Windows takes over five minutes to get to the login screen

[Duane]

If I wait about five minutes...it will
> actually allow ne to login. I am running all kinds of PC Pitstop optimize,
> disk cleanup, C disk, Tools> check disk etc... I also deleted alot of
> unnecessary start-up files she had going. Ran all the anit-virus, Spybot
> etc... I am going to do the disk check now and hopefully the reboot process
> will speed up. I'll send a message about what the list ends with (I wish
> there was a way to copy and paste it...but I'll do my best and get back with
> you. Thanks for all.
> Duane
>
In safe mode I get a long list of errors or whatever they are called!! Here
is an example:
> > > multi(0)disk(0)rddisck(0)partition(2)\WINDOWS\Syst em32\drivers
> > \compbatt.sys
> > >
> > > BATTC.sys
> > > intelide.sys
> > > PCIIDEX.sys
> > > MountMngr.sys and the list goes on.
> > >
> >

Here is where I am at. After doing a “disk check” repair automatically etc..


I go this message on start-up:

A problem has been detected and windows has been shut down to prevent damage
to your computer.

A process or thread crucial to system operation has unexpectedly exited or
been terminated.

If this is the first time you have seen this stop error screen, restart your
computer. If this screen appears again, follow these steps:

Check to make sure any new hardware or software is properly installed. If
this is a new installation, ask your hardware or software manufacturer for
any windows updates you may need.

If problems continue, disable or remove any newly installed hardware or
software. Disable BIOS memory options such as caching or shadowing. If you
need to use safe mode to remove or…that is as far as I go before it restarted.

It seems to restart…but only after it hangs for about five minutes on the
blue progress bar (before I get into the login screen). I was hoping to get
the error message at the bottom, but it restarted automatically on me. Any
advice is appreciated!

Thanks.
Duane

[nass]

"Duane" wrote:

>
> If I wait about five minutes...it will
> > actually allow ne to login. I am running all kinds of PC Pitstop optimize,
> > disk cleanup, C disk, Tools> check disk etc... I also deleted alot of
> > unnecessary start-up files she had going. Ran all the anit-virus, Spybot
> > etc... I am going to do the disk check now and hopefully the reboot process
> > will speed up. I'll send a message about what the list ends with (I wish
> > there was a way to copy and paste it...but I'll do my best and get back with
> > you. Thanks for all.
> > Duane
> >
> In safe mode I get a long list of errors or whatever they are called!! Here
> is an example:
> > > > multi(0)disk(0)rddisck(0)partition(2)\WINDOWS\Syst em32\drivers
> > > \compbatt.sys
> > > >
> > > > BATTC.sys
> > > > intelide.sys
> > > > PCIIDEX.sys
> > > > MountMngr.sys and the list goes on.
> > > >
> > >
>
> Here is where I am at. After doing a “disk check” repair automatically etc..
>
>
> I go this message on start-up:
>
> A problem has been detected and windows has been shut down to prevent damage
> to your computer.
>
> A process or thread crucial to system operation has unexpectedly exited or
> been terminated.
>
> If this is the first time you have seen this stop error screen, restart your
> computer. If this screen appears again, follow these steps:
>
> Check to make sure any new hardware or software is properly installed. If
> this is a new installation, ask your hardware or software manufacturer for
> any windows updates you may need.
>
> If problems continue, disable or remove any newly installed hardware or
> software. Disable BIOS memory options such as caching or shadowing. If you
> need to use safe mode to remove or…that is as far as I go before it restarted.
>
> It seems to restart…but only after it hangs for about five minutes on the
> blue progress bar (before I get into the login screen). I was hoping to get
> the error message at the bottom, but it restarted automatically on me. Any
> advice is appreciated!
>
> Thanks.
> Duane

From a Quick read of your Pre-post you have a Laptop, that's right?.
Your Laptop Battery may be gone bad and need to be replaced, but first try
these options:
Try to take out the Battery from the Laptop and just use the Normal Power
cord and start the laptop, does it start quicker?.

compbatt.sys Microsoft Composite Battery Driver and you can locate it here:
C:\Windows\System32\drivers
and You can copy it from the CD from here to the above Directory/Path
CD(letter):\i386\system32\driver folder

Error message when you start a Windows XP Embedded-based computer that is
running on AC power or that has a fully charged battery: "Critical Battery"
or "Low Battery"
http://support.microsoft.com/kb/938961

Have a look in the Event Viewer and send us the error messages you will see
there in your next post:
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

If the above doesn't help, back up your data try the info below:
http://www.michaelstevenstech.com/XPrepairinstall.htm

You can use Recovery Console to perform a Repair/Install of the XP by doing
these steps:
Description of the Windows XP Recovery Console
http://support.microsoft.com/kb/314058/
HTH.
nass
----
http://www.nasstec.co.uk

[Duane]

Tried rebooting with the battery out. No help. Here are some of the recent
errors!!

Do not have the original copy of the XP disk -- although I have a license
number and it is legit etc.... Hope I do not have to reinstall everything!!

Thanks so much for your help!

EVENT PROPERTIES

3-9-08



Source Application Error

Event ID 10000

Faulting application waol.exe, version 7.0.0.0, faulting module unknown,
version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 77 61 6f ure wao
0018: 6c 2e 65 78 65 20 37 2e l.exe 7.
0020: 30 2e 30 2e 30 20 69 6e 0.0.0 in
0028: 20 75 6e 6b 6e 6f 77 6e unknown
0030: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0038: 20 61 74 20 6f 66 66 73 at offs
0040: 65 74 20 30 30 30 30 30 et 00000
0048: 30 30 30 0d 0a 000..



3-9-08
Source Application Hang
Category (101)

Hanging application msnmsgr.exe, version 8.1.178.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 6d 73 6e 6d 73 67 msnmsg
0018: 72 2e 65 78 65 20 38 2e r.exe 8.
0020: 31 2e 31 37 38 2e 30 20 1.178.0
0028: 69 6e 20 68 75 6e 67 61 in hunga
0030: 70 70 20 30 2e 30 2e 30 pp 0.0.0
0038: 2e 30 20 61 74 20 6f 66 .0 at of
0040: 66 73 65 74 20 30 30 30 fset 000
0048: 30 30 30 30 30 00000


3-9-08

Application Hang
Catagory (101)
Event ID 1002
Hanging application msnmsgr.exe, version 8.1.178.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 6d 73 6e 6d 73 67 msnmsg
0018: 72 2e 65 78 65 20 38 2e r.exe 8.
0020: 31 2e 31 37 38 2e 30 20 1.178.0
0028: 69 6e 20 68 75 6e 67 61 in hunga
0030: 70 70 20 30 2e 30 2e 30 pp 0.0.0
0038: 2e 30 20 61 74 20 6f 66 .0 at of
0040: 66 73 65 74 20 30 30 30 fset 000
0048: 30 30 30 30 30 00000


3-21-08 - Yellow Warning Only
Source System.ServiceModel.Ins
catagory None'Event ID 0
HTTP namespace reservations are not installed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

------------------------

EVENT PROPERTIES: MULTIPLE TIMES THIS APPEARS
3-21-08
Source Disk
Catagory none
Event ID 7

The device, \Device\Harddisk1\D, has a bad block.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


0000: 0f 03 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 07 00 04 c0 .......À
0010: 00 01 00 00 9c 00 00 c0 ....œ..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 6f 34 04 00 00 00 00 00 o4......
0030: ff ff ff ff 00 00 00 00 ÿÿÿÿ....
0038: 40 00 00 84 02 00 00 00 @..„....
0040: 00 20 0a 12 48 01 20 00 . ..H. .
0048: 00 00 00 00 0a 00 00 00 ........
0050: 24 d8 9e f8 48 54 cc 82 $؞øHT̂
0058: 00 00 00 00 70 ce ec 82 ....pÎì‚
0060: 00 00 00 00 00 00 00 00 ........
0068: 25 00 00 00 00 00 00 00 %.......
0070: 00 00 00 00 00 00 00 00 ........
0078: 70 00 03 00 00 00 00 0b p.......
0080: 00 00 00 00 30 00 00 00 ....0...
0088: 00 00 00 00 00 00 00 00 ........


----

EVENT VIEWER
3-16-08

APPLICATION HANG
Catagory (101)
Event ID 1002

Hanging application WINWORD.EXE, version 10.0.6838.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 57 49 4e 57 4f 52 WINWOR
0018: 44 2e 45 58 45 20 31 30 D.EXE 10
0020: 2e 30 2e 36 38 33 38 2e .0.6838.
0028: 30 20 69 6e 20 68 75 6e 0 in hun
0030: 67 61 70 70 20 30 2e 30 gapp 0.0
0038: 2e 30 2e 30 20 61 74 20 .0.0 at
0040: 6f 66 66 73 65 74 20 30 offset 0
0048: 30 30 30 30 30 30 30 0000000

"nass" wrote:

>
>
> "Duane" wrote:
>
> >
> > If I wait about five minutes...it will
> > > actually allow ne to login. I am running all kinds of PC Pitstop optimize,
> > > disk cleanup, C disk, Tools> check disk etc... I also deleted alot of
> > > unnecessary start-up files she had going. Ran all the anit-virus, Spybot
> > > etc... I am going to do the disk check now and hopefully the reboot process
> > > will speed up. I'll send a message about what the list ends with (I wish
> > > there was a way to copy and paste it...but I'll do my best and get back with
> > > you. Thanks for all.
> > > Duane
> > >
> > In safe mode I get a long list of errors or whatever they are called!! Here
> > is an example:
> > > > > multi(0)disk(0)rddisck(0)partition(2)\WINDOWS\Syst em32\drivers
> > > > \compbatt.sys
> > > > >
> > > > > BATTC.sys
> > > > > intelide.sys
> > > > > PCIIDEX.sys
> > > > > MountMngr.sys and the list goes on.
> > > > >
> > > >
> >
> > Here is where I am at. After doing a “disk check” repair automatically etc..
> >
> >
> > I go this message on start-up:
> >
> > A problem has been detected and windows has been shut down to prevent damage
> > to your computer.
> >
> > A process or thread crucial to system operation has unexpectedly exited or
> > been terminated.
> >
> > If this is the first time you have seen this stop error screen, restart your
> > computer. If this screen appears again, follow these steps:
> >
> > Check to make sure any new hardware or software is properly installed. If
> > this is a new installation, ask your hardware or software manufacturer for
> > any windows updates you may need.
> >
> > If problems continue, disable or remove any newly installed hardware or
> > software. Disable BIOS memory options such as caching or shadowing. If you
> > need to use safe mode to remove or…that is as far as I go before it restarted.
> >
> > It seems to restart…but only after it hangs for about five minutes on the
> > blue progress bar (before I get into the login screen). I was hoping to get
> > the error message at the bottom, but it restarted automatically on me. Any
> > advice is appreciated!
> >
> > Thanks.
> > Duane
>
> From a Quick read of your Pre-post you have a Laptop, that's right?.
> Your Laptop Battery may be gone bad and need to be replaced, but first try
> these options:
> Try to take out the Battery from the Laptop and just use the Normal Power
> cord and start the laptop, does it start quicker?.
>
> compbatt.sys Microsoft Composite Battery Driver and you can locate it here:
> C:\Windows\System32\drivers
> and You can copy it from the CD from here to the above Directory/Path
> CD(letter):\i386\system32\driver folder
>
> Error message when you start a Windows XP Embedded-based computer that is
> running on AC power or that has a fully charged battery: "Critical Battery"
> or "Low Battery"
> http://support.microsoft.com/kb/938961
>
> Have a look in the Event Viewer and send us the error messages you will see
> there in your next post:
> Open a Notepad, customize or minimize to the taskbar as you will need it
> later for this step to copy the error message on it.
> Open a run command and type in:
> eventvwr.msc click [OK] you will get the Event viewer control Panel.
> click on each of these:
> Application
> System
> Security
> Look in the right Pane/window for error message with red (X) or Yellow
> exclamation mark /!\ , double click each one to get more info about the
> causer.
> On the Event error properties message you will see:
> Up Arrow
> Down arrow
> Two pages
> Click on the two pages to copy the error message then bring up the Notepad
> you opened earlier and right click on the first line and select Paste from
> the list, this will paste the error message on a Notepad.
> Please don't duplicate the error message one of each kind will be sufficient.
> HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
> http://support.microsoft.com/kb/308427/en-us
>
> Please we need just the error messages with Red (X) and don't repeat the
> error, just one of each kind and post them back in your next post.
>
> How to perform a clean boot in Windows XP
> http://support.microsoft.com/?id=310353
> A description of the Safe Mode Boot options in Windows XP
> http://support.microsoft.com/kb/315222/en-us
>
> If the above doesn't help, back up your data try the info below:
> http://www.michaelstevenstech.com/XPrepairinstall.htm
>
> You can use Recovery Console to perform a Repair/Install of the XP by doing
> these steps:
> Description of the Windows XP Recovery Console
> http://support.microsoft.com/kb/314058/
> HTH.
> nass
> ----
> http://www.nasstec.co.uk

[nass]

My Reply at the Bottom, please read and execute and send info about your
Anti-virus/Anti-malware/spyware, your Hardware installed on this machine.

Please perform the cleaning steps and the memory check before doing other
troubleshooting and send me the HijackThis Log at the address provided or you
can send to other forums as you like.

"Duane" wrote:

> Tried rebooting with the battery out. No help. Here are some of the recent
> errors!!
>
> Do not have the original copy of the XP disk -- although I have a license
> number and it is legit etc.... Hope I do not have to reinstall everything!!
>
> Thanks so much for your help!
>
> EVENT PROPERTIES
>
> 3-9-08
>
>
>
> Source Application Error
>
> Event ID 10000
>
> Faulting application waol.exe, version 7.0.0.0, faulting module unknown,
> version 0.0.0.0, fault address 0x00000000.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 77 61 6f ure wao
> 0018: 6c 2e 65 78 65 20 37 2e l.exe 7.
> 0020: 30 2e 30 2e 30 20 69 6e 0.0.0 in
> 0028: 20 75 6e 6b 6e 6f 77 6e unknown
> 0030: 20 30 2e 30 2e 30 2e 30 0.0.0.0
> 0038: 20 61 74 20 6f 66 66 73 at offs
> 0040: 65 74 20 30 30 30 30 30 et 00000
> 0048: 30 30 30 0d 0a 000..




> Application Hang
> Catagory (101)
> Event ID 1002
> Hanging application msnmsgr.exe, version 8.1.178.0, hang module hungapp,
> version 0.0.0.0, hang address 0x00000000.


Do you have Windows Live installed, please uninstall for now for
troubleshooting purpose and you can reinstall after this!.


> 3-21-08 - Yellow Warning Only
> Source System.ServiceModel.Ins
> catagory None'Event ID 0
> HTTP namespace reservations are not installed.




> EVENT PROPERTIES: MULTIPLE TIMES THIS APPEARS
> 3-21-08
> Source Disk
> Catagory none
> Event ID 7
>
> The device, \Device\Harddisk1\D, has a bad block.

MS said in a KB this can be ignored or you can repair it by running the
System File Checker on Start Up.


> EVENT VIEWER
> 3-16-08
>
> APPLICATION HANG
> Catagory (101)
> Event ID 1002
> Hanging application WINWORD.EXE, version 10.0.6838.0, hang module hungapp,
> version 0.0.0.0, hang address 0x00000000.


If there are any mapped network drives that are not available,
disconnect them please.
How to use Office programs with the Norton AntiVirus Office plug-in
http://support.microsoft.com/?kbid=329820
The first step whenever Word crashes.
http://word.mvps.org/FAQs/AppErrors/ProblemsStartingWord.htm
http://www.gmayor.com/what_to_do_when_word_crashes.htm
Description of the known third-party conflicts with Word 2000
http://support.microsoft.com/kb/225208

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Can you please send me a copy at , remove
the obvious to email me.
Let us know your progress.
nass
----
http://www.nasstec.co.uk

[Duane]

Nass, an e-mail is on the way. Thanks for your help.
Duane

"nass" wrote:

>
> My Reply at the Bottom, please read and execute and send info about your
> Anti-virus/Anti-malware/spyware, your Hardware installed on this machine.
>
> Please perform the cleaning steps and the memory check before doing other
> troubleshooting and send me the HijackThis Log at the address provided or you
> can send to other forums as you like.
>
> "Duane" wrote:
>
> > Tried rebooting with the battery out. No help. Here are some of the recent
> > errors!!
> >
> > Do not have the original copy of the XP disk -- although I have a license
> > number and it is legit etc.... Hope I do not have to reinstall everything!!
> >
> > Thanks so much for your help!
> >
> > EVENT PROPERTIES
> >
> > 3-9-08
> >
> >
> >
> > Source Application Error
> >
> > Event ID 10000
> >
> > Faulting application waol.exe, version 7.0.0.0, faulting module unknown,
> > version 0.0.0.0, fault address 0x00000000.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> > 0000: 41 70 70 6c 69 63 61 74 Applicat
> > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> > 0010: 75 72 65 20 20 77 61 6f ure wao
> > 0018: 6c 2e 65 78 65 20 37 2e l.exe 7.
> > 0020: 30 2e 30 2e 30 20 69 6e 0.0.0 in
> > 0028: 20 75 6e 6b 6e 6f 77 6e unknown
> > 0030: 20 30 2e 30 2e 30 2e 30 0.0.0.0
> > 0038: 20 61 74 20 6f 66 66 73 at offs
> > 0040: 65 74 20 30 30 30 30 30 et 00000
> > 0048: 30 30 30 0d 0a 000..
>
>
>
>
> > Application Hang
> > Catagory (101)
> > Event ID 1002
> > Hanging application msnmsgr.exe, version 8.1.178.0, hang module hungapp,
> > version 0.0.0.0, hang address 0x00000000.
>
>
> Do you have Windows Live installed, please uninstall for now for
> troubleshooting purpose and you can reinstall after this!.
>
>
> > 3-21-08 - Yellow Warning Only
> > Source System.ServiceModel.Ins
> > catagory None'Event ID 0
> > HTTP namespace reservations are not installed.
>
>
>
>
> > EVENT PROPERTIES: MULTIPLE TIMES THIS APPEARS
> > 3-21-08
> > Source Disk
> > Catagory none
> > Event ID 7
> >
> > The device, \Device\Harddisk1\D, has a bad block.
>
> MS said in a KB this can be ignored or you can repair it by running the
> System File Checker on Start Up.
>
>
> > EVENT VIEWER
> > 3-16-08
> >
> > APPLICATION HANG
> > Catagory (101)
> > Event ID 1002
> > Hanging application WINWORD.EXE, version 10.0.6838.0, hang module hungapp,
> > version 0.0.0.0, hang address 0x00000000.
>
>
> If there are any mapped network drives that are not available,
> disconnect them please.
> How to use Office programs with the Norton AntiVirus Office plug-in
> http://support.microsoft.com/?kbid=329820
> The first step whenever Word crashes.
> http://word.mvps.org/FAQs/AppErrors/ProblemsStartingWord.htm
> http://www.gmayor.com/what_to_do_when_word_crashes.htm
> Description of the known third-party conflicts with Word 2000
> http://support.microsoft.com/kb/225208
>
> Go through these Cleaning steps:
> 1... Click start >> Control Panel >> Double Click Network and Internet
> Connections >> Double click Internet Options, on the IE Properties window
> you will see these Options:
> General | Security | Privacy | Content | Connections | Programs
> | Advanced .
>
> Click on General Tab (1st Tab on the left) and you will see a Button called
> [ Clear History ..] click on it to clear your History caches, then click on
> [Delete Files..] to delete Internet Files created over the time, click on [
> Delete Cookies...] to delete your cookies left by visiting websites.
>
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> = Then try to Disable the Add-Ons on your Browser somehow installed on your
> browser, On how to disable the Add-ons follow this:
> Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> later and see which is the culprit .
> How to manage Add-Ons:
> http://support.microsoft.com/kb/883256
> Scan for malware from here:
> SuperAntispyware - Free
> http://www.superantispyware.com/superantispywarefreevspro.html
> RootkitRevealer v1.71
> By Bryce Cogswell and Mark Russinovich
> http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
>
> Run a scan from here on-line:
> http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (off-line scanner) from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
>
> Lots of tools to download and disinfect your machine (off-line scanner):
> http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
>
> You may have a bad RAM try to test your RAM by running Memory test by
> downloading this tool and unzip it and make a floppy or CD/DVD and run it on
> Reboot.
> http://oca.microsoft.com/en/windiag.asp.
>
> Download the Hijackthis and send the report to one of
> many
> forums for analysis and troubleshooting:
> When all else fails, HijackThis v2.0.2
> (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
> the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware. Post
> your log to:
> http://www.spywareinfo.com/~merijn/downloads.html
> http://aumha.net/viewforum.php?f=30,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7
> http://www.bleepingcomputer.com/tutorials/tutorial42.html
> http://www.bleepingcomputer.com/forums/
> Or other appropriate
> forums for expert analysis, not here.
> Can you please send me a copy at , remove
> the obvious to email me.
> Let us know your progress.
> nass
> ----
> http://www.nasstec.co.uk
>
>
>
>
>

[Duane]

Guess I did not figure out the correct e-mail "code!"

I sent it to and it bounced back. Please reply to
my hotmail account when you receive my e-mail (I want to make sure I am
sending the log files to the correct e-mail). Thanks.
Duane

"Duane" wrote:

> Nass, an e-mail is on the way. Thanks for your help.
> Duane
>
> "nass" wrote:
>
> >
> > My Reply at the Bottom, please read and execute and send info about your
> > Anti-virus/Anti-malware/spyware, your Hardware installed on this machine.
> >
> > Please perform the cleaning steps and the memory check before doing other
> > troubleshooting and send me the HijackThis Log at the address provided or you
> > can send to other forums as you like.
> >
> > "Duane" wrote:
> >
> > > Tried rebooting with the battery out. No help. Here are some of the recent
> > > errors!!
> > >
> > > Do not have the original copy of the XP disk -- although I have a license
> > > number and it is legit etc.... Hope I do not have to reinstall everything!!
> > >
> > > Thanks so much for your help!
> > >
> > > EVENT PROPERTIES
> > >
> > > 3-9-08
> > >
> > >
> > >
> > > Source Application Error
> > >
> > > Event ID 10000
> > >
> > > Faulting application waol.exe, version 7.0.0.0, faulting module unknown,
> > > version 0.0.0.0, fault address 0x00000000.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > >
> > > 0000: 41 70 70 6c 69 63 61 74 Applicat
> > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> > > 0010: 75 72 65 20 20 77 61 6f ure wao
> > > 0018: 6c 2e 65 78 65 20 37 2e l.exe 7.
> > > 0020: 30 2e 30 2e 30 20 69 6e 0.0.0 in
> > > 0028: 20 75 6e 6b 6e 6f 77 6e unknown
> > > 0030: 20 30 2e 30 2e 30 2e 30 0.0.0.0
> > > 0038: 20 61 74 20 6f 66 66 73 at offs
> > > 0040: 65 74 20 30 30 30 30 30 et 00000
> > > 0048: 30 30 30 0d 0a 000..
> >
> >
> >
> >
> > > Application Hang
> > > Catagory (101)
> > > Event ID 1002
> > > Hanging application msnmsgr.exe, version 8.1.178.0, hang module hungapp,
> > > version 0.0.0.0, hang address 0x00000000.
> >
> >
> > Do you have Windows Live installed, please uninstall for now for
> > troubleshooting purpose and you can reinstall after this!.
> >
> >
> > > 3-21-08 - Yellow Warning Only
> > > Source System.ServiceModel.Ins
> > > catagory None'Event ID 0
> > > HTTP namespace reservations are not installed.
> >
> >
> >
> >
> > > EVENT PROPERTIES: MULTIPLE TIMES THIS APPEARS
> > > 3-21-08
> > > Source Disk
> > > Catagory none
> > > Event ID 7
> > >
> > > The device, \Device\Harddisk1\D, has a bad block.
> >
> > MS said in a KB this can be ignored or you can repair it by running the
> > System File Checker on Start Up.
> >
> >
> > > EVENT VIEWER
> > > 3-16-08
> > >
> > > APPLICATION HANG
> > > Catagory (101)
> > > Event ID 1002
> > > Hanging application WINWORD.EXE, version 10.0.6838.0, hang module hungapp,
> > > version 0.0.0.0, hang address 0x00000000.
> >
> >
> > If there are any mapped network drives that are not available,
> > disconnect them please.
> > How to use Office programs with the Norton AntiVirus Office plug-in
> > http://support.microsoft.com/?kbid=329820
> > The first step whenever Word crashes.
> > http://word.mvps.org/FAQs/AppErrors/ProblemsStartingWord.htm
> > http://www.gmayor.com/what_to_do_when_word_crashes.htm
> > Description of the known third-party conflicts with Word 2000
> > http://support.microsoft.com/kb/225208
> >
> > Go through these Cleaning steps:
> > 1... Click start >> Control Panel >> Double Click Network and Internet
> > Connections >> Double click Internet Options, on the IE Properties window
> > you will see these Options:
> > General | Security | Privacy | Content | Connections | Programs
> > | Advanced .
> >
> > Click on General Tab (1st Tab on the left) and you will see a Button called
> > [ Clear History ..] click on it to clear your History caches, then click on
> > [Delete Files..] to delete Internet Files created over the time, click on [
> > Delete Cookies...] to delete your cookies left by visiting websites.
> >
> > Then click on Advanced tab and scroll down to under the Browsing Option:
> > [&] Browsing
> > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> > = Then try to Disable the Add-Ons on your Browser somehow installed on your
> > browser, On how to disable the Add-ons follow this:
> > Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> > the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> > later and see which is the culprit .
> > How to manage Add-Ons:
> > http://support.microsoft.com/kb/883256
> > Scan for malware from here:
> > SuperAntispyware - Free
> > http://www.superantispyware.com/superantispywarefreevspro.html
> > RootkitRevealer v1.71
> > By Bryce Cogswell and Mark Russinovich
> > http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
> >
> > Run a scan from here on-line:
> > http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
> > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> > Download Avast Cleaner (off-line scanner) from here:
> > http://www.avast.com/eng/avast-virus-cleaner.html
> >
> > Lots of tools to download and disinfect your machine (off-line scanner):
> > http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
> >
> > You may have a bad RAM try to test your RAM by running Memory test by
> > downloading this tool and unzip it and make a floppy or CD/DVD and run it on
> > Reboot.
> > http://oca.microsoft.com/en/windiag.asp.
> >
> > Download the Hijackthis and send the report to one of
> > many
> > forums for analysis and troubleshooting:
> > When all else fails, HijackThis v2.0.2
> > (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
> > the preferred tool to use.
> > It will help you to both identify and remove any hijackware/spyware. Post
> > your log to:
> > http://www.spywareinfo.com/~merijn/downloads.html
> > http://aumha.net/viewforum.php?f=30,
> > http://castlecops.com/forum67.html,
> > http://forums.subratam.org/index.php?showforum=7
> > http://www.bleepingcomputer.com/tutorials/tutorial42.html
> > http://www.bleepingcomputer.com/forums/
> > Or other appropriate
> > forums for expert analysis, not here.
> > Can you please send me a copy at , remove
> > the obvious to email me.
> > Let us know your progress.
> > nass
> > ----
> > http://www.nasstec.co.uk
> >
> >
> >
> >
> >

[nass]

"Duane" wrote:

> Guess I did not figure out the correct e-mail "code!"
>
> I sent it to and it bounced back. Please reply to
> my hotmail account when you receive my e-mail (I want to make sure I am
> sending the log files to the correct e-mail). Thanks.
> Duane


REMOVETHIS it mean remove the capital letters to e-mail me and leave the
to_you_ross at yahoo.
HTH
http://www.nasstec.co.uk

[Duane]

Hey Nass, thanks for all your help. I've ran everything I know and the
computer still hangs on Boot-up. There were some "Hardware Innterupts" using
Procexp.exe that I noticed. So I've put about 40+ hours into this thing and I
think it is time to reinstall the system software! I do have her files
backed-up.



Would you reccomend a good overall software / virus / spyware protection
system that I should buy.



I normally run AVG, Spybot (with Tea Timer -- but the kids always says ALLOW
when it asks you if you want to change something!!



They are always on MySpace, YouTube etc..... and leave us parents with the
"fun" of fixing their computer!



I noticed that you reccomended: na_issdm_ca_32_en_Store_trial.exe



Is that a good "overall protection / turn-key" system? If so, I will go
through your links on your web site so hopefully you can get some sort of
credit!!



Please reply to the e-mail I sent to Yahoo and I will send you the log files
that you requested.



Regards,

Duane



PS I've put the XP disk in and told BIOS to restart from CD....but it is
still hanging!! Any ideas. I'd like you to look at the log files before I
reinstall everything.



"nass" wrote:

>
>
> "Duane" wrote:
>
> > Guess I did not figure out the correct e-mail "code!"
> >
> > I sent it to and it bounced back. Please reply to
> > my hotmail account when you receive my e-mail (I want to make sure I am
> > sending the log files to the correct e-mail). Thanks.
> > Duane
>
>
> REMOVETHIS it mean remove the capital letters to e-mail me and leave the
> to_you_ross at yahoo.
> HTH
> http://www.nasstec.co.uk
>

[nass]

Hi Duane,
I didn't receive your E-mail, did you put the right address like to_you_ross
(note the Underscore in( to_you_ross) they are not
.
Copy this to your Notepad and remove the REMOVETHIS:

I will let you know my answer to your queries after having a look on your
log, you may end up not doing a clean install or it could be your best option
to wipe out the HDD clean!.

Can you please include any error messages you get and have a look in the
Event Viewer for more, copy and paste in your next msg.

"Duane" wrote:

> Hey Nass, thanks for all your help. I've ran everything I know and the
> computer still hangs on Boot-up. There were some "Hardware Innterupts" using
> Procexp.exe that I noticed. So I've put about 40+ hours into this thing and I
> think it is time to reinstall the system software! I do have her files
> backed-up.
>
>
>
> Would you reccomend a good overall software / virus / spyware protection
> system that I should buy.
>
>
>
> I normally run AVG, Spybot (with Tea Timer -- but the kids always says ALLOW
> when it asks you if you want to change something!!
>
>
>
> They are always on MySpace, YouTube etc..... and leave us parents with the
> "fun" of fixing their computer!
>
>
>
> I noticed that you reccomended: na_issdm_ca_32_en_Store_trial.exe
>
>
>
> Is that a good "overall protection / turn-key" system? If so, I will go
> through your links on your web site so hopefully you can get some sort of
> credit!!
>
>
>
> Please reply to the e-mail I sent to Yahoo and I will send you the log files
> that you requested.
>
>
>
> Regards,
>
> Duane
>
>
>
> PS I've put the XP disk in and told BIOS to restart from CD....but it is
> still hanging!! Any ideas. I'd like you to look at the log files before I
> reinstall everything.
>
>
>
> "nass" wrote:
>
> >
> >
> > "Duane" wrote:
> >
> > > Guess I did not figure out the correct e-mail "code!"
> > >
> > > I sent it to and it bounced back. Please reply to
> > > my hotmail account when you receive my e-mail (I want to make sure I am
> > > sending the log files to the correct e-mail). Thanks.
> > > Duane
> >
> >
> > REMOVETHIS it mean remove the capital letters to e-mail me and leave the
> > to_you_ross at yahoo.
> > HTH
> > http://www.nasstec.co.uk
> >

[Duane]

An e-mail has been sent...hope it makes it to you this time!
Thanks.

"nass" wrote:

> Hi Duane,
> I didn't receive your E-mail, did you put the right address like to_you_ross
> (note the Underscore in( to_you_ross) they are not
> .
> Copy this to your Notepad and remove the REMOVETHIS:
>
> I will let you know my answer to your queries after having a look on your
> log, you may end up not doing a clean install or it could be your best option
> to wipe out the HDD clean!.
>
> Can you please include any error messages you get and have a look in the
> Event Viewer for more, copy and paste in your next msg.
>
> "Duane" wrote:
>
> > Hey Nass, thanks for all your help. I've ran everything I know and the
> > computer still hangs on Boot-up. There were some "Hardware Innterupts" using
> > Procexp.exe that I noticed. So I've put about 40+ hours into this thing and I
> > think it is time to reinstall the system software! I do have her files
> > backed-up.
> >
> >
> >
> > Would you reccomend a good overall software / virus / spyware protection
> > system that I should buy.
> >
> >
> >
> > I normally run AVG, Spybot (with Tea Timer -- but the kids always says ALLOW
> > when it asks you if you want to change something!!
> >
> >
> >
> > They are always on MySpace, YouTube etc..... and leave us parents with the
> > "fun" of fixing their computer!
> >
> >
> >
> > I noticed that you reccomended: na_issdm_ca_32_en_Store_trial.exe
> >
> >
> >
> > Is that a good "overall protection / turn-key" system? If so, I will go
> > through your links on your web site so hopefully you can get some sort of
> > credit!!
> >
> >
> >
> > Please reply to the e-mail I sent to Yahoo and I will send you the log files
> > that you requested.
> >
> >
> >
> > Regards,
> >
> > Duane
> >
> >
> >
> > PS I've put the XP disk in and told BIOS to restart from CD....but it is
> > still hanging!! Any ideas. I'd like you to look at the log files before I
> > reinstall everything.
> >
> >
> >
> > "nass" wrote:
> >
> > >
> > >
> > > "Duane" wrote:
> > >
> > > > Guess I did not figure out the correct e-mail "code!"
> > > >
> > > > I sent it to and it bounced back. Please reply to
> > > > my hotmail account when you receive my e-mail (I want to make sure I am
> > > > sending the log files to the correct e-mail). Thanks.
> > > > Duane
> > >
> > >
> > > REMOVETHIS it mean remove the capital letters to e-mail me and leave the
> > > to_you_ross at yahoo.
> > > HTH
> > > http://www.nasstec.co.uk
> > >