www.winternals.com ERD commander is an awesome tool, helps change service/device startup values, registry, connect through the network to other machines, chkdsk, etc etc...
Might take a look at that, helps me a TON. Mike -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lyndon Eaton Sent: Thursday, May 20, 2004 11:34 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service I did manage to fix the problem. Here's what I did in-case you get a similar problem: In safe mode you can set services to start manually/automatically/disable - but you can not start services while in safe mode. Norton Internet Security must grab the NIC at quite a low level, as after I disabled the Norton services, the machine still hung on normal boot. So what I wanted to do is uninstall NSI. To do this the Windows Installer needs to be running - which in Safe Mode it does not. To be able to start a service in Safe Mode, you have to edit the registry- HKLM\System\CCS\Control\SafeBoot\Minimal and add a new key by the name of the services registry reference. In my case the Windows Installer Service is MSIServer, so I added a key called MSIServer, and changed the default value to 'Service'. After adding this key in the registry, the next time you boot in SafeMode you are able to start that particular service manually - in my case the Windows Installer. In Add/Remove Programs I could then uninstall NSI, and my system them booted fine! Regards, Lyndon. > -----Original Message----- > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > Sent: 19 May 2004 18:09 > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service > > > While in safe mode, you can disable services and view the event log. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of Lyndon Eaton > > Sent: Wednesday, May 19, 2004 5:17 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service > > > > This is totally off topic but hope you can help! > > > > Client has W2K server, with modem & ADSL. The ADSL > connection has been > > down for a few days so I was going to setup the modem for internet > > access. > > > > Before doing so I installed Norton Internet Security so > that the modem > > connection would be protected. > > > > After the restart the machine sits on 'Preparing Network > Connections' > > screen. I booted in safe mode so that I may un-install > Norton Internet > > Security, but because the Windows Installer service does not run in > > Safe mode I can not uninstall the software. The event viewer also > > shows a lot of services failing to start because the TCP/IP > protocol > > driver has failed to start. > > > > I presume some network driver file has been overwritten or > a registry > > entry changed. Does anybody know what I can do to revive the TCP/IP > > protocol driver? > > > > Many thanks!!! > > Lyndon. > > > > > > > > > > ************************************************ > > Email checked by UKsubnet anti-virus service > > To prevent email abuse & block spam > > contact [EMAIL PROTECTED] > > Tel: +44(0)8712360301 Web: www.uksubnet.net > > Fax: +44(0)8712360300 > > > > Powered by UKsubnet Internet Service Provider > > Business to Business Internet (ISP) > > ************************************************ > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. ************************************************ Email checked by UKsubnet anti-virus service To prevent email abuse & block spam contact [EMAIL PROTECTED] Tel: +44(0)8712360301 Web: www.uksubnet.net Fax: +44(0)8712360300 Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) ************************************************ ************************************************ Email checked by UKsubnet anti-virus service To prevent email abuse & block spam contact [EMAIL PROTECTED] Tel: +44(0)8712360301 Web: www.uksubnet.net Fax: +44(0)8712360300 Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) ************************************************ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
