PDA

View Full Version : XP Pro problems booting


alt234
01-09-2005, 03:12 PM
My computer is having trouble booting. Last night the computer seemed to work fine this morning when I booted up it would get past the loading screen and just freeze up. Strangely it at first only did this when I logged under the account I normally use. An account that my friend uses worked however, it takes a really long time to load everything. Now, I got into safe mode and ran AdAware SE Personal, Spybot S&D, A Squared, and AVG Virus Scan, all fully updated. I also ran Hijack This and did not see anything in my logs that was suspicious. I tried running an online Panda Scan as well, however the page does not seem to be working currently. After I ran the AVG scan I did find a few virus infected files, only 1 or 2 however could be healed. A few of the files could be put in the virus vault but I decided to hold off on that. So, I rebooted and now it just stays on the loading screen for a REALLY long time, I let it go for about 10 minutes before restarting. Then I got back into safe mode and ran AVG again this time putting the virus infected files I could into the virus vault, this still did not constitute all the virus infected files though. The problem is still there, it just stays on the loading screen for a really long time. The only thing I can think of that I changed was that I was playing Guild Wars and it had to download a few things, also I connected into the network at a new college about 3 days ago but it worked fine up until today. All of the virus infected files dealt with Java, so I uninstalled my Java stuff as well as Guild Wars and it still appears to be not working. I also looked in my startup services and programs and nothing seems suspicious there. I still plan on updating whatever drivers I can.

My system specs are:
Windows XP Pro
ASUS K8V Motherboard
Athlon 64 3000+
ATI Radeon 9700
Sound Blaster Audigy
40 Gig 7200 RPM Western Digital HDD

Any ideas?

classicsoftware
01-09-2005, 05:05 PM
Welcome to the http://www.pcguide.com/ubb/pcgubb.gif forums.

Please post the results of the virus scan. What virus was found.

Please post a Hijack this log for review.

Donn
01-09-2005, 05:29 PM
Use any of these on-iline scans:


http://housecall.trendmicro.com/

www.ravantivirus.com/scan/ www.ravantivirus.com/scan)

http://www.bitdefender.com/scan/licence.php

Have you considered dumping the Systen Restore files?

for Win XP:

http://service1.symantec.com/SUPPORT/tsgen...src=sec_doc_nam

alt234
01-10-2005, 12:12 PM
Donn,
Used Housecall before never really seems to fix anything, just tells you what the problem is. I however didn't know about the others, thanks. Also I did dump the restore files already, didn't help.

classicsoftware,
I got Panda scan to work and it removed all viruses, AVG didn't find any either afterward. If you still want me to post a log for it let me know. Here is the HJT log:
Logfile of HijackThis v1.98.2
Scan saved at 11:07:00 AM, on 1/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SYSTEM32\USRmlnkA.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\program files\valve\steam\steam.exe
C:\WINDOWS\SYSTEM32\USRshutA.exe
C:\WINDOWS\SYSTEM32\USRmlnkA.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Grisoft\AVG Free\avgwb.dat
C:\Program Files\mozilla.org\Mozilla\mozilla.exe
C:\HJT\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [USRpdA] C:\WINDOWS\SYSTEM32\USRmlnkA.exe RunServices \Device\3cpipe-USRpdA
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

It appears now that the viruses are gone, the computers start up time is back to normal, however whenever I try to boot into safe mode now it says ntfs.sys is either corrupt or missing. I think that I may know how to fix that, but another thing is that my D: drive is not reading cd's and it crashes my computer if I try to explore it. I'm not sure if that is just pure coincidence though because my D: Drive has been having troubles lately, it stopped playing DVD's about a month or so ago. Do you think there is any correlation between my current problems and the drive or has my drive just died? Thanks for the replies!

Donn
01-10-2005, 02:12 PM
Is it possible for you to recover that ntfs.sys file from your Xp disc? If you have a start-up disc, can you get to a command prompt and do a system restore? Or a command that lets you copy it from your Xp disc into the Windows folder? I'm Win ME and not familiar with Xp enough to guide you through that. If you have that situation handled, however, have you tried going to Device Manager to uninstall-reinstall the DVD player? Also please post exactly what that drive is--DVD R, RW. . .brand, age, driver last updated?

alt234
01-11-2005, 10:53 AM
I could probably get it from the XP disc but I got it working. I was changing my boot screen about a week prior to my problems starting and I thought it was worth a shot changing it back and something must have went wrong in that process, thats what was causing the ntfs.sys is corrupt or missing error. So, I just replaced the ntoskrnl.exe file with a working one and it was fine. Thanks for the ideas though. The DVD player is a Pioneer slot loading 16x DVD reader probably about 4 years old. I'll have to firgure out exactly what model it is. I tried uninstalling and reinstalling it and I couldn't find any drivers for what looked like that drive on Pioneers website.