XP startup nightmare

[blackcat]

lucky I have my computer partitioned Jap/Eng. so I can still use the japanese side and the web!

I installed ADAWARE6 and removed spywareetc, updated from the older version of adaware,,after I shutdown and went to use the english side again total system lock up! I imagine I deleted some registry keys or exe file,,but I`m not sure.
anyway can anyone help here,
startup I get the screensaver.....but I can use anything, CtrlAltDel brings up task mngr....lots of progarms running and CPU usage 100%.
I managed to get WINDOC running and after an hour of scanning it repaired several errors. but it made no difference still lock up
many restarts later and choosing F8 on startup and selecting a different startup basiclly the same result

I also tried ending all the running programs in task man. but even if I finished and restarted...back to square 1.

I dont know what to do next......bloody computers! any help would be nice thanks.

[Andocrates]

Is system restore turned on?

[blackcat]

OK I got into "safe mode" and tried to restore to an earlier date but it rejected it.

When I try to connect to the web C/WINDOWS/system32/shdoclc.dll.dnserror.htm

also I cant fine my network connections maybe thats because its in safe mode?

any ideas??

[cstaylor]

Click on processes on the task manager and tell us what is running at 100%.

[blackcat]

CS.....
Ok on the processes on task mangr:
(all exe)
nopdb
NVSV32
SahAgent
NPROTECT
Mediadet
BigMac
DFSA~1
Winnet
CTNotify
qttask
DEVLDR32
System32
SPOOLSV
EXPLORER
taskmgr
SVCHOST
" "
" "
" "
" "
LSASS
services
WINLOGON
CSRSS
SMSS
system
system idle process


the total CPU usage says 100% I can close most processes but some are not too happy as the desktop icons vanish then a message saying the computer will now close(cant remember the exact message)

I tried safe mode and can use it, I dfrag the harddrive anyway. but I dont really know what the problem is or what to look for?
I tried the startup Debugg mode......no change!

(BTW OS is XP pro.)


I can use safe mode and looked at the help menu troubleshooting etc, any reccomendations?

[cstaylor]

In the Processes view, click on the column labelled CPU, when the top item is 99% or 100%, tell me the name of that process.

[Big Booger]

CS is spot on. Sort the processes in order from greatest usage to least. Then close the process that is eating up the CPU the most.

Then click start, click run
type MSCONFIG

then under general, click on diagnostic startup, and click apply. Then hit yes when it asks you to restart. Restart in normal mode and tell me if that fixed your issue.

[cstaylor]

I doubt it will fix the issue. I would like to know what is eating CPU so I can tell him what to remove. I'd bet a beer that it's in blackcat's Run key in the Registry.

[Astropenguin]

Looking through the list of running processes i noticed bigmac.

could be a virus infection.

see http://www.sophos.com/virusinfo/analyses/w32surnovad.html

Hope that is of some assistance.

[Big Booger]

Basically what I suggested should allow you to enter your PC in normal mode without having to resort to safemode.

Then once in normal mode you can do the troubleshooting. And from what I see in terms of Bigmac,
sounds like it could be a virus causing the issues.

Run your AV, scan it, let it clean any virus it finds and from there your PC should be back to normal. Always remember to keep your AV up-to-date, and run windows update often as well.

[blackcat]

Ok guys thanks, Ill try that now.
BTW I had AV but it expired recently,,I dloded the MS patch for the latest virus.but now im thinking if adaware deleted that patch???
perhaps that why the japanese side is unaffected??

anyway...be back soon.

[blackcat]

Ok
no go there.

CS If you mean under view in the process 'selected columns' then i hope so as thats all i can see under 'view' in process.

image name
user
memory
CPU
are all checked..nothing else.

I ended processes on several columns.

EXPLORER is using most mem about 11,000....the others 2,000-8,000.

ending EXPLORER drops all the icons and toolbar,, anyway I cant use start as I move the cursor around the screen nothing works and it changes to the hourglass over start!
so in task mgr I went new task..MSCONFIG and as you said Big Booger ran a diagnostic startup...on restart I have a different toolbar but the same problem.
finally I cant end all processes as I get a message "windows must now restart because the RPC terminated unexpectedly" I think this was after ending CSRSS.

[blackcat]

BTW thanks for the link "Astro"
but i cant do much of suddested there as I cant even use start/run....the system is locked on opening and only taskmngr works!

[cstaylor]

blackcat... here is a link to a screenshot I took of Taskmanager. Click on the CPU column (marked "click this column") until one process comes to the top with almost 100 or so in the CPU column. Then post for us the corresponding "Image Name" so I know what's eating your CPU.

[Big Booger]

See the image below for explanation and instruction:



Once you have access to your PC, then you can run a virus scan, and get rid of any virus that may be causing this.

Below is an Image of the MSCONFIG Diagnostic-Startup Screen:

[cstaylor]

Ewwww.... JPG!

[Big Booger]

I have to save space fartbag.


It gets the job done.

[cstaylor]

Hey, don't get me wrong, I appreciate your suggestions... but, JPG? Yuck...

[blackcat]

CS and Big Booger

Ok guys I tried what you said....still no change

CS........I clicked the CPU column =99 'Image file' reads EXPLORER.EXE 11,428

BB.......I tried what you said today and again tonight, It was slow to respond but I managed to go into diagnostic restart...as it shut down I got a 'program must end now panel' titled EXPLORER and then WINNET...and then EXPLORER panel then said this program is not responding...
after pressing END NOW it closed, on restart I still cant get into the PC, only task manager...and on the last restart in diagnostic I got the System Config. Utility panel show up but thats it ..still locked up.

I am as you can tell not a wizz in this area but I appreciate any suggestions..Ill give it a go.
thanks

[cstaylor]

Sounds like you got an errant shell extension. You can use this tool to disable shell extensions.

[blackcat]

OK CS, Ill try that, but before I do I have a question.
How will I be able to use it as I can only dload to the japanese side?

I just went into safe mode(eng side) with networking and it locked up when i tried to go online.

The CD drives dont work in safe mode either so...can I copy it to a floppy perhaps? just want to check before I dload it.
thanks

[cstaylor]

Search the net for "Loading Registry hives in Windows XP" You'll want to load the registry Hive for your English versions's CURRENT_USER into regedit.

[Big Booger]

Try this, in addtion to what CS says,

Boot your PC, hit F8 I think it is that takes you to the safe mode selection screen. Scroll down to "Boot to the last known good configuration" and select that. Then tell me if it works.

We'll keep at it until you get it working.

If the above doesn't work:

give this a shot:

http://www.michaelstevenstech.com/XPrepairinstall.htm

That should get your XP back in shape.

----------------------------------------------------------------------------
One other thing you can try,

boot into safe mode with the task manager.

Click file, click New Task (run),
then type:

CMD

Then type:

sfc /scannow

(there is a space between the C and the /)

MAKE SURE YOU HAVE YOUR XP DISK READY when you type this and hit enter. That should repair your system files, enough so to get your XP machine to work functionally. Not really sure as I don't know the exact cause of your issue. that is a built in system file checker that should find and repair any system files that are damaged.

[blackcat]

OK guys thanks, I`m out of my depth here but Ill give it a try.
may not have time till friday.... will be in touch

[blackcat]

sorry guys I`ve been busy, I will try some repairs this weekend.

[blackcat]

OK Big booger and CS taylor.
heres the latest, I had a friend come over and have a look and he cant figure it out either...we tried some of the things suggested but he now suggests to format the c drive and do a fresh install...of course some data will have to be backed up and I can send some to the shared F drive, used for both jap/eng sides.

the only other thing I could try is to dload a virus scanner on ther japanese side and install to the F drive...try to use it in safe mode in eng. side?

any suggestions??

[Big Booger]

Yeah a good ol format and reinstall might be the best. I am about to do it as soon as I get my new 160GB HDD.

[blackcat]

BIGB,
thanks for your help, Just let me check I have it right.
1. I go into the partition and format the C drive, then I can boot from CD and do a fresh install to the same location, F drive shouldnt be effected?

2. first I should copy images documents etc, that I want..but how about passwords,driver details Internet connections etc, I`m worried they will all be screwed up(I havent done this before I`m just your average surfer really).
are there any folders files etc, I really must keep??

thanks again.

[Big Booger]

What I backup when I reformat:

(1)Everything in the 'My Documents' folder
(2)IE favorites
(3)Outlook information
(4)any files or folders I have downloaded that I want to save

Then I just pop the CD in, let it do its thing, then I format from within the XP install. Just choose to do a fresh install instead of a repair. It will ask you if you want to confirm if you want to format C:/, just click the button that it says.. I think the button is C.. but I am not sure.

You don't have to format C from within windows. I find doing it during the install of XP is much better, faster, and easier.. you can even do the quick NTFS format if you want to save time.

Every other file on your system will be reinstalled that windows needs when you reinstall. However none of your settings or installed programs will be installed when you format and reinstall.

You will have to set up your internet connection, your personal settings, system clock, location and all that..

But I think it is good to reformat and start over about every 6-10 months.. get rid of the crap that has built up and slowed your PC down. You should notice that your computer is faster.

Also make sure to run the update immediately after you reinstall, and install your Antivirus and Firewall ASAP!!! or you could get that damn RPC worm.

Drive F will not be affected if you don't touch it at anytime during the install, but it depends on which OS was installed first. Was the English OS installed first, and then the Japanese? (that means the boot files for both machines are installed on C: drive. You might want to back the boot.ini file up if so)
Then if you can't boot your Japanese OS after the reinstall, just copy the boot.ini file contents into the boot.ini file written on C: drive after the reinstall, and you should be able to see it.

[blackcat]

ok bigbooger I`ll try that tomorrow
I cant recall which was installed first the japanese or english(a friend did it). I have copied the boot.ini back up file and exe. to a floppy.
if the eng. was installed first you say i may not be able to boot to japanese? so I insert the floppy in the c drive english side and install that file into the boot.ini? is that right?

One other thing..I`m worried about the lan setiings internet connections...should I contact my provider?

thanks again.