I'm trying to diagnose a problem with Adobe Photoshop Elements, which
installs but doesn't run.
I get an errro "the interface is unknown" and PSE4 wont run.

What worried me now is that hte event viewer won't run either.

I run Sophos antivirus, with Intercheck running continually, and regularly
sweep my PC with SpyBot S&D and Ad-Aware SE. It appears that some shared
file(s) are corrupted, or out of date versions.
My windows CD is XP, not SP2, I kepe up to date via Windows Update which
says I have no updates needed.

Any suggestions welcome !

---------------------------
Event Viewer
---------------------------
Unable to complete the operation on "Security".
The interface is unknown.
---------------------------
OK
---------------------------

Check that the 'Event Log' service is started.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"PAul MAskens" wrote:
| I'm trying to diagnose a problem with Adobe Photoshop Elements, which
| installs but doesn't run.
| I get an errro "the interface is unknown" and PSE4 wont run.
|
| What worried me now is that hte event viewer won't run either.
|
| I run Sophos antivirus, with Intercheck running continually, and regularly
| sweep my PC with SpyBot S&D and Ad-Aware SE. It appears that some shared
| file(s) are corrupted, or out of date versions.
| My windows CD is XP, not SP2, I kepe up to date via Windows Update which
| says I have no updates needed.
|
| Any suggestions welcome !
|
| ---------------------------
| Event Viewer
| ---------------------------
| Unable to complete the operation on "Security".
| The interface is unknown.
| ---------------------------
| OK
| ---------------------------
|
|
|

Paul

I would attack the problem by cleaning the machine of all spyware.

When dealing with a persistent virus / trojan you need to delete system
restore points and not use them as they will contain the virus and put
it back into your system. Turn off System Restore and then turn it back
on so that you only have one restore point until cleaning is
finished. Also run your anti-virus with updated definitions in safe
mode. Sometimes you need to run an anti-virus from a floppy and Trend
offer one that can be used.

Create a new folder named Sysclean (e.g., C:\Program files\Sysclean, or
just a desktop folder).
Download Sysclean.com (http://www.trendmicro.com/download/dcs.asp) and
place it in this folder.

Download the latest Controlled Pattern Release zip
(http://www.trendmicro.com/download/pattern.asp, e.g., lpt123.zip) and
extract its contents to the same folder. See the Readme text file for
additional instructions.

Delete Temporary Internet Files (IE Tools>Internet Options>General)
accepting the option to delete all offline content. Reboot and delete
contents of all TEMP folders and then your Recycle Bin.

Close all running programs including your anti-virus application, go
offline, and run Sysclean. For best results, do nothing with the machine
until the scan completes.

If the scan shows any infections in System Restore files and you're
running WinXP, create a new Restore Point
(Start>Programs>Accessories>System Tools>System Restore), then delete
all but the most recent Restore Point (Start>Programs>Accessories>System
Tools>Disk Cleanup>More options).

Work through the spyware removal programmes etc in turn in safe mode
until you get no results.

Afterwards, update your own anti-virus application and perform another
full system scan.

Install and run HijackThis:
Download HijackThis (Freeware)
http://tomcoyote.com/hjt/

Finally run HijackThis and post the HijackThis log to the HijackThis
forum here:
http://aumha.net/

You will need to register with Aumha to be able to post.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~

"PAul MAskens" <pmaskens@mvps.org> wrote in message
news:uO%23kW9Z$FHA.3392@TK2MSFTNGP14.phx.gbl...
> I'm trying to diagnose a problem with Adobe Photoshop Elements, which
> installs but doesn't run.
> I get an errro "the interface is unknown" and PSE4 wont run.
>
> What worried me now is that hte event viewer won't run either.
>
> I run Sophos antivirus, with Intercheck running continually, and regularly
> sweep my PC with SpyBot S&D and Ad-Aware SE. It appears that some shared
> file(s) are corrupted, or out of date versions.
> My windows CD is XP, not SP2, I kepe up to date via Windows Update which
> says I have no updates needed.
>
> Any suggestions welcome !
>
> ---------------------------
> Event Viewer
> ---------------------------
> Unable to complete the operation on "Security".
> The interface is unknown.
> ---------------------------
> OK
> ---------------------------
>
>
>

Good one, I didn't think the service would be stopped.
But now I get (replace Security with Application or System)
---------------------------
Event Viewer
---------------------------
Unable to complete the operation on "Security".
The interface is unknown.
---------------------------
OK
---------------------------

It's most certainly not OK


"Dave Patrick" <DSPatrick@nospam.gmail.com> wrote in message
news:ulmbNZa$FHA.1312@TK2MSFTNGP09.phx.gbl...
> Check that the 'Event Log' service is started.
>

Very comprehensive Gary, thanks.

I'm not sure it's a virus/trojan. I suspect that either the installer's
screwed up and it thinks some libraries are there that are missing, or I'm
in DLL Hell and the versions of some DLLs are out of sync, possibly registry
in a mess too.

However I'll work through all the steps in order, you're the expert !

> I would attack the problem by cleaning the machine of all spyware.
Done that, using both Ad-Aware and Spybot - both now report nothing.
All I had was tracking cookies, which are gone now.

> When dealing with a persistent virus / trojan you need to delete system
> restore points and not use them as they will contain the virus and put
> it back into your system. Turn off System Restore and then turn it back
> on so that you only have one restore point until cleaning is
> finished.
OK - Done that.

> Also run your anti-virus with updated definitions in safe
> mode. Sometimes you need to run an anti-virus from a floppy and Trend
> offer one that can be used.
My Sophos AV has a run from CD option.
The system is clear.

> Create a new folder named Sysclean (e.g., C:\Program files\Sysclean, or
> just a desktop folder).
> Download Sysclean.com (http://www.trendmicro.com/download/dcs.asp) and
> place it in this folder.
OK done

> Download the latest Controlled Pattern Release zip
> (http://www.trendmicro.com/download/pattern.asp, e.g., lpt123.zip) and
> extract its contents to the same folder. See the Readme text file for
> additional instructions.
OK done - virus pattern lpt$vpn.994 not the spyware pattern.

> Delete Temporary Internet Files (IE Tools>Internet Options>General)
> accepting the option to delete all offline content. Reboot and delete
> contents of all TEMP folders and then your Recycle Bin.
OK, IE Tools> Internet Options> Temporary Internet Files, (Delete Files...),
[] Delete all offline content
Seems to be the same thing but IE6 has a different menu/command structure.

> Close all running programs including your anti-virus application, go
> offline, and run Sysclean. For best results, do nothing with the machine
> until the scan completes.
OK, be back when that's done

> If the scan shows any infections in System Restore files and you're
> running WinXP, create a new Restore Point
> (Start>Programs>Accessories>System Tools>System Restore), then delete
> all but the most recent Restore Point (Start>Programs>Accessories>System
> Tools>Disk Cleanup>More options).
>
> Work through the spyware removal programmes etc in turn in safe mode
> until you get no results.
>
> Afterwards, update your own anti-virus application and perform another
> full system scan.
>
> Install and run HijackThis:
> Download HijackThis (Freeware)
> http://tomcoyote.com/hjt/
>
> Finally run HijackThis and post the HijackThis log to the HijackThis
> forum here:
> http://aumha.net/
>
> You will need to register with Aumha to be able to post.

Don't know what to make of your reply.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"PAul MAskens" wrote:
| Good one, I didn't think the service would be stopped.
| But now I get (replace Security with Application or System)
| ---------------------------
| Event Viewer
| ---------------------------
| Unable to complete the operation on "Security".
| The interface is unknown.
| ---------------------------
| OK
| ---------------------------
|
| It's most certainly not OK

Check http://support.microsoft.com/default.aspx?kbid=884130

- Jeremy

"PAul MAskens" wrote:

> I'm trying to diagnose a problem with Adobe Photoshop Elements, which
> installs but doesn't run.
> I get an errro "the interface is unknown" and PSE4 wont run.
>
> What worried me now is that hte event viewer won't run either.
>
> I run Sophos antivirus, with Intercheck running continually, and regularly
> sweep my PC with SpyBot S&D and Ad-Aware SE. It appears that some shared
> file(s) are corrupted, or out of date versions.
> My windows CD is XP, not SP2, I kepe up to date via Windows Update which
> says I have no updates needed.
>
> Any suggestions welcome !
>
> ---------------------------
> Event Viewer
> ---------------------------
> Unable to complete the operation on "Security".
> The interface is unknown.
> ---------------------------
> OK
> ---------------------------
>
>
>
>

Frustration at the Windows "i've just reported a fault, OK?" dialog
Plus the fault is still there, something seems wrong deep in XP.

Is it possible for a worm (despite the hourly AV updates) to turn off
services?

Possibly. You didn't tell us; is the 'Event Log' service is started?


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"PAul MAskens" wrote:
| Frustration at the Windows "i've just reported a fault, OK?" dialog
| Plus the fault is still there, something seems wrong deep in XP.
|
| Is it possible for a worm (despite the hourly AV updates) to turn off
| services?
|
|

Sorry, yes the service is running, but with no change to the eerror