is as rare as winning lottery.

I dont want to post this and watch it get ignored like most forums.

I know its possible because it happened to me three times, and on this AMD laptop.

I dont think this is a gaming topic because its about graphics, not a specific game.

It also effected the rest of my system at least a little, that i could load games and such faster.

This is unrelated to this problem but im thinking about buying a 8GB RAM stick for my laptop i just want to know how much would that help. My teacher said that upgrading the ram will speed up my computer ALOT. (RAM is Cheap and yet expensive, I need a cheap 8GB high quality stick, said $45 and at Freys instore it was like $25ish, but its like 100miles away now)

I have my CISCO IT essentials so i can easily handle windows tasks and i already have used MANY different tweaks of Regitry, and other system tweaks.




Game Booster Diagnose Report v1.0
Date: 2012/06/26 08:08:20

01 - Operating System

0101 - Operating System : Windows 7 Home Premium 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.120503-2030)
0102 - Language : English (Regional Setting: English)
0103 - BIOS : InsydeH2O Version CCB.03.61.13V1.04
0104 - Processor : AMD A8-3500M APU with Radeon(tm) HD Graphics (4 CPUs), ~1.5GHz
0105 - Memory : 4096MB RAM
0106 - Available OS Memory : 3562MB RAM
0107 - Page File : 1603MB used, 5520MB available
0108 - Windows Dir : C:Windows
0109 - DirectX Version : DirectX 11
0110 - DX Setup Parameters : Not found
0111 - User DPI Setting : 96 DPI (100 percent)
0112 - System DPI Setting : 96 DPI (100 percent)
0113 - DWM DPI Scaling : Disabled
0114 - DxDiag Version : 6.01.7601.17514

02 - Processor

0201 - Caption : AMD A8-3500M APU with Radeon(tm) HD Graphics x4 ~1500MHz
0202 - Current Clock Speed : 1500MHz
0203 - L1 Cache : 512.00 KB
0204 - L2 Cache : 4.00 MB

03 - Video Adapter

0301 - Card Name : AMD Radeon HD 6620G
0302 - Manufacturer : Advanced Micro Devices, Inc.
0303 - Chip Type : ATI display adapter (0x9641)
0304 - DAC Type : Internal DAC(400MHz)
0305 - Device Key : EnumPCIVEN_1002&DEV_9641&SUBSYS_05991025&REV_00
0306 - Display Memory : 2022 MB
0307 - AdapterRAM : 512.00 MB
0308 - Current Mode : 1360 x 768 (32 bit) (60Hz)
0309 - Monitor Name : Generic PnP Monitor
0310 - Driver Name : aticfx64.dll,aticfx64.dll,aticfx64.dll,aticfx32,aticfx32,aticfx32,atiumd64.dll,atidxx64.dll,atidxx64.dll,atiumdag,atidxx32,atidxx32,atiumdva,atiumd6a.cap,atitmm64.dll
0311 - Driver Version : 8.17.0010.1124
0312 - Driver Language : English
0313 - DDI Version : 11
0314 - Driver Model : WDDM 1.1
0315 - Driver Beta : False
0316 - Driver Debug : False
0317 - Driver Date : 4/5/2012 19:20:04
0318 - Driver Size : 1067520
0319 - VDD : n/a
0320 - Mini VDD : n/a
0321 - Mini VDD Date : n/a
0322 - Mini VDD Size : 0
0323 - Device Identifier : {D7B71EE2-D501-11CF-F177-9325BEC2C535}
0324 - Vendor ID : 0x1002
0325 - Device ID : 0x9641
0326 - SubSys ID : 0x05991025
0327 - Revision ID : 0x0000
0328 - Driver Strong Name : oem25.inf:ATI.Mfg.NTamd64.6.1:ati2mtag_Sumo_Mobile:8.961.0.0civen_1002&dev_9641
0329 - Rank Of Driver : 00E62001
0330 - Video Accel : ModeMPEG2_A ModeMPEG2_C
0331 - Deinterlace Caps : {6E8329FF-B642-418B-BCF0-BCB6591E255F}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,1) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{6E8329FF-B642-418B-BCF0-BCB6591E255F}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,1) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(YV12,0x32315659) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{3C5323C1-6FB7-44F5-9081-056BF2EE449D}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,2) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{552C0DAD-CCBC-420B-83C8-74943CF9F1A6}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,2) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{6E8329FF-B642-418B-BCF0-BCB6591E255F}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,1) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC1,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC2,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC3,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC4,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(S340,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(S342,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
0332 - D3D9 Overlay : Not Supported
0333 - DXVA-HD : Not Supported
0334 - DDraw Status : Enabled
0335 - D3D Status : Enabled
0336 - AGP Status : Enabled
0337 - Notes : No problems found.

0338 - OpenGL : 6.1.7600.16385 (win7_rtm.090713-1255)

04 - Memory

0401 - Total Memory : 3.48 GB
0402 - Free Memory : 2.21 GB
0403 - Total Pagefile : 6.96 GB
0404 - Free Pagefile : 5.39 GB

0405 - Bank Label : BANK0
0406 - Speed : 1066 MHz
0407 - Total Width : 64 Bits
0408 - Capacity : 2.00 GB

0405 - Bank Label : BANK0
0406 - Speed : 1066 MHz
0407 - Total Width : 64 Bits
0408 - Capacity : 2.00 GB

05 - Network

0501 - Description : Broadcom NetLink (TM) Gigabit Ethernet
0502 - Driver Date : 5-10-2011
0503 - Driver Version :

06 - Motherboard

0601 - Model : SJV50-SB
0602 - Manufacturer : Gateway

07 - Sound Device

0701 - Description : Speakers (Realtek High Definition Audio)
0702 - Default Sound Playback : True
0703 - Default Voice Playback : True
0704 - Hardware ID : HDAUDIOFUNC_01&VEN_10EC&DEV_0269&SUBSYS_10250599&REV_1001
0705 - Manufacturer ID : 1
0706 - Product ID : 100
0707 - Type : WDM
0708 - Driver Name : RTKVHD64.sys
0709 - Driver Version : 6.00.0001.6602
0710 - Driver attributes : Final Retail
0711 - Date and Size : 3/27/2012 17:03:36
0713 - Driver Provider : Realtek Semiconductor Corp.
0714 - Min/Max Sample Rate : 5374206, 5374206
0715 - Static/Strm HW Mix Bufs : 5374206, 5374206
0716 - Static/Strm HW 3D Bufs : 5374206, 5374206
0717 - HW Memory : 5374214
0718 - Voice Management : False
0719 - EAX(tm) 2.0 Listen/Src : False, False
0720 - I3DL2(tm) Listen/Src : False, False
0721 - Notes : No problems found.

08 - Hard Disk

0801 - Model : TOSHIBA MK6459GSXP ATA Device
0802 - Media Type : Fixed hard disk media
0803 - Size : 596.17 GB
0804 - Interface Type : Serial ATA
0805 - Driver Date : 6-21-2006
0806 - Driver Version : 6.1.7600.16385

0807 - Caption : C:
0808 - Capacity : 578.07 GB
0809 - Free Space : 256.63 GB
0810 - Drive Type : 3-Fixed
0811 - File System : NTFS

09 - Process

0901 - 000 Idle 0 0 0
0901 - 004 System 0 0 0
0901 - 114 smss.exe 0 0 0 normal
0901 - 1e4 csrss.exe 0 0 0 normal
0901 - 22c wininit.exe 0 0 0 high
0901 - 270 services.exe 0 0 0 normal
0901 - 280 lsass.exe 0 0 0 normal
0901 - 288 lsm.exe 0 0 0 normal
0901 - 320 svchost.exe 0 0 0 normal
0901 - 370 svchost.exe 0 0 0 normal
0901 - 3f4 svchost.exe 0 0 0 normal
0901 - 1b8 svchost.exe 0 0 0 normal
0901 - 1e8 svchost.exe 0 0 0 normal
0901 - 418 svchost.exe 0 0 0 normal
0901 - 4d4 svchost.exe 0 0 0 normal
0901 - 5d4 svchost.exe 0 0 0 normal
0901 - 648 dsiwmis.exe 0 0 0 normal C:Program Files (x86)Launch Manager
0901 - 684 ePowerSvc.exe 0 0 0 normal
0901 - 6a4 svchost.exe 0 0 0 normal
0901 - 878 svchost.exe 0 0 0 normal
0901 - ab4 svchost.exe 0 0 0 normal
0901 - c44 dllhost.exe 0 0 0 normal
0901 - d4c svchost.exe 0 0 0 normal
0901 - ec4 spoolsv.exe 0 0 0 normal
0901 - f14 csrss.exe 2 170 78 normal
0901 - c88 winlogon.exe 2 6 0 high
0901 - f74 LMutilps32.exe 2 14 4 normal C:Program Files (x86)Launch Manager
0901 - a5c taskhost.exe 2 21 15 normal
0901 - 658 dwm.exe 2 19 2 high
0901 - 8e4 explorer.exe 2 341 239 normal
0901 - dbc RAVCpl64.exe 2 54 19 normal
0901 - d04 PresentationFontCache.exe 0 0 0 normal
0901 - 9b4 taskhost.exe 2 14 4 normal
0901 - e98 atiesrxx.exe 0 0 0 normal
0901 - 9dc atieclxx.exe 2 9 7 normal
0901 - c04 Fuel.Service.exe 0 0 0 normal
0901 - 824 MOM.exe 2 10 9 normal
0901 - 840 CCC.exe 2 73 61 normal
0901 - 568 firefox.exe 2 66 58 normal C:Program Files (x86)Mozilla Firefox
0901 - 3d4 plugin-container.exe 2 33 38 normal C:Program Files (x86)Mozilla Firefox
0901 - 9e8 GameBooster.exe 2 1597 95 normal C:Program Files (x86)IObitGame Booster 3
0901 - 9a4 gbtray.exe 2 54 43 normal C:Program Files (x86)IObitGame Booster 3
0901 - e60 FPSClient.exe 2 35 27 normal C:Program Files (x86)IObitGame Booster 3
0901 - 11c WmiPrvSE.exe 0 0 0 normal
0901 - e40 WmiPrvSE.exe 0 0 0 normal
0901 - d00 audiodg.exe 0 0 0

10 - Service

1001 - Application Experience - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - AMD External Events Utility - [C:Windowssystem32atiesrxx.exe]
1001 - Windows Audio Endpoint Builder - [C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Windows Audio - [C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted]
1001 - Base Filtering Engine - [C:Windowssystem32svchost.exe -k LocalServiceNoNetwork]
1001 - Background Intelligent Transfer Service - [C:WindowsSystem32svchost.exe -k netsvcs]
1001 - Computer Browser - [C:WindowsSystem32svchost.exe -k netsvcs]
1001 - Cryptographic Services - [C:Windowssystem32svchost.exe -k NetworkService]
1001 - DHCP Client - [C:Windowssystem32svchost.exe -k LocalServiceNetworkRestricted]
1001 - DNS Client - [C:Windowssystem32svchost.exe -k NetworkService]
1001 - Dritek WMI Service - [C:Program Files (x86)Launch Managerdsiwmis.exe]
1001 - Extensible Authentication Protocol - [C:WindowsSystem32svchost.exe -k netsvcs]
1001 - ePower Service - [C:Program FilesGatewayGateway Power ManagementePowerSvc.exe]
1001 - Windows Event Log - [C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted]
1001 - COM+ Event System - [C:Windowssystem32svchost.exe -k LocalService]
1001 - Function Discovery Provider Host - [C:Windowssystem32svchost.exe -k LocalService]
1001 - Function Discovery Resource Publication - [C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation]
1001 - Windows Font Cache Service - [C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation]
1001 - Windows Presentation Foundation Font Cache - [C:WindowsMicrosoft.NetFramework64v3.0WPFPresentationFontCache.exe]
1001 - Human Interface Device Access - [C:Windowssystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - HomeGroup Listener - [C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - HomeGroup Provider - [C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted]
1001 - IKE and AuthIP IPsec Keying Modules - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - IP Helper - [C:WindowsSystem32svchost.exe -k NetSvcs]
1001 - CNG Key Isolation - [C:Windowssystem32lsass.exe]
1001 - Server - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - Workstation - [C:WindowsSystem32svchost.exe -k NetworkService]
1001 - TCP/IP NetBIOS Helper - [C:Windowssystem32svchost.exe -k LocalServiceNetworkRestricted]
1001 - Windows Firewall - [C:Windowssystem32svchost.exe -k LocalServiceNoNetwork]
1001 - Network Connections - [C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Network List Service - [C:WindowsSystem32svchost.exe -k LocalService]
1001 - Network Location Awareness - [C:WindowsSystem32svchost.exe -k NetworkService]
1001 - Network Store Interface Service - [C:Windowssystem32svchost.exe -k LocalService]
1001 - Peer Networking Identity Manager - [C:WindowsSystem32svchost.exe -k LocalServicePeerNet]
1001 - Peer Networking Grouping - [C:WindowsSystem32svchost.exe -k LocalServicePeerNet]
1001 - Program Compatibility Assistant Service - [C:Windowssystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Plug and Play - [C:Windowssystem32svchost.exe -k DcomLaunch]
1001 - Peer Name Resolution Protocol - [C:WindowsSystem32svchost.exe -k LocalServicePeerNet]
1001 - IPsec Policy Agent - [C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted]
1001 - Power - [C:Windowssystem32svchost.exe -k DcomLaunch]
1001 - User Profile Service - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - Security Accounts Manager - [C:Windowssystem32lsass.exe]
1001 - System Event Notification Service - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - Shell Hardware Detection - [C:WindowsSystem32svchost.exe -k netsvcs]
1001 - Print Spooler - [C:WindowsSystem32spoolsv.exe]
1001 - SSDP Discovery - [C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation]
1001 - Superfetch - [C:Windowssystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Themes - [C:WindowsSystem32svchost.exe -k netsvcs]
1001 - Distributed Link Tracking Client - [C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Desktop Window Manager Session Manager - [C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Windows Defender - [C:WindowsSystem32svchost.exe -k secsvcs]
1001 - Windows Management Instrumentation - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - WLAN AutoConfig - [C:Windowssystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - Security Center - [C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted]
1001 - Windows Update - [C:Windowssystem32svchost.exe -k netsvcs]
1001 - Windows Driver Foundation - User-mode Driver Framework - [C:Windowssystem32svchost.exe -k LocalSystemNetworkRestricted]
1001 - AMD FUEL Service - [C:Program FilesATI TechnologiesATI.ACEFuelFuel.Service.exe /launchService]

11 - Windows Express

1101 - System Score : 5.9
1102 - Memory Score : 5.9
1103 - CPU Score : 6.6
1104 - Graphics Score : 5.9
1105 - Gaming Score : 6.5
1106 - Disk Score : 5.9

12 - Event Log

1201 - Time : 6/26/2012 8:48:55 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

1201 - Time : 6/26/2012 8:30:04 PM
1202 - Source : Application Hang
1203 - Description : The program explorer.exe version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: fd4
Start Time: 01cd53064db9af16
Termination Time: 0
Application Path: C:Windowsexplorer.exe
Report Id: 9b95fa7e-bf8a-11e1-876f-b870f4b31d76

1201 - Time : 6/26/2012 12:53:55 AM
1202 - Source : Application Error
1203 - Description : Faulting application name: WLXPhotoGallery.exe, version: 15.4.3555.308, time stamp: 0x4f596a69
Faulting module name: atidxx32.dll, version:, time stamp: 0x4dddd162
Exception code: 0xc0000005
Fault offset: 0x0000e2a4
Faulting process id: 0x8e0
Faulting application start time: 0x01cd52f315cd647f
Faulting application path: C:Program Files (x86)Windows LivePhoto GalleryWLXPhotoGallery.exe
Faulting module path: C:Windowssystem32atidxx32.dll
Report Id: 592a60dc-bee6-11e1-876f-b870f4b31d76

1201 - Time : 6/25/2012 9:31:57 PM
1202 - Source : Application Error
1203 - Description : Faulting application name: Engine.exe, version:, time stamp: 0x4fd800ca
Faulting module name: unknown, version:, time stamp: 0x00000000
Exception code: 0xc00000fd
Fault offset: 0x73bee2d4
Faulting process id: 0xf08
Faulting application start time: 0x01cd52d449c626a7
Faulting application path: C:NexonCombat ArmsEngine.exe
Faulting module path: unknown
Report Id: 225568f9-beca-11e1-876f-b870f4b31d76

1201 - Time : 6/25/2012 12:44:43 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

1201 - Time : 6/26/2012 10:44:08 PM
1202 - Source : Service Control Manager
1203 - Description : The AMD External Events Utility service terminated unexpectedly. It has done this 1 time(s).

1201 - Time : 6/26/2012 8:47:39 PM
1202 - Source : Service Control Manager
1203 - Description : The Cyberlink RichVideo64 Service(CRVS) service terminated unexpectedly. It has done this 1 time(s).

1201 - Time : 6/26/2012 8:47:36 PM
1202 - Source : Service Control Manager
1203 - Description : The PnkBstrA service terminated unexpectedly. It has done this 1 time(s).

1201 - Time : 6/26/2012 8:35:21 PM
1202 - Source : Service Control Manager
1203 - Description : The Volume Shadow Copy service terminated unexpectedly. It has done this 1 time(s).

1201 - Time : 6/26/2012 8:35:12 PM
1202 - Source : Service Control Manager
1203 - Description : The Windows Defender service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

End of file - 23098 Bytes

Windows 7 Forums recommends Auslogics BoostSpeed to repair Windows errors. Get it now.
May 1st, 2012: 25% off. Use coupon code: WINDOWS7FORUMS

Optimize every aspect of Windows 7 with the System Advisor or manually.Repair corrupt registry entries and defragment the registry.Disable and enable services based on how you are using your computer.Adjust and edit hundreds of settings to fix your computer in a few easy clicks.Includes File Recovery (undelete) free of charge.

Other Auslogics software:

Auslogics Antivirus
Auslogics File Recovery
Auslogics Disk Defrag Pro

Auslogics BoostSpeed 5 is quite possibly the best overall system maintenance tool of the year. Having received 5 stars from CNET, they also receive a 10/10 full endorsement from BoostSpeed isn't just about making your computer fast: It's about making preventative maintenance manageable through one application. While the market calls for a typical system scan to attract buyers, that scan is entirely legitimate, and does correct serious registry problems in a way that far exceeds industry expectations. CCleaner, for example, can hardly hold a candle to this utility.

Looking closer at the System Advisor, we can determine whether or not the Internet connection can be automatically optimized. This is done with BoostSpeed through a manual or automatic setting in the Auslogics Internet Optimizer. Auslogics Registry Defrag will let you know that you can reduce registry access time and increase overall system performance by running this tool. This is a very delicate task that most freeware applications will not take on. Defragmenting the registry involves significant risk if there is a failure and that is why Auslogics BoostSpeed 5 comes with a Rescue Center, which can literally allow you to backup the changes that have been made within the program. The program will even automatically create these restore points before adjusting your system for perfect fine tuning.

If the Disk and Registry Maintenance options weren't enough, Auslogics BoostSpeed 5 comes with in-depth ways to determine and modify your System Status and Privacy. If that weren't enough, the System Tweaks area allows you to optimize your Windows services around how you use your computer. This can be so useful in a work environment, as most system services continue running unabated, even when they will never be used!

Control over startup items and installed software has never been easier. Needless duplicate files found on a system can be deleted and disks can be explored to discover what is eating up all of that storage space. The System tweaks area is where Auslogics BoostSpeed really shines. It contains management options for the User Interface, Start Menu, Taskbar, Windows Explorer, System Security, Startup and Shutdown, System, Internet Explorer, Microsoft Office, and numerous additional Software Tweaks.

"Hi, I’m Jessica Dolcourt from CNET Download and this is a first look at Auslogics BoostSpeed. This is a top rated program that attempts to defrag, tweak, and otherwise optimize the computer where its most likely to get bogged down. Looking at the clean launch interface, you might never guess that there are 18 tools bundled into one app. The main pane is dominated by shortcuts for testing the health of the system. One Button Checkup will scan for issues and attempt to fix them. For instance, Disk Cleaner’s job is to find and remove junk files. With most scans you run, you’ll have the opportunity to take a closer look at the files, and to back them up before you change anything. Since the goal of the program is to optimize performance, BoostSpeed often frames problems in terms of how much space you would free if you deleted the loose files. On the left, the system tools are organized by activity: Computer, Cleanup, Optimization, Privacy, Settings, and so on. When you click the task category, you’ll see the available tools and a brief description of what they do. Clicking the tools launches it in a separate window, so that you can return to this main interface at any time. Most tools are easy to work their way around, and most changes can be undone in Auslogics Rescue Center, which you can get to from individual tool interfaces or from the settings on the BoostSpeed panel interface. In the Rescue Center, you’ll see a list of the changes you’ve made. You’ll be able to see full details for each entry and view archive backups as well. Which system files BoostSpeed will back up, and which it will leave alone, are things you can specify in the program settings, under the tab that says Rescue Center. We’re fans of Auslogics BoostSpeed for its comprehensive system maintenance and nicely packaged interface. Some of the app’s component parts are offered as stand-alone freeware products, such as the Disk Defrag…" - Courtesy CNET Review of Auslogics BoostSpeed

Under User Interface:
Disable AeroMake menu bars and window frames opaque instead of translucentDo not animate windows when minimizing and maximizingSlow the window animations when holding Shift keyDisable 3D Window SwitchingAdd context menu to activate Flip 3DTurn off Aero PeekTurn off Aero SnapTurn off Aero Shake
Under Visual Effects:
Hide window contents while draggingDo not drop shadows under icons on the desktopDo not use translucent selection rectangleShow Windows version in the desktop bottom right cornerSelect how you want the arrows displayed on shortcuts
Under Animation:
Do not allow window animationDo not use smooth scrolling for list boxesDo not animate drop-down listsSelect tooltip animation types
Do not use menu fading animation effectsHide shadows under menusHide underlined letters for keybaord navigation until ALT is pressedMenu animation effects optionsDelay before displaying submenus (in milliseconds!)Full font smoothing optionsExtended ClearType and Standard font smoothing options
Start Menu:
Hide "Log Off" from the Start MenuHide the "Run itemHide "Set Program Access And Defaults" ("Default Programs" in Vista)Hide the "Help and Support" itemHide the "All Programs" menuHide "Administrative Tools"Hide the list of frequently used programsHide the list of pinned programsHide the "See more results" link
Under Folder options determine whether to hide individual items, show them as a link, or show them as a menu easily

Do not highlight recently installed programsDo not show partially installed programs in grayDo not sort the "All Programs" menu by nameDisable the context menu and drag itemsDisable the "Start" button tooltipExpand menu when you hover the mouse pointer over an itemEnable small icons in the Start menu
Show notification areaDo not display tooltips in the notification areaDo not hide unused icons in the notification areaDo not display the network activity icon in the notification areaDo not display the sound settings icon in the notification areaDo not display the battery icon in the notifications areaAuto-hide taskbarDo not slide taskbar buttonsAllow moving or rearranging taskbar itemsGroup similar buttons: Do not group, Group when full, Always group and hide tagsButtons: Configure advanced settings for taskbar application buttons
Show hidden filesShow file extensionsuse Windows classic foldersDisplay checkboxes to help select multiple filesAlways show the menu bar in Windows ExplorerDisable file and folder pop-up descriptionsDisplay folder size in the folder tooltip
Disable thumbnail cache creationDo not display thumbnails in network foldersThumbnail quality - 0-100%Thumbnail size in pixelsShow address bar folder path autocompleteShow address bar folder path autosuggestShow address bar maximized as a drop-down listInclude variable "PATH" into search pathDisable automatic replacement of a blackslash to a forward slash
Context Menu:
Show "Open Command Prompt"Show "Send To"Show "Copy to Folder..."Show "Move to Folder..."Show "Run as administrator"Show "Take ownership"Show "Search..."
Restore open Explorer windows when you restartDisable CD burning functions in Windows ExplorerRun Desktop and Explorer tasks as seperate processesRun each Explorer window as a seperate processAutomatically restart the shell if a shell error occursDisable the option to search the Internet when you open a file with unknown extension
Explorer items:
Display encrypted and compressed files and folders in a different colorDrive letter is displayed after disk labelDrive letter is displayed before disk labelDrive letter is displayed before disk label for network driveDrive letter is not displayed!

Disable autorun for:
Removable drives (Floppy, flash-drive, etc)Non-removable drives (hard disk, etc)Optical disk drives (CD, DVD, etc)Temporary memory disk (RAM-disk)Network drivesUnknown drive types
Command Prompt:
Enable advanced modeEnable delayed expansion of environmental variablesEnable quick editingFile names autocomplete hotkeyFolder names autocomplete hotkey
System Security:
Disable User Acount ControlSet all UAC options including advanced options only found in registry
Privacy Policy:
Wipe page file on computer shutdownClear the "Recent documents" list on logoffDo not create the "Recent Documents" listDo not store your logon password on the diskDisable hidden sharesDisable user trackingEnable encrypt/decrypt options in ExplorerDisable Faster User Switching
For anonymous users:
Access is allowed with the default settingsTransfer of accounts and SAM names is prohibitedAccess is denied if permits are not specified
Windows Defender:
Disable Windows DefenderDisable heuristic scanningDisable archive scansDisable removable media scansDisable e-mail scansDisable real-time protectionDisable real-time protection promptsDisable downloads checkupDisable executable files checkupDisable definition updates through alternate download locationsCheck for new signatures before scheduled scansDo not log unknown detectionsDo not log known good detections
Startup and Shutdown:
Disable Windows startup soundDisable parsing AUTOEXEC.BATDisplay information about previous logons during user logonDisable Ctrl-Alt-Del before logonRun logon scripts simultaneouslyOptimize system files placement on the diskSpecify time to wait before running Check Disk (chkdsK) in seconds
Event Logging:
Do not log any eventsLog standard events onlyLog all startup and shutdown events
Legal Notice:
Write any legal notice you want during startup of Microsoft Windows
Automatic login:
Use autologin and set credentials, including username, password, and domain

OEM Info:

Configure Windows OEM attributes, such as the manufacturer's logo and support information that appears in the System Properties window.

This includes:
ManufacturerModelSupport URLWorking HoursPhone120x120 pixel logo
Application Start:
Disable "Program Compatibility Assistant"Disable "Program Compatibility Wizard"Disable running 16-bit applicationsRun 16-bit programs as a separate processAdd checkbox "Run in seperate memory space" for 16-bit applications
Error Handling:
Disable sound when errors occurAutomatic restart in case of a critical errorSend error reportsShow error notification in windowDon't save reports on your computerDon't send additional information in a reportDon't write error information into system log
If an error occurs:
Ask user consent to send a reportAutomatically include only basic information in the reportAutomatically include all but personal data in the reportAutomatically include all data in the report
Internet Explorer:

Disable visual-styled controls in Internet Explorer pagesDisable page transitionsDisable Clear Type fontsDisable smooth scrollingDisable autoamtic updatesAlways show menusDo not show extended error messagesDo not show the welcome text for new opened tabsDo not show warning messages when closing tabsDo not send bug reports via the InternetAlways ask before downloading filesPlace the menu above the address bar
Let Internet Explorer decide how pop-ups should openAlways open pop-ups in a new windowAlways open pop-ups in a new tab
Specify how Internet Explorer displays a web page when it's launched from another program:
Opens in a new windowOpens in a new tab in the current windowOpens in the current tab or window
Speed up web browsing in IE by using more concurrent Internet connectionsIncludes anywhere from 1-20 connections (Default is 4)
Default file download directoryHome PageCaption string that is displayed after the page title
Microsoft Office:
Do not track document editing timeBlock updates from the Office Update SiteDisable Customer Experience Improvement programDisable error reportingDisable logging Microsoft Office activityDisable Office DiagnosticsDisable clipboard dialog boxPrevent Office Help from resizing the application window
Microsoft Word:
Do not check spelling as you typeDo not check grammar as you typeDo not use background printingDo not auto-save background printingDo not auto-save documents in the backgroundDo not use translucent selectionDo not check if MS Word is the default HTML editor
Microsoft Excel:
Show Formula bar in Full ViewCache spreadsheetsCache PivotTable reportsUndo steps: Set from 0 to 100
Software tweaks (The ones we can see so far)

Disable file transferDisable loading language filesDisable publishing Skype status on the WebDisable Skype Public APIDisable checking for updatesDisable listening for TCP connectionsDisable UDP communications
Windows Media Player
Disable auto-updatesDisable automatic codec downloadsDisable Windows Media Digital Rights Management (DRM)Disable video smoothingDisable CD and DVD Media information retrievalDisable music file media information retrievalDisable media file sharingDisable script handling in media filesHide the "Privacy" tab in the settingsHide the "Security" tab in the settingsHide the "Network" tab in the settings
Adobe Reader:
Disable splash screenDisplay PDF in the browser windowDisable Purchase Acrobat item in the menu
Disable link prefetchingDo not reduce memory when minimizedDo not download favorite icons (favicons)Disable blinking elementsForce frames to be reesizableUse old style for opening tabsShow all images / Block all images / Load images from the requird site only and block images from othersClose Tab Button full range of optionsHow long Firefox waits for the web page data before it displays the page (From 0 to 1 sec)
System Information includes everything:
OverviewGeneralHardwareCPUMotherbaordMemory ModulesVideoStorageIO DevicesInput DevicesModemsNetwork AdaptersResourcesProblem DevicesOperating SystemProgramsNetworkApplication ErrorsDevice ManagerMemory UsagePerformance
Tasks show Applications, processes, services, and locked files. You can unlock locked files, change the status of services, end processes, and modify application data.

Auslogics Disk Explorer will show what folders are taking up the most space and allow you to delete empty folders on your system.

File Recovery allows you to undelete files.

Speed Up Internet includes:
Automatic tuningAuto HeuristicsDefault TTLGlobal Max TCP WindowMax MTUTCP Window SizeMax Connections Per 1_0 ServerMax Simultaneous HTTP ConnectionsFirefox Max ConnectionsFirefix Max Connections Per Server
1323 OptsACK FrequencyARP Cache LifeARP Cache Min Reference LifeARP Cache SizeAuto HeuristicsAuto TuningCongestion ControlDefault TTLDel ACK TicksDisable Task OffloadECN CapabilityEnable PMTU BH DetectEnable PMTU DiscoveryFin Wait DelayGlobal Max TCP Window SizeInitial RTTIPv6 over IPv4Keep Alive InternalKeep Alive TimeMax Connect RetriesMax Data RetransmissionsMax Dup ACKsMax MTUNum ConnectionsReceive-side ScalingSACK EnabledTCP Window SizeSYN Attack ProtectTimed Wait DelayUse RFC1122 Urgent Pointer
Default Receive WindowDefault Send WindowLarge Buffer SizeMedium Buffer SizeNon Blocking Send Special bufferingSmall Buffer SizeTransmit Worker
Request Buffer SizeUse Raw ReadUse Raw WriteUse Write Raw Data
Dns Cache:
Adapter Timeout TimeHash Table Bucket SizeHash Table SizeMax Entry TTL LimitMax SOA Entry TTL LimitNegative SOA TimeNegative TimeNet Failure Time
Internet Explorer:
DNS Cache EnabledDNS Cache TimeoutKeepAlive TimeoutMax Connections Per 1_0 ServerMax Connections Per ServerReceive TimeoutServer Info TimeoutSocket Receive Buffer LengthSocket Send Buffer LengthTCP Autotuning
Disable IPv6DNS Cache EntriesDNS Cache ExpirationHTTP Connect TimeoutKeepAlive TimeoutMax ConnectionsMax Connections Per ServerMax Persistent Connections Per ServerMax Persistent Connections Per ProxyPipeliningPipelining Max RequestsPrefetch NextProxy PipeliningUse KeepAliveUsing Proxy KeepAlive
(Auto-optimization is based on Over 1Mbps / 1Mbps or lower (default that Windows assumes) / or 128kbps or lower)

The built-in System Advisor determines (THESE ARE JUST SOME):
Can the Internet connection be optimized?Is the registry fragmented?Can Windows shutdown be sped up?Can incorrect drivers be updated? (It updates them in Auslogics Device Manager)
Quick Tasks allow you to:
Erase browser historyErase Windows historyCleanupt emporary filesOptimize memory
Privacy allows you to shred files and wippe entire disks.

Let's check that one again:
Disk MaintenanceFree Up SpaceRemove DuplicatesExplore diskDisk cleanupDisk defragmentDisk repairSoftware ControlSystem TweaksService OptimizationDisaster RecoveryFile RecoveryRescue CenterRegistry MaintenanceRegistry RepairRegistry DefragmentSystem StatusSystem InformationSystem TasksSystem ServicesLocked FilesComputer PrivacyErase Computer HistoryShred FilesWipe disksSpeed Up InternetInternet OptimizationMemory Optimization
It is quite probable that Auslogics BoostSpeed is the best program on the market for system repair and optimization EVER. Even if you don't know how to use the options listed above, that is why this program is great. It really DOES it for you. It really does repair your registry, with money behind it that went into big time research and development.

Their previous freeware products have been used regularly by IT professionals, but this product includes absolutely everything. There is nothing missing in this program, and updates are absolutely frequent. It is the one application I would recommend to every member of without hesitation. Even if you do not know what these settings mean, this program will optimize and repair your system without any doubt. Today, there are so many programs that "claim" to do this and do that. When we saw Auslogics offering a commercial solution I had to start offering it on my website after I saw what it could do. I had to make a video about it. I had to find a way to provide a discount to members.

I have recommended it to my mother, my grandparents, and I will bring it up to a client I am currently working with tomorrow who is asking for Windows XP. This is the program that you need to automatically manage your system and keep it up-to-date, speedy, and performing in top condition.

Windows 7 Forums Rating: 10/10 Stars

Don't take my word for it. CNET gave them 5/5 stars too!

Watch our YouTube video for an exclusive discount offer.

Chad, Thank you for your posts…

Please comment.

I just put together my first computer with all top brand hardware pieces…
nothing OEM .. except the Windows XP with SP2 disk…

I installed everything okay.. installed all the drivers that came with the
hardware… only one that said it wasn’t MS approved.. was the View sonic LCD
monitor… Also, I don’t have any printers or scanners hooked up to the
computer… just trying to get it running clean… (Note: I don’t own an Astra

I have creative Sound Blaster Audigy 2zs … but my sound wasn’t working… so,
I went into device manager and selected the sound card.. updated the driver
with the disk in the drive.. and it worked, I had sound…. But somewhere after
that it started that reboot continuously thing… long story short.. I have
wiped the drive and started over 5 times… and found that article on the UMAX
driver… and searched for it on my system and found the .dll

I have been racking my brain to figure where I got it.. I scanned all the
disks… except for the Windows XP sp2 disk, and no luck… where I am getting
it… then I checked on the WinXP disk… sure enough it’s on there!! Why?? If
they don’t support the driver why is it in their

It has been consistent in failing after I have windows install that one
driver… I don’t require Windows to install any other drivers.. just that
sound card one.

ALSO … I thought this was weird.. the umax.ini file was created at 2:55am..
I went to bed at 2:30am.. (trying to work on this) and I had left it
reformatting the drive and installing XP. When I woke… I had the blue screen
error message… waiting for me to read it.. I ended up reformatting again…..
at about 9:30am … so that umax.ini file should have been wiped… I don’t get
it. .. I did let Windows do the formatting.. and not fdisk… which I thought
would be the same.

I am reformatting again… and thinking .. maybe don’t install all the
drivers… OR … maybe let windows do all of them.. OR … update windows as soon
as possible.

The service pack in embedded on the disk.. so I can’t tell when it is

I really want my system to run at the best optimum capability it has. I
would think installing the drivers and utilities would do that. ARGHHH!!

"Chad Harris" wrote:

Guy with late homework--

See if a UMAX driver could be the problem via this KB:

After you install Windows XP Service Pack 2, your computer restarts

Over-heating, and a bad stick of RAM have been known to cause this--so if
software remedies don't do it, look to hardware, memory sticks in place,
cables, ect.

*Often, booting to the Recovery Console and running chkdsk /r will help this
problem.* I don't know if you have an XP CD, because lately so many people
with boot problems have not had one supplied by their OEM, but if you do
this would be my first choice to try to ditch the endless loop this way.

Description of the Windows XP Recovery Console;en-us;314058

Scroll down for instructions on running chkdsk /r.

Using the Recovery Console

RC Overview

Recovery Console in XP

I didn't know if you could break the loop to F8 as Will says. In my
experience, Last Known Good Configuration almost never works statistically,
but if it does and this is gone, more power to you. Keep in mind that it's
a snapshot of your configuration immediately after you booted, so if you
have been booted up for a long time then you're not going to track settings
changes since that time.

I'd first try to F8 to the Windows Advanced Options menu and use Safe Mode
and then try System Restore from Safe Mode. You will probably be back at
the version before you installed SP2. There is also this option for aborted
SP2 installs or SP2 installs with the problem like the one you're having,
but again System Restore may not solve your endless loop problem and Last
Known Good may not. You may need to run a chkdsk /r or use some of the
other tools I describe.

Resources for troubleshooting startup problems in Windows XP (Info on F8 and
Advanced Options Menu)

How to use the Automatic Recovery feature to recover your computer if the
Windows XP Service Pack 2 Setup program is not completed successfully

A description of the Safe Mode Boot options in Windows XP

If you were unable to use the Recovery Console because you had no XP CD, and
haven't installed it already but could get back to Windows:

If you can tap F8 to get back to Windows via either Safe Mode or as a last
resort in my opinion, Last Known Good Configuration, then you're still faced
with the possible "endless loop problem." That's why my first suggestion
was to boot to the Recovery Console and run chkdsk /r from the recovery

You would be possibly faced with the endless loop proble again or when you
installed SP2 so I would run chkdsk /r from the command prompt or the run

The reason for the endless loop is often that something has set the volume's
"dirty bit." When a volume's dirty bit is set, autochk automatically checks
the volume for errors the next time the computer is restarted.If a volume's
dirty bit is set, this indicates that the file system may be in an
inconsistent state. The dirty bit can be set because the volume is online
and has outstanding changes, because changes were made to the volume and the
computer shutdown before the changes were committed to disk, or because
corruption was detected on the volume. If the dirty bit is set when the
computer restarts, chkdsk runs to verify the consistency of the volume.

See if you have any disk corrpution by typing "fsutil dirty query [C]: Sub
any drive you want for "C". If it says the volume isn't dirty, you don't
need to run chkdsk because there aren't any errors on the disk. But I know
you want to run it to see that it runs properly without this read-only
error. The KB I'm going to list advises you to run "chkdsk volume_label: /v
/f" to fix this. This will fix any errors on the disk and the "v" causes it
to name each fixed file. Hopefully that will resolve it.
But if it doesn't then run "chkdsk_volume label: /r", and if that doesn't
then run the chkdsk /r from the recovery console.

If the disk is dirty, then System Restore is not going to fix that.

Every time Windows XP starts, Autochk.exe is called by the Kernel to scan
all volumes to check if the volume dirty bit is set. If the dirty bit is
set, autochk performs an immediate chkdsk /f on that volume. Chkdsk /f
verifies file system integrity and attempts to fix any problems with the

Here's what to do:

Go to Start/Run/CMD and type in: fsutil dirty query c: (or whatever drive
his XP is on). You'll get back either the drive "is dirty" or "it's not

Info on a "Fsutil Query" in the KB below--also see the Explanation at
Windows Help and Support--type "helpctr" into your run box:

The Fsutil Query Tool:

An Fsutil Query Does Not Work Properly on FAT or FAT32 Volumes

You have 4 choices that may work:

1) You can run chkdsk /r from the Recovery Console. I think this is the
fastest and most effective. I've seen it work for this several times.

2) You can run the chkntfs /d and reboot and chkdsk won't run on the next
boot. What this does is to restore default settings. Note this is a
different command than chkdsk. Chkntfs is a command that displays or
specifies whether automatic checking is schduled to run on a FAT, FAT32, or
NTFS volume when the computer is started.

3) You should be able to fix this by using "chkntfs/X C" if C were the
problem drive or whatever letter--this works when the drive is dirty and I
showed you above how to verify this. The advantage of sticking the X in the
command is that it saves time by causing the command to skip checking cycles
within the folder.

4) You can go to Kelly's XP Tweaks and click line 76 left column and see if
this VB script will stop it.

Kelly's Tweaks

Troubleshooting Windows XP

In addition, When there is improper shutdown, the Autochk program runs on
all NTFS drives in XP, 2K, NT where a disk write was in process at the time
of shutdown. This gets exacerbated if you have write caching enabled on a
hard drive connected to a standard IDE controller. It improves performance,
by delaying data writing while other work is done, but it ups the risk of
lost data or corruption.

Open the run box with the Windows Key + "r" and type in diskmgmt.msc. From
the graphical display in the bottom of the Disk Management window,
right-click the disc icon and chooose Properties. On the policies tab, clear
Enable Write Caching on the Disk. (Note this option, ie. the policies tab,
may not be available if your disk is connected to a High Performance ATA-66
or ATA-100 IDE controller.)

After you find the cause of the underlying problem if there is improper
shutdown, re-enable write caching.

Additional references for definitions context:

Chkdsk.exe or Autochk.exe starts when you try to shut down or restart your

An Fsutil Query Does Not Work Properly on FAT or FAT32 Volumes


Chad Harris

"Guy with late home work" Guy with late home

Stop popup windows and remove adware / spyware.


This IS an exception of your rule. It is free with no catch.

You mix two programs to clear adware and
spyware; and to stop those annoying
popup windows. IS a full
system scan, totally safe and 100% free, just click and view the
results. This can tell you if your computer is infected with HIDDEN

Using the popup killer or popup nuker you can stop popup windows even
BEFORE they have opened. Don't continue to put up with annoying popup
ads, THE INTERNET WAS NOT MADE FOR POPUP ADS. Do something about it.

Files usually affected
stcloader.exe, bho.dll, bho001.dll, rsp.dll, rsp001.dll,
install all.dll, update com.dll, winstart.exe,
winstart001.exe, Loader.exe, IE ClrSch.DLL,
Install All.dll, Update Hosts.DLL, Update BHO.DLL,
Update RSP.DLL, Update RemoveOld.DLL, rules.dat,
ClrSchP012.exe, ClrSchP013.exe, ClrSchP014.exe,
ClrSchP015.exe, ClrSchP012.dll, ClrSchP013.dll,
ClrSchP014.dll, ClrSchP015.dll, ClrSchP041.dll

Bazooka Adware and Spyware Scanner detects IGetNet.
Bazooka is freeware and detects spyware, adware,
foistware, trojan horses, viruses, worms, etc. Read more

Programs: Stripping Adware/Spyware from PC Can Be Tricky
By Gene Emery

One of the biggest challenges a computer owner can face is getting rid
adware or spyware, programs that can sneak onto your PC when you agree
download free utility software from the Web.
In addition to monitoring your activity on the Internet, adware and
can lock you into an unwanted home page and swamp you with pop-up

Removal can be difficult because the designers of such programs often
try to
keep them out of sight on your PC.

Most don't show up on the "Add/Remove Programs" list in the Windows
panel. They seldom offer an "Uninstall" option in the Windows
list; in fact, they're seldom listed at all.

Even when you identify them, some adware programs can't be removed
because they are tied to other unrelated utility programs you may have

If you're a do-it-yourselfer, there are ways to get rid of the
programs. The
first step: Go to sites such as or
and run a free scan of your computer. They list any adware/spyware
they see,
but they do not tell you how to remove it.

The site , has been very aggressive in
taking on adware
and spyware. And, although it identifies fewer programs than
PestPatrol and
WebRoot, it does a much better job of explaining how to clean your

Another way of removing adware is to find its Web site, a plan that
can be
easy if your home page has been hijacked. Some of those sites offer an
"Uninstall" program for their software, though it may be a challenge
to find
it. Look for an FAQ (frequently asked questions) link.

Unfortunately, such uninstall programs don't always undo all the
made to your PC. An adware program called i-lookup had a downloadable
program to uninstall its software, but the i-lookup-sponsored Web
listed in the "Favorites" section of Internet Explorer remained. I had
to cl
ick on "Organize Favorites" and manually delete them.

A better bet for scouring your hard disk clean may be independent
The ones I found worked pretty well from all sorts of places (like the
Windows registry).

The best bargain was "Ad-aware," popular with many readers, as I
from the e-mail I got after last week's column.

"Ad-aware 6.0," available to home users for free from , is easy to use. It lets you sort
programs and
files by type or adware company, so you can see the program it is
to delete. It eliminated annoyances such as a toolbar cluttering up
Explorer that kept returning even after I told Explorer not to display

"Ad-aware" tracked down traces of adware I thought I had removed, and
eliminated two viruses that had gotten on the PC because the owner had
kept his virus checker up to date.

However, "Ad-aware" does not automatically watch for adware unless you
$27 for an upgrade. You must run it regularly and check for updates.

Several readers said they run "Spybot-Search & Destroy," available for
at .

I have less confidence in "Spy Sweeper" from , which you
can try for free or buy for $30. It's easy to use and updates
but offers few details about the adware it finds.

During the cleaning process, "Spy Sweeper" told me I was running other
programs I needed to close, but didn't say which ones or how to go
about it.
It also said I had Internet Explorer running when I didn't (at least
as far
as I could tell). Such statements don't inspire confidence.

When I asked "Pest Patrol" to clean up a PC whose owner had already
eliminated or disabled some of the unwanted programs, it found plenty
adware-associated remnants. But it got hung up in the decontamination
process. Fortunately, the program displayed the folder that seemed to
causing problems. Because the folder was named Claria, after the
company, I quit out of "Pest Patrol," opened Windows Explorer, and
sent the
whole Claria folder to the Recycle Bin.

When I reran "Pest Control," it cleaned everything else out smoothly.
can try "Pest Patrol" for free. The full version, with a year of
updates, is
$40. The license costs $20 a year.

If you're bothered by adware, but you want to keep using the "free"
that come with it, "StopZilla," available from, may be
worth a
look. It doesn't try to remove the adware and spyware, but claims to
suppress it, by eliminating most of the pop-up windows while letting
"free" programs run freely. It costs $20 per year.

Personally, I'd rather just get rid of it all. Then I would use 's free "Pop-Up Stopper" program, or something
to block most pop-up windows.

A final word: Make it a habit to click "No" whenever a Web site tries
to get
you to download a "free" program.

* Gene Emery is a columnist who covers science and technology. His
address is GEmery(at)

Les méthodes d'espionnage
-Les Adware
-Les Bho Browser Helper
-Les Cookies
-Les Dialer
-Les Error Reporting Tool
-Les Guid identificateur
-Les Hijack Hijacker Hijacking
-Les KeyLogger
-Les Nsa Trapdoor
-Les PopUp - fenętres pop up
-Les Préfixes d'url
-Les Script
-Les Spyware
--Directive Europe
--Informations volées
--Insu vs Permission
-Les Trojan
--Est-ce un virus ?
-Les Web Bug
Les listes d'espions
-A propos des listes
-Liste hosts courte
-Liste hosts longue - 2'
-Liste spywares
-Liste trojan alphabétique
-Liste trojan par port
-Liste vecteurs Spy Courte
-Liste vecteurs Spy Longue
-Liste Web Bug
Veille technologique
Revue de Presse
Quelques espions
-Aureate Radiate
-Brillantdigital AltNet
-Brillantdigital rapport
-Doubleclick communiqué
-New Net
-Radiate Aureate

Les méthodes de lutte
Centre de contres mesures
-Anti Adware
-Anti Backdoor
-Anti Bho
-Anti Cookies
-Anti Dialer
-Anti Guid
-Anti Hackers
-Anti HiJack
-Anti KeyLogger
-Anti Pirates
-Anti PopUp
-Anti Préfixe d'url
-Anti Script
-Anti Spyware
-Anti traque traces
-Anti trojan
-Anti Virus
-Anti Web Bug
Les modes d'emploi
-Antiy GhostBusters
-Astuces diverses
-Cookie Crusher
-Cookie Wall
-Guard Dog
-IE Spyad
-Internet Explorer Cookie
-Kazaa rebound
-Le Surveillant
-Liste hosts simple
-Liste hosts étendue
-McAfee FireWall
-Norton Personal FireWall
-Pest Patrol
-PopUp Killer
-PopUp Stopper
-Regwizc - Regwizc.dll
-SpyBot Search & Destroy
-Sygate Personal FireWall
-Webroot Cache Cookie W.

Bon courage

There have been a number of installation errors of the July 27th Office 2003 Updates and other Office version updates, particularly Office 2003 SP1 remedied by Office resource kit tools and other tools like the Windows Installer Cleanup Utility, and I'm pasting this information that has come up from Sloan Crayton [MS] who has been generously helping and providing some useful information on using these Office tools to help with install/setup problems. Because it involves information I have not seen anywhere, including MSKB, MSDN, Technet or Windows SP2/MSI 3.0 articles and good artifcles on System Restore, I'm pasting some of it he

__________________________________________________ _____

After running the Installer Clean utility to remove remnants of OfficeXP, now if I try to update Office 2003 Pro from the website, this is EXACTLY what I get:

The Office Update site is unable to check for updates on this
computer. This may be happening because of one of the following

You do not have administrative privileges for this computer.

There is a network problem and the detection catalog used by the
Office Update site failed to download. Go back to the Downloads home
page and try running detection again.

Windows Installer patch files (.MSP files) from previously applied
Office updates are missing from the WindowsInstaller hidden
directory on your computer. MSP files are stored on your computer
after update installation completes because they need to be referenced
for future update operations. If the files are missing you will not be
able to apply Office updates. You may also be unable to uninstall
Office products as a result of the same problem. Please contact
Microsoft Product Support Services for assistance.

You installed Office updates in the past and then upgraded from
Windows Installer version 1.0 to Windows Installer version 1.1. For
more information see the KB article Windows Installer May Prompt for
Install Source if Unavailable.

Search for Office updates in the Download Catalog

The Problem With System Restore and the Windows Installer Corrected by Windows Installer 3.0

(Fixing the Problem but not Fixing the Registry Once It's Corrupted):

__________________________________________________ ____________

Windows System Restore will corrupt the Windows Installer registry
information for Office (and other applications). Windows Installer 3.0
(included in Windows XP SP2 when it ships) will fix this bug

The use of Windows System Restore is one of the known causes. Windows Installer 3.0 which is included in Windows XP SP2 fixes this problem (but will not fix it once it's broken).

You will need to use the Windows Installer Cleanup Utility to remove the
Windows Installer registry information for all installed Office products.
Then you'll need to install Office 2003 again and then install any service
packs and public updates.

This is documented in the KB article at;en-us;304498.

Sloan Crayton

__________________________________________________ _______________


Chad Harris

PS: If you're running SP2 and you go to, give the
page time to load completely (say, 1 - 2 minutes, esp. on dial-up). Now
click on a few of the link buttons, then hover your cursor over any of the
buttons again. See that "Caution" symbol in Status bar? Double-click on it
and then click the Details button, which reveals that the page is a hidden
[why??] "front" for!

Now, go to ViewPrivacy Report and wander around in that applet. You may
(or may not) be surprised by what you find.

WinXP SP2, Protecting Your Browsing Security! No wonder SP2 didn't "like"
Trojan Guarder! eg

cf. Browsing Security Enhancements:Changes to Functionality in Microsoft
Windows XP Service Pack 2

More and more, we're seeing users posting to forums (e.g., and the newsgroups with problems which they
associate with the install of SP2...but where, in all actuality, the install
of SP2 only revealed (or unearthed) malware that remained well-hidden in
both WinXP and WinXP SP1. To wit:

The latest edit (17 Sept-04) of...

What to Know Before You Download and Install Windows XP Service Pack 2

....added the following, prominently placed section:

1. Check your computer for unwanted software. You can detect and remove
unwanted software from your computer using a variety of tools available from
other companies, including Lavasoft Ad-aware. (Note: Microsoft is not
responsible for the quality, performance, or reliability of third-party
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE)

CC: The Usual Gang & EMP'ed all over the place
[ReplyTo munged]

PA Bear wrote:
The 'betrayware' known as "Trojan Guarder" has been around for several
years. It's brought to you by those nice folks at
. (What do you mean, you've never heard of 'em?)
Now, look around that page and its links. Do you find any Privacy
or Policy? Nope.

If a website offering an application, be it freeware, shareware ot
trialware, does not have an easily found and clearly stated Privacy Policy
page **with which you agree**, do /not/ download or install the

When in doubt,! wink

SandyO wrote:
Well, it is ALL fixed. I did a Google Search for the
http://files/Internet%20Explorer/iexplore.exe web page that I get when I
click on the IE Icon. I came up with several people who have the exact
problem. I am posting what I found that WORKED. Even my WordPad opens
Thanks for everyone's input. I hope this info will help you help someone
else who may ask about the same thing. By the way, I deleted the program
mentions after the trial period ran out, about a week after I installed

I recently downloaded MS's release of Win XP SP2. Upon installation, I
the usual tell tale Security Center window blah blah.
But whenever I try to open most programs, I get an error saying various
For eg., trying to open Microsoft Outlook XP gives me the error - "Cannot
open Microsoft Outlook. The Command line argument is not valid. Verify
switch you are using."
Similarly, GetRight says: "Service unknown for:
???://FilesGetRightgetright.exe Aborting."
Also, opening IE takes the browser to
"http://files/Internet%20Explorer/iexplore.exe" instead of the set
Changing the home page from the settings doesn't help either.
All this has started only after installation of SP2. Most other programs
such as Dreamweaver, Photoshop, Flash, etc. are working fine. Even other
components of MS-Office XP like Word, Excel etc. are working ok.
Pls advice why this is happening and a possible solution.

It has nothing to do with SP2. Your registry has been changed probably
software you have installed. I installed Trojan Guarder Gold Version and
this is when the exact problem as you have started. What I have
is that the registry value for exe file is being altered. Go to

HKEY_CLASSES_ROOTexefileshellopencommand and check the data. It
probably says %1 %* but should be "%1" %* That is double quotes %1 double
quotes space % asterisk. Check it out, Hope this helps.

"SandyO" wrote in message
I am running Spybot, and Adaware Pro..I had ZoneAlarm and switched to
and now I have Microsoft Firewall....

How have I been hijacked? Will that cause the problems with my other
programs also? I just ran Spybot and it fixed 72 problems.

"PA Bear" wrote in message

You've been hijacked!

Help with Hijackware

SandyO wrote:
I have checked I find that my WordPad won't open and I
have had to delete my Corel WordPerfect 10. I am getting error messages
both of them when I click on the icon to open the program.

Should I uninstall SP2?

"Michael Santovec" wrote in message
Did you also click in the target and try the left and right cursor keys?
On my PC, the
quoted text exactly fills the box and if there is more after that, you
see it.

Another option is to create a shortcut and just put in the
"C:Program FilesInternet Exploreriexplore.exe"
then see what happens.

"SandyO" wrote in message
I loaded SP2 on Saturday with a disk. Now I am having this problem with

The quotes are the "C:Program FilesInternet Exploreriexplore.exe"

"Michael Santovec" wrote in message
Make sure that there are quotes around
"C:Program FilesInternet Exploreriexplore.exe"

Also, that box scrolls sideways. So there might be more there than
Lick in the
box then use the left and right arrows to make sure that nothing is


Mike -

"SandyO" wrote in message
Properties : C:Program FilesInternet Exploreriexplore.exe

The Start In shows: %HOMEDRIVE%%HOMEPATH%

Now what?

"Michael Santovec" wrote in message
Look at the shortcut that you are using to open IE. Right click it
at look at

The Target should generally be:

"C:Program FilesInternet Exploreriexplore.exe"

If yours says:

"C:Program FilesInternet Exploreriexplore.exe" FilesInternet

or something similar, that would cause the problem. Anything on the
line after
the first iexplore.exe is taken as the URL to display on opening,
using the
default Home Page.

Use the following newsgroup for questions or problems with IE6

You can also get to the Internet Explorer newsgroups via this web
There select Internet Applications then Internet Explorer


Mike -

"SandyO" wrote in message
After loading SP2, everything seems to be working except my IE. When
on IE, the opening page is
instead of my home page. If I click on the Home Icon, my home page

How can I get rid of this opening page. I have checked Tools,
Page and it is set correctly.

Hi folks,

Sorry about the multiple topics, but I think they're related. Running Office 2003 SBE SP2 on a one-year-old Thinkpad X40 under Windows XP Pro SP2, Norton AV, Zone Alarm Pro, Counterspy, etc.
1. Whenever I open an Office module (e.g. Word) I get the message:
"Microsoft Office Word can't display the template used in this document. Microsoft Office Word cannot install the necessary files due to Windows installer error 1606. Feature ID not registered."
It displays this 4 times (consistently), but then loads Word, brings up a new blank document using the template it said it couldn't display, and seems to work fine. If I start Outlook, I get virtually the same message ("...Outlook can't display the add-in / Installer error 1606...") a consistent eleven times, and then Outlook opens and runs normally. Excel and PowerPoint open without any such error message, but if in a PowerPoint presentation I try to change the overall template by clicking Format | Slide Design I get the same "can't display the template / Installer error 1606" message a consistent 66 times (I can be very persistent when I'm desperate) and then it goes ahead and displays the various template choices.
2. Outlook mailmerge failure: I highlight the Contacts I want in Outlook, press Ctrl-C just in case, click MailMerge, select Envelopes and go. It tells me it's exporting the Contacts, opens Word and presents the usual MailMerge three-step dialog box. I Edit the document to set the envelope size, click Get Data - and it asks me to select a data source, i.e. it doesn't see the transferred Contacts. If I select Address Book | Outlook Address Book as the data source, I get the error message:
"A required file, "SCHDMAPI.DLL", could not be loaded. Please check your e-mail installation and re-install Microsoft Word if necessary."
Thinking this might be related to the 1606 problem above, I've been re-installing, with no effect.
3. With all the re-installing of Office I've been doing over the last two days to try to fix the above my disk drive just ran out of space! How do I locate and delete unnecessary files from my 40GB C: drive? IBM takes up 7GB for its own purposes; I currently have 32.9GB used, 273MB (yes, MB) free. I don't know for sure how much free space I had when I started this exercise a couple of days ago, but it seemed to be at least 25% when I ran defrag a month ago, and each successive Office re-install over the last couple of days has reported rapidly-lessening amounts of available space. The last one told me I was running out of space and suggested running Disk Clean-up; I did, and this is still all the space I have. Just ran it again, and it only freed up 17MB.
Here's what I've done so far, based on discussions with IBM support (it's an OEM copy of Office) and searches through the Microsoft KB, Woody's Lounge archives and the Internet in general:
- ran Help | Detect and Repair from within Word. Ran fine, no errors reported. Re-booted, no change in behavior.
- ran Registry Mechanic; it found and removed 509 problems. No change in behavior.
- de-installed Office, de-installed Windows Installer, re-booted. Re-ran Registry Mechanic, found and removed another 37 errors. Ran Spybot (1 tracking cookie found and removed) and CounterSpy (nothing found), re-boot. Download and install fresh copy of Windows Installer 3.1, re-boot, re-install Office 2003 from the CDs that came with the Thinkpad, run Microsoft Update to get and load Office SP2 (and a couple of other minor updates), re-boot, no change in behavior.
- ran Microsoft's Windows Installer Clean-up utility (msicuu2.exe) on Office 2003, re-installed Office from the CDs, re-ran Microsoft Update to get SP2 etc., no change in behavior.
- per WOW for 10/3/05, ran Detect and Repair again, this time from Control Panel | Add or Remove Programs. "Repaired successfully", but no change.

Now what? Should I try LIStool.exe? I'm really lost at this point. I'm not getting any errors on any re-install or update, but the Installer error messages don't go away, and Outlook mailmerge still doesn't work. Any suggestions? And I'd love to get my disk space back.

Thanks in advance and hope.


I and two of my colleagues were getting a Web Browser error which had similar wordage to this:

A script on this page is causing Internet Explorer to run slowly. If it continues to run, your computer may become unresponsive. Do you want to abort the script?Found this fix that apparently has worked even in Windows 8 CP.

Let me fix it myself
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:322756 How to back up and restore the registry in Windows

To change this time-out value in Internet Explorer 4.0, 5.0, 6, 7, or 8, follow these steps:
Using a Registry Editor such as Regedt32.exe, open this key:HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerStyles

Note If the Styles
key is not present, create a new key that is called Styles
.Create a new DWORD value called "MaxScriptStatements" under this key and set the value to the desired number of script statements. If you are unsure of what value you need to set this to, you can set it to a DWORD value of 0xFFFFFFFF to completely avoid the dialog.
By default the key doesn't exist. If the key has not been added, the default threshold limit for the time-out dialog box is 5,000,000 statements for Internet Explorer 4 and later.

Because the Internet Explorer 4.0, 5.0, 6, 7, and 8 time-out is based on the number of script statements executed, the time-out dialog box will not display during ActiveX control or database-access delays. Endless loops in script will still be detected.

Hopefully, this will help out anyone else with same problem. Please post if it works for you.


OK, it seems my W8 system is possibly in a bit of trouble...

I ran CHKDSK on my C: drive, and at the end saw this :

Errors detected in the Boot File.
Windows has checked the file system and found problems.
Please run chkdsk /scan to find the problems and queue them for repair.

Hmm, system boots just fine and I appear to have NO errors. I am on an SSD and it is quite possible that I did 'mess up' something in the boot record when I migrated a large partition that was bootable into the much smaller SSD.


At the end it asked to cue it up to check the disk on boot. I allowed it. It ran and then started a troubleshooter, which ran PC Diagnostics and then a message that it could take up to 1 hour to fix. Almost instantly the system rebooted, AND ran chkdsk again. Off it went to the troubleshooter... and it just continued in this loop.

OK, I did break the loop and got an screen with options... one was to go into W8 directly, and again, the loop started up again. Argh... broke into it and I had other options, REFRESH, RESTORE, or shutdown. OK, Shutdown.... nope, power on started the loop again...

UGLY... so I did a REFRESH basically losing installed non-MS store programs. No problem, I've got an IMAGE.

When it was restored, it was OK on CHKDSK... and the few Store apps (Live Tiles) that didn't run before did... good.

I restored my image, and poof, CHKDSK shows the error again. However, this system has been booting for months with no problem and I assume the 'corruption' was present, and will now too with the 'problem'. I just can't run CHKDSK on it?

CAN NOT find anything about this on the web?

Thinking the MBR could be 'damaged'? There are programs to fix that and the boot record, but I'm not about to try this as it could break me?

HELP and SUGGESTIONS appreciated...

Windows 8 remember. Ran CHKNTFS and the FS is OK and the disk is NOT dirty....

I ran a program to check the MBR (MBRCheck.exe), it seems OK?

.C: --> .PhysicalDrive0 at offset 0x00000000`00100000 (NTFS)
.D: --> .PhysicalDrive2 at offset 0x00000000`04700000 (NTFS)
.K: --> .PhysicalDrive2 at offset 0x0000002e`aae00000 (NTFS)
.L: --> .PhysicalDrive1 at offset 0x00000000`00100000 (NTFS)
.X: --> .PhysicalDrive2 at offset 0x00000003`c4700000 (NTFS)

PhysicalDrive0 Model Number: CorsairCSSD-F115GB2-A, Rev: 2.4
PhysicalDrive2 Model Number: WDCWD7501AALS-75J7B0, Rev: 05.00K05
PhysicalDrive1 Model Number: ST31000528AS, Rev: CC34

Size Device Name MBR Status
107 GB .PhysicalDrive0 Windows 7 MBR code detected
SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79
698 GB .PhysicalDrive2 Windows 7 MBR code detected
SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79
931 GB .PhysicalDrive1 Windows 98 MBR code detected
SHA1: 48F01D7E76A0F3C038D08611E3FDC0EE4EF9FD3E

C: is the SSD that has the problem.

These words below are mine.I created them,I wrote them.Even though Engel
uses them nearly everywhere.I just do not like somebody to copy and paste
them,to use them fully because these words are NOT created by him. I am angry.

I just post to everybody know and understand who these words belongs to.
They belongs to me...:-)

And a question :
Is there a way to stop and prevent him from coping these words fully ?!


Follow them carefully and step-by-step.
All cleaning actions should be done
without internet connection

1. Download the necessary software

@ SpyBot Search and Destroy

@ Ad-Aware SE Personal

@ Microsoft Antispyware (only for genuie Windows versions)

@ CWShredder

@ Antivirus software (if you still do not have)

Panda Titanium 2005

If you are non-XP user and still do not have firewall,
you should get free one from he

There are some malwares that can destroy the internet connection
when you try to remove them.That's why you may get that program
that could restore your internet connection.
I haven't tried it but lots of people like them.

Win Sock XP Fix

2. Create a back-up of all your critical information
This is just an option.
You should check it for viruses later.

3. Run a Firewall

Windows XP
has integrated firewall -
Internet Connection Firewall (ICF) for SP1 and
Windows Firewall (WF) for SP2

Windows versions different from XP
They do not have integrated firewall ,they have to use software firewall.

!!! Use only 1 firewall !!!

4. Windows Updates
Connect to internet and
download all the security updates - Critical updates with Express install.

Start - Windows Updates

5. Install and Update

SpyBot Search and Destroy
Ad-Aware SE Personal
Microsoft Antispyware

6. Delete all the Internet Explorer's temporary stuff

Start - Settings- Control Panel - Internet Options

There ,on the General Tab you will see where you can delete
internet temporary files
Delete them all.

7. Delete all Temporary files

| Windows XP users (all new versions) |

The path is :
C:Documents and SettingsUSERLocal SettingsTemp
Delete all files from this folder
and also

| Windows 98 users (all old versions) |

The path is :

8. Remove any unwanted programs

Boot in Safe Mode (see how below)
Then ,in Safe Mode, Start - Settings – Control Panel – Add /Remove programs
See if you have any unknown /unwanted software
installed- toolbars and/or known spy programs.
Remove them with the REMOVE button.
Also check for tracks of these programs in
C:Program files and delete,if any.
Then restart with booting in Normal Mode .

9. Run Disc Clean up

Start - Programs - Accessories - System Tools - Disc Cleanup

Make sure you have checked :
Downloaded program files
Temporary Internet files
Temporary files
Recycle bin
Web Client/Publisher content

10. Remove viruses /worms /trojan horses

@ Scan with Microsoft Windows Malicious Software removal tool

@ Scan with

Panda Software free Active Scan,where you can check your
PC for ALL TYPES of security threats and clean viruses and worms

@ Install the antivirus software

Boot in Safe Mode and install the antivirus software
In Safe Mode,because there are viruses
that have the ability to damage an antivirus while installing it

How to boot your computer in Safe Mode

Do this by repeatedly typing F8 while Windows is starting before
Windows logo appears.
Then you'll open the BIOS menu where you can choose to boot
the hard drive in SAFE MODE

(If you are XP user ,find more about Safe Mode
in Help and Support Center ; Start-Help and Suport)

@ Update the antivirus and scan with it

Boot in Normal Mode and update it.
Make sure you have all functions ON
(scanning all files,heuristic,disinfect,scanning for other threats...)

Perform a full scan in Normal Mode first
Then boot in Safe Mode and also perform a scan

@ While still in Safe Mode,scan with these

SpyBot S&D
Ad-Aware SE Personal
Microsoft Antispyware

and remove the junk
!!! They must have already been updated !!!

When the scan is finished,
DO NOT restart ,if you have Win XP or ME

System Restore (for XP and ME only)

Because of the fact malware is a program,
System Restore also stores all malware tracks and when restarting,it can
replicate some infected system stuff and the malware will be back !!!
So you need to delete all the restore points before restarting :

Right click on My Computer-Properties-System Restore
Check Turn off system restore.Click OK

Restart the in Normal mode.

11. For better performance ,it is advisable to check your hard drives for
Open My computer .
Then right click on the hard drive you want to check - Properties - Tools
In the error-checking area ,click "Check now" to start the process.

At the end (when the system is malware-free)
again Right click on My computer-Properties-System Restore
Uncheck Turn off system restore ,so you'll have your Restore function ON.

After these,your computer should be clean !
If you do not understand something,you can post again and ask for
If the instructions seems difficult to you,you can take your computer to
a computer store where IT specialist would help you wipe out the junk!
Don't be shame.

--- Useful pages ---
different kinds of free or trial security software.
Because of the campaign "Children and the Internet"
Panda Software offers 90 day free trial version of one of the best security
Panda Platininum Internet Security 2005 awarded with many prizes ;
useful tips for protecting computers
Panda Software free Active Scan,where you can check your
PC for ALL TYPES of security threats and clean viruses and worms
Trend-Micro free online scanner HouseCall where you can scan for
Viruses and Spywares and clean them. CWShredder is also available here
Kaspersky free online scanner
and checker for suspicious files.If you have issues with suspicious
file,here is the right place!
Send F-prot AV suspicious files for fast analyze and and it is all for FREE
Microsoft Windows Malware Removal Tool
Microsoft MVP Charlie Russel's article about Dealing with malware
Really good and detailed
Free Microsoft support and suggestions (for genuie clients)

Now ,when you have cleaned your computer,you need to think about your
suggests 3 + 1 general steps how to protect
your PC and the infomation stored on it,
your privacy and your family
1.Use an internet firewall
2.Enable Automatic Updates for your PC
3.Use an antivirus software
4.Use antispyware software

Goto and learn more
Check the Security Essentials for your OS and also have a look at all

" Let's beat malware black and blue"
" No new epidemic of all kind of malware - Panda TruPrevent"


When you first turn on your computer
it is adviseable to first have a look at its setings.

** If you use Windows XP **

1 .Create as many computer accouts as you need

If your computer is going to be used from more than one person
(family members,friends,colleagues ,etc...) ,
make others limited users and you - Administrator
So that you'll have full control of the PC,but they would only be
able to change their files and few settings only !

If you are a parent and would like your children to access the internet,
create the limited user accounts.More about the parental control below

!!! Windows XP has hidden built-in administartor account
accessable and visible only in Safe Mode.
Get into Safe Mode and password protect it.
In Safe Mode,goto Control Panel -User accounts and click on the name
of that hidden account,called Administrator !!!

| How to boot your computer in Safe Mode |

Do this by repeatedly typing F8 while Windows is starting before
Windows logo appears.
Then you'll open the BIOS menu where you can choose to boot
the hard drive in SAFE MODE

(If you are XP user ,find more about Safe Mode
in Help and Support Center ; Start-Help and Suport)

2. Password-protect your account and your files

Make strong password,
with numbers,letters and at least one special character
Start - Settings - Control Panel - User accounts

When you decide to password protect your account,
after creting a password Windows should ask you if you want
to protect your files also.Click YES

Click on the folder you want to password-protect-Properties
Click on Sharing tab -Make this folder private

** All Windows Versions **

Start - Settings - Control Panel
or My computer -Control Panel

3. Have a look at

Display settings
Date and time Settings
Mouse and Keyboard settings
Power Options
Regional and language settings
Sound settings
Start Menu Settings

4. I do not recommend any user to install programs like

WinAmp ,Real Player
or WinZip (in Win XP )
Because of the fact Windows has integrated Windows Media Player ( 2 versions)
plus (Zip archiver in XP ) ,it is pointless to install such programs

5. Do install programs like

Adobe Reader / Acrobat because it is useful and with it
you can read PDF files which become more wide-spread everyday

6. If you do not have Microsoft Office

1. Open Office

2.Microsoft Word viewer / Excel viewer / Power Point viewer ; ,click on Office

Open Office is free as well as Microsoft viewers.
Open Office is not as good as MS Office but would do the basics


1. After you go on-line,upgrade to the newest Service Pack available for
your OS .
Learn more about the SP in Microsoft web-site and read the preparation steps !

2. Also download all critical updates with Express install.

I recommend you to use only Internet Explorer as an internet browser
as well as Outlook Express for your mail program
Many people may think them as not as secure as other but that is not true.


Internet is useful for everybody and even for the children
They can search information for school project,listen to music,play on-line
and even talk to friends
But it is even dangerous
What I recommend is to talk to your child/children and to explain them about
the activities they don't have to do while online

Then,do not trust your children fully.Install a good software/s/ to help
protect your PC and your family's privacy

1. Create your children limited user accounts in Windows XP

So they will have their own My documents folder
but will not be able to access PC settings
Limited users can download everything but cannot install anything
,so they cannot install any spyware/virus in the family's computer.

Children limited account should NOT be password-protected !!!

Parent administartor account should be password-protected !!!

2. Turn on Internet Explorer's Content Advisor

It would help your children not to open pornographic pages
and pages with bad content
Start- Settings - Control Panel - Internet Options - Content tab
and then enable it and check the settings

2.1 MSN toolbar
This toolbar become more useful everyday
It has either pop-up blocker and also Anti-Phising filter
Recently Microsoft had established this Anti-phishing filter
as an add-in for the Toolbar to get the toolbar ; click on Add-ins and search for the Anti-Phishing

Antiphishing would help to protect your family from online fraud

3. Microsoft has made a component to help protect a computer
that is used by many people.It prevents limited users from access to
^chosen by the admin user^ programs and files and also prevent them
from downloading files and other things
It is easy to use and can be configured to meet everybody's needs
It is called Share access tool

/example : A parent with Administrator rights can prevent a children
with limited account to use a chat program or download a new one /

4. When a child uses the internet ,
the computer should have an antivirus software ON + firewall always ON
Because of the campaign "Children and the Internet"
Panda Software offers 90 day free trial version of one of the best security
Panda Platininum Internet Security 2005

Please,go through the additional steps below.............


Microsoft suggest 3 +1 steps general steps to help protecting your
computer.Here they are plus some additional !

1. Firewall ON

It is very important to know that you REALLY SHOULD
use only one firewall (to prevent software conflict ) !!!

Firewall is a protective barrier between your PC and the outside world.
It protects you from hackers and other intruders from gaining
remote access to your PC and also from viruses and network worms (like
It also makes your PC invisiable for hacker softwares and
even if hackers find your PC it will block the attack.
Firewalls scans all your incoming (or outgoing) traffic and
immediately block it if it is unsolicated.

** Windows XP **

has integrated firewall -
Internet Connection Firewall (ICF) for SP1 and
Windows Firewall (WF) for SP2

Windows Firewall (for SP 2)
is full firewall ,suitable for all kind of users and connections.
Windows Firewall is designed especially for home users with
not very big computer literacy and that's why it works almost
automatically,asks rarely !

When using it,check the Exception list .
If you are home user and do not want to play network games,exchange files
over chat
or you are connected to internet via none/less secure server, you can check
" Don't allow exception "
This guarantees you maximum protection!

Start - Settings - Contol Panel - Windows Firewall .See its settings.

Users with no Service Pack or with SP 1 you should upgrade to SP 2
because ICF is partial firewall made for direct internet connection only

** Windows versions different from XP **

They do not have integrated firewall and they are not protected
from hackers and intruders,network viruses and etc.
They MUST use software firewall.So choose one firewall

You may get Zone Alarm personal (free) from :

2. Windows Updates ON

Windows Updates can protect your PC from different OS vulnerabilities and
security threats.

** Windows XP and ME **

| Critical updates |

Automatic Updates ON
Right click on My computer - Properties - Automatic Updates -
Download updates automatically but let me choose when to install them

** Different form XP and ME **

| Critical updates |

Automatic updates are not offered
Manually download critical updates
Start – Windows Update or

** All Windows Versions **

| Optional updates |

Because of the fact Automatic updates downloads only critical updates (they
are the most important),
regularly visit
and download some of the optional software and hardware updates available.

3. Virus Protection ON

Antivirus Software can protect you from viruses,worms,trojans and other
security threats

Always use the latest version of your program and update it at least every two days.
The more often you update it ,the higher protection for new threats you have.

Make sure it has real-time scanner which is enabled

Make sure all security settings are turned ON

(e.g. scanning All files,scanning compressed files,mail scanning,
disinfecting, heuristic scan,behaviour analyze
or detecting spyware,hacking tools, jokes and so on…..)

Use only 1 av software .More than one may cause your PC
problems because of the permanent protection ! ! !

Other : List with all Microsoft Anti-virus partners


1. Spyware protection ON

Spybot Search & Destroy

Ad-Aware SE Personal

Microsoft Antispyware

These 3 programs(all free) are the most famous
in the world and ,of course,are the best.
Using two of them guarantees you very ,very good protection !

Microsoft Antispyware is the only one from these above that has
real-time protection,which is very important for dealing with spy junk

2. Manage your Internet Settings

Start-Settings-Contol Panel-Internet Options

| On the General tab |
Delete all temporary internet files,cookies,history ( often do this)

| On the Security tab |
Make sure the Internet level is Medium.Check other levels

| On the Privacy tab |
Make sure the level is Medium High.

| On the Content tab |
Goto Auto complete
Delete(clear) forms and passwords and check the settings

3. Use a pop-up blocker

Internet Explorer 6 with XP SP 2 has integrated pop-up blocker

However ,if you are not XP SP 2 user ,or you are without IE 6
get the Free MSN Tool Bar that has pop-up protection

3.1 MSN toolbar
This toolbar become more useful everyday
It has either pop-up blocker and also Anti-Phising filter
Recently Microsoft had established this Anti-phishing filter
as an add-in for the Toolbar to get the toolbar ; click on Add-ins and search for the Anti-Phishing

4. Other

( Depending on your mail program - this below is for Outlook Express )
Open Outlook Express
Tools - Options - Security
Make sure you have checked these:
` Warn me when...
` Do not allow...

Create free web-based mail
Lots of free web-based mail accounts exist.
You may create one in Hotmail , Yahoo , Gmail or Mail.RU

They are all for free with a lot of space and intergrated SPAM and Virus
protection and offer free POP 3 / SMTP /HTML access
so you may use them with Outlook Express

Think first , then click !!!

Nothing can protect the computer from its user.
Even though you could have firewall,av software,
antispyware software and all updates downloaded,
you are not protected 100 %.NOTHING guarantees you 100 % protection.
So if you don't know what exactly to do and when to do it,you'll probably
fall a victim
of a virus , spyware or hacker.
You can find it ridiculous,but it is true! :-)

BE CAREFUL which sites you visit
BE EXTREMELY CAREFUL what you install,especially free or shareware software.
ALWAYS check everything you download from internet with AV and AS software.

Be aware of SPAM messages and especially PHISHING !!!
Spam messages are unsolicated mail.You really do not want them !
In most cases SPAM is just annoying,however PHISHING is a type of spam that
is really dangerous.Someone unknown sends you a messages,which is
trying to get personal information,such as bank account number
and passwords ! That's why :

NEVER give your email and/or passwords to strangers.
Don't post your mail or passwords in forums and chats.
NEVER read email messages from people you don't know. Just delete
NEVER answer to strangers or even open the attachments,if any !!!
Delete the mail !
NEVER follow links in email from stranger and in mail that you
doubt and do not trust !

For more info about SPAM / Phishing visit ; - Email section

Regularly :
Run Disc clean-up (with all checked)
Start - Programs - Accessories - System Tools - Disc Clean-up

Check all hard drives for errors
Back-up all your information (at least montly)
Defragment all hard drives
Scan all your computer with antivirus and antispyware software
(should be twice a week)

--- Useful pages ---
different kinds of free or trial security software.
Because of the campaign "Children and the Internet"
Panda Software offers 90 day free trial version of one of the best security
Panda Platininum Internet Security 2005 awarded with many prizes ;
useful tips for protecting computers
Panda Software free Active Scan,where you can check your
PC for ALL TYPES of security threats and clean viruses and worms
Trend-Micro free online scanner HouseCall where you can scan for
Viruses and Spywares and clean them. CWShredder is also available here
Kaspersky free online scanner
and checker for suspicious files.If you have issues with suspicious
file,here is the right place!
Send F-prot AV suspicious files for fast analyze and and it is all for FREE
Microsoft Windows Malware Removal Tool
Microsoft MVP Charlie Russel's article about Dealing with malware
Really good and detailed
Free Microsoft support and suggestions (for genuie clients)

Now ,when you have cleaned your computer,you need to think about your
suggests 3 + 1 general steps how to protect
your PC and the infomation stored on it,
your privacy and your family
1.Use an internet firewall
2.Enable Automatic Updates for your PC
3.Use an antivirus software
4.Use antispyware software

Goto and learn more
Check the Security Essentials for your OS and also have a look at all

Thanks very much !!!

" Let's beat malware black and blue "
" No new epidemic of all kind of malware - Panda TruPrevent "

I (barely) manage a SBS 2008 server running Exchange 2007 for my church. First off, I am not a trained admin and am trying to learn as I go. I haven't learned enough yet.Our problem is Exchange. The first storage group currently has over 270GB of transaction logs and I haven't a clue how to get them to go away! We're almost out of disk space (500MB free).The detailed network report that SBS sends out has 12 critical events on the server. I'm sure that some (most?) of them are tied to the Exchange problem.Can anyone help me translate this into english and figure out what to do to fix this before we crash? I'm trying to find someone in the Seattle WA area that can come in to help us but haven't found anyone yet that we can afford.Thank you,BrianAccidental ITKent United Methodist ChurchThe critical events are:Event Source Event ID Last Occurence Total OccurencesTaskScheduler 706 6/14/2012 4:00:00 AM 48Event Details: Task Compatibility module failed to update task "FSS-Manual Scan Job.job" to the required status 4. Additional Data: Error Value: 2147942402.TaskScheduler 103 6/14/2012 4:00:00 AM 24Event Details: Task Scheduler failed to start instance "{5BB48F57-5792-4321-B422-9BB03AFE086F}" of "FSS-Manual Scan Job" task for user "KUMCKUMC-DC-03$" . Additional Data: Error Value: 2147942402.TaskScheduler 203 6/14/2012 4:00:00 AM 24Event Details: Task Scheduler failed to launch action "C:PROGRA~2Microsoft Forefront SecurityExchange ServerFSCStarter.exe" in instance "{5BB48F57-5792-4321-B422-9BB03AFE086F}" of task "FSS-Manual Scan Job". Additional Data: Error Value: 2147942402.Windows Server Update Services 13032 6/14/2012 2:03:53 AM 4Event Details: Many client computers have not reported back to the server in the last 30 days. 4 have been detected so far.MSExchangeIS Mailbox Store 1101 6/14/2012 1:22:16 AM 9Event Details: Error Read verification error occurred on message 1-60F4A6BE9F during a background cleanup on database "First Storage GroupMailbox Database".ESE 474 6/14/2012 1:22:16 AM 1Event Details: MSExchangeIS (22912) First Storage Group: The database page read from the file "E:Program FilesMicrosoftExchange ServerMailboxFirst Storage GroupMailbox Database.edb" at offset 3018211328 (0x00000000b3e64000) (database page 368433 (0x59F31)) for 8192 (0x00002000) bytes failed verification due to a page checksum mismatch. The expected checksum was 1936518292062686159 (0x1adfe52063714bcf) and the actual checksum was 2308411507540741074 (0x200920091e63cbd2). The read operation will fail with error -1018 (0xfffffc06). If this condition persists then please restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem. For more information, click 101 6/14/2012 1:17:26 AM 865Event Details: Task Scheduler failed to start "MicrosoftWindowsDefragScheduledDefrag" task for user "NT AUTHORITYSystem". Additional Data: Error Value: 2147750687.MSExchangeIS Mailbox Store 10001 6/14/2012 1:16:45 AM 1Event Details: The folder with folder ID 4-15075 could not be deleted. Additional information: Read verification error.MSExchangeIS Mailbox Store 1203 6/14/2012 1:16:45 AM 1Event Details: Failed to delete the mailbox of /O=KUMC/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=JBYGLAND with error Read verification error.Backup 565 6/13/2012 11:05:49 PM 1Event Details: Consistency check for component ''df738284-4bc9-4093-a0da-554ab3ef5ee8''''Microsoft Exchange ServerMicrosoft Information StoreKUMC-DC-03'' failed. Application ''Exchange'' will not be avaliable in the backup done at time ''2012-06-13T23:00:07.315Z''MSExchange Search Indexer 102 6/13/2012 11:00:18 PM 2,146Event Details: Exchange Search Indexer has failed to crawl the mailbox (592ae681-8553-468e-afc1-bb626dcfa8e9) due to an exception (Microsoft.Mapi.MapiExceptionJetErrorReadVerifyFai lure: MapiExceptionJetErrorReadVerifyFailure: Unable to query table rows. (hr=0x80004005, ec=-1018) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=84] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=593][latency=15] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropGetContentsTable [5] Lid: 27962 ROP: ropSetColumns [18] Lid: 27962 ROP: ropQueryRows [21] Lid: 17082 ROP Error: 0xFFFFFC06 Lid: 17153 Lid: 21921 StoreEc: 0xFFFFFC06 Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 ---- Remote Context Beg ---- Lid: 1238 Remote Context Overflow Lid: 23921 StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid: 23921 StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid: 23921 StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid: 23921 StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid: 23921 StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid: 23921 StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid: 28017 StoreEc: 0xFFFFFC06 Lid: 21970 StoreEc: 0xFFFFFC06 PropTag: 0x674A0014 Lid: 10725 StoreEc: 0xFFFFFC06 Lid: 13029 StoreEc: 0xFFFFFC06 Lid: 21970 StoreEc: 0xFFFFFC06 PropTag: 0x674A0014 Lid: 21970 StoreEc: 0xFFFFFC06 PropTag: 0x3F880014 Lid: 14949 StoreEc: 0xFFFFFC06 Lid: 26348 Lid: 22252 StoreEc: 0xFFFFFC06 Lid: 1750 ---- Remote Context End ---- Lid: 26849 Lid: 21817 ROP Failure: 0xFFFFFC06 Lid: 28414 Lid: 32510 StoreEc: 0xFFFFFC06 at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(St ring message, Int32 hresult, Object objLastErrorInfo) at Microsoft.Mapi.MapiTable.QueryRows(Int32 crows, QueryRowsFlags flags) at Microsoft.Exchange.Search.RetriableOperations.Quer yRows(ThreadLocalCrawlData crawlData, Guid mailboxGuid, MapiTable mapiTable, Object unusedParam1, Object unusedParam2) at Microsoft.Exchange.Search.RetriableOperations.DoRe triableMapiOperation[SourceType,ReturnType,Parameter1Type,Parameter2Typ e](ThreadLocalCrawlData crawlData, Guid mailboxGuid, SourceType source, Parameter1Type parameter1, Parameter2Type parameter2, MapiOperationDelegate`4 operationDelegate) at Microsoft.Exchange.Search.Crawler.IndexFolder(Thre adLocalCrawlData crawlData, Guid mailboxGuid, MapiFolder folder, Int32& messageCount) at Microsoft.Exchange.Search.Crawler.CrawlUser(Guid mailboxGuidToCrawl, ThreadLocalCrawlData crawlData, Boolean finalRetry)).