Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Weird issue with my OS


  • Please log in to reply
9 replies to this topic

#1 Cageman

Cageman

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:11 PM

Posted 23 April 2010 - 09:18 AM

I'm running XP Pro and have a problem when my PC starts. It will get through the normal boot process and get to my desktop and freeze. The only way I've found to get by it is boot into safe mode, and run a system restore. The system restore will fail but it will then boot and not freeze. Something is screwed up in my start up and I'm wondering if I should boot from the system disk and try to do a repair. I don't what to loose my existing proggies and setings though. I'm running dual boot with Windows 7 64 bit and just haven't had the time to get everything loaded on the W7 OS and still depend on the XP OS to get my work done.

I did have an issue a while back with some malware and I think that may have hosed something up. I know a format and re-install would be best, but don't have the time right now.

What's everyone's thoughts on the repair option?

One thing I noticed- My system will sometimes lock-up after running too. When it does, it's a windows explorer shut down issue. Any help?

I've ran NOD32 scans, superantispyware scans, spybot S & D scans, and malwarebytes scans and done all the cleaning. I can't seem to fing the bug though. All these scans have be done running in the normal OS though. Would running them in safe mode help?

Thanks!

Edited by hamluis, 23 April 2010 - 10:11 AM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,289 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:11 PM

Posted 23 April 2010 - 10:28 AM

http://www.punksbusted.com/forums/index.php?showtopic=35677

I would suspect that this is a possible cause.

I have deleted your HJT log data for the moment...will put it back later if it seems that this is a malware issue.

Typically, boot problems that can be resolved by booting into safe mode...are driver issues, not malware issues.

I'd like for you to do a couple of things.

Read the following, http://www.punksbusted.com/forums/index.php?showtopic=35677.

Then, download/install BlueScreenView - http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file to run the program.

When scanning is done, Edit/Select All...then File/Save Selected Items. Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Then...I want you to check Event Viewer for errors (not warnings, not information items) which have been noted which approximate the timing of your most recent boot sequence situation. Double-click on any line item in Event Viewer to see the pertinent detail for that item.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

Lastly...I want you to check Device Manager (Start/Run...type devmgmt.msc and hit Enter) for any indication of device/driver problems.

After you have done all of the above...I would like you to run the chkdsk /r command on your system.

Start/Run...type chkdsk /r (space between k and /) and hit Enter. Type Y in response to onscreen query and hit Enter. Reboot the system, the chkdsk /r command will execute...upon completion, the system will attempt to boot into XP.

Let us know how it goes and we will know the next step to take.

Louis

#3 Cageman

Cageman
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:11 PM

Posted 23 April 2010 - 04:53 PM

o.k., Here's the info:

Read the following, http://www.punksbusted.com/forums/index.php?showtopic=35677.

Then, download/install BlueScreenView - http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file to run the program.

When scanning is done, Edit/Select All...then File/Save Selected Items. Save the report as BSOD.txt.



I did all this, but it didn't scan.



Lastly...I want you to check Device Manager (Start/Run...type devmgmt.msc and hit Enter) for any indication of device/driver problems.



I did this, and the disk came back clean.

Here's the BSOD from event viewer though:

Type Date Time Source Category Event User Computer
Information 4/23/2010 3:13:44 PM SecurityCenter None 1800 N/A WESTPHAL-1
Information 4/23/2010 3:13:32 PM Diskeeper None 1 N/A WESTPHAL-1
Information 4/23/2010 3:13:27 PM LightScribeService None 4 N/A WESTPHAL-1
Information 4/23/2010 3:06:51 PM SecurityCenter None 1800 N/A WESTPHAL-1
Information 4/23/2010 3:06:15 PM Diskeeper None 1 N/A WESTPHAL-1
Information 4/23/2010 3:06:12 PM LightScribeService None 4 N/A WESTPHAL-1
Information 4/23/2010 2:53:47 PM MsiInstaller None 1035 SYSTEM WESTPHAL-1
Warning 4/23/2010 2:53:47 PM MsiInstaller None 1015 Thomas Westphal WESTPHAL-1
Information 4/23/2010 2:48:40 PM SecurityCenter None 1800 N/A WESTPHAL-1
Information 4/23/2010 2:48:07 PM Diskeeper None 1 N/A WESTPHAL-1
Information 4/23/2010 2:48:03 PM LightScribeService None 4 N/A WESTPHAL-1
Information 4/23/2010 10:03:27 AM Diskeeper None 24 N/A WESTPHAL-1
Information 4/23/2010 9:02:46 AM Outlook None 30 N/A WESTPHAL-1
Information 4/23/2010 8:55:31 AM SecurityCenter None 1800 N/A WESTPHAL-1
Information 4/23/2010 8:55:22 AM Diskeeper None 1 N/A WESTPHAL-1
Information 4/23/2010 8:55:16 AM LightScribeService None 4 N/A WESTPHAL-1
Error 4/23/2010 8:50:26 AM Application Error None 1001 N/A WESTPHAL-1
Error 4/23/2010 8:50:12 AM Application Error (100) 1000 N/A WESTPHAL-1
Error 4/23/2010 8:49:57 AM Application Error None 1000 N/A WESTPHAL-1
Information 4/23/2010 12:00:40 AM Diskeeper None 202 N/A WESTPHAL-1

This is today's log.

How can I get BSV to scan?


No problems



Start/Run...type chkdsk /r (space between k and /) and hit Enter. Type Y in response to onscreen query and hit Enter. Reboot the system, the chkdsk /r command will execute...upon completion, the system will attempt to boot into XP.



#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,289 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:11 PM

Posted 23 April 2010 - 05:18 PM

BSV only reports if you have any dump files from BSODS...so you don't have any and that means that you don't have a known driver issue that resultsl in BSODs.

If you have that PunkBuster software installed...I suggest uninstalling it, then reinstalling it.

You need to double-click on the line items representing the following...post the detail for each in your next post.

Error 4/23/2010 8:50:26 AM Application Error None 1001 N/A WESTPHAL-1
Error 4/23/2010 8:50:12 AM Application Error (100) 1000 N/A WESTPHAL-1
Error 4/23/2010 8:49:57 AM Application Error None 1000 N/A WESTPHAL-1

Louis

#5 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:11 PM

Posted 23 April 2010 - 10:00 PM

It's also possible that memory dumps are turned off...

1. Click Start, and then click Run.
2. Type sysdm.cpl, and then click OK.
3. On the Advanced tab, in the Startup and Recovery section, click Settings.
4. In the Write debugging information list, click Kernel memory dump, and then click OK.
5. Click OK to close the System Properties dialog box.
6. In the System Settings Change dialog box, click Yes if you want to restart your computer now. Click No if you want to restart your computer later.

Your settings should look like this (with XP instead of Windows 7, obviously):
Posted Image
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#6 Cageman

Cageman
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:11 PM

Posted 24 April 2010 - 12:04 PM

Here's the info Louis-

Error 4/23/2010 8:50:26 AM Application Error None 1001 N/A WESTPHAL-1
Fault bucket 223121472.
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 32 33 31 32 31 34 37 22312147
0010: 32 0d 0a 2..



Error 4/23/2010 8:50:12 AM Application Error (100) 1000 N/A WESTPHAL-1
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.5512, fault address 0x0001295d.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 72 77 ure drw
0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 64 62 67 68 65 6c 70 2e dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 32 39 35 64 295d



Error 4/23/2010 8:49:57 AM Application Error None 1000 N/A WESTPHAL-1
Faulting application explorer.exe, version 6.0.2900.5512, faulting module msvcr80.dll, version 8.0.50727.4053, fault address 0x0001500a.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 35 35 31 32 20 00.5512
0030: 69 6e 20 6d 73 76 63 72 in msvcr
0038: 38 30 2e 64 6c 6c 20 38 80.dll 8
0040: 2e 30 2e 35 30 37 32 37 .0.50727
0048: 2e 34 30 35 33 20 61 74 .4053 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 31 35 30 30 61 0001500a
0060: 0d 0a


I also turned on memory dumps and next time I reboot I'll post the BSV file.

Thanks for the help folks!

#7 hamluis

hamluis

    Moderator


  • Moderator
  • 56,289 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:11 PM

Posted 24 April 2010 - 12:37 PM

Worth reading, Why Msvcr80.dll Errors?.

I think that I would run the sfc /scannow command. Looks to me like something is wrong with your files.

Version 6.0.2900.5512...refers to Vista, not XP. Vista explorer.exe files...I don't get it.

http://en.wikipedia.org/wiki/Microsoft_Windows

Louis

Edit: Explorer file version is for XP SP3, not Vista.

Edited by hamluis, 25 April 2010 - 05:09 PM.


#8 Cageman

Cageman
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:11 PM

Posted 25 April 2010 - 02:57 PM

I had a couple crashes after turning on the memory dump but BlueScreenView still comes up empty. I also ran the sfc /scannow command and it copies over some DLL's but am still having issues. Right after doing it I couldn't even open my computer without windows explorer erroring out. I'm back up after doing an unsuccessful system restore.

I'll keep you updated on how things progress. Maybe a reformat-reinstall is in my future.......

:thumbsup: :flowers:

#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,289 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:11 PM

Posted 25 April 2010 - 04:20 PM

Well...if I had an XP install reflecting Vista files...I'd do a clean install. Now that I know that wasn't a Vista file...I would still do a clean install since I see no point in trying to build upon unknown problems.

Louis

Edited by hamluis, 25 April 2010 - 05:11 PM.


#10 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:11 PM

Posted 25 April 2010 - 04:31 PM

I agree. In this case, a clean install would likely be the easiest and most painless solution to this problem. :thumbsup:

Edited by keyboardNinja, 25 April 2010 - 04:32 PM.

PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users