Avast WEBforum
Other => General Topics => Topic started by: koray77 on December 29, 2013, 04:57:44 AM
-
Hello all,
I'm currently writing this post whilst in Safe Mode with Networking.
The problem began when I started to use the tool 'WinCDEmu Portable' to mount disc images. The tool requires the installation of a non-Windows driver for the .IMG file to be mounted and read. Upon installing this driver, I attempted to load the content, but was unsuccessful. After this point, my laptop became extremely slow to load anything. I managed to uninstall the driver and delete the tool (along with the disc images) using the options provided - this did not resolve the problem.
I then restarted my laptop, this made the problem worse. Avast! among other startup programs failed to load, my laptop then froze entirely. I waited for a response, but eventually had to force shutdown using the power button.
After turning on my laptop again, I was prompted with the option of booting in safe-mode, I chose to continue normally. The boot time seemed fine until I reached the 'Welcome Screen', where it was then unbearably slow.
After reaching the desktop, I was then prompted with this message box (unspecific to what application it was referring to):
Microsoft Windows
The application is not responding. The program may respond again if you wait.
Options: END PROCESS or CANCEL
Again, I had to force shutdown. The next time I booted my laptop, I chose safe mode where it was running normally without an issue. I assumed the problem was concerning drivers or new registry entries created by 'WinCDEmu Portable' so decided to System Restore to a week ago. This also did not resolve the problem, I am still greeted by ridiculously slow loading times and that same Microsoft Windows message after a normal boot.
Now considering the potential of something malicious, I scanned my laptop using Malwarebytes which resulted with 2 infections. These could be entirely unrelated, as the problem still persisted once they were removed. I am still yet to scan my system with Avast! since the beginning of this problem.
To summarise this problem, I can't boot normally without eventually encountering the Microsoft Windows error message which freezes and crashes my laptop. Also, programs don't seem to be functioning correctly, i.e. the Action Center reports Avast! to be turned off.
Apologies for the essay, but this problem has taken me beyond confusion.
Ask away for further details and/or clarifications. The specification of my laptop are as follows:
Windows Edition: Windows 7 Home Premium, Service Pack 1
Model: HP Pavilion g6 Notebook PC
Processor: Intel Core i5-2410M CPU, 2.3 GHz
RAM: 4 GB
Thank you for any help on this matter.
Kind regards,
Koray
-
Have you tried to run ther System File Checker ?
Open the run command and then use the following:
"sfc /scannow" (without the quotes)
-
Hello Bob,
Thank you for your response.
I loaded up CMD and ran "sfc /scannow". The verification phase was successful.
Windows Resource Protection did not find any integrity violations.
Kind regards,
Koray
-
Next step is to go into msconfig and unselect all Non Microsoft startup items.
If that allows you to boot normally, the the next step is to isolate the program that's causing the problem by
adding them back into the startup mix one at a time.
Not very quick but, it should get you back on track.
-
You can also use the revers order and simply disallow one program at a time till you hit the one that's preventing the boot.
-
Just to clarify, can I disable all startup items which do not have a "Command" of C:\Windows\system32\...?
Also, before I begin this process of elimination, I have noticed that one of the startup items has a slightly different "Location" to all others. It begins with HKCU rather than HKLM. Could this be of any significance?
The information for the startup item is as follows:
Startup Item: Pando Media Booster
Manufacturer: Unknown
Command: C:\Program Files (x86)\Pando Networks\...
Location: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Kind regards,
Koray
-
Just to clarify, can I disable all startup items which do not have a "Command" of C:\Windows\system32\...?
Also, before I begin this process of elimination, I have noticed that one of the startup items has a slightly different "Location" to all others. It begins with HKCU rather than HKLM. Could this be of any significance?
The information for the startup item is as follows:
Startup Item: Pando Media Booster
Manufacturer: Unknown
Command: C:\Program Files (x86)\Pando Networks\...
Location: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Kind regards,
Koray
You can find out more info about Pando Media Booster from a Google Search.
Here is an explanation of the difference between HKCU (Current User) and HKLM (Local Machine)
http://www.differencebetween.net/technology/hardware-technology/difference-between-hkey_current_user-and-hkey_local_machine/ (http://www.differencebetween.net/technology/hardware-technology/difference-between-hkey_current_user-and-hkey_local_machine/)
Further explanation on eliminating possible conflicts:
(http://www.screencast-o-matic.com/screenshots/u/Lh/1388330884449-83941.png)
Once selected, it shows only non MS service you can then disable these one at a time and see
which one is the culprit.
This unfortunately doesn't eliminate a MS service should this be the problem. (usually that isn't the case)
-
Since you problem started after installing WinCDEmu,
you may also want to report the problem here:
http://wincdemu.sysprogs.org/portable/ (http://wincdemu.sysprogs.org/portable/)
They may have an answer for you.
-
Thanks, I will too report the incident on their forum.
Also, I've hidden all Microsoft Services. So, should I now be disabling "Services" or "Startup Items"?
Kind regards,
Koray
-
Thanks, I will too report the incident on their forum.
Also, I've hidden all Microsoft Services. So, should I now be disabling "Services" or "Startup Items"?
Kind regards,
Koray
Services - one at a time then reboot and see if there's any change. If no change, enable that item again and disable the next one.
-
I have finally reached a point where my laptop boots-up within a reasonable time (~1-2 minutes), where the desktop is entirely responsive. I did not go through the entire list of Non-Microsoft services. Oddly enough, the problem seems to have disappeared since the Avast! service was stopped. I have restarted my computer several times to ensure this is not a fluke. My laptop successfully booted after each restart within a reasonable time and without the error message.
Kind regards,
Koray
-
I would then suggest that you do a clean install of avast! and see if that takes care of the problem.
You can find instructions at:
https://docs.google.com/document/d/1TCCX0R7AAF2WOxAMQ_kcun2nNnCPFAk2P4RBzFXSgds/edit?usp=sharing (https://docs.google.com/document/d/1TCCX0R7AAF2WOxAMQ_kcun2nNnCPFAk2P4RBzFXSgds/edit?usp=sharing)
-
I have followed the instructions provided and completely removed avast! using the utility in safe mode - I then reinstalled the latest version. My laptop seemed to function normally. Assuming the problem was nearly solved, I ran a boot-time scan to ensure my laptop was free from anything potentially suspect (it found nothing). Upon rebooting my computer, the entire problem has reoccurred. Once again, I am greeted by a completely unresponsive desktop and then eventually by the Microsoft Windows error message. I have forced shutdown, rebooted in safe mode and disabled the avast! service. My laptop booted normally (~3 minutes) but I am left with no antivirus.
Some other forums with users who have encountered the same Microsoft Windows error message have stated that it is related to Windows Desktop Manager (dwm.exe). Is there a way to check this? Also, I still have a feeling that this problem is related to WinCDEmu - is there a way to check that this program and all of its associated files have been completely removed from my laptop?
Kind regards,
Koray
-
Sorry that you're still having a problem.
Since WinCDEmu doesn't have a removal tool, you would probably need to ask for help on their forum.
I don't use the program so can't help.
-
Alright, thank you for the previous help Bob. At least I am now able to use my laptop (just without an antivirus). I reported the problem yesterday on the WinCDEmu Forum but I am still awaiting a response. Are there any other checks I can run which you would recommend?
-
Using your laptop without any protection isn't recommended. Certainly not if you're online.
-
I kinda know that - it's common sense. >:( But what option do I have? I require assistance from those with more knowledge in this field, i.e. an 'Uberevangelist'. In order to communicate with you, I have to access the Internet. In order to access the Internet (and use my laptop), I have to disable the avast! service.
Again, do you have any further ideas in how I would diagnose and solve this problem?
Kind regards,
Koray
-
At the moment, I do not an hope one of the others will step in if they have any Ideas. :)
-
BOB asked for some other ideas to the evangelists....
Does this problem still exist?
Where does the slowness come from......
Did you check if there is sudden extreme disk or cpu or memory usage? You can check this with the windows 7 resource manager (hopefully its present in the home version, i only use enterprise version)
The Resource Manager can be found under All Programs | Accessories | System Tools | Resource Monitor, as well as various other shortcuts.