AumHa Forums

I have a Windows XP Home edition. Version 2002. With Service pack 2 on it. My current firewall is CA Internet Security Suite. I use to have Norton Anti-Virus, but I uninstalled that. It was something that came with the computer I bought. I was wondering if that could stop my computer from being able to system restore. I've had CA Internet Security Suite on another computer I have. It never stopped me from doing s system restore. I tried the things at http://bertk.mvps.org/html/srfail.html. I went in Safe mode and did a sysem restore. Then it restarted, and I got on normally. It said it was Incomplete, that nothing changed. Here's what it says in the event viewer.

Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 11/3/2009
Time: 3:21:10 PM
User: N/A
Computer: E-MACHINE
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 11/3/2009
Time: 2:53:07 PM
User: NT AUTHORITY\SYSTEM
Computer: E-MACHINE
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service UmxPol with arguments "-Service" in order to run the server:
{4C89C3FD-5F94-4678-BBB5-F64759C3C54A}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 11/3/2009
Time: 2:53:07 PM
User: NT AUTHORITY\SYSTEM
Computer: E-MACHINE
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 11/3/2009
Time: 2:51:40 PM
User: N/A
Computer: E-MACHINE
Description:
The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 11/3/2009
Time: 2:51:15 PM
User: E-MACHINE\Administrator
Computer: E-MACHINE
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 11/3/2009
Time: 2:40:37 PM
User: N/A
Computer: E-MACHINE
Description:
The master browser has received a server announcement from the computer DJCX2SC1 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{47AC2EA0-6E4B-40DD-. The master browser is stopping or an election is being forced.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Can anyone help me with this?

What problems are you having that you think using System Restore might resolve?

Why hasn't WinXP SP3 been installed yet?

Computers running WinXP SP2 will NOT be offered any further critical security updates, Automatic Updates will cease to function, and Windows Update website will not be available after 12 April 2010 until SP3 is installed.

The above notwithstanding:

1. Download the Norton Removal Tool, saving it to your desktop: ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

2. Close all open applications (i.e., anything with an icon on the taskbar).

3. Double-click on the file you saved in #1 above to run the utility. Don't TOUCH your keyboard until the run completes, then reboot.

Recently, I've had this Anti-spyware program popping up in my browser. I have no idea where it came from. I've never heard of it before. Its actually two different ones, but I believe its using a different name. I've looked it up on the net. Their called Blocker Keeper and Block Scanner. I was hoping if I system restores, they would go away. It just started happening last week. But I'm sure I didn't do anything to start it. I've had my firewall on all the time. I've even done a scan for both spyware and viruses, but it popped up in my browser again. I was wondering if its my computer, or this site I go on. Which seems to be the only place it happens. But its also the site I'm on the most. At least once everyday. I've looked up both mentioned spyware, I think that's what they are, not sure, but I can't find any trace of it on my computer.

And that's actually just what my computer came with. I still have to update it.

I used the Norton remover. Just had my computer restarted. But still haven't tried a system restore yet. Thank you for answering so far. I'll post again to mention what happens.

System Restore will NOT come to the rescue here. In fact, trying to use System Restore to correct the problem may only make it more difficult to remove the hijackware so stop messing around with System Restore right now!

Instead, start here: http://aumha.net/viewtopic.php?t=4075

After taking care of all requested Preliminaries in the above thread, please begin a new thread in Malware Removal forum.

If these procedures look too complex - and there is no shame in admitting this isn't your cup of tea - take the machine to a local, reputable and independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

Good luck!