Forum Home
Press F1
 
Thread ID: 80422 2007-06-22 07:10:00 XP crashes after boot Buff_K (691) Press F1
Post ID Timestamp Content User
561669 2007-06-22 07:10:00 I have an interesting issue that has resurfaced.

A while ago my Xp machine would freeze around 60 seconds after booting up, I tried many times and in the end I booted into safe mode and did a system restore.

Worked fine until yesterday and same problem. Same fix too.

But today the problem arose once more, and I did a system restore of a restore point I made at only 8pm last night (so after the problem had resurfaced and I had restored the machine yesterday).

I'm a little nervous to reboot. I run Avast anti virus, Spybot, Ad Aware and AVG antispyware super regualary and none of them find anything except tracking cookies. I also use Comodo firewall that was recommended to me on here.

I have a Hijack This log if anyones interested in looking.

Thanks
Buff_K (691)
561670 2007-06-22 07:18:00 But its not crashing once it gets into XP is it? It doesnt get that far does it??

Post a HJT log if u want or can. I'll have a look at it.
Speedy Gonzales (78)
561671 2007-06-22 07:22:00 No it does crash once XP has booted. So it does it's startup routine, then once XP loads it takes a minute or two before it freezes and becomes unresponsive.

Thanks for having a look.

Logfile of HijackThis v1.99.1
Scan saved at 5:57:20 p.m., on 22/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\VMware\VMware Server\vmware-authd.exe
C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\VMware\VMware Server\vmserverdWin32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN0 3.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xtra.co.nz/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ avast! ] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus COLOR 580] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN0 3.EXE /P22 "EPSON Stylus COLOR 580" /O6 "USB001" /M "Stylus COLOR 580"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - www.creative.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - www.creative.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{1DAAE697-02BC-4B66-95C2-4A79FC1E41D1}: NameServer = 202.27.158.40,202.27.156.72
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware Registration Service (vmserverdWin32) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmserverdWin32.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
Buff_K (691)
561672 2007-06-22 07:46:00 Are u using the latest version of Comodo (2.4.18.184)?

With the latest version of Avast??

A previous version of Comodo used to crash on here till I updated it.

The log looks ok but u can tick these and tick fix checked. Close browser/s.

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

You dont need Avast and AVG.

I would uninstall all versions of Sun Java and get the latest in my sig.
Speedy Gonzales (78)
561673 2007-06-22 08:11:00 Thanks heaps Speedy. Buff_K (691)
561674 2007-06-22 11:08:00 Hi there. Buff, did the suggestion work?

I've been having a similar issue. I have just spent the last 5 days reinstalling to figure out what triggers this lockup: Windows XP SP2 starts up - loads everything up and then just hangs - can't click anything. There is no error message and no blue or black screen. Ctrl+Alt+Del didn't bring up the usual options. When shutting down it stays at the "Windows is shutting down" screen (I manage to click start>shutdown while everything's still loading up).

After 8 reinstalls I'd isolated it to windows updating to the latest "windows updater". And this is the first update I have to get either via automatic updates or via Windows Update (the web interface). I've looked up the patch KB927891 but windows won't let me install it because the installer application is apparently too old to do it. So I need to update first to install the fix but can't because I'll just end up back at square 1.

Since then I've just switched automatic updates off, so I've only got windows fresh from the install CD with no updates till I get enough information on what exactly is going on.

Has anyone else had this issue lately?

Cheers
waiton (12443)
561675 2007-06-22 11:37:00 What is event viewer saying? apsattv (7406)
561676 2007-06-23 07:23:00 well, now I can't even find a valid restore point now, damn thing can boot into safe mode but once booted normally will hang after about 60 seconds. How do I connect to the internet from safe mode?

So I have the most up to date Avast and comodo. I cannot update my java just yet tho, cos I don't get enough time.

I would be greatfull for some more advice as to what I can do.
Buff_K (691)
561677 2007-06-23 07:36:00 after many attempts my machine seems to be working again, thankfully . Really don't want to reboot tho . I have installed the latest version of Java .

I should add that I just noticed some times when the machine boots up it states something like "No HPA enabled drive" and continues to boot . It doesn't always come up, but seemingly if it does I cannot reach the menu to enter safe mode (no matter how many times I press the F keys) .

Gonna google that message now .
Buff_K (691)
561678 2007-06-23 07:48:00 "No HPA enabled drive" and continues to boot.

According to some sites this error has something to do with SATA and its drivers, or you've got the BIOS set to the wrong boot device.

Is the hdd SATA?

And whats the default boot disk in the BIOS?
Speedy Gonzales (78)
1 2 3