Re: SP3 potential problem

Twayne

Please learn how to post to the person who might be interested in your suggestions. I am certainly not! As I have said many times before. Go away!

--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~




Twayne wrote:
Multiple Programs - MOM.EXE

We found multiple programs using a file called mom.exe.
Mom.exe will be found in your c:\Program\ATI
Technologies\ATI.ACE\Core-Static\ folder. This file installs with ATI
Technologies video cards and is part of the Ati ACE and Rage3D
Catalyst control center. You'll find a full description of the
Catalyst Control Center at
http://www.atitech.ca/products/catalystcontrolcenter/faq.html. You
can get the latest drivers for your ATI card video at
http://www.ati.com/support/driver.html.
Mom.exe also installs with Spyware.MoM by SofoText Systems. Other
files that may appear on your system include mompeeks.exe,
mompass.exe, netwatch.exe, moms.log, culaterloader.exe, and numerous
files named mo????.dlx where ?s are numbers. These will be found in
your c:\Program Files\Mom\ folder. Files called mci1ldll.exe and
sysnta.exe may appear in your c:\Windows folder. This program tracks
your internet activity and grabs screenshots when certain keywords
are detected in the hope of stealing personal information. You'll
find more information at
http://www.symantec.com/smb/security_response/writeup.jsp?docid=2006-021614-3013-99&tabid=1
and at
http://www.pestpatrol.com/spywarecenter/pest.aspx?id=453098021.
If you have Spyware.MoM, we'd recommend removing these files using
WinPatrol. First, kill them under Active Tasks then remove them from
your Startup Programs and Hidden Files (WinPatrol 10.x or later). If
running WinPatrol 8.x or later; right click each file then select
"Delete file on reboot". Finally, reboot your system.


a.. Safe if ATI Related


ATI





Gerry wrote:
Homer

CLI.exe is part of the ATI multimedia which installs a taskbar icon
for accessing the diagnostics features. cli.exe is required by
third-party software or hardware and should not disabled.

MOM.exe is part of the Catalyst Control Center from ATI. Catalyst
Control Center does not need to run at StartUp. It can be started
manually.
Source: PC Pitstop Process Library.

Go to Start, Control Panel, Folder Options, View, Advanced
Settings and verify that the box before "Show hidden files and
folders" is checked and "Hide protected operating system files
" is unchecked. You may need to scroll down to see the second
item. You should also make certain that the box before "Hide
extensions for known file types" is not checked.

Open Windows Explorer and check for the two files.

I think you should find them in the places indicated but they may not
be there:
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe


Homer wrote:
Hi Gerry.

I last heard from you on 5/27. You asked me to let you know how I
was getting on with the problem at the begining of this thread.
Possibly you're on holiday. When you have a moment, please let me
know if there may be anything else I can do to resolve this problem.

Thanks again for all of your advice.

"Homer" wrote:


Gerry
This is an update to my last post. The 2 applications that failed
to initialize are CLI.EXE and MOM.EXE. I get these two error
messages when I reboot. I also noticed that there is a video clip
that I created with a shareware program for converting PowerPoint
prestations to DVD. It was a dismal failure and I have since
removed it. However, I can't delete the video clip it created.
Every time I try to delete I get thrown out of Windows Explorer and
I get a message to send the info to MS. I have no idea if this has
anything to do with the problems I've been having with the FN key.

"Homer" wrote:

taking your recommendation, I was able to remove the various Net
Framework items from my machine. I also remove skype and
reinstalled it. I have not been able to download Net Framework
item that appear on the support site for my machine. It fails. I
found a potential fix for the problem (Register the Wups2.dll file
in Windows) but that hasn't helped. I still can download that
update. Additionally, I received a couple of error messages when
I booted up today. They both were relative to not being able to
start something. Finally, the Fn key worked for about an hour
after booting up. That's longest it has worked since this
problem began. Thanks for all of you help

"Gerry" wrote:

Homer

Read the post by Aaron. You need to uninstall 3.5 first etc.
http://snurl.com/iwkym [social_msdn_microsoft_com]

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Homer wrote:
I tried to remove Netframework 2.0 sp 2 and it won't let me. It
says that it will affect other programs and gave me the
following link for more info:

http://go.microsoft.com/fwlink/?linkld=91126

I tried the link and it said that it couldn't find that page.

"Gerry" wrote:

Homer

Remove all SP2 and later Microsoft Net Framework items and then
reinstall what the Windows Update offers!

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Homer wrote:
thanks for the info.

I took a look in the add/remove programs folder in control
panel and the closest file I have in there to the one you
suggest I remove is Microsoft.net Framework 3.5 SP 1. All the
other Framework references were SP 2

I was reluctant to delete anything other than what you
suggested.

"Gerry" wrote:

Homer

Select Start, Control Panel, Add / Remove Programs, Change or
Remove Programs, locate and place cursor on Microsoft Net
Framework 2.0 Service Pack 1 and click on Remove. The link
below explains.
http://support.microsoft.com/support/kb/articles/q312/5/00.asp

Start, Help and Support, Keep your Windows up- to-date with
Windows Update, Custom. Click on Software Optional and select
l all Net Framework updates offered and download and install.

Select Start, Control Panel, Add / Remove Programs, Change or
Remove Programs, locate and place cursor on Skype and click
on Remove. Reinstall Skype.

Download and install the User Profile Hive Cleanup Service
Download details: User Profile Hive Cleanup Service
http://snipurl.com/5b61

UPHClean v1.6d readme.txt
http://snipurl.com/ko8m

This site is not totally up to date but it is worth a look
http://www.aumha.org/win4/a/shutdown.htm

Please let me know how you get on. We can then look at the
remaining problems.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Homer wrote:
Per your request I've pasted just a few of the errors and
warnings from the event viewer for the last day or so. There are quite a few of the same system errors.

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1013
Date: 5/24/2009
Time: 10:50:54 AM
User: TUBBYSLAPTOPII\Tubby
Computer: TUBBYSLAPTOPII
Description:
Product: Microsoft .NET Framework 2.0 -- Setup cannot
continue because this version of the .NET Framework is
incompatible with a previously installed one. For more
information, see
http://support.microsoft.com/support/kb/articles/q312/5/00.asp

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 37 31 33 31 36 34 36 {7131646
0008: 44 2d 43 44 33 43 2d 34 D-CD3C-4
0010: 30 46 34 2d 39 37 42 39 0F4-97B9
0018: 2d 43 44 39 45 34 45 36 -CD9E4E6
0020: 32 36 32 45 46 7d 262EF}

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 5/25/2009
Time: 6:47:35 PM
User: N/A
Computer: TUBBYSLAPTOPII
Description:
Faulting application skype.exe, version 4.0.0.206, faulting
module unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 6b 79 ure sky
0018: 70 65 2e 65 78 65 20 34 pe.exe 4
0020: 2e 30 2e 30 2e 32 30 36 .0.0.206
0028: 20 69 6e 20 75 6e 6b 6e in unkn
0030: 6f 77 6e 20 30 2e 30 2e own 0.0.
0038: 30 2e 30 20 61 74 20 6f 0.0 at o
0040: 66 66 73 65 74 20 30 30 ffset 00
0048: 30 30 30 30 30 30 0d 0a 000000..


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 5/26/2009
Time: 5:24:03 AM
User: N/A
Computer: TUBBYSLAPTOPII
Description:
Fault bucket 1127907097.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 31 32 37 39 30 37 30 11279070
0010: 39 37 0d 0a 97..


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 5/26/2009
Time: 7:02:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TUBBYSLAPTOPII
Description:
Windows saved user TUBBYSLAPTOPII\Tubby registry while an
application or service was still using the registry during
log off. The memory used by the user's registry has not been
freed. The registry will be unloaded when it is no longer in
use.

This is often caused by services running as a user account,
try configuring the services to run in either the
LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10000
Date: 5/26/2009
Time: 7:57:16 AM
User: TUBBYSLAPTOPII\Tubby
Computer: TUBBYSLAPTOPII
Description:
Unable to start a DCOM Server:
{9FC8AD10-2E1B-45BE-B57A-478803561E1F}. The error:
"The system cannot find the path specified. "
Happened while starting this command:
C:\PROGRA~1\Yahoo!\browser\ycommon.exe -Embedding

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10000
Date: 5/26/2009
Time: 8:16:14 AM
User: TUBBYSLAPTOPII\Tubby
Computer: TUBBYSLAPTOPII
Description:
Unable to start a DCOM Server:
{9FC8AD10-2E1B-45BE-B57A-478803561E1F}. The error:
"The system cannot find the path specified. "
Happened while starting this command:
C:\PROGRA~1\Yahoo!\browser\ycommon.exe -Embedding

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


"Gerry" wrote:

Homer

Have a look in the System and Application logs in Event
Viewer for Errors and Warnings and post copies here. Don't
post any more than 48 hours ago.

You can access Event Viewer by selecting Start, Control
Panel, Administrative Tools, and Event Viewer. When
researching the meaning of the error, information regarding
Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in
Windows XP http://support.Microsoft.com/kb/308427/en-us

A tip for posting copies of Error Reports! Run Event Viewer
and double click on the error you want to copy. In the
window, which appears is a button resembling two pages.
Click the button and close Event Viewer.Now start your
message (email) and do a paste into the body of the
message. Make sure this is the first paste after exiting
from Event Viewer.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Homer wrote:
Hello,
Not sure if this is the appropriate newgroup to post this

.

Loading