Everything is GONE

Discussion in 'ProcessGuard' started by Dazed_and_Confused, Jun 10, 2004.

Thread Status:
Not open for further replies.
  1. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Just rebooted my PC, and for some reason PG is not working. :mad: Two program screens are completely blank. Here is what the text log says:


    10 Jun 20:05:52 - Initializing Process Guard over 2 steps. If either step fails some protection may not be active.
    10 Jun 20:05:52 - [1 of 2] Failure: Driver is not correctly installed or active.
    10 Jun 20:05:53 - [2 of 2] Success: Process Guard's Protection is currently Enabled.
    10 Jun 20:05:53 - General Protection Options
    10 Jun 20:05:53 - [1 of 4] Block End-Task is disabled.
    10 Jun 20:05:53 - [2 of 4] Block Appinit registry key is disabled.
    10 Jun 20:05:53 - [3 of 4] Block Drivers/Services is disabled.
    10 Jun 20:05:53 - [4 of 4] Block Global Hooks is disabled.


    Fortunately I made copies of the two dat (pghash.dat and pguard.dat) files. I copied them back into the ProcessGuard directory, but still does not work. What is this about Driver not installed or active? o_O How do I fix this??
     
    Last edited: Jun 10, 2004
  2. Rui

    Rui Registered Member

    Joined:
    Mar 28, 2004
    Posts:
    141
    Location:
    Portugal
    HI Dazed and Confused

    Apparently your ProcessGuard installation got corrupted, so you will have to uninstall it and reinstall it again.
    To uninstall follow these instructions given by Gavin from DCS on another thread;

    1) Reboot your operating system into SAFE-MODE. To do this Reboot your machine, and just after your BIOS screen disappears keep pressing the F8 key. A menu should appear, select "Safe Mode" and press Enter.
    2) Run Process Guard's uninstall utility. You can see this from the Start Menu -> Process Guard -> Uninstall.
    3) To verify the removal, make sure procguard.sys does not exist in (c:\windows\system32\drivers) directory, and that procguard.dll and pguard.dat are not in your system32 directory (c:\windows\system32). If they still exist delete them.
    4) Reboot your machine and Process Guard should now be removed.

    Now, reinstall PGuard again and close it. Place your saved file "pguard.dat" in directory C:\WINDOWS\system32, thus replacing the one already existing there, and put by new installation. Rebooot.

    Hope this will solve your problem.

    Regards

    Rui
     
  3. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    Since you have backups of pghash.dat and pguard.dat, I would try uninstalling/reinstalling PG. I would also take a look at your Event Logs for other Application and System failures.

    If you don't do bootlogging, you should enable it. It can help in showing what drivers are loaded or not loaded, and in what order, at system startup.

    Nick
     
    Last edited: Jun 10, 2004
  4. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Thanks, Rui. I'll give it a try, but I was hoping I wasn't going to have to do that. That is really a pain. :mad: I sure would like to know what causes this. I have seen others say here they had similar problems that caused reinstallation to be necessary. It's obviously a bug that needs to be addressed. Sorry folks from DCS, but if this is going to constatly be a problem, I'm going to ditch it and try a competing application.
     
  5. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Uh Oh. Now your scaring me Nick. Where do I find the event logs your referring to (XP Home)?
     
  6. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    Go to Control Panel, Administrative Tools, and open Event Viewer.

    Nick
     
  7. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Thanks, Nick. Never used this before. Only two errors that I can find, and they seem unrelated. #1 below has apparently been occurring regularly since April. And I restarted the PC after I encountered problem #2 (I do remember having this problem).

    #1

    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/10/2004
    Time: 7:35:35 PM
    User: N/A
    Computer: HOME
    Description:
    The ASPI32 service failed to start due to the following error:
    The system cannot find the file specified.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    EDIT: Did a search of the net regarding the above error. It is unrelated to the problem, and does not affect my PC because I am not using SCSI.

    #2

    Event Type: Error
    Event Source: Application Hang
    Event Category: (101)
    Event ID: 1002
    Date: 6/10/2004
    Time: 7:06:14 PM
    User: N/A
    Computer: HOME
    Description:
    Hanging application MSIMN.EXE, version 6.0.2800.1123, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 41 70 70 6c 69 63 61 74 Applicat
    0008: 69 6f 6e 20 48 61 6e 67 ion Hang
    0010: 20 20 4d 53 49 4d 4e 2e MSIMN.
    0018: 45 58 45 20 36 2e 30 2e EXE 6.0.
    0020: 32 38 30 30 2e 31 31 32 2800.112
    0028: 33 20 69 6e 20 68 75 6e 3 in hun
    0030: 67 61 70 70 20 30 2e 30 gapp 0.0
    0038: 2e 30 2e 30 20 61 74 20 .0.0 at
    0040: 6f 66 66 73 65 74 20 30 offset 0
    0048: 30 30 30 30 30 30 30 0000000
     
    Last edited: Jun 10, 2004
  8. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    I've had the same ASPI32 error since upgrading Nero a couple of months ago. Not a big deal. Outlook Express did crash. It is one of the apps protected by PG by default. But that might not mean anything.

    This link will help in generating a bootlog:

    Boot Logging

    Nick
     
    Last edited: Jun 10, 2004
  9. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,301
    Location:
    Kent. UK by the sea
    Hi, Dazed_and_Confused

    MSIMN.EXE = e.mail

    No need to uninstall.
    No need to go to safe mode.
    Just end process [DCSUseProt.exe] or [procguard.exe] in Task Manager.
    And replace the files in windows\system32 with your backup's

    It the old Gray PG and RedX again:- #10

    Take Care,
    TheQuest :cool:
     
  10. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Thanks, Quest. Can't seem to end DCSUseProt.exe. Access denied. Explorer will not let me replace the files. I tried restarting the PC, but I guess this process starts automatically.

    How can I end this process?
     
  11. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,301
    Location:
    Kent. UK by the sea
    Hi, Dazed_and_Confused

    Sorry.

    Click>Exit Process Guard in sys tray.

    Then do the above and reboot.

    Take Care,
    TheQuest :cool:

    PS: Best to disconnect. [internet]
     
  12. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Did that. That didn't do the trick. :doubt: I went ahead and rebooted into Safe mode and replaced files in System32 directory. I guess when I originally stated that I replaced pghash.dat and pguard.dat, I didn't replace the correct ones (in System 32). :oops: Safe mode allowed me to copy the files.

    Everything seems back to normal. Didn't have to uninstall/reinstall after all. That's a relief. But I sure am glad I made copies of the system32 files. :rolleyes:

    I would still like to understand what caused this. I guess I'm going to make a regular practice of backing up these files?!? o_O

    Thanks to everyone. :D
     
  13. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,301
    Location:
    Kent. UK by the sea
    Hi, Dazed_and_Confused

    I'm Confused now, always worked for me. :(

    Used to go in safe mode but started it the other way and worked. :doubt:

    Never mind glad it working again. :D

    Take care,
    TheQuest :cool:
     
  14. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    Do you do any user switching or logging off then logging back on?
     
  15. hojtsy

    hojtsy Registered Member

    Joined:
    Dec 28, 2003
    Posts:
    351
  16. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    No. Only one user account on this PC - mine. :)
     
  17. Minix

    Minix Registered Member

    Joined:
    May 27, 2004
    Posts:
    3
    Hello,

    today I had exactly the same problem (first time) with PG after a normal reboot. Exactly same log entries. PG disabled. No checksums list. No protection list. But it was not a fake - PG was really disabled (tested).

    After another reboot everything was fine. PG enabled. All protection enabled. Checksums list was there. Protection list was there. Nothing wrong.

    Regards

    System: WinXP Pro SP2 RC1 (system restore and error reporting both disabled), AMD Athlon XP (Barton Core), 512 MB RAM (DDR), Process Guard v2.000 (full)
     
  18. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Hello Minix. Glad to hear all is OK. Apparently this app is not very stable. Be sure to backup the two .dat files listed above that are in your Win32 directory. Some day you might be glad you did! :rolleyes:
     
  19. Rodehard

    Rodehard Registered Member

    Joined:
    Feb 20, 2004
    Posts:
    90
    PG was working like a champ until I locked it with a PW and then unlocked it shortly thereafter. Suddenly my protected apps window was blank and I could not add to the list. Further, PG would launch but refuse to show in the taskbar. I was also able to shut it down with just a click. I have seen other PW problems with similar issues on the forum. I gave up after a dozen att's to install. Uninstalled per forum directions and re installed a dozen times. Each time I either got a DLL failed to copy or a dat file would be missing. I was able to get as far as the PG control panel a couple of times but then the list of protected apps would be blank and I could not add anything. I dont know whats wrong but if I hadnt paid for this I would be dumping it.
     
    Last edited: Jun 13, 2004
  20. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    Dazed and Confused, did you use the password lock feature ?
     
  21. Rodehard

    Rodehard Registered Member

    Joined:
    Feb 20, 2004
    Posts:
    90
    Well, go figure. In my case it turns out that an overly fragmented HD breaks PG. I was beginning to think I was going to have to re install XP till I checked the drive and defragmented it. PG Uninstalled perfectly and re installed like its old self. Try it, Ive been working with computers for years and it took me all day to figure it out.
     
  22. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    No.

    I'll make a point to defrag this evening! Thanks.
     
  23. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,054
    This is interesting. I've been wondering what to test to see if I could duplicate this. Only thing I can't duplicate is a fragmented disk. I use Perfect Disk and run it every night last thing before shutdown. Be interestinig to see how much this does clear up.
     
  24. Rodehard

    Rodehard Registered Member

    Joined:
    Feb 20, 2004
    Posts:
    90
    I was getting all the same errors I have seen posted here by others including the cant find file error when I was looking right at it with explorer. The other bizarre activity had me stumped till that then I thought to check and do a defrag. I’m not sure but I think I was at 45% fragmentation. Anyway, worked perfectly after that and not a blip since. I knew fragmentation would slow things down and am usually right on top of it but never seen this before. Probably need to be quite fragmented for this to happen. I had been working with some heavy graphics creating topographical maps and this caused my drive to reach a level of fragmentation I normally avoid. NTFS by the way. :cool:
     
  25. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    When Process Guard's protection is enabled, any files which need to be protected will be visible in Explorer, etc, but you won't be able to read/modify/delete them. You can of course disable protection in Process Guard and then you will have normal access to those files.
     
Thread Status:
Not open for further replies.