Hi when my son signs into his Limted account The foolowing Message comes up
in a Box Device Manager SA 28xx
Fatal error occured
DM will exit
I have tryed to find out what it is but with no joy and i have deleted his
account then crated a new one but i am still getting the message.
I dont get it on any admin accounts.
Please can some one help but Keep it simple and step by step.
Thank you Niall

"Niall" wrote:

> Hi when my son signs into his Limted account The foolowing Message comes up
> in a Box Device Manager SA 28xx
> Fatal error occured
> DM will exit
> I have tryed to find out what it is but with no joy and i have deleted his
> account then crated a new one but i am still getting the message.
> I dont get it on any admin accounts.
> Please can some one help but Keep it simple and step by step.
> Thank you Niall

Can we have the exact wording/verbatim of the error please!
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

HTH,
nass
---
http://www.nasstec.co.uk

On Mon, 6 Oct 2008 10:12:01 -0700, Niall
<Niall@discussions.microsoft.com> wrote:

> Hi when my son signs into his Limted account The foolowing Message comes up
>in a Box Device Manager SA 28xx
> Fatal error occured
> DM will exit
>I have tryed to find out what it is but with no joy and i have deleted his
>account then crated a new one but i am still getting the message.
>I dont get it on any admin accounts.
>Please can some one help but Keep it simple and step by step.
>Thank you Niall

Going by google , could be to do with encryption ?

Hi Nass
I hope this is what you are after Please say yes.. sorry it solong for me to
reply work shifts Thanks Niall
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 07/10/2008
Time: 15:51:30
User: NT AUTHORITY\SYSTEM
Computer: MR-2634FEFEC895
Description:
Windows saved user MR-2634FEFEC895\Rhys registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.


Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 07/10/2008
Time: 15:51:36
User: NT AUTHORITY\SYSTEM
Computer: MR-2634FEFEC895
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: nial
Source Workstation: MR-2634FEFEC895
Error Code: 0xC000006A


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 07/10/2008
Time: 15:51:56
User: MR-2634FEFEC895\Rhys
Computer: MR-2634FEFEC895
Description:
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
within the required timeout.

"nass" wrote:

>
>
> "Niall" wrote:
>
> > Hi when my son signs into his Limted account The foolowing Message comes up
> > in a Box Device Manager SA 28xx
> > Fatal error occured
> > DM will exit
> > I have tryed to find out what it is but with no joy and i have deleted his
> > account then crated a new one but i am still getting the message.
> > I dont get it on any admin accounts.
> > Please can some one help but Keep it simple and step by step.
> > Thank you Niall
>
> Can we have the exact wording/verbatim of the error please!
> Open a Notepad, customize or minimize to the taskbar as you will need it
> later for this step to copy the error message on it.
> Open a run command and type in:
> eventvwr.msc click [OK] you will get the Event viewer control Panel.
> click on each of these:
> Application
> System
> Security
> Look in the right Pane/window for error message with red (X) or Yellow
> exclamation mark /!\ , double click each one to get more info about the
> causer.
> On the Event error properties message you will see:
> Up Arrow
> Down arrow
> Two pages
> Click on the two pages to copy the error message then bring up the Notepad
> you opened earlier and right click on the first line and select Paste from
> the list, this will paste the error message on a Notepad.
> Please don't duplicate the error message one of each kind will be sufficient.
> HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
> http://support.microsoft.com/kb/308427/en-us
>
> HTH,
> nass
> ---
> http://www.nasstec.co.uk
>

Hi Niall,

Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/supe...freevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/d....htm?s_cid=sah

Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

After doing a fill thorough scan can you please confirm these info:
- How many accounts on this machine
- Did you tried to create a new account for Him and delete the Old one
according to the info on this link:
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151
- Do you use an Audit/Group policy to controll access to certain programs
for users on this machine.
- Does this machine connected to a network of machines in the house?
- What limit/permissions assigned to this Limited account?
- Did you chnaged or left the password blank for this limited account?
HTH,
nass
---
http://www.nasstec.co.uk

"Niall" wrote:

> Hi Nass
> I hope this is what you are after Please say yes.. sorry it solong for me to
> reply work shifts Thanks Niall
> Event Type: Warning
> Event Source: Userenv
> Event Category: None
> Event ID: 1517
> Date: 07/10/2008
> Time: 15:51:30
> User: NT AUTHORITY\SYSTEM
> Computer: MR-2634FEFEC895
> Description:
> Windows saved user MR-2634FEFEC895\Rhys registry while an application or
> service was still using the registry during log off. The memory used by the
> user's registry has not been freed. The registry will be unloaded when it is
> no longer in use.
>
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 680
> Date: 07/10/2008
> Time: 15:51:36
> User: NT AUTHORITY\SYSTEM
> Computer: MR-2634FEFEC895
> Description:
> Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Logon account: nial
> Source Workstation: MR-2634FEFEC895
> Error Code: 0xC000006A
>
>
> Event Type: Error
> Event Source: DCOM
> Event Category: None
> Event ID: 10010
> Date: 07/10/2008
> Time: 15:51:56
> User: MR-2634FEFEC895\Rhys
> Computer: MR-2634FEFEC895
> Description:
> The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
> within the required timeout.
>
> "nass" wrote:
>
> >
> >
> > "Niall" wrote:
> >
> > > Hi when my son signs into his Limted account The foolowing Message comes up
> > > in a Box Device Manager SA 28xx
> > > Fatal error occured
> > > DM will exit
> > > I have tryed to find out what it is but with no joy and i have deleted his
> > > account then crated a new one but i am still getting the message.
> > > I dont get it on any admin accounts.
> > > Please can some one help but Keep it simple and step by step.
> > > Thank you Niall
> >
> > Can we have the exact wording/verbatim of the error please!
> > Open a Notepad, customize or minimize to the taskbar as you will need it
> > later for this step to copy the error message on it.
> > Open a run command and type in:
> > eventvwr.msc click [OK] you will get the Event viewer control Panel.
> > click on each of these:
> > Application
> > System
> > Security
> > Look in the right Pane/window for error message with red (X) or Yellow
> > exclamation mark /!\ , double click each one to get more info about the
> > causer.
> > On the Event error properties message you will see:
> > Up Arrow
> > Down arrow
> > Two pages
> > Click on the two pages to copy the error message then bring up the Notepad
> > you opened earlier and right click on the first line and select Paste from
> > the list, this will paste the error message on a Notepad.
> > Please don't duplicate the error message one of each kind will be sufficient.
> > HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
> > http://support.microsoft.com/kb/308427/en-us
> >
> > HTH,
> > nass
> > ---
> > http://www.nasstec.co.uk
> >

Hi Nass
I have got Norton internet security runnnig and i do the windows one care
live full scan once a week also both check for spyware etc and every thing is
upto date. is this enough for scans or do you want me to do some more things
like the Avast cleaner thing?
once i get a reply from you i will start every thing you say but it may be
tommorrow or thursday when i get back to you.

Ps what is this?? i dont understand
Do you use an Audit/Group policy to controll access to certain programs
for users on this machine.

Thanks again Niall

"nass" wrote:

>
> Hi Niall,
>
> Run a thorough scan by doing the following steps:
> 1... First, try to clean up your caches, Internet files and delete cookies
> by doing this:
> Click Start >> Control Panel >> Double click Network and Internet
> Connections >> Double click Internet Options.
> On the IE properties windows you will see these Tabs:
> General | Security | Privacy | Content | Connections | Programs |
> Advanced
> Under General Tab clear your History, Internet Files and Cookies.
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> Then click on Programs Tab and click Manage Add-Ons and Disable all non
> Verified Add-Ons (You should Renable them later one-by-one and see the
> culprit and update it or remove it.
> How to manage Add-Ons:
> http://support.microsoft.com/kb/883256
> Scan for malware from here:
> SuperAntispyware - Free
> http://www.superantispyware.com/supe...freevspro.html
> http://www.malwarebytes.org/rr-update/rr-free-setup.exe
> http://onecare.live.com/site/en-gb/d....htm?s_cid=sah
>
> Run a scan from here on-line:
> http://security.symantec.com/sscv6/d...d=ie&venid=sym
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (offline scanner) from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
> Comodo BOClean : Anti-Malware Version 4.27
> http://www.comodo.com/boclean/boclean.html
>
> After doing a fill thorough scan can you please confirm these info:
> - How many accounts on this machine
> - Did you tried to create a new account for Him and delete the Old one
> according to the info on this link:
> How to Identify a Damaged User Profile and Create a New Profile
> http://support.microsoft.com/kb/811151
> - Do you use an Audit/Group policy to controll access to certain programs
> for users on this machine.
> - Does this machine connected to a network of machines in the house?
> - What limit/permissions assigned to this Limited account?
> - Did you chnaged or left the password blank for this limited account?
> HTH,
> nass
> ---
> http://www.nasstec.co.uk
>
> "Niall" wrote:
>
> > Hi Nass
> > I hope this is what you are after Please say yes.. sorry it solong for me to
> > reply work shifts Thanks Niall
> > Event Type: Warning
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1517
> > Date: 07/10/2008
> > Time: 15:51:30
> > User: NT AUTHORITY\SYSTEM
> > Computer: MR-2634FEFEC895
> > Description:
> > Windows saved user MR-2634FEFEC895\Rhys registry while an application or
> > service was still using the registry during log off. The memory used by the
> > user's registry has not been freed. The registry will be unloaded when it is
> > no longer in use.
> >
> >
> > Event Type: Failure Audit
> > Event Source: Security
> > Event Category: Account Logon
> > Event ID: 680
> > Date: 07/10/2008
> > Time: 15:51:36
> > User: NT AUTHORITY\SYSTEM
> > Computer: MR-2634FEFEC895
> > Description:
> > Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> > Logon account: nial
> > Source Workstation: MR-2634FEFEC895
> > Error Code: 0xC000006A
> >
> >
> > Event Type: Error
> > Event Source: DCOM
> > Event Category: None
> > Event ID: 10010
> > Date: 07/10/2008
> > Time: 15:51:56
> > User: MR-2634FEFEC895\Rhys
> > Computer: MR-2634FEFEC895
> > Description:
> > The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
> > within the required timeout.
> >
> > "nass" wrote:
> >
> > >
> > >
> > > "Niall" wrote:
> > >
> > > > Hi when my son signs into his Limted account The foolowing Message comes up
> > > > in a Box Device Manager SA 28xx
> > > > Fatal error occured
> > > > DM will exit
> > > > I have tryed to find out what it is but with no joy and i have deleted his
> > > > account then crated a new one but i am still getting the message.
> > > > I dont get it on any admin accounts.
> > > > Please can some one help but Keep it simple and step by step.
> > > > Thank you Niall
> > >
> > > Can we have the exact wording/verbatim of the error please!
> > > Open a Notepad, customize or minimize to the taskbar as you will need it
> > > later for this step to copy the error message on it.
> > > Open a run command and type in:
> > > eventvwr.msc click [OK] you will get the Event viewer control Panel.
> > > click on each of these:
> > > Application
> > > System
> > > Security
> > > Look in the right Pane/window for error message with red (X) or Yellow
> > > exclamation mark /!\ , double click each one to get more info about the
> > > causer.
> > > On the Event error properties message you will see:
> > > Up Arrow
> > > Down arrow
> > > Two pages
> > > Click on the two pages to copy the error message then bring up the Notepad
> > > you opened earlier and right click on the first line and select Paste from
> > > the list, this will paste the error message on a Notepad.
> > > Please don't duplicate the error message one of each kind will be sufficient.
> > > HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
> > > http://support.microsoft.com/kb/308427/en-us
> > >
> > > HTH,
> > > nass
> > > ---
> > > http://www.nasstec.co.uk
> > >

"Niall" wrote:

> Hi Nass
> I have got Norton internet security runnnig and i do the windows one care
> live full scan once a week also both check for spyware etc and every thing is
> upto date. is this enough for scans or do you want me to do some more things
> like the Avast cleaner thing?
> once i get a reply from you i will start every thing you say but it may be
> tommorrow or thursday when i get back to you.
>
> Ps what is this?? i dont understand
> Do you use an Audit/Group policy to controll access to certain programs
> for users on this machine.
>
> Thanks again Niall


Yes, run the cleaning steps and download the Avast cleaner and the
anti-malware apps mentioned and run a FULL scan not a quick one!
Audit privilege use
http://technet.microsoft.com/en-us/l.../cc784501.aspx
If you will have time now or in the future read this or just pic the
relevant options:
http://www.microsoft.com/technet/sol.../winxphow.mspx
How To Use the Group Policy Editor to Manage Local Computer Policy in
Windows XP
http://support.microsoft.com/kb/307882

Note: GPO only available for Windows XP professional, if you have XP Home
Edition you will not have this feature.
HTH,
nass
---
http://www.nasstec.co.uk

nass
Thank you very much for your time, is the malware this one Comodo BOClean :
Anti-Malware Version 4.27?
as soon as i have done what you have asked i will get back to you and i have
saved the technet so i can read it every now and again.
Once again thank you very much. Niall


"nass" wrote:

>
>
> "Niall" wrote:
>
> > Hi Nass
> > I have got Norton internet security runnnig and i do the windows one care
> > live full scan once a week also both check for spyware etc and every thing is
> > upto date. is this enough for scans or do you want me to do some more things
> > like the Avast cleaner thing?
> > once i get a reply from you i will start every thing you say but it may be
> > tommorrow or thursday when i get back to you.
> >
> > Ps what is this?? i dont understand
> > Do you use an Audit/Group policy to controll access to certain programs
> > for users on this machine.
> >
> > Thanks again Niall
>
>
> Yes, run the cleaning steps and download the Avast cleaner and the
> anti-malware apps mentioned and run a FULL scan not a quick one!
> Audit privilege use
> http://technet.microsoft.com/en-us/l.../cc784501.aspx
> If you will have time now or in the future read this or just pic the
> relevant options:
> http://www.microsoft.com/technet/sol.../winxphow.mspx
> How To Use the Group Policy Editor to Manage Local Computer Policy in
> Windows XP
> http://support.microsoft.com/kb/307882
>
> Note: GPO only available for Windows XP professional, if you have XP Home
> Edition you will not have this feature.
> HTH,
> nass
> ---
> http://www.nasstec.co.uk
>

Hi Nass
I have done every thing that you have asked to do and nothing has worked i
am still getting the error message.
There was 4 accounts one addmin and 3 ltd with pass words for the boys, i
deleted the ltd a/c's & tryed to redo one ltd but that still came up with the
error.
As for the link on how to identify a damaged profile there is no advance tab
to click on.
I dont have an audit group and the pc is not on a network.
To create an account i just clicked create new a/c and then make ltd and
have tryed both with and without a password.
When i tryed the group audit i followed the instrutions but there was no
Group policy tab in add standalone snap in box.
Please help thanks Niall

"nass" wrote:

>
>
> "Niall" wrote:
>
> > Hi Nass
> > I have got Norton internet security runnnig and i do the windows one care
> > live full scan once a week also both check for spyware etc and every thing is
> > upto date. is this enough for scans or do you want me to do some more things
> > like the Avast cleaner thing?
> > once i get a reply from you i will start every thing you say but it may be
> > tommorrow or thursday when i get back to you.
> >
> > Ps what is this?? i dont understand
> > Do you use an Audit/Group policy to controll access to certain programs
> > for users on this machine.
> >
> > Thanks again Niall
>
>
> Yes, run the cleaning steps and download the Avast cleaner and the
> anti-malware apps mentioned and run a FULL scan not a quick one!
> Audit privilege use
> http://technet.microsoft.com/en-us/l.../cc784501.aspx
> If you will have time now or in the future read this or just pic the
> relevant options:
> http://www.microsoft.com/technet/sol.../winxphow.mspx
> How To Use the Group Policy Editor to Manage Local Computer Policy in
> Windows XP
> http://support.microsoft.com/kb/307882
>
> Note: GPO only available for Windows XP professional, if you have XP Home
> Edition you will not have this feature.
> HTH,
> nass
> ---
> http://www.nasstec.co.uk
>

"Niall" wrote:

> Hi Nass
> I have done every thing that you have asked to do and nothing has worked i
> am still getting the error message.
> There was 4 accounts one addmin and 3 ltd with pass words for the boys, i
> deleted the ltd a/c's & tryed to redo one ltd but that still came up with the
> error.
> As for the link on how to identify a damaged profile there is no advance tab
> to click on.
> I dont have an audit group and the pc is not on a network.
> To create an account i just clicked create new a/c and then make ltd and
> have tryed both with and without a password.
> When i tryed the group audit i followed the instrutions but there was no
> Group policy tab in add standalone snap in box.
> Please help thanks Niall

Send me the new Even Error message been logged recently with your Hijackthis
log and I will see what I can decipher from them!
Download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en...hijackthis.php)

my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk
( _ is underscore)
HTH.
nass
---
http://www.nasstec.co.uk