bks81 computer need help

[bks81]

Hello, I am new here and not for sure where to post my first post that will explain my problem. So a little bit about me and my computer. I built my computer in 2009, Asus p5ld2, duo core intel processor, 500gb hd w/2 250 partitions. I have been my own IT guy for almost 20 years, built 4-5 computers. I know enough to get me by, but I do not know enough to feel comfortable editing the registry without instructions. My computer has worked fine from 2009 until Jan. 8 2013. It has vista premium, avg free, windows defender, firewall, ect on it. I have an antenna wireless internet and a wrt54g router and a wireless adapter on the computer. I am proud to say my computer almost never has any problems. I got a new Epson scanner for christmas and installed it and all the software that came with it. I then left for the holidays and left my computer on as I use it as a DVR. I have a hauppauge digital tv tuner installed hooked to my tv antenna, and record my favorite tv shows onto the D partition of my hd. When I got back home on the 8th, the computer was not the same. Now my wife and daughter were still at home and I dont know for sure if they used it while I was gone. First thing I noticed was Win. Media Center lost all its settings, and I had to search for channels again, ect. Then I noticed my computer was real slow sometimes. I checked Taskmanager and it showed almost no cpu usage, no odd programs running, so I restarted it a couple times, scanned with avg, found nothing, still was slow. And it seemed the more I do to diagnose it the slower it got. I checked windows update and no updates were done while I was gone. I then was going to restore to a point when I left on vacation, but I had no restore points. WTH?? at this point I am thinking I must have malware that deleted my restore points. So I downloaded and ran MWB-AMW and it found PUP.BundleInstaller.sol?? and removed it. the computer is still slow, So I downloaded and ran avg pc tune-up, didnt help. then I downloaded and ran Glary system tune-up, didnt help. Then I downloaded and ran combo fix, and then my computer wouldnt even boot anymore. I swear the more I did the worse the computer got. I then played with it for way too many hours to copy the registry backups to replace the corrupt registry's in system repair command prompt . Finally got it to boot, but I have only booted in safe mode the majority of the time thru all this.BTW, I disabled the internet and AVG while I did the scans with the other programs. And booting in safe mode now, I cant even create system restore point, no restore points available. So now I am here. I dont know what to do next, and tired of trying stuff and it making the problem worse. so Please tell me my next steps. . Oh, something to add .. I am on the internet with my laptop, can download to a thumb drive ffrom it and transfer between the 2 computers. Also, I have had moments when I thought my computer had a hardware problem, and other times that it is malware. When I was using the command prompt in windows repair trying to copy the registry files from backup, many times it would try to copy for 10 mins or so then come up and say 0 files copied because of an I|O error. But I finally did get them to copy eventually. It seems the longer my computer is on, the worse it runs. like once it warms up, it gets hot and then it drags along instead of doing things that are normally instant. I have checked to make sure the cpu heatsink is clean, and it is. I am at my wits end on how to procede, so thats why I am here.

Thank you, bks81

dds.txt

attach.txt

[Maurice Naggar]

Hello bks,

May I ask that you use some "white space" separation in your posts.

The lack of that makes it quite hard to read, let alone digest.

2) t.m.i. is a possibility. Break it down simply, what do you suspect?

You mention a hardware overheating issue, which must be cleared up first, and foremost.

You have run Combofix on your own and gotten bit.

Stop running specialized tools on your own

You have apparently been hacking away at the registry, and also used Glary software to again hack away.

3) More important, do NOT use the attach feature to place your logs.

COPY all contents and Paste directly into main-body of reply box. I'd very much appreciate that.

Also, you have other options:

if you're an MBAM customer, you contact the consumer help desk here.

If you are in an organization or a corporate customer, contact Corporate Support for assistance.

Edited January 22, 2013 by Maurice Naggar

[bks81]

Hello bks,

May I ask that you use some "white space" separation in your posts.

The lack of that makes it quite hard to read, let alone digest.

2) t.m.i. is a possibility. Break it down simply, what do you suspect?

You mention a hardware overheating issue, which must be cleared up first, and foremost.

I said it seems like it gets hot and drags along .. meaning that the computer runs slower the longer it is on, like if it gets hot.. I am not for sure if that is the case. But tonight I did start it up normally, but disconnected from the network right away. Then I started Asus PC Probe to moniter the temps and voltages and all is good. So I dont have a "heat problem" just the symptoms.

You have run Combofix on your own and gotten bit.

Stop running specialized tools on your own

You have apparently been hacking away at the registry, and also used Glary software to again hack away.

I did not touch the registry manually, but I did run AVG pc tuneup and Glary PC tuneup. I do not feel comfortable in the registry without instructions.

3) More important, do NOT use the attach feature to place your logs.

COPY all contents and Paste directly into main-body of reply box. I'd very much appreciate that.

So should I edit the post above, add white spaces, and paste my logs below it on this thread, or start a whole new thread?

Also, you have other options:

if you're an MBAM customer, you contact the consumer help desk here.

If you are in an organization or a corporate customer, contact Corporate Support for assistance.

Thank you for your help,

bks81

[Maurice Naggar]

COPY & Paste the logs in this thread in new replies. That's the DDS & Attach.txt

If you are sure there is no overheating, we'll proceed and I do hope there is no freeze-up or hiccup.

Keep in mind, my focus here will be just to see if there is a malware infection. If none is found, I will refer & have you go elsewhere.

And keep in mind, there is no guarantee that your system will be 100% safe for future use.

The only way to be sure, is to backup your personal files, then do a complete wipe and clean install of Windows and all your application programs.

BTW, do advise me if you have recent backups of your system from before this current situation.

I do not know of Glary tuneup. But I'll repeat, to not use any registry "tuner-upper", wizard, organizer, tuner-whatnot, or "registry optimizer" or "cleaner".

NEXT

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.

For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
  
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  
• Use the arrow keys to select the Repair your computer menu item.
  
• Select English as the keyboard language settings, and then click Next.
  
• Select the operating system you want to repair, and then click Next.
  
• Select your user account an click Next.
  

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
  
• Restart your computer.
  
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  
• Click Repair your computer.
  
• Select English as the keyboard language settings, and then click Next.
  
• Select the operating system you want to repair, and then click Next.
  
• Select your user account and click Next.
  

On the System Recovery Options menu you will get the following options:

• 
  
  • Startup Repair
    
  • System Restore
    
  • Windows Complete PC Restore
    
  • Windows Memory Diagnostic Tool
    
  • Command Prompt
    

  [*]Select Command Prompt

  [*]In the command window type in notepad and press Enter.

  [*]The notepad opens. Under File menu select Open.

  [*]Select "Computer" and find your flash drive letter and close the notepad.

  [*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

  Note: Replace letter e with the drive letter of your flash drive.

  [*]The tool will start to run.

  [*]When the tool opens click Yes to disclaimer.

  [*]Press Scan button.

  [*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[bks81]

attach.txt log .......

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft® Windows Vista™ Home Premium

Boot Device: \Device\HarddiskVolume1

Install Date: 10/16/2009 8:42:35 PM

System Uptime: 1/20/2013 8:08:12 AM (0 hours ago)

.

Motherboard: ASUSTeK Computer INC. | | P5LD2

Processor: Intel® Pentium® D CPU 2.80GHz | Socket 775 | 2810/200mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 233 GiB total, 191.535 GiB free.

D: is FIXED (NTFS) - 233 GiB total, 104.388 GiB free.

E: is CDROM (CDFS)

F: is CDROM ()

G: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Marvell Yukon 88E8053 PCI-E Gigabit Ethernet Controller

Device ID: PCI\VEN_11AB&DEV_4362&SUBSYS_81421043&REV_19\4&CA55412&0&00E3

Manufacturer: Marvell

Name: Marvell Yukon 88E8053 PCI-E Gigabit Ethernet Controller

PNP Device ID: PCI\VEN_11AB&DEV_4362&SUBSYS_81421043&REV_19\4&CA55412&0&00E3

Service: yukonwlh

.

Class GUID: {4d36e97d-e325-11ce-bfc1-08002be10318}

Description: Consumer IR Devices

Device ID: ROOT\SYSTEM\0001

Manufacturer: Microsoft

Name: Consumer IR Devices

PNP Device ID: ROOT\SYSTEM\0001

Service: circlass

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

ABBYY FineReader 9.0 Sprint

Acala Video Studio 3.3.6.546

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Reader 9.5.2

AI RoboForm

AMR to MP3 Converter 1.4

ArcSoft MediaImpression 2

ArcSoft Scan-n-Stitch Deluxe

ASUS VGA Driver

AsusUpdate

AVG 2012

Brother P-touch Address Book 1.1

Brother P-touch Editor 5.0

Catalyst Control Center - Branding

Catalyst Control Center Core Implementation

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Common

Catalyst Control Center Graphics Previews Vista

Catalyst Control Center HydraVision Full

Catalyst Control Center InstallProxy

ccc-core-static

ccc-utility

CCC Help English

Compatibility Pack for the 2007 Office system

CyberLink BD Advisor 2.0

CyberLink Blu-ray Disc Suite

CyberLink InstantBurn

CyberLink LabelPrint

CyberLink PhotoNow!

CyberLink Power2Go

CyberLink PowerBackup

CyberLink PowerDirector

CyberLink PowerDVD

CyberLink PowerProducer

DivX Plus DirectShow Filters

DivX Setup

Epson Copy Utility 3.5

Epson Event Manager

EPSON Perfection V330 Photo Scanner Driver Update version 3.0.2.0

EPSON Scan

Facebook Video Calling 1.2.0.287

FL 2001 Registration

FLV Player 2.0 (build 25)

Free 3GP Video Converter version 5.0.9.412

Glary Utilities 2.52.0.1698

Google SketchUp 8

Hauppauge MCE XP/Vista Software Encoder (2.0.27022)

Hauppauge WinTV Infrared Remote

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

ICQ6.5

Image Plugin

Intel® Processor ID Utility

Java 2 Runtime Environment, SE v1.4.2_18

Java 7 Update 7

Java Auto Updater

Java 6 Update 31

JavaFX 2.1.1

Kana Reminder 1.5

Lernout & Hauspie TruVoice American English TTS Engine

LG United Mobile Drivers

LightScribe System Software 1.14.19.1

Malwarebytes Anti-Malware version 1.70.0.1100

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft Links 2001

Microsoft Office File Validation Add-In

Microsoft Office Professional Edition 2003

Microsoft Silverlight

Microsoft Software Update for Web Folders (English) 12

Microsoft SQL Server 2005

Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)

Microsoft SQL Server 2005 Tools Express Edition

Microsoft SQL Server Native Client

Microsoft SQL Server Setup Support Files (English)

Microsoft SQL Server VSS Writer

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

MSVC80_x86

MSVC80_x86_v2

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Octoshape add-in for Adobe Flash Player

OGA Notifier 2.0.0048.0

Panasonic KX-P7105 and KX-P7110 Ver4.01

PC Probe II

Quicken 2001 Deluxe

Quicken Family Lawyer 2001

QuickTime

Ralink Wireless LAN

Rand McNally StreetFinder

Rand McNally TripMaker

Realtek High Definition Audio Driver

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

System Requirements Lab

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

VC80CRTRedist - 8.0.50727.6195

WebEx

.

==== Event Viewer Messages From Past Week ========

.

1/20/2013 8:12:44 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:42 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}

1/20/2013 8:12:42 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

1/20/2013 8:12:21 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AsIO Avgldx86 Avgmfx86 Avgtdix DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx Wanarpv6

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service service which failed to start because of the following error: A device attached to the system is not functioning.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.

1/20/2013 8:12:21 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

1/20/2013 8:12:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}

1/20/2013 8:12:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}

1/20/2013 8:12:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}

1/20/2013 8:12:07 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

1/20/2013 8:11:59 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}

1/20/2013 8:11:46 AM, Error: atapi [11] - The driver detected a controller error on \Device\Ide\IdePort2.

1/18/2013 6:50:37 PM, Error: disk [15] - The device, \Device\Harddisk0\DR0, is not ready for access yet.

1/18/2013 6:47:32 PM, Error: Microsoft-Windows-Kernel-General [6] - An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): '\SystemRoot\System32\Config\SOFTWARE'.

1/18/2013 6:32:49 PM, Error: Microsoft-Windows-Kernel-General [6] - An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): '\??\C:\Users\Brian\AppData\Local\Microsoft\Windows\UsrClass.dat'.

1/18/2013 6:22:44 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

1/18/2013 6:19:47 PM, Error: Microsoft-Windows-Kernel-General [6] - An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): '\??\C:\Users\Brian\ntuser.dat'.

1/17/2013 4:15:59 PM, Error: BTHUSB [5] - The Bluetooth driver expected an HCI event with a certain size but did not receive it.

1/16/2013 6:34:58 PM, Error: Microsoft-Windows-Kernel-General [6] - An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): ''.

1/16/2013 6:29:25 PM, Error: Service Control Manager [7030] - The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

1/16/2013 6:00:54 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AsIO Avgldx86 Avgmfx86 Avgtdix DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb spldr tdx Wanarpv6 ws2ifsl

1/16/2013 6:00:54 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.

1/16/2013 6:00:54 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.

1/16/2013 5:30:54 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgwd service.

1/16/2013 4:45:50 PM, Error: volsnap [14] - The shadow copies of volume C: were aborted because of an IO failure on volume C:.

1/16/2013 3:37:14 PM, Error: Service Control Manager [7034] - The KME Remote Server service terminated unexpectedly. It has done this 1 time(s).

1/16/2013 2:30:49 PM, Error: Service Control Manager [7022] - The KtmRm for Distributed Transaction Coordinator service hung on starting.

1/16/2013 2:28:50 PM, Error: Service Control Manager [7000] - The Windows Font Cache Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

1/16/2013 2:28:49 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Font Cache Service service to connect.

1/16/2013 2:28:19 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Media Center Receiver Service service to connect.

1/16/2013 2:28:19 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service ehRecvr with arguments "-Service" in order to run the server: {F4396DC6-E851-4D3A-8D01-34E6949F3500}

1/16/2013 2:25:23 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the AVGIDSAgent service to connect.

1/16/2013 2:25:23 PM, Error: Service Control Manager [7000] - The AVGIDSAgent service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

1/16/2013 2:20:54 PM, Error: EventLog [6008] - The previous system shutdown at 2:16:48 PM on 1/16/2013 was unexpected.

1/16/2013 11:21:50 PM, Error: Microsoft-Windows-TaskScheduler [412] - Task Scheduler service failed to launch tasks triggered by computer startup. Additional Data: Error Value: 2147942402. User Action: restart task scheduler service.

1/15/2013 9:13:25 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the X10 Device Network Service service to connect.

1/15/2013 9:13:25 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the SQL Server (SQLEXPRESS) service to connect.

1/15/2013 9:13:25 AM, Error: Service Control Manager [7000] - The X10 Device Network Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

1/15/2013 9:13:25 AM, Error: Service Control Manager [7000] - The SQL Server (SQLEXPRESS) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

1/15/2013 4:28:58 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.

1/15/2013 4:28:58 PM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

1/15/2013 4:27:24 PM, Error: netbt [4307] - Initialization failed because the transport refused to open initial addresses.

1/15/2013 2:40:59 PM, Error: Service Control Manager [7001] - The WebDav Client Redirector Driver service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.

1/15/2013 2:40:59 PM, Error: Service Control Manager [7001] - The WebClient service depends on the WebDav Client Redirector Driver service which failed to start because of the following error: The dependency service or group failed to start.

.

==== End Of File ===========================

dds.txt log ........

DDS (Ver_2012-11-20.01) - NTFS_x86 MINIMAL

Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.7.2

Run by Brian at 8:17:41 on 2013-01-20

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.2664 [GMT -6:00]

.

AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ================

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\rundll32.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k NetworkService

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.ixquick.com/

uURLSearchHooks: <No Name>: - LocalServer32 - <no file>

dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: AVG Do Not Track: {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - c:\program files\avg\avg2012\avgdtiex.dll

BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll

BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - c:\program files\avg\avg2012\avgssie.dll

BHO: <No Name>: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\ai roboform\RoboForm.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll

BHO: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll

BHO: TBSB07898 Class: {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - LocalServer32 - <no file>

TB: &RoboForm: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\ai roboform\RoboForm.dll

TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\ai roboform\RoboForm.dll

TB: Coupons.com CouponBar: {8660E5B3-6C41-44DE-8503-98D99BBECD41} - LocalServer32 - <no file>

uRun: [Kana Reminder] c:\kana reminder\Reminder.exe

uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe

mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide

mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\autost~1.lnk - c:\program files\wintv\Ir.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\kx-p71~1.lnk - c:\program files\panasonic\panasonic kx-p7105 and kx-p7110\status display\stmndsp.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\ralink~1.lnk - c:\program files\ralink\common\RaUI.exe

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: &2 Customize Menu - c:\ai roboform\RoboForm.dll/ComCustomIEMenu.html

IE: &7 Fill Forms - c:\ai roboform\RoboForm.dll/ComFillForms.html

IE: &8 Save Forms - c:\ai roboform\RoboForm.dll/ComSavePass.html

IE: E&xport to Microsoft Excel - c:\micros~1\office11\EXCEL.EXE/3000

IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\ai roboform\RoboForm.dll/ComFillForms.html

IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\ai roboform\RoboForm.dll/ComSavePass.html

IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - c:\program files\avg\avg2012\avgdtiex.dll

IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\ai roboform\RoboForm.dll/ComShowToolbar.html

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {E59EB121-F339-4851-A3BA-FE49C35617C2} - c:\icq6.5\ICQ.exe

Trusted Zone: ivave.com

DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: NameServer = 69.24.112.10 69.24.126.3

TCP: Interfaces\{10DBACBA-4521-4830-BBA0-1E9E6BFFF1E9} : DHCPNameServer = 69.24.112.10 69.24.126.3

TCP: Interfaces\{3B37DAB7-08A8-4779-8874-D19D1A2DC473} : DHCPNameServer = 69.24.112.10 69.24.126.3

TCP: Interfaces\{8AD28298-D8FB-4F57-89F0-53793136FE8F} : DHCPNameServer = 69.24.112.10 69.24.126.3

Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - <orphaned>

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll

LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg

mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"

.

============= SERVICES / DRIVERS ===============

.

R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-4-19 24896]

R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2012-1-31 31952]

R1 CLBStor;InstantBurn Storage Helper Driver;c:\windows\system32\drivers\CLBStor.sys [2009-12-12 15784]

R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [2011-6-9 13720]

S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2012-7-26 237408]

S1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-12-23 41040]

S1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2012-8-24 301920]

S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files\common files\abbyy\finereadersprint\9.00\licensing\NetworkLicenseServer.exe [2009-5-14 759048]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-11-4 176128]

S2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\avgidsagent.exe [2012-8-13 5167736]

S2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2012-2-14 193288]

S2 CLBUDF;CyberLink InstantBurn UDF Filesystem;c:\windows\system32\drivers\CLBUDF.sys [2009-12-12 162344]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2009-10-18 21504]

S2 KME Remote Server;KME Remote Server;c:\progra~1\panaso~1\remote~1\kmentsrv.exe [2009-10-18 57344]

S2 mrtRate;mrtRate;c:\windows\system32\drivers\MrtRate.sys [2009-10-17 34712]

S2 RalinkRegistryWriter;Ralink Registry Writer;c:\program files\ralink\common\RalinkRegistryWriter.exe [2009-10-18 54272]

S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2011-12-23 139856]

S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [2011-12-23 24144]

S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2011-12-23 17232]

S3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\system32\drivers\HCW85BDA.sys [2009-7-14 1443584]

S3 hcw85cir;Hauppauge Consumer IR 3;c:\windows\system32\drivers\hcw85cir3.sys [2009-7-14 28160]

S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2009-10-6 136704]

S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2009-10-6 8320]

S3 rt61x86;Ralink RT61 Wireless Driver for Windows Vista;c:\windows\system32\drivers\netr61.sys [2009-6-10 335872]

S3 TridVid;X10 VA12A Video Capture;c:\windows\system32\drivers\TridVid.sys [2007-1-17 156928]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== File Associations ===============

.

FileExt: .txt: txtfile=c:\windows\system32\NOTEPAD.EXE %1 [userChoice]

.

=============== Created Last 30 ================

.

2013-01-17 19:28:36 528 ----a-w- C:\MediaID.bin

2013-01-17 05:11:22 -------- d-----w- c:\users\brian\appdata\local\temp

2013-01-17 00:34:43 -------- d-sh--w- C:\$RECYCLE.BIN

2013-01-17 00:06:33 98816 ----a-w- c:\windows\sed.exe

2013-01-17 00:06:33 256000 ----a-w- c:\windows\PEV.exe

2013-01-17 00:06:33 208896 ----a-w- c:\windows\MBR.exe

2013-01-15 21:58:19 -------- d-----w- C:\Glary Utilities

2013-01-15 21:15:50 -------- d-----w- c:\users\brian\appdata\roaming\AVG

2013-01-15 21:12:11 -------- d-----w- c:\programdata\AVG

2013-01-15 21:09:45 -------- d-sh--w- c:\programdata\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

2013-01-15 18:00:00 -------- d-----w- c:\users\brian\appdata\roaming\Malwarebytes

2013-01-15 17:59:40 -------- d-----w- c:\programdata\Malwarebytes

2013-01-15 17:59:39 21104 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-01-15 17:59:39 -------- d-----w- C:\Malwarebytes' Anti-Malware

2013-01-09 11:48:35 2048000 ----a-w- c:\windows\system32\win32k.sys

2013-01-09 11:44:28 204288 ----a-w- c:\windows\system32\ncrypt.dll

2013-01-09 11:44:22 1400832 ----a-w- c:\windows\system32\msxml6.dll

2012-12-25 02:13:00 -------- d-----w- c:\users\brian\appdata\local\ABBYY

2012-12-25 02:07:19 -------- d-----w- c:\programdata\ABBYY

2012-12-25 02:07:19 -------- d-----w- c:\program files\common files\ABBYY

2012-12-25 02:07:19 -------- d-----w- C:\ABBYY FineReader 9.0 Sprint

2012-12-25 02:01:08 18688 ----a-w- c:\windows\system32\drivers\afc.sys

2012-12-25 02:00:12 -------- d--h--w- c:\programdata\ArcSoft

2012-12-25 01:59:38 -------- d-----w- C:\ArcSoft

2012-12-25 01:53:58 65793 ----a-w- c:\windows\system32\esfwad.bin

2012-12-25 01:53:58 262144 ----a-w- c:\windows\system32\esintad.dll

2012-12-25 01:53:58 132560 ----a-w- c:\windows\system32\esdevapp.exe

2012-12-25 01:53:58 12800 ----a-w- c:\windows\system32\escdev.dll

2012-12-25 01:53:58 123904 ----a-w- c:\windows\system32\esw2_ad.dll

2012-12-25 01:53:48 -------- d-----w- c:\program files\epson

2012-12-22 09:00:21 34304 ----a-w- c:\windows\system32\atmlib.dll

2012-12-22 09:00:21 293376 ----a-w- c:\windows\system32\atmfd.dll

.

==================== Find3M ====================

.

2012-12-22 14:07:09 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-12-22 14:07:09 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-11-14 02:09:22 1800704 ----a-w- c:\windows\system32\jscript9.dll

2012-11-14 01:58:15 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-11-14 01:57:37 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-11-14 01:49:25 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-11-14 01:48:27 420864 ----a-w- c:\windows\system32\vbscript.dll

2012-11-14 01:44:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-11-13 01:29:51 2048 ----a-w- c:\windows\system32\tzres.dll

2012-11-02 10:18:17 376320 ----a-w- c:\windows\system32\dpnet.dll

2012-11-02 08:26:06 23040 ----a-w- c:\windows\system32\dpnsvr.exe

.

============= FINISH: 8:18:46.51 ===============

[bks81]

frst.txt log

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-01-2013 02

Ran by SYSTEM at 23-01-2013 09:15:06

Running from G:\

(X86) OS Language: English(US)

Attention: Could not load system hive.

Attention: System hive is missing.

==================== Registry (Whitelisted) ===================

Attention: Software hive is missing.

ATTENTION: Unable to load Software hive.

==================== Services (Whitelisted) ===================

==================== Drivers (Whitelisted) ====================

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

==================== One Month Modified Files and Folders ========

==================== Known DLLs (Whitelisted) =================

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe IS MISSING <==== ATTENTION!.

C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION!.

C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION!.

C:\Windows\System32\services.exe IS MISSING <==== ATTENTION!.

C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION!.

C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION!.

C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.

c:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION!.

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: <===== ATTENTION!

HKLM\...\exefile\DefaultIcon: <===== ATTENTION!

HKLM\...\exefile\open\command: <===== ATTENTION!

==================== Restore Points =========================

==================== Memory info ===========================

Percentage of memory in use: 11%

Total physical RAM: 3070.56 MB

Available physical RAM: 2723.73 MB

Total Pagefile: 2853.78 MB

Available Pagefile: 2718 MB

Total Virtual: 2047.88 MB

Available Virtual: 1983.94 MB

==================== Partitions =============================

2 Drive e: (Strfindr002) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS

3 Drive f: (LRMCFRE_EN_DVD) (CDROM) (Total:2.49 GB) (Free:0 GB) UDF

4 Drive g: (KINGSTON) (Removable) (Total:7.45 GB) (Free:1.7 GB) NTFS

5 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt

-------- ---------- ------- ------- --- ---

Disk 1 Online 7628 MB 0 B

Partitions of Disk 1:

===============

ACTIVE - Mark the selected basic partition as active.

ADD - Add a mirror to a simple volume.

ASSIGN - Assign a drive letter or mount point to the selected volume.

ATTRIBUTES - Manipulate volume attributes.

AUTOMOUNT - Enable and disable automatic mounting of basic volumes.

BREAK - Break a mirror set.

CLEAN - Clear the configuration information, or all information, off the

disk.

CONVERT - Convert between different disk formats.

CREATE - Create a volume or partition.

DELETE - Delete an object.

DETAIL - Provide details about an object.

EXIT - Exit DiskPart.

EXTEND - Extend a volume.

FILESYSTEMS - Display current and supported file systems on the volume.

FORMAT - Format the volume or partition.

GPT - Assign attributes to the selected GPT partition.

HELP - Display a list of commands.

IMPORT - Import a disk group.

INACTIVE - Mark the selected basic partition as inactive.

LIST - Display a list of objects.

ONLINE - Online a disk that is currently marked as offline.

REM - Does nothing. This is used to comment scripts.

REMOVE - Remove a drive letter or mount point assignment.

REPAIR - Repair a RAID-5 volume with a failed member.

RESCAN - Rescan the computer looking for disks and volumes.

RETAIN - Place a retained partition under a simple volume.

SELECT - Shift the focus to an object.

SETID - Change the partition type.

SHRINK - Reduce the size of the selected volume.

=========================================================

==================== End Of Log ============================

[Maurice Naggar]

The FRST log is extremely worrying. It indicates the Windows Vista registry hives are "missing".

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-01-2013 02

Ran by SYSTEM at 23-01-2013 09:15:06

Running from G:\

(X86) OS Language: English(US)

Attention: Could not load system hive.

Attention: System hive is missing.

==================== Registry (Whitelisted) ===================

Attention: Software hive is missing.

ATTENTION: Unable to load Software hive.

IF you did not manage to get to a command prompt in the process above, then you may want to try 1 more time.

1st though be sure to disconnect any external drives {except for the one with FRST)

[bks81]

I started the computer with the windows disk, and followed the instuctions as per that process. is there something I can do to have windows re-create these hives?

[Maurice Naggar]

No, there is not.

I'd advise you copy your personal files and documents to offline external media now.

Let me know if you have previous full system image backups of this system from before this. What program did you use?

If you do, it may be possible to put it back in place.

Lacking full backups, your best and safest thing long term, is to wipe the system, and start from scratch, installing Vista as a clean install and installing all your applications.

[bks81]

I have a backup (partial I believe) on an 8 gig thumbdrive from Oct 2012. It does have system included in it, but I believe its not a full backup. All my important file are in it though. I can boot the computer, but as before, the longer it is on, the more it will "hang" .. as long as I give it enough time, it will complete the tasks I want it to do. it accually "hung" while doing the FRST scan.

[bks81]

I am beginning to think I have a hardware problem more so now, is there a utility program you would reccommend to help me diagnose a hardware problem?

[Maurice Naggar]

There it is the hardware problem, which I was almost sure would happen.

You can run a Memory Diagnostic yourself, but that is (iirc) a RAM memory tester.

For other hardware testing, you will have to turn to your pc manufacturer support.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
  
• As soon as the BIOS is loaded begin tapping & repeat tap the F8 function key until Advanced Boot Options appears.
  
• Use the arrow keys to select the Repair your computer menu item.
  
• Select English as the keyboard language settings, and then click Next.
  
• Select the operating system you want to repair, and then click Next.
  
• Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

• • 
    
  • Startup Repair
    
  • System Restore
    
  • Windows Complete PC Restore
    
  • Windows Memory Diagnostic Tool
    
  • Command Prompt

[*]Select Windows Memory Diagnostic Tool

[Maurice Naggar]

Once you have insured that RAM memory is ok, and that there's absolutely no "heat" issues, and that the hard drive is ok (by running CHKDSK), then I recommend you wipe/nuke/ delete the Windows partition, then do a fresh install of Vista.

Note that that means the loss of all your programs, data, etc. Be sure you have a backup of your data before beginning, and be sure you have the installation media for all your programs, which will have to be reinstalled.

Once Vista is installed, Antivirus must be installed, and then a visit to MS Windows Update to insure the latest Service Pack and Important updates are installed.

This is one way to do the clean install:

All data and all partitions on the hard disk are permanently removed. We strongly recommend that you back up the files on the hard disk before you clean the disk.

To use the Diskpart.exe utility to clean the hard disk, follow these steps:

Put the Windows Vista installation disc in the disc drive, and then restart the computer.

Install Windows Vista. During the installation process, in the Where do you want to install Windows screen, press SHIFT+F10 to open a command prompt.

Click Start, click Run, type diskpart, and then click OK.

At the command prompt, type list disk, and then press ENTER. A list of available hard disks is displayed.

At the command prompt, type sel disk number, and then press ENTER. The hard disk is now selected.

Note number is the number of the hard disk that you want to clean.

At the command prompt, type det disk, and then press ENTER. A list of partitions on the hard disk is displayed. Use this information to verify that the correct disk is selected.

Make sure that the disk does not contain required data, type clean all at the command prompt, and then press ENTER to clean the disk. All the data and all the partitions on the disk are permanently removed.

Type exit, and then press ENTER.

Run Windows Vista Setup to perform a clean installation of Windows Vista.

CF, http://support.microsoft.com/kb/933171

I wish you well. This thread is closed.