Norton 360 problem with XP

On Mon, 1 Feb 2010 17:32:48 -0500, "Daave" wrote:

Inline.

JeanPaulo wrote:
On Sat, 30 Jan 2010 10:24:58 -0500, "Daave" wrote:


Weirdly, I set an Explorer page to the directory, and the 'bad file'
is NOT there at all.

So, when and where this Lightningsand.cfd file is created ?


Ask other Norton users is the only advice I can offer.

I am not sure at all that it IS a norton file.

I had a directory showing there all day yesterday. It never showed
that damned file.
However, this morning an auto chkdsk showed this file as damaged
(between shutdown and reboot !!!)

I am getting mad!




Here is the proper location for the hosts file:

C:\WINDOWS\system32\drivers\etc

Is this what you are referring to?
I know. I have a file there, containing MY false addresses, and I do
have a program checking every days that is was NOT modified

However, the detected HOSTS file was in /windows, and was 36 K
mine is 34 K

How large is your hosts file and what was the date it was last modified?

FWIW, I use the hosts file from he

http://www.mvps.org/winhelp2002/hosts.htm

The last time I updated it was December 10. Both MBAM and Avira come up
negative when they scan it. Interestingly, back in December, Avira wound
up detecting a false positive in it! The name of the supposed infection:

HTML/Rce.Gen HTML script virus


here is the Malware line :
E:\WINDOWS\hosts (Trojan.Agent) - Not selected for removal.
(I wanted to have a look at it first)
Thanks

On Mon, 1 Feb 2010 17:32:48 -0500, "Daave" wrote:

Inline.

JeanPaulo wrote:
On Sat, 30 Jan 2010 10:24:58 -0500, "Daave" wrote:

But IMO, it is logical to cut your losses. I wouldn't keep Norton
360; there are far too many reports of unsatisfied users to justify
sticking with this problematic suite. The following combination (all
free programs) would be an excellent substitution:

1. Windows Firewall (part of Windows XP)

2. Avira Antivir (antivirus)

3. MalwareBytes' Anti-Malware and SUPERAntiSpyware (otherantimalware
programs)

Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

JeanPaulo wrote:
On Mon, 1 Feb 2010 17:32:48 -0500, "Daave" wrote:

Inline.

JeanPaulo wrote:
On Sat, 30 Jan 2010 10:24:58 -0500, "Daave"
wrote:

But IMO, it is logical to cut your losses. I wouldn't keep Norton
360; there are far too many reports of unsatisfied users to justify
sticking with this problematic suite. The following combination
(all free programs) would be an excellent substitution:

1. Windows Firewall (part of Windows XP)

2. Avira Antivir (antivirus)

3. MalwareBytes' Anti-Malware and SUPERAntiSpyware
(otherantimalware programs)

Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

I know it was hard for you to break away from Norton, but I think you
did yourself a big favor in the long run. Glad to help. And happy
computing!

On Wed, 3 Feb 2010 07:23:09 -0500, "Daave" wrote:

JeanPaulo wrote:
On Mon, 1 Feb 2010 17:32:48 -0500, "Daave" wrote:

Inline.


Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

I know it was hard for you to break away from Norton, but I think you
did yourself a big favor in the long run. Glad to help. And happy
computing!


Too bad. I just had the same problem again, with a 'Avguard.tmp' file
corrupted (always this index $I30 ??) although I am not certain that
there was not a system freeze (unknown reason) before shutdown.

I am waiting for more facts. But I guess Norton was not really bad!

JeanPaulo wrote:
On Wed, 3 Feb 2010 07:23:09 -0500, "Daave" wrote:

JeanPaulo wrote:
On Mon, 1 Feb 2010 17:32:48 -0500, "Daave"
wrote:

Inline.


Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

I know it was hard for you to break away from Norton, but I think you
did yourself a big favor in the long run. Glad to help. And happy
computing!


Too bad. I just had the same problem again, with a 'Avguard.tmp' file
corrupted (always this index $I30 ??) although I am not certain that
there was not a system freeze (unknown reason) before shutdown.

What exactly is the problem again? One of the problems with a thread
this long is that it is easy to lose track of pertinent events. In your
first post, you stated:

Second, every 5 or so reboot, I get weird 'Disk Errors'

Is this your problem still? It would be helpful to give us the complete
message and anything else that you deem pertinent.

You did run the Norton removal tool, correct?

Also, check the Event Viewer for errors.

One thing you can try is running Ccleaner and then reboot.

Also, these pages may have useful info:

http://forum.avira.com/wbb/index.php...&postID=791899

http://forum.avira.de/wbb/index.php?...&postID=784685

I am waiting for more facts.

Facts would be helpful, yes!

But I guess Norton was not really bad!

You *could* always reinstall it. But since so many users have reported
issues with Norton 360, I couldn't recommend doing this. Your call, of
course. (I am aware that the *newest* version of Norton has received
better reviews with regard to performance issues and conflicts.)

If this problem never goes away, you might want to consider a Clean
Install. Although it's time-consuming, sometimes it is the best course
of action.

Ok, le'st try just the main facts.

This IS a clean install. I changed my system disk (and bought a new
one) because I had the problem, and Seagate told me that my disk was
failling!

I did last a total remove of Norton 360 (including Symantec and Norton
remaining directories)

So the story is that since November, I keep getting those disk errors,
almost always at the same place, but on a different unit, a new
system, and Avira instead of Norton.

Five different AV did not find any 'working' bug (Avira found one a
bit doubtful in a rarely used program)

I cannot get the exact error message in chkdsk (Where is the log ?),
and it always says that Index $I30 is corrupt (I am doubting that this
is usefull information, though, without more data)

The problem ALWAYS occurs after shutdown, and the file seems to be
always 'temporary' or 'logging' type (Like Avguard.tmp last time)

I am not even considering going back to Norton yet (It is working fine
on a Notebook, a bit slow and too 'user do not need to know' for my
taste.

I have yet to try Cccleaner (and a bit afraid to do it!)

Thanks for the help.

On Wed, 3 Feb 2010 08:58:30 -0500, "Daave" wrote:

JeanPaulo wrote:
On Wed, 3 Feb 2010 07:23:09 -0500, "Daave" wrote:

JeanPaulo wrote:
On Mon, 1 Feb 2010 17:32:48 -0500, "Daave"
wrote:

Inline.


Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

I know it was hard for you to break away from Norton, but I think you
did yourself a big favor in the long run. Glad to help. And happy
computing!


Too bad. I just had the same problem again, with a 'Avguard.tmp' file
corrupted (always this index $I30 ??) although I am not certain that
there was not a system freeze (unknown reason) before shutdown.

What exactly is the problem again? One of the problems with a thread
this long is that it is easy to lose track of pertinent events. In your
first post, you stated:

Second, every 5 or so reboot, I get weird 'Disk Errors'

Is this your problem still? It would be helpful to give us the complete
message and anything else that you deem pertinent.

You did run the Norton removal tool, correct?

Also, check the Event Viewer for errors.

One thing you can try is running Ccleaner and then reboot.

Also, these pages may have useful info:

http://forum.avira.com/wbb/index.php...&postID=791899

http://forum.avira.de/wbb/index.php?...&postID=784685

I am waiting for more facts.

Facts would be helpful, yes!

But I guess Norton was not really bad!

You *could* always reinstall it. But since so many users have reported
issues with Norton 360, I couldn't recommend doing this. Your call, of
course. (I am aware that the *newest* version of Norton has received
better reviews with regard to performance issues and conflicts.)

If this problem never goes away, you might want to consider a Clean
Install. Although it's time-consuming, sometimes it is the best course
of action.

JeanPaulo wrote:
Ok, le'st try just the main facts.

This IS a clean install. I changed my system disk (and bought a new
one) because I had the problem, and Seagate told me that my disk was
failling!

It may not be clean enough. :-) The reason: You had installed Norton on
it afterwards.

I did last a total remove of Norton 360 (including Symantec and Norton
remaining directories)

The term "total remove" is unclear. What exactly did you do?

So the story is that since November, I keep getting those disk errors,
almost always at the same place, but on a different unit, a new
system, and Avira instead of Norton.

We need to know what the errors are. You need to include the complete
text and all other pertinent information (like when do they occur -- for
instance, after a particular action on your part).

Five different AV did not find any 'working' bug (Avira found one a
bit doubtful in a rarely used program)

What did it find?

I cannot get the exact error message in chkdsk (Where is the log ?),
and it always says that Index $I30 is corrupt (I am doubting that this
is usefull information, though, without more data)

Chkdsk log:

http://www.cpucare.com/how-to-faqs/O...%20Results.htm

And while you are in Event Viewer, search for other errors (sort by
Type). You may click on the Copy button on the right and paste that
information into a future post. It will look like this:

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1002
Date: 8/13/2009
Time: 11:11:55 AM
User: N/A
Computer: DAVETOM-II
Description:
The shell stopped unexpectedly and Explorer.exe was restarted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The problem ALWAYS occurs after shutdown, and the file seems to be
always 'temporary' or 'logging' type (Like Avguard.tmp last time)

Describe what happens in detail, making sure you include the complete
text of any messages you see.

I am not even considering going back to Norton yet (It is working fine
on a Notebook, a bit slow and too 'user do not need to know' for my
taste.

I have yet to try Cccleaner (and a bit afraid to do it!)

No need to be afraid of Cleaner as long as you avoid its Registry
section. All it does is provide an effective way to delete temp files.
If you don't want to use Cleaner, then you need to do the following:

Start | All Programs | Accessories | System Tools | Disk Cleanup

The only boxes you need checked a

Temporary Internet Files
Temp Files

(But I prefer the simplicity of Ccleanner. YMMV.)

Final thought: It is unlikely, but there is a very slight possibility
that *both* hard drives are bad. If you perform a Clean Install (and I
do mean Clean), the errors should go away. If not, I'd have to say the
new drive is also bad. Info on performing a Clean Install:

http://michaelstevenstech.com/cleanxpinstall.html

Thanks for the help.

YW.


On Wed, 3 Feb 2010 08:58:30 -0500, "Daave" wrote:

JeanPaulo wrote:
On Wed, 3 Feb 2010 07:23:09 -0500, "Daave"
wrote:

JeanPaulo wrote:
On Mon, 1 Feb 2010 17:32:48 -0500, "Daave"
wrote:

Inline.


Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

I know it was hard for you to break away from Norton, but I think
you did yourself a big favor in the long run. Glad to help. And
happy computing!


Too bad. I just had the same problem again, with a 'Avguard.tmp'
file corrupted (always this index $I30 ??) although I am not
certain that there was not a system freeze (unknown reason) before
shutdown.

What exactly is the problem again? One of the problems with a thread
this long is that it is easy to lose track of pertinent events. In
your first post, you stated:

Second, every 5 or so reboot, I get weird 'Disk Errors'

Is this your problem still? It would be helpful to give us the
complete message and anything else that you deem pertinent.

You did run the Norton removal tool, correct?

Also, check the Event Viewer for errors.

One thing you can try is running Ccleaner and then reboot.

Also, these pages may have useful info:

http://forum.avira.com/wbb/index.php...&postID=791899

http://forum.avira.de/wbb/index.php?...&postID=784685

I am waiting for more facts.

Facts would be helpful, yes!

But I guess Norton was not really bad!

You *could* always reinstall it. But since so many users have
reported issues with Norton 360, I couldn't recommend doing this.
Your call, of course. (I am aware that the *newest* version of
Norton has received better reviews with regard to performance issues
and conflicts.)

If this problem never goes away, you might want to consider a Clean
Install. Although it's time-consuming, sometimes it is the best
course of action.

Daave wrote:
JeanPaulo wrote:

I have yet to try Cccleaner (and a bit afraid to do it!)

No need to be afraid of Cleaner as long as you avoid its Registry
section. All it does is provide an effective way to delete temp files.
If you don't want to use Cleaner, then you need to do the following:

Ccleaner is what I meant!

Start | All Programs | Accessories | System Tools | Disk Cleanup

The only boxes you need checked a

Temporary Internet Files
Temp Files

(But I prefer the simplicity of Ccleanner. YMMV.)

On Wed, 3 Feb 2010 10:37:11 -0500, "Daave" wrote:

JeanPaulo wrote:

Sorry for this lenghty post !

Ok, le'st try just the main facts.

This IS a clean install. I changed my system disk (and bought a new
one) because I had the problem, and Seagate told me that my disk was
failling!

It may not be clean enough. :-) The reason: You had installed Norton on
it afterwards.

I did last a total remove of Norton 360 (including Symantec and Norton
remaining directories)

The term "total remove" is unclear. What exactly did you do?

I used the Norton remover tool, and then checked and deleted any
Symantec or Norton files.

I also used Ccleaner to check Registry last.

So the story is that since November, I keep getting those disk errors,
almost always at the same place, but on a different unit, a new
system, and Avira instead of Norton.

We need to know what the errors are. You need to include the complete
text and all other pertinent information (like when do they occur -- for
instance, after a particular action on your part).

OK, now I see how to check the errors. There are plenty of entries...

Five different AV did not find any 'working' bug (Avira found one a
bit doubtful in a rarely used program)

What did it find?
a tr_dropper.gen in two files which have been executed since the
re-install.

The others are totaly irrelevant (a Hosts file, and a dummy text
Love.eml giving the specific about the old 'love' virus)

Nothing in the 'system' area.

I cannot get the exact error message in chkdsk (Where is the log ?),
and it always says that Index $I30 is corrupt (I am doubting that this
is usefull information, though, without more data)

Chkdsk log:

http://www.cpucare.com/how-to-faqs/O...%20Results.htm

And while you are in Event Viewer, search for other errors (sort by
Type). You may click on the Copy button on the right and paste that
information into a future post. It will look like this:

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1002
Date: 8/13/2009
Time: 11:11:55 AM
User: N/A
Computer: DAVETOM-II
Description:
The shell stopped unexpectedly and Explorer.exe was restarted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

ok. Here is the entry
wuauclt (2412) Une tentative d'ouverture du fichier
"E:\WINDOWS\SoftwareDistribution\DataStore\Logs\tm p.edb" pour accès en
lecture/écriture a échoué en indiquant l'erreur système 1392
(0x00000570) : "Le fichier ou le répertoire est endommagé et
illisible. ". L'opération d'ouverture de fichier échouera en indiquant
l'erreur -1022 (0xfffffc02).

Pour plus d'informations, consultez le centre Aide et support à
l'adresse http://go.microsoft.com/fwlink/events.asp.

wuauclt (216) Impossible d'écrire un en-tête de sauvegarde pour le
fichier E:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp .edb. Erreur
-1022.

and here is the winlogon entry after the last problem (This MAY not be
the same problem, as I had a system lock and had to hard reboot the
system)

Vérification du système de fichiers sur E:
Le type du système de fichiers est NTFS.
Le nom de volume est SEA_W98_D.



L'intégrité de l'un de vos disques doit être vérifiée.
Vous pouvez annuler cette vérification, mais son exécution est
fortement recommandée.
Windows va maintenant vérifier le disque.
L'enregistrement d'attribut de type 0x80 et de balise d'instance 0x3 a
un lien croisé
qui commence à 0x44be3 pour 0x4 clusters éventuels.
L'enregistrement d'attribut de type 0x80 et de balise d'instance 0x3 a
un lien croisé
qui commence à 0x44be3 pour 0x4 clusters éventuels.
Certains clusters occupés par l'attribut de type 0x80 et de balise
d'instance 0x3
dans le fichier 0x3c5 sont déjà utilisés.
Suppression de l'enregistrement d'attribut endommagé (128, "")
du segment d'enregistrement de fichier 965.
La référence de fichier 0x11a0000000000bc de l'entrée d'index
LightningSand.CFD de l'index $I30
avec le parent 0x7e75 n'est pas la même que 0x1190000000000bc.
Suppression de l'entrée d'index LightningSand.CFD dans l'index $I30 du
fichier 32373.
La référence de fichier 0x11a0000000000bc de l'entrée d'index
LIGHTN~1.CFD de l'index $I30
avec le parent 0x7e75 n'est pas la même que 0x1190000000000bc.
Suppression de l'entrée d'index LIGHTN~1.CFD dans l'index $I30 du
fichier 32373.
Nettoyage en cours de petites incohérences sur le lecteur.
CHKDSK récupère les fichiers perdus.
Récupération du fichier orphelin SYMEFA1.DB (188) dans le fichier de
répertoire 30729.
Récupération du fichier orphelin A0060443.lnk (411) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060444.lnk (415) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060445.lnk (433) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060446.lnk (437) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060450.lnk (466) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060452.lnk (478) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060451.lnk (628) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060449.lnk (638) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060440.lnk (651) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A00604~1.MAN (966) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060478.manifest (966) dans le
fichier de répertoire 1058.
Récupération du fichier orphelin A0060479.dll (974) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060441.lnk (1047) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060442.lnk (1063) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin rp.log (1092) dans le fichier de
répertoire 1058.
Récupération du fichier orphelin snapshot (1096) dans le fichier de
répertoire 1058.
Récupération du fichier orphelin RESTOR~1 (2292) dans le fichier de
répertoire 1058.
Récupération du fichier orphelin RestorePointSize (2292) dans le
fichier de répertoire 1058.
Récupération du fichier orphelin A0060447.lnk (32118) dans le fichier
de répertoire 1058.
Récupération du fichier orphelin A0060448.lnk (32174) dans le fichier
de répertoire 1058.
Nettoyage en cours de 18 entrées d'index inutilisées à partir de
l'index $SII du fichier 0x9.
Nettoyage en cours de 18 entrées d'index inutilisées à partir de
l'index $SDH du fichier 0x9.
Nettoyage en cours de 18 descripteurs de sécurité non utilisés.
Insertion d'un attribut de données dans le fichier 965.
CHKDSK vérifie le journal USN...
Vérification du journal USN terminée.
Correction des erreurs dans l'attribut BITMAP de la table de fichiers
maîtres (MFT).
Correction des erreurs dans le carte du volume.
Windows a effectué des corrections sur le système de fichiers.

41632415 Ko d'espace disque au total.
9738224 Ko dans 41691 fichiers.
13704 Ko dans 3719 index.
32 Ko dans des secteurs défectueux.
207771 Ko utilisés par le système.
65536 Ko occupés par le fichier journal.
31672684 Ko disponibles sur le disque.

4096 octets dans chaque unité d'allocation.
10408103 unités d'allocation au total sur le disque.
7918171 unités d'allocation disponibles sur le disque.

Informations internes :
a0 1f 02 00 6e b1 00 00 1c e9 00 00 00 00 00 00 ....n...........
c1 00 00 00 02 00 00 00 54 02 00 00 00 00 00 00 ........T.......
8e 44 33 04 00 00 00 00 5a b9 a8 16 00 00 00 00 .D3.....Z.......
c4 d6 28 05 00 00 00 00 00 00 00 00 00 00 00 00 ..(.............
00 00 00 00 00 00 00 00 38 96 a4 28 00 00 00 00 ........8..(....
99 9e 36 00 00 00 00 00 b0 3f 07 00 db a2 00 00 ..6......?......
00 00 00 00 00 c0 5f 52 02 00 00 00 87 0e 00 00 ......_R........

Windows a terminé la vérification de votre disque.
Veuillez patienter pendant le redémarrage de votre ordinateur.

******
and one for the real trouble while Norton was in use

Vérification du système de fichiers sur E:
Le type du système de fichiers est NTFS.
Le nom de volume est SEA_W98_D.


L'intégrité de l'un de vos disques doit être vérifiée.
Vous pouvez annuler cette vérification, mais son exécution est
fortement recommandée.
Windows va maintenant vérifier le disque.
La signature de l'en-tête multi-secteur pour le VCN 0x0 de l'index
$I30
dans le fichier 0x22a est incorrecte.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Correction des erreurs dans l'index $I30 du fichier 554.
La bitmap d'index $I30 dans le fichier 0x22a est incorrecte.
Correction des erreurs dans l'index $I30 du fichier 554.
Le pointeur vers le bas de l'entrée d'index en cours avec la longueur
0x18 n'est pas valide.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff 01 00 00 00 00 00 00 00 ................
00 00 00 00 98 36 e4 10 3a 90 ca 01 ff ff ff ff .....6..:.......
Tri de l'index $I30 du fichier 554.
L'entrée d'index JETBFD5.tmp de l'index $I30 dans le fichier 0x4424
pointe sur un fichier non utilisé 0x19c.
Suppression de l'entrée d'index JETBFD5.tmp dans l'index $I30 du
fichier 17444.
La référence de fichier 0x780a00000000780a de l'entrée d'index
SYMEFA1.DB de l'index $I30
avec le parent 0x7809 n'est pas la même que 0x780f00000000780a.
Suppression de l'entrée d'index SYMEFA1.DB dans l'index $I30 du
fichier 30729.
L'entrée d'index LightningSand.CFD de l'index $I30 dans le fichier
0x7e75 pointe sur un fichier non utilisé 0x18e.
Suppression de l'entrée d'index LightningSand.CFD dans l'index $I30 du
fichier 32373.
L'entrée d'index LIGHTN~1.CFD de l'index $I30 dans le fichier 0x7e75
pointe sur un fichier non utilisé 0x18e.
Suppression de l'entrée d'index LIGHTN~1.CFD dans l'index $I30 du
fichier 32373.
Nettoyage en cours de petites incohérences sur le lecteur.
CHKDSK récupère les fichiers perdus.
Récupération du fichier orphelin A00370~1.MAN (400) dans le fichier
de répertoire 415.
Récupération du fichier orphelin A0037005.manifest (400) dans le
fichier de répertoire 415.
Récupération du fichier orphelin A0037006.dll (405) dans le fichier
de répertoire 415.
Récupération du fichier orphelin UPDATE~1.INF (555) dans le fichier
de répertoire 554.
Récupération du fichier orphelin update_SP3QFE.inf (555) dans le
fichier de répertoire 554.
Récupération du fichier orphelin spcustom.dll (558) dans le fichier
de répertoire 554.
Récupération du fichier orphelin KB955759.CAT (559) dans le fichier
de répertoire 554.
Récupération du fichier orphelin update.exe (561) dans le fichier de
répertoire 554.
Récupération du fichier orphelin updspapi.dll (562) dans le fichier
de répertoire 554.
Récupération du fichier orphelin update.ver (563) dans le fichier de
répertoire 554.
Récupération du fichier orphelin updatebr.inf (564) dans le fichier
de répertoire 554.
Récupération du fichier orphelin eula.txt (565) dans le fichier de
répertoire 554.
Récupération du fichier orphelin branches.inf (566) dans le fichier
de répertoire 554.
L'entrée du flux de données de sécurité au décalage 0x2af0 ne tient
pas
dans la longueur restante, 0x168, d'une page. La valeur minimum est
0x220.

Réparation du segment d'enregistrement du fichier de sécurité.
Suppression d'une entrée d'index avec l'ID 331 à partir de l'index
$SII du fichier 9.
Suppression d'une entrée d'index avec l'ID 332 à partir de l'index
$SII du fichier 9.
Suppression d'une entrée d'index avec l'ID 333 à partir de l'index
$SII du fichier 9.
Suppression d'une entrée d'index avec l'ID 332 à partir de l'index
$SDH du fichier 9.
Suppression d'une entrée d'index avec l'ID 333 à partir de l'index
$SDH du fichier 9.
Remplacement de l'id de sécurité erroné par l'id de sécurité par
défaut pour le fichier 579.
Remplacement de l'id de sécurité erroné par l'id de sécurité par
défaut pour le fichier 584.
Remplacement de l'id de sécurité erroné par l'id de sécurité par
défaut pour le fichier 591.
Nettoyage en cours de 30 entrées d'index inutilisées à partir de
l'index $SII du fichier 9.
Nettoyage en cours de 30 entrées d'index inutilisées à partir de
l'index $SDH du fichier 9.
Nettoyage en cours de 30 descripteurs de sécurité non utilisés.
Bloc miroir descripteur de sécurité différent du
bloc maître descripteur de sécurité au décalage 0x0.
Réparation de la copie miroir de la chaîne de données des descripteurs
de sécurité.
CHKDSK vérifie le journal USN...
Vérification du journal USN terminée.
CHKDSK a découvert de l'espace libre marqué alloué dans la
bitmap de la table de fichiers maîtres (MFT).
Correction des erreurs dans le carte du volume.
Windows a effectué des corrections sur le système de fichiers.

41632415 Ko d'espace disque au total.
10840976 Ko dans 34810 fichiers.
10792 Ko dans 2460 index.
32 Ko dans des secteurs défectueux.
115683 Ko utilisés par le système.
65536 Ko occupés par le fichier journal.
30664932 Ko disponibles sur le disque.

4096 octets dans chaque unité d'allocation.
10408103 unités d'allocation au total sur le disque.
7666233 unités d'allocation disponibles sur le disque.

Informations internes :
40 b8 00 00 a2 91 00 00 5c bf 00 00 00 00 00 00 @.......\.......
31 00 00 00 00 00 00 00 4b 00 00 00 00 00 00 00 1.......K.......
42 af d5 01 00 00 00 00 a0 c8 07 12 00 00 00 00 B...............
b2 e7 0e 02 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 de 9e e7 1d 00 00 00 00 ................
99 9e 36 00 00 00 00 00 f8 3f 07 00 fa 87 00 00 ..6......?......
00 00 00 00 00 40 ae 95 02 00 00 00 9c 09 00 00 .....@..........

Windows a terminé la vérification de votre disque.
Veuillez patienter pendant le redémarrage de votre ordinateur.


The problem ALWAYS occurs after shutdown, and the file seems to be
always 'temporary' or 'logging' type (Like Avguard.tmp last time)

Describe what happens in detail, making sure you include the complete
text of any messages you see.

I am not even considering going back to Norton yet (It is working fine
on a Notebook, a bit slow and too 'user do not need to know' for my
taste.

I have yet to try Cccleaner (and a bit afraid to do it!)

No need to be afraid of Cleaner as long as you avoid its Registry
section. All it does is provide an effective way to delete temp files.
If you don't want to use Cleaner, then you need to do the following:

Start | All Programs | Accessories | System Tools | Disk Cleanup

The only boxes you need checked a

Temporary Internet Files
Temp Files

(But I prefer the simplicity of Ccleanner. YMMV.)

Final thought: It is unlikely, but there is a very slight possibility
that *both* hard drives are bad. If you perform a Clean Install (and I
do mean Clean), the errors should go away. If not, I'd have to say the
new drive is also bad. Info on performing a Clean Install:

http://michaelstevenstech.com/cleanxpinstall.html

OK, I agree that the second drive may also be bad, or worse, that the
mainboard controler might be defective. The only solution to this
would be to buy another....

As for the 'clean' install, I did it from scratch, using the original
CD.
Thanks for the help.

YW.


On Wed, 3 Feb 2010 08:58:30 -0500, "Daave" wrote:

JeanPaulo wrote:
On Wed, 3 Feb 2010 07:23:09 -0500, "Daave"
wrote:

JeanPaulo wrote:
On Mon, 1 Feb 2010 17:32:48 -0500, "Daave"
wrote:

Inline.


Well, I folloed your advice, killed Norton, and installed Avira.
Allright, now,
I am waiting to see what happens...

I know it was hard for you to break away from Norton, but I think
you did yourself a big favor in the long run. Glad to help. And
happy computing!


Too bad. I just had the same problem again, with a 'Avguard.tmp'
file corrupted (always this index $I30 ??) although I am not
certain that there was not a system freeze (unknown reason) before
shutdown.

What exactly is the problem again? One of the problems with a thread
this long is that it is easy to lose track of pertinent events. In
your first post, you stated:

Second, every 5 or so reboot, I get weird 'Disk Errors'

Is this your problem still? It would be helpful to give us the
complete message and anything else that you deem pertinent.

You did run the Norton removal tool, correct?

Also, check the Event Viewer for errors.

One thing you can try is running Ccleaner and then reboot.

Also, these pages may have useful info:

http://forum.avira.com/wbb/index.php...&postID=791899

http://forum.avira.de/wbb/index.php?...&postID=784685

I am waiting for more facts.

Facts would be helpful, yes!

But I guess Norton was not really bad!

You *could* always reinstall it. But since so many users have
reported issues with Norton 360, I couldn't recommend doing this.
Your call, of course. (I am aware that the *newest* version of
Norton has received better reviews with regard to performance issues
and conflicts.)

If this problem never goes away, you might want to consider a Clean
Install. Although it's time-consuming, sometimes it is the best
course of action.

On Thu, 04 Feb 2010 07:00:06 +0100, JeanPaulo
wrote:

On Wed, 3 Feb 2010 10:37:11 -0500, "Daave" wrote:

JeanPaulo wrote:


Just a thought !

My first disk is divided into 4 partitions, XP system on the second
one, and all my data on the third.

I NEVER had any errors on the other three partitions !

Jean Paulo.

JeanPaulo wrote:
On Thu, 04 Feb 2010 07:00:06 +0100, JeanPaulo
wrote:

On Wed, 3 Feb 2010 10:37:11 -0500, "Daave" wrote:

JeanPaulo wrote:


Just a thought !

My first disk is divided into 4 partitions, XP system on the second
one, and all my data on the third.

I NEVER had any errors on the other three partitions !

Jean Paulo.

How many disks do you have? And how does your original disk (the one you
replaced) enter the equation?

On your first disk, XP is apparently on E:. Do you also have another
instance of XP on C:?

Please tell us what is on every single partition you have. So far, all
you have said is that XP is on the "second partition" and data is on the
"third partition." What about the first and fourth partitions? What
about your other disks?

And looking at the other post, it really looks like you did not perform
a proper Clean Install.

Finally, when you say that you have "all [your] data on the third"
partition, is it possible you have installed programs to that partition
as well? (Although having a separate partition for data *only* is not a
bad idea, programs should always be on the same partition as the OS.)

On Jan 30, 12:45*am, JeanPaulo wrote:
On Wed, 27 Jan 2010 07:04:35 +0100, JeanPaulo

wrote:
I have a weird problem with XP and Norton 360. Of course Norton denies
anything to do with it !

After dallying a lot, I am now thinking 'Virus/Trojan'.

After a reboot (not every time, but twice a week), I got the message :

\Documents and Settings\All Users\Application
Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SRTSP\LightningSa*nd.CFD
is corrupted, please run chkdsk...

*As it is a Norton directory, I suspected Norton, but they have been
helpless....

*Then, I do remark :
Norton, Spybot, Adaware do not detect anything wrong.

Hijackthis do not show anything obvious.

*After the chkdsk, the file is GONE. But Norton does not care ...

*(before the chkdsk, the file is not accessible because of the
disk/pointer/directory error)

There are several postes about this file as a virus 'clue', but
nothing really conclusive.

Anyway, the answer to my submission by Seagate was 'Replace the disk'.

I did this, change the system disk and rebuild my whole XP pro
install, and

I stil have the problem here.... (100 € and 1 week of work lost)

If the Norton came with the machine, you should have the ability
to re-install it.I have been dealing with a win32 trojan that running
Malwarebytes in safe mode,and running a boot scan with the
sensitivity at high using Avast5 cleans the machine.
Turning off system restore before the scans seems to do
the most thourough job. Delete the virus chest,
then turn restore back on after the scans.
It is a nasty little bugger that comes with AntivirusPlus,
a totally obnoxious piece of malware crap embedded
in web pages.
MTCW

On Thu, 4 Feb 2010 11:59:36 -0500, "Daave" wrote:

JeanPaulo wrote:
On Thu, 04 Feb 2010 07:00:06 +0100, JeanPaulo
wrote:

On Wed, 3 Feb 2010 10:37:11 -0500, "Daave" wrote:

JeanPaulo wrote:


Just a thought !

My first disk is divided into 4 partitions, XP system on the second
one, and all my data on the third.

I NEVER had any errors on the other three partitions !

Jean Paulo.

How many disks do you have? And how does your original disk (the one you
replaced) enter the equation?

I have two units, one 80 Go Seagate IDE, and a second 1To new Seagate
Sata. I wanted to put the XP system on the Sata, but was unable to
make it work, as my main board does not BIOS recognize Sata.
(Asus A7v8x)

The 'old bad' (Sight!) was a 160 Go Maxtor.

Seatools (Dos) does not see any problems, but (XP tool) does not
work at all (can't even read SMART data)

On your first disk, XP is apparently on E:. Do you also have another
instance of XP on C:?

NO, and no multiboot.

Please tell us what is on every single partition you have. So far, all
you have said is that XP is on the "second partition" and data is on the
"third partition." What about the first and fourth partitions? What
about your other disks?

C is just a small FAT partition usable with DOS stuff and the initial
boot

D is the first partition on the 1 To, and contains data (videos....)
and pictures (This is how the disk are recognized, 1 IDE, then 1 Sata)

E is the system disk and programms (and swap file) (80 Go)

F contains my datas (Access, Office, mails, VB, C), but no programs
except some VB homemade (also on the 80 Go)

G to J are data only disks on the 1To

And looking at the other post, it really looks like you did not perform
a proper Clean Install.

I started from a newly formatted partition, and re-installed
everything, starting from XP, then Norton, then all my usual programms
from the 'setup's files. The old XP system was on the discarded disk.

Finally, when you say that you have "all [your] data on the third"
partition, is it possible you have installed programs to that partition
as well? (Although having a separate partition for data *only* is not a
bad idea, programs should always be on the same partition as the OS.)


No. And my backups are usually only made for this partition.

And as I said, except after some freezing (my DVD player was freezing
XP in some instances, needing a 'hard' reboot), I never had any errors
on the 'data' disk, being the current one or the old 'bad' disk. (I am
fully convinced that it was not a disk problem)

Regards, Jean Paulo.

I installed Norton from the Web files. I would rather like it to be a
trojan, but Norton, Adaware, Spybot, Malwarebytes and last Avira did
not find anything in the system. Now Norton is out, and I am waiting.
I had one bad file problem since, but it may be related to a system
freeze rather than the current problem.

Jsut for the fun, Avira found a trojan in a program that Norton never
detected. I am not certain it is not a false positive, and it has been
removed. All full scans are now 'clean'

I never looked at AntivirusPlus at all.

On Thu, 4 Feb 2010 12:10:11 -0800 (PST),
wrote:

On Jan 30, 12:45*am, JeanPaulo wrote:
On Wed, 27 Jan 2010 07:04:35 +0100, JeanPaulo

wrote:
I have a weird problem with XP and Norton 360. Of course Norton denies
anything to do with it !

After dallying a lot, I am now thinking 'Virus/Trojan'.

After a reboot (not every time, but twice a week), I got the message :

\Documents and Settings\All Users\Application
Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SRTSP\LightningSa*nd.CFD
is corrupted, please run chkdsk...

*As it is a Norton directory, I suspected Norton, but they have been
helpless....

*Then, I do remark :
Norton, Spybot, Adaware do not detect anything wrong.

Hijackthis do not show anything obvious.

*After the chkdsk, the file is GONE. But Norton does not care ...

*(before the chkdsk, the file is not accessible because of the
disk/pointer/directory error)

There are several postes about this file as a virus 'clue', but
nothing really conclusive.

Anyway, the answer to my submission by Seagate was 'Replace the disk'.

I did this, change the system disk and rebuild my whole XP pro
install, and

I stil have the problem here.... (100 € and 1 week of work lost)

If the Norton came with the machine, you should have the ability
to re-install it.I have been dealing with a win32 trojan that running
Malwarebytes in safe mode,and running a boot scan with the
sensitivity at high using Avast5 cleans the machine.
Turning off system restore before the scans seems to do
the most thourough job. Delete the virus chest,
then turn restore back on after the scans.
It is a nasty little bugger that comes with AntivirusPlus,
a totally obnoxious piece of malware crap embedded
in web pages.
MTCW

JeanPaulo wrote:
On Thu, 4 Feb 2010 11:59:36 -0500, "Daave" wrote:

JeanPaulo wrote:
On Thu, 04 Feb 2010 07:00:06 +0100, JeanPaulo
wrote:

On Wed, 3 Feb 2010 10:37:11 -0500, "Daave"
wrote:

JeanPaulo wrote:


Just a thought !

My first disk is divided into 4 partitions, XP system on the second
one, and all my data on the third.

I NEVER had any errors on the other three partitions !

Jean Paulo.

How many disks do you have? And how does your original disk (the one
you replaced) enter the equation?

I have two units, one 80 Go Seagate IDE, and a second 1To new Seagate
Sata. I wanted to put the XP system on the Sata, but was unable to
make it work, as my main board does not BIOS recognize Sata.
(Asus A7v8x)

The 'old bad' (Sight!) was a 160 Go Maxtor.

Seatools (Dos) does not see any problems, but (XP tool) does not
work at all (can't even read SMART data)

On your first disk, XP is apparently on E:. Do you also have another
instance of XP on C:?

NO, and no multiboot.

Please tell us what is on every single partition you have. So far,
all you have said is that XP is on the "second partition" and data
is on the "third partition." What about the first and fourth
partitions? What about your other disks?

C is just a small FAT partition usable with DOS stuff and the initial
boot

D is the first partition on the 1 To, and contains data (videos....)
and pictures (This is how the disk are recognized, 1 IDE, then 1 Sata)

E is the system disk and programms (and swap file) (80 Go)

F contains my datas (Access, Office, mails, VB, C), but no programs
except some VB homemade (also on the 80 Go)

G to J are data only disks on the 1To

And looking at the other post, it really looks like you did not
perform a proper Clean Install.

I started from a newly formatted partition, and re-installed
everything, starting from XP, then Norton, then all my usual programms
from the 'setup's files. The old XP system was on the discarded disk.

Finally, when you say that you have "all [your] data on the third"
partition, is it possible you have installed programs to that
partition as well? (Although having a separate partition for data
*only* is not a bad idea, programs should always be on the same
partition as the OS.)


No. And my backups are usually only made for this partition.

And as I said, except after some freezing (my DVD player was freezing
XP in some instances, needing a 'hard' reboot), I never had any errors
on the 'data' disk, being the current one or the old 'bad' disk. (I am
fully convinced that it was not a disk problem)

Regards, Jean Paulo.

I don't think any of your hard drives are bad, either.

Disregard what I said earlier about it looking like you hadn't performed
a Clean Install. I had erroneously assumed you had performed a *second*
clean install, which of course would have meant there would not have
been any references to lightningsand.cfd.

Are you currently having any problems? That one issue with Avira might
have just been a hiccup. Did you happen to look at these pages?:

http://forum.avira.com/wbb/index.php...&postID=791899

http://forum.avira.de/wbb/index.php?...&postID=784685