System Health is "LOW".

[Jigsaw]

Hi, recently I used the Registry Mechanic Product, scanned, fixed nearly 700 errors, and yet it shows my system health is low. My computer runs very fast, and smooth, still shows health is low.

Here's a scan log, of a few that won't fix, I don't know if it will help though:

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.850
----------------------------------------------------------------------------------------------------
Start of Scan
8/18/2009 7:40:18 PM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18702
MEMORY FREE: 658300
MEMORY TOTAL: 1048052
VIRTUAL FREE: 1977740
VIRTUAL TOTAL: 2097024
Windows XP 5.1 (2600) Professional Edition Service Pack 3.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 800
csrss.exe 848
winlogon.exe 872
services.exe 916
lsass.exe 928
svchost.exe 1092
svchost.exe 1156
cmdagent.exe 1252
svchost.exe 1292
svchost.exe 1576
spoolsv.exe 1796
explorer.exe 1908
cfp.exe 432
ctfmon.exe 560
svchost.exe 612
RegMech.exe 624
nvsvc32.exe 720
wdfmgr.exe 748
alg.exe 140
firefox.exe 2844
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
SP - 1
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs
Value : C:\WINDOWS\system32\vsutil.dll = 00000001
Parsed : c:\windows\system32\vsutil.dll

SP - 2
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs
Value : C:\WINDOWS\system32\vsxml.dll = 00000002
Parsed : c:\windows\system32\vsxml.dll

ARP - 3
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\ZoneAlarm Extreme Security
Value : UninstallString = C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
Parsed : c:\program files\zone labs\zonealarm\zauninst.exe

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------

End of Scan
8/18/2009 7:41:02 PM

Your System Information :
MEMORY FREE: 661556
MEMORY TOTAL: 1048052
VIRTUAL FREE: 1977736
VIRTUAL TOTAL: 2097024

Any idea why it stays as system health low? I have removed the Zone Alarm program, and still getting a registry issue, I have no idea why.

[AChen]

Hi Jigsaw,

Please follow the steps below to resolve this issue:

1. Open a notepad
2. Please copy the lines below to the notepad

c:\windows\system32\vsutil.dll
c:\windows\system32\vsxml.dll
c:\program files\zone labs

3. Save the file as exData (with capital D and just simply save it to your Desktop)
4. Go to My Computer > C > Program Files > Registry Mechanic > Data.
5. Then, please move the exData on your Desktop to the Data folder
6. Run Registry Mechanic > Scan > Repair to see if the problem persists

[Jigsaw]

Awesome!

Now as for those registry problems, did it fix those items I posted? I no longer see it showing Low, just a green check mark, hopefully I'm all set.

[greenzeto]

u should be set by now.

from my experience... emmm... check the following items

c:\windows\system32\vsutil.dll --> windows
c:\windows\system32\vsxml.dll --> windows
c:\program files\zone labs --> this is from your zone alarm

the first two items are belong to your windows and the last 1 is from Zone Labs (ZONE ALARM). The reason why RM could not repair those items is because they were in used by something else. So, there is no issue with those 3 items.

I believe everything is good for you. If there is any unrepaired item, please post ur log file again.

Cheers, :D

Btw, I love Spyware Doctor... ; )

[patience0107]

Dose this fix apply to Vista 64-bit also?

[AChen]

Dose this fix apply to Vista 64-bit also?

Could you provide the log files from the instructions in my above post and I will be able to assist you further.

[PWF123]

I am having what seems to be the same type problem.

Please see log below:

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.850
----------------------------------------------------------------------------------------------------
Start of Scan
9/11/2009 4:40:24 PM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18813
MEMORY FREE: 0
MEMORY TOTAL: 0
VIRTUAL FREE: 1969464
VIRTUAL TOTAL: 2097024
Windows Vista 6.0 (6001) Service Pack 1.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 408
csrss.exe 472
wininit.exe 524
csrss.exe 540
services.exe 576
winlogon.exe 604
lsass.exe 628
lsm.exe 636
svchost.exe 792
svchost.exe 852
atiesrxx.exe 992
svchost.exe 1016
svchost.exe 196
svchost.exe 276
audiodg.exe 544
svchost.exe 784
SLsvc.exe 964
svchost.exe 1040
atieclxx.exe 1112
svchost.exe 1196
spoolsv.exe 1464
svchost.exe 1488
LSSrvc.exe 1848
dwm.exe 2032
taskeng.exe 1080
ccSvcHst.exe 1144
svchost.exe 1624
RichVideo.exe 1796
FourEngine.exe 2084
svchost.exe 2104
taskeng.exe 2112
svchost.exe 2156
SearchIndexer.exe 2200
explorer.exe 2352
WUDFHost.exe 2364
taskeng.exe 2540
mobsync.exe 2796
LightScribeControlPanel.exe 2664
VDeck.exe 1036
CLMLSvc.exe 428
MOM.exe 3084
brs.exe 3096
PDVDServ.exe 3120
dllhost.exe 3324
ccSvcHst.exe 3344
CCC.exe 3256
fwupdate.exe 3708
mscorsvw.exe 3756
mscorsvw.exe 3736
GoogleToolbarNotifier.exe 4304
infocard.exe 1596
RegMech.exe 4220
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
CC - 1
Location: HKEY_CLASSES_ROOT\TypeLib\{DD5F89EE-9C85-4D42-B366-919387500641}\1.0\0\win32
Value : (default) = "C:\Program Files (x86)\Norton Internet Security\Engine\16.7.2.11\NavShExt.dll"
Parsed : c:\program files (x86)\norton internet security\engine\16.7.2.11\navshext.dll

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------

End of Scan
9/11/2009 4:40:34 PM

Your System Information :
MEMORY FREE: 0
MEMORY TOTAL: 0
VIRTUAL FREE: 1967416
VIRTUAL TOTAL: 2097024

[AChen]

Hi Pwf123,

Please follow the steps below to resolve this issue:

1. Open a notepad
2. Please copy the lines below to the notepad

c:\program files (x86)\norton internet security\engine

3. Save the file as exData (with capital D and just simply save it to your Desktop)
4. Go to My Computer > C > Program Files > Registry Mechanic > Data.
5. Then, please move the exData on your Desktop to the Data folder
6. Run Registry Mechanic > Scan > Repair to see if the problem persists

[PWF123]

Thank you, it seems to have worked!

[Jarhead57]

I am having what seems to be the same type problem also. E-mail -name edited out of course.

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.850
----------------------------------------------------------------------------------------------------
Start of Scan
9/14/2009 9:45:11 AM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18702
MEMORY FREE: 408788
MEMORY TOTAL: 916460
VIRTUAL FREE: 1991564
VIRTUAL TOTAL: 2097024
Windows XP 5.1 (2600) Professional Edition Service Pack 3.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 808
csrss.exe 868
winlogon.exe 896
services.exe 952
lsass.exe 964
ati2evxx.exe 1132
svchost.exe 1148
svchost.exe 1224
svchost.exe 1300
acs.exe 1492
svchost.exe 1540
svchost.exe 1604
spoolsv.exe 1836
svchost.exe 1904
schedul2.exe 1956
CeEPwrSvc.exe 1976
ioloServiceManager.exe 2016
ccSvcHst.exe 252
PCPitstopScheduleService.exe 456
PDAgent.exe 520
svchost.exe 968
explorer.exe 1172
swupdtmr.exe 1180
nmsrvc.exe 1456
wmiprvse.exe 2172
ccSvcHst.exe 2512
WinPatrol.exe 2856
CePMTray.exe 2880
EzButton.EXE 3000
pinger.exe 3012
agrsmmsg.exe 3068
nmctxth.exe 3120
nmapp.exe 3156
SOAN.exe 3176
alg.exe 3200
ctfmon.exe 3216
TOSCDSPD.exe 3244
LinksysClient.exe 3276
msnmsgr.exe 3352
wlcomm.exe 3944
wuauclt.exe 2228
RegMech.exe 1292
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
DEEP - 1
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows Live Contacts\Database
Value : C:\Documents and Settings\xxx\Contacts\xxx@msn.com\ = {59056cd9-743e-4bcf-94cf-f19fa99623fa}
Parsed : c:\documents and settings\xxx\contacts\xxx@msn.com

DEEP - 2
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows Live Contacts\Database
Value : C:\Documents and Settings\xxx\Contacts\xxx@msn.com\shadow\ = {a63d3e3b-e3c8-48cf-9b54-ccf781f1ba9c}
Parsed : c:\documents and settings\xxx\contacts\xxxx@msn.com\shadow

DEEP - 3
Location: HKEY_CURRENT_USER\Software\Microsoft\Windows Live Contacts\Me
Value : C:\Documents and Settings\xxx\Contacts\xxx@msn.com\ = /DBINST:59056cd9-743e-4bcf-94cf-f19fa99623fa /DBROW:b0562e26-000f-b839-11de-a14dcd39030c
Parsed : c:\documents and settings\xxx\contacts\xxxx@msn.com

DEEP - 4
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs
Value : SRTSP = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\NIS_ 17~1.136\DEFINI~1\VIRUSD~1\20090913.004
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nis_ 17~1.136\defini~1\virusd~1\20090913.004

DEEP - 5
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs
Value : AVDEFMGR = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\NIS_ 17~1.136\DEFINI~1\VIRUSD~1\20090913.004
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nis_ 17~1.136\defini~1\virusd~1\20090913.004

DEEP - 6
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs\AntiSpamDefs
Value : Antispam = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\NIS_ 17~1.136\DEFINI~1\ANTISP~1\20090912.021
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nis_ 17~1.136\defini~1\antisp~1\20090912.021

DEEP - 7
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs\ipsdefs
Value : Internet Security = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\Nort on\DEFINI~1\ipsdefs\20090908.006
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nort on\defini~1\ipsdefs\20090908.006

DEEP - 8
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs\ipsdefs
Value : {4514EBFE-5EBB-462B-8878-6D4DD7DCDBFC} = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\Nort on\DEFINI~1\ipsdefs\20090904.002
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nort on\defini~1\ipsdefs\20090904.002

DEEP - 9
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs\ipsdefs
Value : {D3C8D52E-7419-4F4F-86B1-6B8819A95A69} = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\Nort on\DEFINI~1\ipsdefs\20090908.006
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nort on\defini~1\ipsdefs\20090908.006

DEEP - 10
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs\IronWhitelistDefs
Value : IronWhitelist = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\NIS_ 17~1.136\DEFINI~1\IRONWH~1\20090911.018
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nis_ 17~1.136\defini~1\ironwh~1\20090911.018

DEEP - 11
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SharedDefs\webprotectiondefs
Value : WebProtectionDefs = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton\{0C55C~1\NIS_ 17~1.136\DEFINI~1\WEBPRO~1\20090913.006
Parsed : c:\docume~1\alluse~1\applic~1\norton\{0c55c~1\nis_ 17~1.136\defini~1\webpro~1\20090913.006

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------

End of Scan
9/14/2009 9:45:47 AM

Your System Information :
MEMORY FREE: 459260
MEMORY TOTAL: 916460
VIRTUAL FREE: 1970352
VIRTUAL TOTAL: 2097024

[AChen]

Hi Jarhead57,

Please follow the steps below to resolve this issue:

1. Open a notepad
2. Please copy the lines below to the notepad

c:\documents and settings\xxx\contacts
c:\docume~1\alluse~1\applic~1\norton

3. Save the file as exData (with capital D and just simply save it to your Desktop)
4. Go to My Computer > C > Program Files > Registry Mechanic > Data.
5. Then, please move the exData on your Desktop to the Data folder
6. Run Registry Mechanic > Scan > Repair to see if the problem persists

[Blackmetalraziel]

Hallo AChen it seems that I have the same problem as people above so please can you help me here is copy of the Scan file

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.850
----------------------------------------------------------------------------------------------------
Start of Scan
9/30/2009 6:26:18 PM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18702
MEMORY FREE: 756928
MEMORY TOTAL: 1038380
VIRTUAL FREE: 1987144
VIRTUAL TOTAL: 2097024
Windows XP 5.1 (2600) Professional Edition Service Pack 3.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 212
csrss.exe 268
winlogon.exe 292
services.exe 340
lsass.exe 352
svchost.exe 520
svchost.exe 592
svchost.exe 660
pctsAuxs.exe 708
pctsSvc.exe 736
explorer.exe 920
pctsTray.exe 976
RegMech.exe 1716
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
DEEP - 1
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FamilySafety
Value : DatFile = C:\Program Files\Windows Live\Family Safety\fss.dat
Parsed : c:\program files\windows live\family safety\fss.dat

----------------------------------------------------------------------------------------------------
Version 8.0.0.906
----------------------------------------------------------------------------------------------------

End of Scan
9/30/2009 6:26:57 PM

Your System Information :
MEMORY FREE: 757552
MEMORY TOTAL: 1038380
VIRTUAL FREE: 1987140
VIRTUAL TOTAL: 2097024

[AChen]

Hi Blackmetalraziel,

Please follow the steps below to resolve this issue:

1. Open a notepad
2. Please copy the lines below to the notepad

c:\program files\windows live\family safety\

3. Save the file as exData (with capital D and just simply save it to your Desktop)
4. Go to My Computer > C > Program Files > Registry Mechanic > Data.
5. Then, please move the exData on your Desktop to the Data folder
6. Run Registry Mechanic > Scan > Repair to see if the problem persists

[richieAAJ]

I ran RM and it came back with the high priority item (which it ignored to fix) : Hkey_local_machine\software\microsoft\family safety

It also says that the system health is low.

Please Help

Cheers

RichieAAJ



----------------------------------------------------------------------------------------------------
Version 9.0.0.114
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.854
----------------------------------------------------------------------------------------------------
Start of Scan
2/11/2009 12:23:46 PM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18702
MEMORY FREE: 235232
MEMORY TOTAL: 1039740
VIRTUAL FREE: 1959164
VIRTUAL TOTAL: 2097024
Windows XP 5.1 (2600) Professional Edition Service Pack 3.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 892
csrss.exe 988
winlogon.exe 1012
services.exe 1056
lsass.exe 1068
svchost.exe 1244
svchost.exe 1288
svchost.exe 1432
svchost.exe 1464
svchost.exe 1640
svchost.exe 1804
spoolsv.exe 248
explorer.exe 700
svchost.exe 1252
PhotoshopElementsFileAgent.exe 1412
AppleMobileDeviceService.exe 1612
mDNSResponder.exe 1636
jqs.exe 1712
MDM.EXE 1884
MSCamS32.exe 136
NBService.exe 152
NicConfigSvc.exe 300
ccSvcHst.exe 352
StartManSvc.exe 376
PSIService.exe 416
RegSrvc.exe 604
RichVideo.exe 656
pctsAuxs.exe 692
pctsSvc.exe 748
ccSvcHst.exe 1976
SeaPort.exe 532
pctsTray.exe 1348
svchost.exe 1416
wanmpsvc.exe 1772
wmiprvse.exe 3424
alg.exe 3684
Apoint.exe 568
hkcmd.exe 2988
iFrmewrk.exe 1504
svchost.exe 968
quickset.exe 304
DVDLauncher.exe 3588
ApntEx.exe 3824
PDF Asst.exe 3392
monitor.exe 3940
VM305_STI.EXE 3952
tfswctrl.exe 3980
apdproxy.exe 4084
vVX1000.exe 2076
jusched.exe 2264
CorelIOMonitor.exe 2340
mssysmgr.exe 2424
ctfmon.exe 2432
deskmech.exe 2000
nu.exe 976
RegMech.exe 2508
C2CMonitor.exe 2920
WZQKPICK.EXE 2976
iexplore.exe 3584
iexplore.exe 3440
wltuser.exe 4056
iexplore.exe 3192
msnmsgr.exe 2412
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
DEEP - 1
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FamilySafety
Value : DatFile = C:\Program Files\Windows Live\Family Safety\fss.dat
Parsed : c:\program files\windows live\family safety\fss.dat

----------------------------------------------------------------------------------------------------
Version 9.0.0.114
----------------------------------------------------------------------------------------------------

End of Scan
2/11/2009 12:25:32 PM

Your System Information :
MEMORY FREE: 230772
MEMORY TOTAL: 1039740
VIRTUAL FREE: 1959096
VIRTUAL TOTAL: 2097024

[AChen]

Hi RichieAAJ,

Could you please do the following:

1. Open Registry Mechanic
2. Select "Options"
3. Select "Settings"
4. Select "Ignore Lists"
5. Select "Values" (it should be selected by default)
6. Copy and paste the following line of text in the field directly above the "Add" & "Remove" tabs

c:\program files\windows live\

7. Select "Add" (you will see the text appear in the "Values" area)
8. Select "Save" (you will need to select 'Yes' to confirm)
9. Perform a full scan with Registry Mechanic

[luisduo]

I'm having the same problem. Below is my log.

Thanks in advanced.

----------------------------------------------------------------------------------------------------
Version 9.0.0.114
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.854
----------------------------------------------------------------------------------------------------
Start of Scan
11/4/2009 4:46:44 PM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18702
MEMORY FREE: 2097152
MEMORY TOTAL: 2097152
VIRTUAL FREE: 1969508
VIRTUAL TOTAL: 2097024
Windows XP 5.1 (2600) Professional Edition Service Pack 3.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 768
csrss.exe 824
winlogon.exe 848
services.exe 892
lsass.exe 904
svchost.exe 1068
svchost.exe 1180
MsMpEng.exe 1276
svchost.exe 1316
svchost.exe 1356
svchost.exe 1508
svchost.exe 1624
aawservice.exe 1696
explorer.exe 1888
spoolsv.exe 1932
ctfmon.exe 1944
ehtray.exe 332
DMAScheduler.exe 376
lxctmon.exe 400
res.exe 416
LCDMon.exe 508
svchost.exe 608
V0420Mon.exe 752
PhotoshopElementsFileAgent.exe 812
PhotoshopElementsFileAgent.exe 1092
winssnotify.exe 808
EM_EXEC.EXE 1232
mainserv.exe 1348
AppleMobileDeviceService.exe 1468
arservice.exe 1484
mDNSResponder.exe 1532
SearchProtection.exe 1524
CTSVCCDA.EXE 1568
Acrotray.exe 1596
ehrecvr.exe 1768
ehSched.exe 1156
jqs.exe 280
LCDPOP3.exe 356
LSSrvc.exe 248
LCDClock.exe 364
LCDMedia.exe 1480
lxctcoms.exe 1584
jusched.exe 1564
NBService.exe 1736
DeviceManager.exe 1640
hpwuschd2.exe 1836
nvsvc32.exe 2084
ZuneLauncher.exe 2180
OcHealthMon.exe 2212
realsched.exe 2308
CTDetect.exe 2424
StartManSvc.exe 2532
CTSyncU.exe 2548
IoctlSvc.exe 2560
RogersUpdateManager.exe 2584
RoxMediaDB.exe 2688
SeaPort.exe 2768
svchost.exe 2876
LogitechDesktopMessenger.exe 2888
svchost.exe 2956
ZuneBusEnum.exe 3072
mcrdsvc.exe 3200
msfwsvc.exe 3268
winss.exe 3372
CPdeSrvU.exe 3448
apcsystray.exe 3716
ehmsas.exe 756
dllhost.exe 3188
FNPLicensingService.exe 3836
alg.exe 3440
wmiprvse.exe 2320
svchost.exe 204
msmsgs.exe 3764
kbd.exe 5760
hpsysdrv.exe 4216
iTunesHelper.exe 4240
iPodService.exe 5468
RegMech.exe 1992
iexplore.exe 1976
iexplore.exe 4784
wltuser.exe 2244
iexplore.exe 6096
iexplore.exe 2620
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
PS - 1
Location: C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE7.tmp
Value : TMP = C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE7.tmp
Parsed : C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE7.tmp

PS - 2
Location: C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
Value : TMP = C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
Parsed : C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp

PS - 3
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\JET58F3.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\JET58F3.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\JET58F3.tmp

PS - 4
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\JETCB06.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\JETCB06.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\JETCB06.tmp

PS - 5
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF41EB.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF41EB.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF41EB.tmp

PS - 6
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5BF3.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5BF3.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5BF3.tmp

PS - 7
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF6F99.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF6F99.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF6F99.tmp

PS - 8
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF70B9.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF70B9.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF70B9.tmp

PS - 9
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF70C6.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF70C6.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF70C6.tmp

PS - 10
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF7120.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF7120.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF7120.tmp

PS - 11
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF712D.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF712D.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF712D.tmp

PS - 12
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF715B.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF715B.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF715B.tmp

PS - 13
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF7168.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF7168.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF7168.tmp

PS - 14
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF8A98.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF8A98.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF8A98.tmp

PS - 15
Location: C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DFA5C9.tmp
Value : TMP = C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DFA5C9.tmp
Parsed : C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DFA5C9.tmp

PS - 16
Location: C:\Program Files\Microsoft Windows OneCare Live\Database\edb.chk
Value : CHK = C:\Program Files\Microsoft Windows OneCare Live\Database\edb.chk
Parsed : C:\Program Files\Microsoft Windows OneCare Live\Database\edb.chk

DEEP - 17
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FamilySafety
Value : DatFile = C:\Program Files\Windows Live\Family Safety\fss.dat
Parsed : c:\program files\windows live\family safety\fss.dat

DEEP - 18
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OneCare Protection\Exclusions\Paths
Value : C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Wi ndows.edb = 00000000
Parsed : c:\documents and settings\all users\application data\microsoft\search\data\applications\windows\wi ndows.edb

DEEP - 19
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OneCare Protection\Exclusions\Paths
Value : C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tm p.edb = 00000000
Parsed : c:\documents and settings\all users\application data\microsoft\search\data\applications\windows\tm p.edb

----------------------------------------------------------------------------------------------------
Version 9.0.0.114
----------------------------------------------------------------------------------------------------

End of Scan
11/4/2009 4:47:33 PM

Your System Information :
MEMORY FREE: 2097152
MEMORY TOTAL: 2097152
VIRTUAL FREE: 1959224
VIRTUAL TOTAL: 2097024

[AChen]

Hi Luisduo,

Could you go into safemode and run a scan with RM. Once it completes, repair whatever it detects.

Then perform another scan, this time do NOT repair and attach the scan logs with your next reply.

[luisduo]

Here is the most recent log that was done in safety mode. These are the 3 that never seem to get repaired.

----------------------------------------------------------------------------------------------------
Version 9.0.0.114
----------------------------------------------------------------------------------------------------
Engine: 3.0.0.854
----------------------------------------------------------------------------------------------------
Start of Scan
05/11/2009 9:51:04 AM

Your System Information :
CPU: Intel Pentium
IE: 8.0.6001.18702
MEMORY FREE: 2097152
MEMORY TOTAL: 2097152
VIRTUAL FREE: 1976620
VIRTUAL TOTAL: 2097024
Windows XP 5.1 (2600) Professional Edition Service Pack 3.0
----------------------------------------------------------------------------------------------------
Running processes: Process ID
----------------------------------------------------------------------------------------------------
[System Process] 0
System 4
smss.exe 572
csrss.exe 636
winlogon.exe 660
services.exe 704
lsass.exe 716
svchost.exe 868
svchost.exe 948
MsMpEng.exe 1060
svchost.exe 1152
svchost.exe 1180
svchost.exe 1328
aawservice.exe 1404
explorer.exe 1632
RegMech.exe 468
----------------------------------------------------------------------------------------------------
Sections Scanned:
----------------------------------------------------------------------------------------------------
DEEP - 1
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FamilySafety
Value : DatFile = C:\Program Files\Windows Live\Family Safety\fss.dat
Parsed : c:\program files\windows live\family safety\fss.dat

DEEP - 2
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OneCare Protection\Exclusions\Paths
Value : C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Wi ndows.edb = 00000000
Parsed : c:\documents and settings\all users\application data\microsoft\search\data\applications\windows\wi ndows.edb

DEEP - 3
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OneCare Protection\Exclusions\Paths
Value : C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tm p.edb = 00000000
Parsed : c:\documents and settings\all users\application data\microsoft\search\data\applications\windows\tm p.edb

----------------------------------------------------------------------------------------------------
Version 9.0.0.114
----------------------------------------------------------------------------------------------------

End of Scan
05/11/2009 9:51:29 AM

Your System Information :
MEMORY FREE: 2097152
MEMORY TOTAL: 2097152
VIRTUAL FREE: 1976620
VIRTUAL TOTAL: 2097024

[AChen]

Could you please do the following:

1. Open Registry Mechanic
2. Select "Options"
3. Select "Settings"
4. Select "Ignore Lists"
5. Select "Values" (it should be selected by default)
6. Copy and paste the following line of text in the field directly above the "Add" & "Remove" tabs

c:\program files\windows live\
c:\documents and settings\all users\application data\microsoft\search\data\applications\windows\

7. Select "Add" (you will see the text appear in the "Values" area)
8. Select "Save" (you will need to select 'Yes' to confirm)
9. Perform a full scan with Registry Mechanic