Hi

I have been reccommended to this thread by NEAL (the thread was my PC keeps Crashing)as we have scanned with nye on everything and it seems as though I am clean as a whistle of viruses

My problem is that , the PC is slow on initial boot and is running slow. when trying to run any programme in safe mode to check for say viruses etc the hard drive indicater light stays on for 5 -10 seconds then the pc crashes. This also happens when trying toburn music using NERO. I have lost the link with my printer (i'm sure all I have to do is re-install drivers but why did it happen?)

I have downloaded RootKitRevealer Unzip it to the desktop, ran it, and click Scan. This generated a log file that was 16mb large.

Please help

Harfin

Run this scan: http://www.belarc.com/free_download.html

What is the complete listing under:

1. System Model

2. Main Circuit Board

3. Drives

Is your XP CD a retail Microsoft version or a computer OEM e.g. Dell; HP; etc.

Knowing the manufacturer of your hard drive will let you run their diagnostic on said drive:

http://www.tacktech.com/display.cfm?ttid=287

Also for starters you can run check disk:

start > run > cmd
in the new window type chkdsk/f
when prompted to run on boot choose Y & reboot
this will check for & fix any disk errors.

Also: look in your Event viewer: rt. click My Computer then click Manage then Event Viewer.
Or: Administrative Tools/Event Viewer or Start/Run/ eventvwr
Open the system as well as the application tabs & look for X errors. Click error line for details.
Post back the source & event id especially of errors that seem to coincide with a crash.

Also:
Go to start | search (type in) .dmp
Note the location of your latest .dmp file.

Then:

1) Download and install the
Debugging Tools from Microsoft
2) Download and install this
debugwiz
3) Open the Wiz & Browse to, or paste in the path to, your latest .dmp file.
4) After the Wiz creates a Text document attach it back to this thread.

Jephree

Jephree

Thanks for your help, here are some answers

Enclosure Type: Desktop

Main Circuit Board b
Board: SiS-648FX
Bus Clock: 200 megahertz
BIOS: Phoenix Technologies, LTD 6.00 PG 01/14/2004

Drive

122.94 Gigabytes Usable Hard Drive Capacity
45.10 Gigabytes Hard Drive Free Space

SONY DVD RW DW-U18A [CD-ROM drive]
VOBID InstantDrive CD SCSI CdRom Device [CD-ROM drive]
3.5" format removeable media [Floppy drive]

Maxtor 6Y120L0 [Hard drive] (122.94 GB) -- drive 0, s/n Y3N88PPE, rev YAR41BW0, SMART Status: Healthy

XP is OEM (Novatech Direct UK)

Downloaded SCSIMax v1.21 (05.14.2003) Extracted to C:Programme went to run agreed with all agreements then nothing happened

Ran CHKDSK C:/F response was

The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts. I clicked Y

On restart nothing seemed to have happened with no report.

Searching for.dmp file

User.dmp file is located @ C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson

Log1.dmp file is located @ C:\Documents and Settings\Nick's\Application Data\Real\RealPlayer\ErrorLogs

Have downloaded and installed the
Debugging Tools from Microsoft (http://www.microsoft.com/whdc/devtoo...nstallx86.mspx)

2) Downloaded and installed this
debugwiz (http://www.d-a-l.com/help/attachment...tachmentid=127)
3) Open the Wiz & Browse to, or paste in the path to, your latest .dmp file.
4) After the Wiz creates a Text document attach it back to this thread.

Results for C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson

12/08/2005 18:44:04 -- ----------------------- Log start.
12/08/2005 18:44:04 -- InitInstance.
12/08/2005 18:44:05 -- Reg start
12/08/2005 18:44:05 -- Version check
12/08/2005 18:44:05 -- Create ok.
12/08/2005 18:44:05 -- New.
12/08/2005 18:44:51 -- Reg Click start
12/08/2005 18:44:51 -- Set info start
12/08/2005 18:44:51 -- Set Info over
12/08/2005 18:44:55 -- Click over.
12/08/2005 18:44:55 -- Reg close.
12/08/2005 18:44:55 -- Show.
12/08/2005 18:44:55 -- Delete.
12/08/2005 18:44:55 -- Return.
12/08/2005 18:45:10 -- ----------------------- Log start.
12/08/2005 18:45:10 -- InitInstance.
12/08/2005 18:45:10 -- Reg start
12/08/2005 18:45:10 -- Version check
12/08/2005 18:45:10 -- Create ok.
12/08/2005 18:45:10 -- New.
12/08/2005 18:45:41 -- Reg close.
12/08/2005 18:45:41 -- Show.
12/08/2005 18:45:41 -- Delete.
12/08/2005 18:45:41 -- User.
12/08/2005 18:45:41 -- Main start.
12/08/2005 18:45:41 -- new MultiLangAutoForm.
12/08/2005 18:45:41 -- HookMainWindow.
12/08/2005 18:45:41 -- SplashFormShow().
12/08/2005 18:45:43 -- QueryWmDecode.
12/08/2005 18:45:44 -- QueryRmDecode.
12/08/2005 18:45:48 -- QueryQtDecode.
12/08/2005 18:45:48 -- Decorder tip.
12/08/2005 18:45:51 -- LoadSkin.
12/08/2005 18:45:51 -- Create over
12/08/2005 18:45:51 -- CreateForm.
12/08/2005 18:45:51 -- Run start
12/08/2005 18:47:11 -- Reg start
12/08/2005 18:47:11 -- Version check
12/08/2005 18:47:11 -- Create ok.
12/08/2005 18:47:50 -- Reg Click start
12/08/2005 18:47:50 -- Set info start
12/08/2005 18:47:50 -- Set Info over
12/08/2005 18:47:56 -- Click over.
12/08/2005 18:47:56 -- Reg close.
12/08/2005 18:47:56 -- Run end.
12/08/2005 18:47:56 -- -----------------------Release.
12/08/2005 18:48:06 -- ----------------------- Log start.
12/08/2005 18:48:06 -- InitInstance.
12/08/2005 18:48:06 -- Reg start
12/08/2005 18:48:06 -- Version check
12/08/2005 18:48:06 -- Create ok.
12/08/2005 18:48:06 -- New.
12/08/2005 18:48:54 -- Reg close.
12/08/2005 18:48:54 -- Show.
12/08/2005 18:48:54 -- Delete.
12/08/2005 18:48:54 -- User.
12/08/2005 18:48:54 -- Main start.
12/08/2005 18:48:54 -- new MultiLangAutoForm.
12/08/2005 18:48:54 -- HookMainWindow.
12/08/2005 18:48:54 -- SplashFormShow().
12/08/2005 18:48:55 -- QueryWmDecode.
12/08/2005 18:48:55 -- QueryRmDecode.
12/08/2005 18:48:56 -- QueryQtDecode.
12/08/2005 18:48:56 -- Decorder tip.
12/08/2005 18:48:59 -- LoadSkin.
12/08/2005 18:48:59 -- Create over
12/08/2005 18:48:59 -- CreateForm.
12/08/2005 18:48:59 -- Run start

Result from C:\Documents and Settings\Nick's\Application Data\Real\RealPlayer\ErrorLogs

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson]
Could not open dump file [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson], Win32 error 5
"Access is denied."


My mane concern here is that there should not be 77GB used on my PC

Thanks

Harfin

Jephree

The error logs for Application and System error logs are over 1024771 character so could not post into the thread I will try to attach too big I will post a selection


System error log

13/12/2005 21:12:51 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
13/12/2005 21:12:51 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
13/12/2005 21:11:46 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
13/12/2005 18:44:06 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
13/12/2005 18:44:06 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
13/12/2005 1625 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
13/12/2005 16:39:56 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
13/12/2005 16:39:56 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
13/12/2005 08:26:40 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
13/12/2005 08:13:13 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
13/12/2005 08:13:13 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
13/12/2005 07:38:41 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
13/12/2005 07:19:51 Application Popup Information None 26 N/A DININGROOM Application popup: 16 bit MS-DOS Subsystem : C:\SCSIMAX.exe
C:\DOCUME~1\Nick's\LOCALS~1\Temp\. A temporary file needed for initialization could not be created or could not be written to. Make sure that the directory path exists, and disk space is available. Choose 'Close' to terminate the application.
13/12/2005 07:02:51 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
13/12/2005 07:02:51 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
12/12/2005 23:49:33 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
12/12/2005 22:42:41 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
12/12/2005 20:49:58 W32Time Warning None 36 N/A DININGROOM The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized.
12/12/2005 07:10:41 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
12/12/2005 07:10:41 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
11/12/2005 22:33:43 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
11/12/2005 19:51:45 W32Time Information None 35 N/A DININGROOM The time service is now synchronizing the system time with the time source time.windows.com (ntp.m|0x1|80.3.171.183:123->207.46.130.100:123).
11/12/2005 18:24:20 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
11/12/2005 18:24:20 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
11/12/2005 17:59:04 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
11/12/2005 17:59:04 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
11/12/2005 16:22:41 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
11/12/2005 16:22:41 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
11/12/2005 16:17:07 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
11/12/2005 16:04:18 Ntfs Error Disk 55 N/A DININGROOM The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
11/12/2005 07:12:16 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 23:54:16 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 20:15:06 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 18:24:14 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 17:29:22 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 17:02:03 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 16:47:07 Tcpip Warning None 4226 N/A DININGROOM TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
10/12/2005 07:32:14 W32Time Warning None 36 N/A DININGROOM The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized.
09/12/2005 17:52:42 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
09/12/2005 17:52:42 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
09/12/2005 17:51:32 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
09/12/2005 17:51:30 DCOM Error None 10005 NT AUTHORITY\SYSTEM DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service EventSystem with arguments """" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}"
09/12/2005 17:50:07 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service netman with arguments """" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}"
09/12/2005 17:49:55 DCOM Error None 10005 NT AUTHORITY\SYSTEM DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service EventSystem with arguments """" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}"
09/12/2005 17:48:43 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
09/12/2005 17:48:43 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
09/12/2005 17:47:19 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
09/12/2005 17:45:11 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
09/12/2005 17:45:11 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
09/12/2005 08:23:12 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
09/12/2005 08:23:09 DCOM Error None 10005 NT AUTHORITY\SYSTEM DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service EventSystem with arguments """" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}"
09/12/2005 07:59:35 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service netman with arguments """" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}"
09/12/2005 0724 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service StiSvc with arguments """" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}"
09/12/2005 07:54:40 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service netman with arguments """" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}"
09/12/2005 07:54:24 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service StiSvc with arguments """" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}"
09/12/2005 07:53:53 DCOM Error None 10005 NT AUTHORITY\SYSTEM DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service EventSystem with arguments """" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}"
09/12/2005 07:53:49 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service netman with arguments """" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}"
09/12/2005 07:52:46 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
09/12/2005 07:52:46 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
09/12/2005 07:51:20 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
09/12/2005 07:22:13 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
09/12/2005 07:22:13 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
08/12/2005 22:42:30 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service netman with arguments """" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}"
08/12/2005 22:42:28 DCOM Error None 10005 NT AUTHORITY\SYSTEM DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service EventSystem with arguments """" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}"
08/12/2005 22:41:28 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
08/12/2005 22:41:28 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
08/12/2005 22:39:47 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
08/12/2005 22:39:09 Application Popup Information None 26 N/A DININGROOM Application popup: Windows : Other people are logged on to this computer. Restarting Windows might cause them to lose data.

Do you want to continue restarting?
08/12/2005 1924 DCOM Error None 10000 DININGROOM\Nick's DININGROOM "Unable to start a DCOM Server: {0254F2B0-7116-40FC-8551-A2ED8C0C5872}. The error:
""The system cannot find the file specified. ""
Happened while starting this command:
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe -Embedding"
08/12/2005 1924 DCOM Error None 10000 DININGROOM\Nick's DININGROOM "Unable to start a DCOM Server: {0254F2B0-7116-40FC-8551-A2ED8C0C5872}. The error:
""The system cannot find the file specified. ""
Happened while starting this command:
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe -Embedding"
08/12/2005 1924 DCOM Error None 10010 DININGROOM\Nick's DININGROOM The server {0254F2B0-7116-40FC-8551-A2ED8C0C5872} did not register with DCOM within the required timeout.
08/12/2005 19:55:55 Application Popup Information None 26 N/A DININGROOM Application popup: msmsgs.exe - DLL Initialization Failed : The application failed to initialize because the window station is shutting down.
08/12/2005 18:52:01 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
08/12/2005 18:52:01 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
08/12/2005 09:19:01 EventLog Information None 6006 N/A DININGROOM The Event log service was stopped.
08/12/2005 09:12:36 EventLog Information None 6005 N/A DININGROOM The Event log service was started.
08/12/2005 09:12:36 EventLog Information None 6009 N/A DININGROOM Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.
08/12/2005 07:23:34 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service StiSvc with arguments """" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}"
08/12/2005 07:23:21 DCOM Error None 10005 DININGROOM\Administrator DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service netman with arguments """" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}"
08/12/2005 07:22:57 DCOM Error None 10005 NT AUTHORITY\SYSTEM DININGROOM "DCOM got error ""This service cannot be started in Safe Mode "" attempting to start the service EventSystem with arguments """" in order to run the server:

Thanks

Harfin

Jephree

This is an error log for application event

13/12/2005 21:38:42 MsiInstaller Information None 11728 DININGROOM\Nick's DININGROOM Product: Debugging Tools for Windows -- Configuration completed successfully.
13/12/2005 21:35:17 MsiInstaller Information None 11728 DININGROOM\Nick's DININGROOM Product: Debugging Tools for Windows -- Configuration completed successfully.
13/12/2005 21:32:59 MsiInstaller Information None 11707 DININGROOM\Nick's DININGROOM Product: Debugging Tools for Windows -- Installation operation completed successfully.
13/12/2005 21:13:10 SecurityCenter Information None 1800 N/A DININGROOM The Windows Security Center Service has started.
13/12/2005 21:13:09 SecurityCenter Error None 1802 N/A DININGROOM The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.
13/12/2005 21:13:03 RioMSC Information None 103 N/A DININGROOM The RioMSC service was started.
13/12/2005 21:13:00 Avg7UpdSvc Information None 1 N/A DININGROOM Service started
13/12/2005 21:12:59 ATI Smart Information None 105 N/A DININGROOM The service was started.
13/12/2005 21:11:43 Userenv Warning None 1517 NT AUTHORITY\SYSTEM DININGROOM Windows saved user DININGROOM\Nick's registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
13/12/2005 18:44:11 SecurityCenter Information None 1800 N/A DININGROOM The Windows Security Center Service has started.
13/12/2005 18:44:11 SecurityCenter Error None 1802 N/A DININGROOM The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.
13/12/2005 18:44:10 RioMSC Information None 103 N/A DININGROOM The RioMSC service was started.
13/12/2005 18:44:08 Avg7UpdSvc Information None 1 N/A DININGROOM Service started
13/12/2005 18:44:07 ATI Smart Information None 105 N/A DININGROOM The service was started.
13/12/2005 16:50:07 Userenv Warning None 1517 NT AUTHORITY\SYSTEM DININGROOM Windows saved user DININGROOM\Deb's registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
13/12/2005 16:40:01 SecurityCenter Information None 1800 N/A DININGROOM The Windows Security Center Service has started.
13/12/2005 16:40:01 SecurityCenter Error None 1802 N/A DININGROOM The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.
13/12/2005 16:40:00 RioMSC Information None 103 N/A DININGROOM The RioMSC service was started.
13/12/2005 16:39:58 Avg7UpdSvc Information None 1 N/A DININGROOM Service started
13/12/2005 16:39:57 ATI Smart Information None 105 N/A DININGROOM The service was started.
13/12/2005 08:16:16 Userenv Warning None 1517 NT AUTHORITY\SYSTEM DININGROOM Windows saved user DININGROOM\Nick's registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
13/12/2005 08:13:18 SecurityCenter Information None 1800 N/A DININGROOM The Windows Security Center Service has started.
13/12/2005 08:13:18 SecurityCenter Error None 1802 N/A DININGROOM The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.
13/12/2005 08:13:16 RioMSC Information None 103 N/A DININGROOM The RioMSC service was started.
13/12/2005 08:13:15 Avg7UpdSvc Information None 1 N/A DININGROOM Service started
13/12/2005 08:13:14 ATI Smart Information None 105 N/A DININGROOM The service was started.
13/12/2005 07:38:39 Userenv Warning None 1517 NT AUTHORITY\SYSTEM DININGROOM Windows saved user DININGROOM\Nick's registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
13/12/2005 07:02:56 SecurityCenter Information None 1800 N/A DININGROOM The Windows Security Center Service has started.
13/12/2005 07:02:56 SecurityCenter Error None 1802 N/A DININGROOM The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.
13/12/2005 07:02:54 RioMSC Information None 103 N/A DININGROOM The RioMSC service was started.
13/12/2005 07:02:53 Avg7UpdSvc Information None 1 N/A DININGROOM Service started
13/12/2005 07:02:52 ATI Smart Information None 105 N/A DININGROOM The service was started.
12/12/2005 23:49:29 Userenv Warning None 1517 NT AUTHORITY\SYSTEM DININGROOM Windows saved user DININGROOM\Nick's registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
12/12/2005 07:10:47 SecurityCenter Information None 1800 N/A DININGROOM The Windows Security Center Service has started.
12/12/2005 07:10:47 SecurityCenter Error None 1802 N/A DININGROOM The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.
12/12/2005 07:10:45 RioMSC Information None 103 N/A DININGROOM The RioMSC service was started.
12/12/2005 07:10:44 Avg7UpdSvc Information None 1 N/A DININGROOM Service started
12/12/2005 07:10:43 ATI Smart Information None 105 N/A DININGROOM The service was started.
11/12/2005 22:33:40 Userenv Warning None 1517 NT AUTHORITY\SYSTEM DININGROOM Windows saved user DININGROOM\Nick's registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: http://office.microsoft.com/assistan...&respos=9&rt=2, http://go.microsoft.com/fwlink?LinkID=45840.
11/12/2005 20:07:34 HHCTRL Information None 1904 N/A DININGROOM The description for Event ID ( 1904 ) in

Thanks

Harfin

Check Disk Management for disk usage:

Start/Run/ diskmgmt.msc

Also the tool you want from Maxtor is PowerMax:

http://www.maxtor.com/portal/site/Ma...&downloadID=22

The instructions are there for creating a bootable floppy that will test your drive.

If the drive is truely healthy then we can start picking through your logs.

Hi Jephree

Have Start/Run/ diskmgmt.msc all OK

Also the tool you want from Maxtor is PowerMax - downloaded the software and created a floppy. rebooted with floppy in , clicked F8 when needed to to agree etc etc. Then the screen came up like this

Maxtor Powermax4.21

Test Status Current Drive
Scanning for drive (upto 1 minute)
..




Detecting devices
Please wait

Then nothing else happened, tried the process again with the same result

Regards

Harfin

Under Disk Management your usage was as you thought? Unlike Belarc?

122.94 Gigabytes Usable Hard Drive Capacity
45.10 Gigabytes Hard Drive Free Space

The only thing I see at Maxtor re: PowerMax:

Note: PowerMax will identify drives connected to most Promise, CMD, and Highpoint ATA or SATA controllers.
PowerMax v 4.21 will not detect ATA or SATA hard disks connected to embedded or add in RAID controllers,
NVIDIA Force 3, or Force 4 chipsets. If the hard disk is connected to an unsupported controller, it will have to be moved to an alternate system or controller for diagnosis.

Does this apply to you? The chipset should be OK: Board: SiS-648FX

Do you have a RAID controller?

Jephree

Thanks for the assistance

I have cleaned up My C drive and have gained 11GB , which is about what Belarc suggested.

I believe the Sis964 Southbridge has a raid controller

Support two Serial ATA (RAID) drivers
Supporting Raid 0,1,JBOD
Bootable disk
Windows based RAID utility software tool
Bios utility

not running NVIDIA chipsets.
Note : When I was going through virus checks with Neal Software downloads that I needed to run in Safe mode didn't work and I couldn't run .bat programme as windows could not see it.

I hope this helps

Thanks

Harfin