PDA

View Full Version : PC only works in safe mode



Ravage
03-06-2007, 07:33 PM
Howdy

A couple of nights ago some beeping occured while downloading some stuff.
Computer froze so I reset.
Beeping resumed soon after.

Was tired so went to bed after switching off at the wall. Tried to start PC the next night and it would not load past the windows screen (with the moving blue bar).

Opened the case and was assailed by the faint odour of burnt electronics.
Checked the ram (2 x 512 mb), one of the sticks smelt bad.

Tried booting with only one stick, same problem. It would however boot up in safe mode (wouldn't boot up using suspected faulty ram).

Obviously something loading up at the start is causing the problem but I'm not sure how to find the culprit.

Typing msconfig only shows about 5 entries (AVG, ZA, fast, coolswitch and flashget). Also tried without flashget just in case.

Any ideas what things might be causing the lack of start up, or ideas where to look to check things 1 by 1?

cheers

Ravage:confused:

winmacguy
03-06-2007, 07:49 PM
I suggest you grab HiJacKThis (HJT) off Speedy's signature and run that as you may have picked up a virus.
Post the findings of the HJT file on this site and Speedy will do the honours.
Either that or you have a hardware problem.

Ravage
03-06-2007, 08:26 PM
Howdy

I'll try HJT, should also mention it's WinXP home SP2.

If it is software related where would I look?

cheers

Ravage

winmacguy
03-06-2007, 08:30 PM
If it is software related, HJT will show us when you post the report.

The_End_Of_Reality
03-06-2007, 08:35 PM
I doubt that it is software... If you can smell burnt chips then it is possible that something has gotten damaged somehow... have you had a power surge recently? Possibly both RAM sticks have been damaged, one worse than the other... Safe mode uses less RAM which is why the PC would be able to boot into Safe more and not normal with the supposidly good stick in

Ravage
04-06-2007, 05:16 PM
Howdy

When I managed to boot into safe mode I had been doing it with minimum hardware (ram from another pc, no dvdroms or floppy drive, only 1 harddrive with winXP installed)

when I tried with the 2nd HD connected (to see if the data was intact) it would not boot into safe mode either (froze up after the list of necessary files was displayed)

perhaps other hardware was damaged somehow????

here is the HJT file just in case


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 12:52:42 a.m., on 4/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\system32\fast.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1177760407218
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 3400 bytes


cheers

Ravage

Ravage
04-06-2007, 05:20 PM
Howdy

Ticking these options seemed to fix the problem


O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

thanks guys

HJT rocks

Ravage

Ravage
04-06-2007, 06:32 PM
Darn it all


After putting the 2nd hd back into the PC to test it the computer would not boot, even in safe mode.

Turns out the hd is faulty and just having the ide cable plugged in (but no power) stopped the system from working.

Completely removed 2nd hd again. Everything seems to be fine.

I just hope removing those things with HJT will have no detrimental effects

cheers

Ravage

The_End_Of_Reality
04-06-2007, 07:46 PM
Try the suspect HDD in another PC and see if that has issues, also try the good HDD on the channel/cable header that you had the suspet HDD on.

Nothing was wrong with the log anyway... If you use IE you will most probably need to restore what you done... cause browseui.dll is a needed IE file :rolleyes: And the MSN things were safe...

Ravage
05-06-2007, 12:15 PM
howdy

never use IE except on the very rare occasion that I need to manually go to microsoft update site

I will try a different cable just in case

cheers

Ravage