[Cookiegal]

I'm sorry to hear that. When you get the computer back please post a new HijackThis log. Maybe that process won't be running any more after they fix it. It just looks like something related to X-Fi that didn't get deleted.

[Scottyman61]

Hey Cookiegal, I got the system repaired and back up and running. LED still flashes. Something interesting happened though. When I first booted up I got one of those suspicions little red dots with the X through it stating that the screen resolution was set too low. Funny thing is that the res was fine and the drivers were the ones I installed a week ago. It reminded me of one of the time that I had another popup that turned out to be malware.

http://forums.techguy.org/malware-re...-sys-tray.html

This is from one of my other logs from another computer that had gotten infected with a "spydefender" popup. This looked very similar except told me to click the baloon to fix the resolution problem.

[Cookiegal]

Please post a new HijackThis log.

[Scottyman61]

Sorry for the delay, still having trouble with my video card.
-------------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:12:49 AM, on 11/9/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\AGEIA Technologies\TrayIcon.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\InstallShield Installation Information\{3A94E148-9C8B-4FE9-99DD-93072F99BE20}\AMBSPISyncService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\Scott\LOCALS~1\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\acrobat_sl.exe
C:\Program Files\CodeMeter\Runtime\bin\CodeMeterCC.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [WordPerfect Office 1215] C:\Program Files\WordPerfect Office 12\Programs\Registration.exe /title="WordPerfect Office 12" /date=112109 serial=WO12WRX-0000056-TXW lang=EN
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\TrayIcon.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTSyncService] "C:\Program Files\InstallShield Installation Information\{3A94E148-9C8B-4FE9-99DD-93072F99BE20}\AMBSPISyncService.exe" /StartRunKey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CodeMeter Control Center.lnk = C:\Program Files\CodeMeter\Runtime\bin\CodeMeterCC.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6AB6481-F036-4C4A-B211-B0DBF999DE87}: NameServer = 68.87.85.98,68.87.69.146
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sound Blaster X-Fi MB Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

--
End of file - 7700 bytes

[Cookiegal]

Why didn't they fix the problem?

Please go to Start - Run - type in eventvwr.msc to open the event viewer. Look under both "Application" and "System" for recent (the last 48 hours or so) errors (shown in red) and if found, do this for each one.

Double-click the error to open it up and then click on the icon that looks like two pieces of paper. This will copy the full error. Then "paste" the error into Notepad. Do this for each one until you have them all listed in Notepad and then copy and paste the list in a reply here please.

[Scottyman61]

Unfortunately the moron that built the system is.............me! I build my own custom systems but this time didn't do my research correctly. The power supply was the incorrect one for the video card and may have damaged it. I'm running on a spare video card while waiting for the RMA'd replacement and ordered the correct power supply today. Should have it by Monday and will have the system back up to spec.

There were a hundred or so in the "system" error event log. Looks like they all started about the same time I went to a suspect website. I'm no expert but it looks like someone put a back door into my system and have been trying to hack into it. Probably a net bot. Is that what it looks like to you?

There's also about 25-30 yellow flag alerts in each section. Do you need me to post them as well?

Application Error Logs (I'll post the system next)

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 9/4/2009
Time: 6:12:48 PM
User: N/A
Computer: OFFICEMAIN
Description:
Hanging application HelpCtr.exe, version 5.1.2600.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 48 65 6c 70 43 74 HelpCt
0018: 72 2e 65 78 65 20 35 2e r.exe 5.
0020: 31 2e 32 36 30 30 2e 32 1.2600.2
0028: 31 38 30 20 69 6e 20 68 180 in h
0030: 75 6e 67 61 70 70 20 30 ungapp 0
0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a
0040: 74 20 6f 66 66 73 65 74 t offset
0048: 20 30 30 30 30 30 30 30 0000000
0050: 30 0

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11704
Date: 9/5/2009
Time: 5:15:39 PM
User: OFFICEMAIN\Scott
Computer: OFFICEMAIN
Description:
Product: KhalInstallWrapper -- Error 1704.An installation for CDDRV_Installer is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 33 31 30 31 43 42 35 {3101CB5
0008: 38 2d 33 34 38 32 2d 34 8-3482-4
0010: 44 32 31 2d 41 46 31 41 D21-AF1A
0018: 2d 37 30 35 37 46 43 39 -7057FC9
0020: 33 35 33 35 35 7d 35355}

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 9/22/2009
Time: 10:27:20 AM
User: N/A
Computer: OFFICEMAIN
Description:
Hanging application Acrobat.exe, version 7.0.0.1333, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 41 63 72 6f 62 61 Acroba
0018: 74 2e 65 78 65 20 37 2e t.exe 7.
0020: 30 2e 30 2e 31 33 33 33 0.0.1333
0028: 20 69 6e 20 68 75 6e 67 in hung
0030: 61 70 70 20 30 2e 30 2e app 0.0.
0038: 30 2e 30 20 61 74 20 6f 0.0 at o
0040: 66 66 73 65 74 20 30 30 ffset 00
0048: 30 30 30 30 30 30 000000

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 10/14/2009
Time: 7:29:31 AM
User: N/A
Computer: OFFICEMAIN
Description:
Hanging application F22.DAT, version 0.0.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 46 32 32 2e 44 41 F22.DA
0018: 54 20 30 2e 30 2e 30 2e T 0.0.0.
0020: 30 20 69 6e 20 68 75 6e 0 in hun
0028: 67 61 70 70 20 30 2e 30 gapp 0.0
0030: 2e 30 2e 30 20 61 74 20 .0.0 at
0038: 6f 66 66 73 65 74 20 30 offset 0
0040: 30 30 30 30 30 30 30 0000000

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11719
Date: 10/28/2009
Time: 6:43:05 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
Product: ASUS Smart Doctor -- Error 1719.The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or if the Windows Installer is not correctly installed. Contact your support personnel for assistance.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 31 31 33 34 32 35 36 {1134256
0008: 41 2d 33 38 34 46 2d 34 A-384F-4
0010: 41 41 31 2d 38 42 35 43 AA1-8B5C
0018: 2d 46 45 36 36 38 38 35 -FE66885
0020: 39 35 30 39 33 7d 95093}

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11719
Date: 10/28/2009
Time: 6:48:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
Product: ASUS Smart Doctor -- Error 1719.The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or if the Windows Installer is not correctly installed. Contact your support personnel for assistance.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 31 31 33 34 32 35 36 {1134256
0008: 41 2d 33 38 34 46 2d 34 A-384F-4
0010: 41 41 31 2d 38 42 35 43 AA1-8B5C
0018: 2d 46 45 36 36 38 38 35 -FE66885
0020: 39 35 30 39 33 7d 95093}

Event Type: Error
Event Source: Creative Labs SC
Event Category: None
Event ID: 101
Date: 10/30/2009
Time: 9:29:11 AM
User: N/A
Computer: OFFICEMAIN
Description:
The description for Event ID ( 101 ) in Source ( Creative Labs SC ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 98-182.

[Scottyman61]

System event logs.
I had to split into two sections because it's over 30,000 characters.

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 10/5/2009
Time: 4:35:05 PM
User: N/A
Computer: OFFICEMAIN
Description:
The System Restore filter encountered the unexpected error '0xC000007F' while processing the file 'desktop.ini' on the volume 'HarddiskVolume3'. It has stopped monitoring the volume.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 10/15/2009
Time: 5:00:46 PM
User: N/A
Computer: OFFICEMAIN
Description:
The SASDIFSV service failed to start due to the following error:
Cannot create a file when that file already exists.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7006
Date: 10/23/2009
Time: 8:36:17 AM
User: N/A
Computer: OFFICEMAIN
Description:
The ScRegSetValueExW call failed for Start with the following error:
Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7006
Date: 10/23/2009
Time: 8:36:17 AM
User: N/A
Computer: OFFICEMAIN
Description:
The ScRegSetValueExW call failed for Start with the following error:
Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7006
Date: 10/23/2009
Time: 8:36:18 AM
User: N/A
Computer: OFFICEMAIN
Description:
The ScRegSetValueExW call failed for Start with the following error:
Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/24/2009
Time: 12:32:25 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/24/2009
Time: 12:32:31 PM
User: NT AUTHORITY\SYSTEM
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/24/2009
Time: 12:33:10 PM
User: N/A
Computer: OFFICEMAIN
Description:
The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/24/2009
Time: 12:33:10 PM
User: N/A
Computer: OFFICEMAIN
Description:
The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/24/2009
Time: 12:33:10 PM
User: N/A
Computer: OFFICEMAIN
Description:
The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/24/2009
Time: 12:33:10 PM
User: N/A
Computer: OFFICEMAIN
Description:
The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 10/24/2009
Time: 12:33:10 PM
User: N/A
Computer: OFFICEMAIN
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
Fips
intelppm
IPSec
MRxSmb
NetBIOS
NetBT
Pivot
RasAcd
Rdbss
SASDIFSV
SASKUTIL
Tcpip

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/24/2009
Time: 12:34:39 PM
User: NT AUTHORITY\SYSTEM
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: ati2mtag
Event Category: CPLIB
Event ID: 52250
Date: 10/27/2009
Time: 8:15:31 PM
User: N/A
Computer: OFFICEMAIN
Description:
CPLIB :: OPM - Failed the HFS
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 33 00 00 00 1a cc 00 c0 3....Ì.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 10/28/2009
Time: 6:36:50 PM
User: OFFICEMAIN\Scott
Computer: OFFICEMAIN
Description:
The server {0C0A3666-30C9-11D0-8F20-00805F2CD064} did not register with DCOM within the required timeout.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:41:20 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:41:33 PM
User: NT AUTHORITY\SYSTEM
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:00 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:00 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:00 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:00 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:00 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

[Scottyman61]

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:02 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:04 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:04 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:04 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/28/2009
Time: 6:42:11 PM
User: N/A
Computer: OFFICEMAIN
Description:
The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/28/2009
Time: 6:42:11 PM
User: N/A
Computer: OFFICEMAIN
Description:
The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/28/2009
Time: 6:42:11 PM
User: N/A
Computer: OFFICEMAIN
Description:
The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 10/28/2009
Time: 6:42:11 PM
User: N/A
Computer: OFFICEMAIN
Description:
The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 10/28/2009
Time: 6:42:11 PM
User: N/A
Computer: OFFICEMAIN
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
asuskbnt
EIO_XP
Fips
intelppm
IPSec
MRxSmb
NetBIOS
NetBT
Pivot
RasAcd
Rdbss
SASDIFSV
SASKUTIL
Tcpip

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:42:48 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:43:00 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:43:01 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:47:55 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:47:59 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:47:59 PM
User: OFFICEMAIN\Administrator
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/28/2009
Time: 6:48:09 PM
User: NT AUTHORITY\SYSTEM
Computer: OFFICEMAIN
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 10/28/2009
Time: 6:49:45 PM
User: N/A
Computer: OFFICEMAIN
Description:
Error code 1000007f, parameter1 00000008, parameter2 80042000, parameter3 00000000, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 37 1000007
0020: 66 20 20 50 61 72 61 6d f Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 38 2c 20 000008,
0038: 38 30 30 34 32 30 30 30 80042000
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 30 30 30 0000

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 6:13:26 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 6:13:26 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: SDTV
Event ID: 49170
Date: 10/29/2009
Time: 6:13:26 AM
User: N/A
Computer: OFFICEMAIN
Description:
MODE: GXO Execute BIOS Table Error
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 30 00 00 00 12 c0 00 c0 0....À.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 6:13:26 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: PlugPlayManager
Event Category: None
Event ID: 11
Date: 10/29/2009
Time: 6:19:40 AM
User: N/A
Computer: OFFICEMAIN
Description:
The device Root\PDIPORTS\0000 disappeared from the system without first being prepared for removal.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 6:50:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 6:50:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: SDTV
Event ID: 49170
Date: 10/29/2009
Time: 6:50:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
MODE: GXO Execute BIOS Table Error
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 30 00 00 00 12 c0 00 c0 0....À.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 6:50:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 10:37:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 10:37:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: SDTV
Event ID: 49170
Date: 10/29/2009
Time: 10:37:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
MODE: GXO Execute BIOS Table Error
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 30 00 00 00 12 c0 00 c0 0....À.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: ati2mtag
Event Category: GCO
Event ID: 44043
Date: 10/29/2009
Time: 10:37:12 AM
User: N/A
Computer: OFFICEMAIN
Description:
GCO failed to execute AtomBios
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 2b 00 00 00 0b ac 00 c0 +....¬.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

[Cookiegal]

I asked for errors in the last 48 hours and you haven't given me any after October 29th. Were there none at all in the last couple of days?

[Scottyman61]

OK, boy do I feel like an idiot. There are no errors logged since the last one on the 29th in System and the 30th in Applications. I didn't read your instructions carefully enough and basically copied and pasted all of them for you.

[Cookiegal]

It doesn't appear to be malware related so I suggest you start a new thread in the XP forum.

[Scottyman61]

I'm really sorry I wasted all your time but I'm glad that it didn't turn out to be some nefarious code that was munching my hard drive from the inside out.

Thanks for your help!

[Cookiegal]

You're welcome.