Fabri

Hi, I guess a problem with Norton could explain the crashes but what about the messages from my firewall? I'm no computer expert... Where could these messages come from if the last log is clean? Thanks

Thanks very much for your help. But I still get messages from my firewall. [application] from your computer wants to send UDP datagram to... Usually, application is "Generic Host Process for Win32 services" or Messenger, but sometimes also "weird" characters such as "P!Ar" or no application is diplayed at all in the Application filename box. Also there seems to be a problem with my firewall as I can't uninstall it (offline and with firewall disabled). When I get those messages, after several clicks on "deny", my computer crashes and restarts. Would it be advisable to reinstall everything to ge

Hi, I've followed your instructions. Please find the latest log below: Logfile of HijackThis v1.99.1 Scan saved at 01:59:55, on 04/03/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe C:\Pro

Hi, Here are the 2 logs. Are we getting closer to a solution? L2Mfix 1.02b Running From: C:\Documents and Settings\Fabrice\Bureau\l2mfix RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above Copyright © 1999-2001 Frank Heyne Software (http://www.heysoft.de) This program is Freeware, use it on your own risk! Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify: (ID-NI) ALLOW Read BUILTIN\Utilisateurs (ID-IO) ALLOW Read BUILTIN\Utilisateurs (ID-NI) ALLOW Full access BUILTIN\Administrateurs (ID-IO) AL

Hi, The contents of the log are as follows: L2MFIX find log 1.02b These are the registry keys present ******************************************************************************** ** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] "DLLName"="Ati2evxx.dll" "Asynchronous"=dword:00000000 "Impersonate"=dword:00000001 "Lock"="AtiLockEvent" "Logoff"="AtiLogoffEvent" "Logon"="AtiLogonEvent" "Disconnect"="AtiDisConnectE

Hi, The contents of the log are as follows: L2MFIX find log 1.02b These are the registry keys present ******************************************************************************** ** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] "DLLName"="Ati2evxx.dll" "Asynchronous"=dword:00000000 "Impersonate"=dword:00000001 "Lock"="AtiLockEvent" "Logoff"="AtiLogoffEvent" "Logon"="AtiLogonEvent" "Disconnect"="AtiDisConnectE

Hi, I keep getting messages from my firewall such as [application] wants to send UDP datagram to... or "someone wants to connect to port... owned by Internet Explorer. I've run AdAware and seeked advice from DiamondCS Support. They only found one suspicious file that turned out to be clean (nothing suspicious from my startups). Any advice? Thanks in advance Logfile of HijackThis v1.99.1 Scan saved at 08:29:54, on 01/03/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.