Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Accidentally terminated a process. Computer running like safe mode :( please help.


  • Please log in to reply
5 replies to this topic

#1 ChrisMead

ChrisMead

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:07 AM

Posted 25 May 2010 - 12:14 PM

Hey all. I hate to be the newb who hops on here simply to exploit your knowledge for my benefit, but that's why I'm here. I don't know much about computers...

What I have:
A Toshiba laptop running windows XP. It's had problems bogging down for a while, but still operates with minimal trouble and manages to browse faster than my desktop.

What I did:

-First, Firefox commonly bogs the bleep out of my laptop and everything slows down. When this happens I terminate the process (firefox) in task manager.
-Because firefox has been the culprit 100% of the time, I've begun (stupidly) locating it in the processes window not by name, but by simply looking for the file which is taking up the most operating space.
-Last night this happened. However; I noticed a split second too late that the process I was ending this time was actually different, I only caught a moment to look but I believe it was svchost of some sort.

What the problem is:
The computer did not shut down but instantly began running differently. I tried restarting and all of the problems were still there. There could be more but what I've noticed so far is:

-Actual windows have boxy headers like safe mode (no beveled edge look)

-Computer is showing connectivity to wireless, but will not go online. I opened the connection and it showed 0 packets sent and 0 received, doesn't seem good?

-Speakers are not be working Though I feel like I could still hear sound, I know some (perhaps all?) computers have internal speakers as well. Though it could have been the TV making me think I heard something.

-Screensaver no longer operates. I normally have it set to 10 minutes, it just won't come on now.

-Everything is SLOW in general. When I log in I see my desktop picture come up in the background and no desktop icons load. I have to open task manager and launch a program from there, then minimize task manager, and THEN my desktop icons and start menu etc. will show up.

I'm sure more problems exist, but this is what I've found so far.

What I've tried to solve it:
Rebooting
System restore to three separate earlier times.
I don't know what else to do?

I know one of you computer aces or IT techs out there has to know how to solve this. I have looked around online and seen some similar problems and implemented their solutions to no avail.

I thank you extraordinarily in advance for your help, and apologize ahead of time for posting this on every computer forum I can find that seems legit.

-chris

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:07 AM

Posted 25 May 2010 - 12:50 PM

Stopping any process in Task Manager...only stops it until the system reboots...at that time all processes listed begin anew.

Doing such...cannot cause any system complications beyond rebooting.

So your cause/effect reasoning seems to be wrong.

System manufacturer and model?

Do you have recovery/restore disks...or such partition?

Do you have a MS Genuine XP CD?

I suggest taking a look in Event Viewer and noting the base detail for the last 5 errors (not information items, not warnings) listed there. Post the Source Category and ID data for each.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

Louis

#3 ChrisMead

ChrisMead
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:07 AM

Posted 25 May 2010 - 02:02 PM

Thanks a million for the response Lou. I'm rather inexperienced in computer troubleshooting so bear with me

Stopping any process in Task Manager...only stops it until the system reboots...at that time all processes listed begin anew.

Doing such...cannot cause any system complications beyond rebooting.

So your cause/effect reasoning seems to be wrong.


Way to go. In light of this info it seems I must have encountered an error which caused all of these problems. When I first encountered it I terminated the process before having a chance to take note of other errors, thus making me believe I had caused it.

System manufacturer and model?

I'm not entirely sure what this means. I would have said Toshiba Windows XP, but here's everything under my computer info:

System:
Microsoft Windows XP
Media Center Edition
Version 2002
Service pack 2

Manufactured and supported by:
Toshiba
Satellite
Genuine Intel® CPU
T2050 @ 1.60GHz
1.60GHz, 0.99GB of RAM

Do you have recovery/restore disks...or such partition?


I do not have anything backed up, I believe I should be able to locate all discs etc. that came with the computer if needed. I don't have partitioned drives.

Do you have a MS Genuine XP CD?


I got this laptop from my sister, I just called her and she can't find anything.
I was able to locate something I feel may be key though, a disc in shrink wrap labeled "Toshiba Recoevery and Applications/Drivers media"

I suggest taking a look in Event Viewer and noting the base detail for the last 5 errors (not information items, not warnings) listed there. Post the Source Category and ID data for each.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

Louis


Well I've got a good amount of errors. I can use a thumb drive and transfer a text file of the list as shown in the tutorial if you believe it will help, but I'll list the closest ones following my last successful use of firefox:

I used my browsing history to try and determine when this happened as I was online when it occurred.
My last activity opening a webpage was 5/25/2010 @ 12:11AM. I was still looking at this page only moments later when things went south.

These are the most immediate errors following my last browser activity

On 5/25/2010 @ 12:12AM the following error is listed under system:
Source: ftdisk
Category: none
Type: error
User: NA
Event ID: 45
Description: The system could not successfully load the crash dump server


On 5/25/2010 @ 12:12AM the following error is listed under system:
Source: ftdisk
Category: none
Type: error
User: NA
Event ID: 49
Description: Configuring the page for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory


On 5/25/2010 @ 12:15AM the following error is listed under applications:
Source: Event System
Category (50)
Type: error
User: NA
Event ID: 4609
Description: The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007041D from line 44 of d:\comxp_sp2\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error



On 5/25/2010 @ 12:15AM the following error is listed under system:
Source: DCOM
Category: none
Type: error
User: NT AUTHORITY\SYSTEM
Event ID: 10005
Description: DCOM got error "The service did not respond to the start or control request in a timely fashion. " attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097}

There were three additional errors within 2 seconds of this one listing different numbers at the end, I will copy them to you if needed


On 5/25/2010 @ 12:15AM the following error is listed under system:
Source: Service Control Manager
Category: none
Type: error
User: NA
Event ID: 7009
Description: Timeout (30000 milliseconds) waiting for the themes service to connect


On 5/25/2010 @ 12:15AM the following error is listed under system:
Source: Service Control Manager
Category: none
Type: error
User: NA
Event ID: 7000
Description: The themes service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion




Whew, that was some learning and a lot to type while eating lunch and watching my niece. I hope this is enough to help me. Thank you a million times over already, I'll be copying this over to the other forums I posted this on.

Let me know whatever other info might be usable in remedying my situation.

-chris

#4 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 34,563 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:12:07 AM

Posted 25 May 2010 - 03:05 PM

System manufacturer and model?

I'm not entirely sure what this means. I would have said Toshiba Windows XP, but here's everything under my computer info:

System:
Microsoft Windows XP
Media Center Edition
Version 2002
Service pack 2

Manufactured and supported by:
Toshiba
Satellite
Genuine Intel® CPU
T2050 @ 1.60GHz
1.60GHz, 0.99GB of RAM


If you take a look here: List of Satellite models
You can see that Toshiba has manufactured quite a few models over the years.

If you turn your laptop over there should be some sort of data plate or sticker with the manufacturing information that would include model number and serial number. That would be a huge help in narrowing down the information necessary field for you.

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#5 ChrisMead

ChrisMead
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:07 AM

Posted 25 May 2010 - 03:46 PM

If you take a look here: List of Satellite models
You can see that Toshiba has manufactured quite a few models over the years.

If you turn your laptop over there should be some sort of data plate or sticker with the manufacturing information that would include model number and serial number. That would be a huge help in narrowing down the information necessary field for you.


Thank you animal. The laptop according to the label on the bottom is:
Satellie A105-S4284 System Unit
Model number PSAA8U-0FH02K

Do you think it's malware or something different?

I had this advice from a user at CNET but don't want to do it if it's not the problem

"Download ALL of the tools below on a friend or family member's, CLEAN computer and copy them to a CD or flash drive, then transfer them to the problem machine.

First, after transferring it to the problem machine, run the following tool to help allow the removal programs below to run. (courtesy of Grinler at BleepingComputer.com)
There are 4 different versions. If one of them won't run then try to run the other one. Be patient.... as a black window should open, then close after finding all the background programs.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

Rkill.exe http://download.bleepingcomputer.com/grinler/rkill.exe
Rkill.com http://download.bleepingcomputer.com/grinler/rkill.com
Rkill.scr http://download.bleepingcomputer.com/grinler/rkill.scr
Rkill.pif http://download.bleepingcomputer.com/grinler/rkill.pif
_____________________

IMMEDIATELY after running the "Rkill" tool above, run/install the Malwarebytes and SuperAntispyware installer and update files from the links below which you've also copied to a CD or flash drive, and transfered to the problem machine. Do NOT restart the computer after running Rkill.

Once downloaded and before transferring Malwarebytes and SuperAntispyware to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe

Next, install and run a full system scan with the SuperAntispyware program and the manual updater from the links below. As before, you may need to rename the installer file to get the program to install.:

SuperAntispyware
http://www.superantispyware.com/

SuperAntispyware Manual Updater
http://www.superantispyware.com/definitions.html
____________

In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder...."


Thanks,
-chris

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:07 AM

Posted 25 May 2010 - 04:20 PM

First...a word of caution about making multiple posts about same issue at different sites...at the same time. I know that it seems that this might increase the chances of finding out what's wrong and/or how to remedy it...but I believe that this behaviour can actually impede any process toward resolution.

A classic example is what you were advised to do at the CNET forum. Essentially, someone gave you the directions for using a BC Guide to remove a particular kind of malware item...where you have no known signs of the particular type of malware item to which this guidance applies. Such advice will be freely offered by well-intentioned persons when OPs take the "shotgun post" approach...and they will probably conflict with a logical approach to finding out what the problems (multiple) may be and how to best negate them.

In any case:

System Specs

Event ID 45, Source: Ftdisk

Event ID 49, Source: Ftdisk

Event ID 4609, Source: Event System

I would say...that the errors noted probably indicate a need to do a need to do serious maintenance or a clean install. I don't see any indications of malware that a person like me can recognize...but the fact that you state that you have a lot of EV errors...indicates a lot of system error messages which have been totally ignored by the user.

You haven't provided any detail pointing to hardware problems, so I am bypassing that train of thought, for the moment.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file.

When scanning is done, Edit/Select All...then File/Save Selected Items. Save the report as BSOD.txt. If the reported date for errors is not in chronological order (most recent at top), then you may want to sort that column to make it so...before saving the file.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

If BlueScreenView does yield anything, that's a good thing :thumbsup:.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users