Avast WEBforum
Other => General Topics => Topic started by: kls490 on January 16, 2012, 04:02:56 PM
-
Good morning everyone,
Since around January 11th, I have been experiencing an issue with my computer (system specs shown in signature line), not booting-up properly. When doing a cold boot or restart, the computer will first hang at the Dell logo screen, until I press either the F8 key or F12 key. (When it hangs here, I also notice a very low "whistling" type sound emitting from the computer). * Computer does NOT boot into Safe Mode after pressing F8 - only normal mode.
After pressing one of the aforementioned keys, the sound stops and the boot proceeds to the Microsoft logo screen. It next will hang at a partial display of the Windows Welcome log-on screen. I have to wait until the hard drive light goes out, and press the <ESC> key 2 - 3 times, then the entire log-in screen will display, and I can log-on. NOTE: For some reason, pressing <CTRL>, <ALT>, <DEL> will NOT bring up the Windows DEFAULT Administrator log-in screen like it normally does. (I have to manually enter the username "Administrator" and the password, then the system will log me in).
Repeated full scans with Avast!, MBAM, and SAS do not reveal any malware issues. The following errors are seen in the Event Viewer SYSTEM log AND these same error messages are seen intermittently all the way back to November 2011, but NO problem like this has occurred previously until now:
Error: Service Control Manager
The following boot start or system start driver(s) failed to load: MpFilter
Error: The MsMpSvc service failed to start due to the following error:
System cannot find the path specified
Error: Initialization failed because the transport refused to open initial addresses
These errors ONLY correspond to LOG-ON times. At no other times are they seen. The first TWO error messages seem to involve items related to Microsoft Live One Care or Microsoft Secuity Essentials...NEITHER of which is installed on this computer, nor can I find any program files or folders for these programs anywhere on the computer.
I have posted in two other forums back on January 11th, including the Microsoft forum...yet no one seems to have any realistic idea as to how to resolve this problem. System Restore to points earlier than when this problem began have NO effect.
Regards & thanks for your time and review.
-
Since you see some symptoms already when you see the first Dell boot screen, and you also here some sounds, could this be related to your BIOS?
Have you tested the BIOS battery? Have you tried resetting the BIOS values to default? Take out the battery (if you can), test it, put it back, reset BIOS to default values and save them. Reboot again into the BIOS and set the values to the appropriate ones (according to your specific hardware and OS) and save them again.
Can you set the BIOS to display the POST screen (instead of the nice Dell screen)?
The sounds may be a translation of something else, so the list of sounds for your BIOS could be useful too. Each type of sound means something else.
Of course, the problem could be something else, not related to BIOS / battery. This is just an idea that you could review.
-
I appreciate your reply to my post, ady4um.
The unfortunate thing is I would have no idea of what I would be doing inside the computer...even if I could figure out HOW to get inside (which I've been unable to do). As for resetting BIOS...I'd have no idea how to do that either.
Since I subsist upon a limited disability income each month, it will take quite a while to try and save enough to take this computer to some pc tech to get the things done.
Thanks very much again. At least I now have a starting point!
Best Regards,
-
Error: The MsMpSvc service failed to start due to the following error:
System cannot find the path specified
Have you had an infection recently ?
-
Hi essexboy,
I have not had any malware infections lately (last time I encountered one was in April 2011. It was a variety of fake anti-malware program). Full scans with Avast! (free), MBAM and SAS have been clean.
-
Lets see what else is missing
run farbar service scanner (http://download.bleepingcomputer.com/farbar/FSS.exe)
(http://i1238.photobucket.com/albums/ff484/CompCav/Farbarservicesinternetticked-2.jpg)
Tick "Internet services" and "Windows Firewall" options.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.
-
Greetings again essexboy,
Here is the copy of the FSS log, and thanks very much for your responses!
Farbar Service Scanner
Ran by Administrator (administrator) on 16-01-2012 at 14:51:41
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0
File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
Extra List:
=======
aswTdi(8) Gpc(3) IPSec(5) NetBT(6) Tcpip(4)
0x080000000500000003000000040000000800000006000000070000000100000002000000
IpSec Tag value is correct.
**** End of log ****
-
Did you have MSE on this system ? As that is the service it is related to
Download and run this tool to do a complete cleanup http://go.microsoft.com/fwlink/?linkid=81699
-
Hi once again essexboy,
I completed running the program you provided a link to. The computer still has the same boot problem as before.
Thanks again for the help.
-
OK lets now take a look see
Download OTL (http://oldtimer.geekstogo.com/OTL.exe) to your Desktop
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- Select All Users
- Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
consrv.dll
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetBT /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetBIOS /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
C:\Windows\assembly\tmp\U\*.* /s
%Temp%\smtmp\1\*.*
%Temp%\smtmp\2\*.*
%Temp%\smtmp\3\*.*
%Temp%\smtmp\4\*.*
CREATERESTOREPOINT
- Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Post both logs
THEN
Download aswMBR.exe (http://public.avast.com/~gmerek/aswMBR.exe) ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan
(http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR%20shots/aswMBRScan.gif)
On completion of the scan click save log, save it to your desktop and post in your next reply
(http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR%20shots/aswMBRsavelog.gif)
-
essexboy,
I finished with the OTL scan; how do I go about posting the logs here?
-
(http://my.jetscreenshot.com/2701/m_20120116-xysi-63kb.jpg) (http://my.jetscreenshot.com/2701/20120116-xysi-63kb)
Select additional options and attach your text file
-
When you reply to the post on the bottom left of the screen is an additonal Options link
Click that and browse to the OTL log and select it.
It will be attached to the post
-
(For Bob3160):
Thanks very much for your reply to my question too!
(For essexboy):
Here are the 3 logs you requested:
-
OK I found some malware folder remnants, but I also noticed that you still have some McAfee services running
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
- Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL
[2011/05/04 03:41:10 | 000,012,492 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\bo2p13123n7o17w3l
[2011/05/04 03:41:10 | 000,012,492 | -HS- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\bo2p13123n7o17w3l
[2011/03/30 19:41:12 | 000,013,614 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\q8d0koh7sty104n886j5381r151ce1n85cl3o47
[2011/03/30 19:41:12 | 000,013,614 | -HS- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\q8d0koh7sty104n886j5381r151ce1n85cl3o47
:Files
ipconfig /flushdns /c
:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
- Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
-
Thanks very much, essexboy. I'll repost when everything is completed.
-
Morning essexboy,
I believe there is a problem with running the "fix" with OTL. I started at 5:56 p.m. last night. The user interface showed the statement at the bottom which read, "Killing processes, "DO NOT INTERRUPT..."
There was no significant change on the screen, no icons disappeared, not even any hard drive activity. The only change I did see was the digital time display on the Taskbar was stopped at 5:57 p.m. last night, and just after the "fix" was started, and the OTL program icon showed up on the Taskbar, the MBAM program icon also showed up beside the OTL program on the Taskbar. Since it is now over 12 hours later, I would think that is far more than sufficient time for the fix to run, and something else must be hindering it functioning properly.
I have included the 2nd scan results for your review.
Thanks very much for the help though.
Best regards.
-
Do you have MBAM 1.6 ? If so you need to disable it prior to running OTL as MBAM blocks it
-
Hi again essexboy,
Yes, I have MBAM Pro (latest version). Do you want me to go back to your last post on page 1, copy that text in the quote box & try running the OTL fix again? If so, how long does it usually take for it to complete?
Thanks again.
-
That size fix should take no more than two or three minutes max
Yes disable MBAM please as it takes umbrage at OTL trying to stop the process and blocks it
-
Essexboy,
Encountered another problem while the fix was running & then stopped. I received the following error message:
Access violation at address 0040295B in module 'OTL.exe'. Read of address 001F8000.
After getting back on the computer, I got the Security Warning message about a program still being open (OTL.exe).
Regards.
-
A question ... How many memory sticks do you have in your computer ?
-
Besides the C drive (hard drive), there are two USB flash drives connected to the computer, but access to them is controlled by Outpost Firewall's File & Folder Lock feature which I have enabled on them. Access to them was blocked at the time I ran the fix.
Shall I remove them from the computer and try running the fix again?
-
Sorry I meant how many modules of RAM are in your system 1 or 2
-
There are two 1 GB sticks. Another note...these are NEW RAM chips which were installed back on Janury 6th.
-
OK lets do a final confirmatory run that it is not a malware problem
Download and Install Combofix
Download ComboFix from one of the following locations:
Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here (http://forums.whatthetech.com/How_Disable_your_Security_Programs_t96260.html&pid=494216#entry494216)
- Double click on ComboFix.exe & follow the prompts.
- Accept the disclaimer and allow to update if it asks
(http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png)
(http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png)
- When finished, it shall produce a log for you.
- Please include the C:\ComboFix.txt in your next reply.[/b]
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
-
Hi again essexboy,
First, I appreciate all your help on this one! It appears the problem has not been resolved. When ComboFix went to reboot, the system generated an error message on the screen behind the ComboFix window. After waiting 15 minutes and nothing happening, I minimized the CF window to read the error message which was this:
Unable to create backup of current registry file C:\Windows\System32\config\Security! Continue with restoration of this file?
I clicked on YES. A second error box opened after this one with a similar type message (didn't recall the exact wording though). I clicked YES on that one too. CF finally rebooted, but the computer again hangs at the Dell logo screen with that whistling sound until I pressed the F12 key. Then it displayed a partial section of the Windows log-on screen, until about 20 seconds after I pressed the <ESC> key, then I was able to log back on. The computer will still NOT display the Windows DEFAULT Administrator account after I press <CTRL>, <ALT>, <DEL>, like it used to do. Still have to manually type it in the username box.
The CF log is appended here for your review.
-
Could you download the McAfee removal tool and run please http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
This is starting to look like a definite hardware problem
Especially as the registry is not being saved in a timely manner
Have you done a chkdisc lately ?
-
Hi again,
I'll try that MCPR tool, though I've run it before, but don't think it removed everything. It's been a month or so since the last chkdsk was done. The only way the system will do it is on a reboot though. For some reason, it always generates a message that some program it needs is in use by another program.
Will run the chkdsk also and post back.
-
Aye thats right as it can only check the primary disc when it is not in use
-
O.k. essexboy,
The chkdsk C:/r command does not find any problems. I removed the McAfee SiteAdvisor from the computer running the MCPR tool. However, the Add/Remove Programs listing still shows the McAfee Virtual Technician which will not delete. Some odd message is generated about looking for another path for the program. I cannot find anything within the Program Files list for the MVT program. Computer boot problem is still present.
(I've tried repeatedly in the past to get rid of it from the Add/Remove Programs list without any luck). Always generates the same message when I try to get rid of it.
Thanks again for all the help!
-
OK time for me to dive into the technical tools that I have
Please download (http://artellos.com/sino-page) SINO by Artellos (http://artellos.com/me).- Save SINO to a place you can remember and run SINO.exe. (If you downloaded the ZIP version you will need to extract it first)
- Then please check the following checkboxes:
System Info
Services
Boot Check
Tasklist
Startup Items
Event Log
Ipconfig
Ping
Netstat
Hosts file
Shares
Routing Table
- Once checked, hit the Run Scan! button and wait for the program to finish the scan.
- A notepad window will pop up. Please copy all of the content into your next reply.
Note: If you try to interact with the program once it’s started scanning it might appear to hang. The scan however will continue.
-
Hi essexboy,
Here's the log you requested.
-
Could you do me a favour and disable outpost friewall and then reboot keeping it disabled
Does that make a difference
-
Sorry essexboy...no luck there either.
-
Shucks and it did show a high usage
OK back to the drawing board
The next option would be a clean boot, but that is a tedious process if you are prepared to do it
Step 1:
Start the System Configuration Utility
Click Start, click Run, type msconfig, and then click OK.
The System Configuration Utility dialog box is displayed.
Step 2:
Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Process SYSTEM.INI File check box.
Click to clear the Process WIN.INI File check box.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, click Restart to restart the computer.
Step 3: Log on to Windows
If you are prompted, log on to Windows.
When you receive the following message, click to select the Don't show this message or launch the System Configuration Utility when Windows start check box, and then click OK.
You have used the System Configuration Utility to make changes to the way Windows starts.
The System Configuration Utility is currently in Diagnostic or Selective Startup mode, causing this message to be displayed and the utility to run every time Windows starts.
Choose the Normal Startup mode on the General tab to start Windows normally and undo the changes you made using the System Configuration Utility.
Now we get to the tedious part,:
If windows behaves itself then do the following
Restart MSConfig and select half of the disabled services and reboot
Is the problem still present ?
If Yes then deselect half of the services that you resumed and reboot
If no then select half of the remaining services and reboot
The intention here is to isolate the one service/driver that is causing the problem
-
Essexboy,
I got to the end of Step 2 - and rebooted the computer. The problem is still present. I went as far as the first part of Step 3, since Windows did not "behave itself." I re-activated the firewall until I hear back from you. (Didn't think it would be a good idea to be without it during the wait). Everything else is the way you told me to change it in Step 2.
One other note: In Step 2, where you told me to Click Disable All, and then click <OK>, I received a message which read as follows:
An access denied error was returned while attempting to change a service. You may need to log on using an Administrator account to make the changes.
I was logged on under the Windows DEFAULT Administrator account at the time. ?????
What would you like me to do next?
-
Bear with me whilst I chat with some techs
-
O.k.
One other note...in re-checking the Event Viewer SYSTEM log again, I have noticed a change. At each log-on time, there are now only 2 error messages + 1 warning message shown. I have uploaded a screenshot of one of the messages for your review. The 2nd error message is still the same as before (the one about the transport not initializing the addresses). [Unable to upload a screenshot of the other message as I keep getting a file too large message here].
-
Lets have a proper look at them using VEW
1. Please download the Event Viewer Tool by Vino Rosso http://images.malwareremoval.com/vino/VEW.exe and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:
* System
4. Under 'Select type to list', select:
* Error
* Warning
Then use the 'Number of events' as follows:
1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.
Please post the Output log in your next reply then repeat but select Application.
-
Here is the first log, essexboy.
-
Here is the second log.
-
This problem can occur if the File and Print Service component was not selected during the initial setup of the server or it has been deselected. When this occurs, the Server Service does not bind to the NetBIOS interface. A Windows-based computer which becomes a backup browser and does not have File and Print Sharing enabled is unable to share out the browse list to clients. Any computer that is to be included in the browse list must also have File and Print Sharing enabled.
To work around this problem, enable File and Printer Sharing on Windows domain controllers and any computer that is listed in the browse list.
This is the MS answer to the netbios error
The other errors are being generated by McAfee !!
So could you run a fresh OTL and I will delete all the McAfee I can find
-
O.k...I'll start on that now.
-
essexboy...
Forgot to ask...do you want me to copy and paste that same text shown in your post on page 1 again before running OTL?
-
No it is not necessary as I am just after McAfee
-
Here is the OTL log you asked for, essexboy.
-
Lets see what stopping the service does
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
- Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL
SRV - [2012/01/05 10:36:34 | 000,827,456 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Documents and Settings\Administrator\Local Settings\temp\0263401326831508mcinst.exe -- (0263401326831508mcinstcleanup) McAfee Application Installer Cleanup (0263401326831508)
O2 - BHO: (no name) - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - No CLSID value found.
O3 - HKU\S-1-5-21-1957994488-343818398-1606980848-500\..\Toolbar\ShellBrowser: (no name) - {09B71986-2AC5-482D-B6CB-42EA34F4F85B} - No CLSID value found.
O15 - HKU\S-1-5-21-1957994488-343818398-1606980848-500\..Trusted Domains: mcafee.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-1957994488-343818398-1606980848-500\..Trusted Domains: mcafee.com ([]https in Trusted sites)
O16 - DPF: {1D082E71-DF20-4AAF-863B-596428C49874} Reg Error: Key error. (TPIR Control)
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} Reg Error: Key error. (Wwlaunch Control)
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\drivers\etc\hosts.old:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\register.bat:SummaryInformation
@Alternate Data Stream - 198 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C48D4F24
:Files
ipconfig /flushdns /c
:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
- Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
-
Greetings again essexboy,
Here is the OTL log from the scan after running the OTL fix. The boot problem is still present. After logging back on again, an "open file" warning appeared on the screen (for OTL); I clicked on <CANCEL> so the Desktop could finish loading the icons.
* In checking the Event Viewer SYSTEM log, it is now only displaying 1 error entry and 1 warning entry.
-
Is the remaining error netbt ?
-
Yes it is.
-
I have just rechecked the netbt reg key from the first OTL and it looks correct
Did you enable sharing
-
Not that I know of. Is there a way to check?
-
Yep have a look here
http://compnetworking.about.com/od/windowsfilesharing/ht/enable_disable.htm
-
I went in the Control Panel and clicked on Network Connections. The next item was shown as Local Area Network. After clicking on that, it displays a box titled LAN, and shows something like 10,200 bytes sent and a little over 8000 received. A DISABLE button is also displayed. This computer is a standalone, not on any network. Internet connection is via cable modem.
Do you want me to disable that connection or is this the connection with my ISP?
-
Do you want me to disable that connection or is this the connection with my ISP?
Just in case essexboy is not around until tomorrow...
The LAN connection is most probably your ISP connection. But, in addition, disabling / enabling *sharing* (what essexboy is talking about) is NOT the same as disabling the LAN connection itself. Maybe you might want to read again the link he posted?
-
Ady4um,
I did re-read the article, and as I indicated, the ONLY item shown when I click on Network Connections in the Control Panel, is Local Area Connection. When I highlight it and right click on Properties, it displays what is shown in the attached screenshot. Sorry...but I am still in the dark here.
-
Your screenshot is enough. From the link posted by essexboy:
4.On Windows XP or Windows 2000, ensure the "File and Printer Sharing for Microsoft Windows" checkbox is checked to enable sharing
So, in theory, you have it enabled already, according to your screenshot.
Maybe essexboy would want from you to disable it, reboot, enable it again, reboot? I don't know and it's up to him, so please wait for his next instructions. At least now you posted the relevant screenshot for him, so later you two can save some time.
-
Thanks, Ady4um!
-
Is your printer connected via Wifi ???
Just a wild guess. :)
-
Your screenshot is enough. From the link posted by essexboy:
4.On Windows XP or Windows 2000, ensure the "File and Printer Sharing for Microsoft Windows" checkbox is checked to enable sharing
So, in theory, you have it enabled already, according to your screenshot.
Maybe essexboy would want from you to disable it, reboot, enable it again, reboot? I don't know and it's up to him, so please wait for his next instructions. At least now you posted the relevant screenshot for him, so later you two can save some time.
Spot on - disable - reboot - check the system - enable - reboot
What differences were noted
-
Done. Boot problem still remains. Event Viewer SYSTEM log continues to show NetBT error & 1 warning message.
* Forgot to mention...after that last OTL fix was run...two games, Star Defender 3 and 4 will NOT play now.
-
Totally out of ides now and the Techs do not have a clue either
OTL did not touch those programmes unless they used the bad activex's
-
I appreciate all your help just the same, essexboy!
I imagine the only resolution is going to be to get another computer altogether.
Best regards,
-
Why another computer? Backup your data / documents / connection info / contacts... and reset Windows to Factory Default (or reinstall Windows, or whatever equivalent option you have, according to the specific computer). I mean, the hardware is working, doesn't it?
In addition, have you tried setting the BIOS to default values yet?
-
Hi Ady4um,
I apologize for the unusually long delay in getting back to you; had a medical issue arise and was out of commission for a while.
I believe the boot problem has now been resolved. I swapped out the keyboard I was previously using and plugged a new one in after I shut down the computer. (The old keyboard had reached the point where too many of the keys were sticking badly). Upon booting up, lo and behold...the system booted normally again!
Thus far, I've not had any further boot issues arise. I don't really understand how changing out the keyboard fixed the boot problem...but I'm glad it did.
I appreciate all your help, as well as, essexboy's! Again...my apologies for the unusually long delay in posting back.
-
I am just glad it is resolved .. Was it a USB keyboard ?
-
Hi essexboy,
Yes it was. The make/model is a Microsoft Digital Media 3000 (Intellitype Pro). The spare keyboard I plugged in was a Dell using a PS2 connector. Incidentally, I had ordered a replacement MS Digital Media 3000 keyboard which just arrived today (from Newegg). I shut down the computer and plugged this replacement in, and the computer still boots normally.
I'm guessing there must have been some defect with the old keyboard???
-
It could well be a bad connection in the USB port causing that... I must admit it is not one of the areas I think to check
-
That makes two of us! Given the description in my OP of the boot problem I was having and those errors/warning messages seen in the Event Viewer System Log...it really seemed like there was a major issue with the OS (or malware).
I also didn't plug this replacement keyboard in the same USB port on the back of the computer like the old one was, but instead plugged it in a USB port on the front.
-
I do not like USB keyboards as you can not get into Safe Mode as the drivers for the USB keyboard must load first to activate it.
I make sure my systems have a PS2 keyboard as I have had situations where I have needed to get into Safe Mode to recover my system.
-
Thanks very much for the info, YoKenny! That was also a problem I encountered when the boot problem began; I wasn't able to get into Safe Mode.