PDA

View Full Version : Problem Messege on startup



alawi
11-03-2009, 01:44 AM
Hi; everyone I'm facing this problem I dont no what it is in the start of the Windows an messege appear to before logon after wellcome messege I have uninsstling my Kaspersky Anti virus to check if it's th problem but not fix and I do all chkdsk typ for my window but this messege still there


http://i42.tinypic.com/2ni2u51.jpg

Driftwood
11-03-2009, 09:12 AM
You may have to give a few more details if you want someone to help you.
What sort of system do you have & what is running on it?
Will the system boot into the operating system & is it usable?
Would you be able to post a "hijack this log"

alawi
11-03-2009, 09:45 AM
Ok
Operating System: Windows XP Home Edition (5.1, Build 2600) Service Pack 3 (2600.xpsp_sp3_gdr.080814-1236)
Language: English (Regional Setting: English)
System Manufacturer: Dell Inc.
System Model: Inspiron 6000
BIOS: Phoenix ROM BIOS PLUS Version 1.10 A09
Processor: Intel(R) Pentium(R) M processor 1.86GHz
Memory: 1272MB RAM
Page File: 449MB used, 2593MB available
Windows Dir: C:\WINDOWS
DirectX Version: DirectX 9.0c (4.09.0000.0904)
DX Setup Parameters: Not found
DxDiag Version: 5.03.2600.5512 32bit Unicode
and this is hijackthis report

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:27:57 PM, on 3/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\cFosSpeed\spd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\cFosSpeed\cFosSpeed.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
D:\GoogleDownload\RAWViewerSetup.exe
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInsta nce.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download FLV videos with IDM from 10 last requested - C:\Program Files\Internet Download Manager\IEGetVL2.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O20 - AppInit_DLLs: acaptuser32.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd3.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 6998 bytes

and for more information I'm able to logon my PC when I press Ok button & the system is normal and usable, I'll be appreciate for any one can help?

Speedy Gonzales
11-03-2009, 10:03 AM
Looks ok to me, but you can tick these entries then tick fix checked

Close browsers

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

alawi
11-03-2009, 10:43 AM
Do I do it in safe mode?

Speedy Gonzales
11-03-2009, 10:46 AM
No in normal windows

alawi
11-03-2009, 11:50 AM
Ok thanks but I'm facing another problem and I have do all solutions in the net and I use Bootvis and disable all programs in start up but still my laptop too slow in shutdown can you help me please?

Speedy Gonzales
11-03-2009, 11:54 AM
All programs like what??

If you mean services, DONT disable any unless you know what they are / or what they do

Look in task manager see what hangs on shutdown

Blam
11-03-2009, 12:13 PM
try if any of these solutions work

http://windowsxp.mvps.org/slowshutdown.htm

A program may be hanging on shutdown

alawi
11-03-2009, 01:00 PM
I have try and fix checked and restart the laptop the message not appeared I'll see if get back again, and for msconfig I just unchecked only start up

linw
11-03-2009, 01:18 PM
Are you still getting the startup screen? If you are, try looking in the registry.

1) Navigate to:

HKEY USERS\ .DEFAULT\Control Panel\Desktop

2) Double click the wallpaper value.

Is there an image name and path there? If so, delete them.

alawi
12-03-2009, 03:45 AM
Appreciate your help everyone, for the screen it disappear I have restart and shutdown the laptop but the screen not appear, but I still have slow shutdown even when I do all the steps in the link that the friends put it to me for beginning its successful but some software disabled like Touchpad, and you know it's necessary for working on the laptop can anyone show me another solutions I'll be appreciate?
and what did you means by wallpaper value could you explain more please?

AnokFero
12-03-2009, 01:38 PM
I don't want to be rude here, but I think your Computer Literacy skills are not suffiant enough for you to go into the Registry, any mistakes you may make can actually render your computer (or software) redunant and fail to start correctly.

If you want to see what programs are starting up when you log into windows try this nifty application... http://www.mlin.net/StartupCPL.shtml and download the *Standalone EXE Version*.

If you like to know when registry changes are made and want to have some control over them, download StartupMonitor by clicking it in the menu on the left on the above site.

This way if you make a mistake, you have some abilites to restore the problem, and not have to wonder if you got it right.

I'm not sure what others think, but before we can help you with your shutdown problem, we need to know what is causing the problem.

First: Right click on the clock, and click Task Manager.

Second: Make the Windows Task Manager Window longer so it can comfortably show all the details. In the box in the bottom left hand side (Show processes from all users) place a tick inside it if there isn't one already.

Thrid: Click on the CPU header twice and note down anything that has a high CPU rating and stays constantly high. For example if "System Idle Process" constantly stays at 30, let us know - System Idle Process should nearly always have a much lower CPU usage, but can sometimes be problematic. It don't matter what the name is, only if it has a high CPU rating.

Fourth: Sort the items by "Mem Usage" (Memory Usage). Click on header twice to have it sort to the highest Memory Usage currently on your computer. Write down on a bit of paper anything that is over 50,000k and post it back in a reply to the forum.

Five: Close all your open applications - by this I mean if you have anything on your task bar close it. Do not close anything that is in your system tray (near the clock). Or preform any action other than removing things from your Taskbar.

Six: Do a shutdown/logoff or whatever is causing the slowdown when it happens. If possible note down any changes that happen, for example if Firefox before had say 10,520k mem usage then jumped to the top of the cue and started to increase in CPU note it down (FireFox should be closed when you do this but may still be open if you have it installed).

Oh and keep an eye out for anything starting with "Dump" I have forgotten what its full name is, but know it has a "Dump" starting. If you see one of those, a program is crashing and causing a Dump overload which may be the problem.

Im not a pro at anything, but this is one place even I have learned a thing or two about all the best.

alawi
13-03-2009, 01:34 PM
Thank you I'll try and see.

alawi
14-03-2009, 01:40 AM
Thank you I'll try and see.
Hi I have do what did you suggest and I have tack picture for the task bar so you can see it, in CPU I have System Idle process rating between 90-80-70 around this numbers and about Mem Usage I don't have above 50,000 only explorer near 44,216
http://www.imageuploadsite.com/images/jic95zdgrz0aiidcxmj9.jpg (http://www.imageuploadsite.com/)

Blam
14-03-2009, 06:09 PM
Try running this:

http://www.microsoft.com/downloadS/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582&displaylang=en

alawi
15-03-2009, 09:27 AM
Not work blue screen after Install it?!

Blam
15-03-2009, 10:51 AM
What did the blue-screen say?

alawi
15-03-2009, 11:39 AM
This is the result of analyzing

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini031409-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.080814-1236
Kernel base = 0x804d7000 PsLoadedModuleList = 0x80554040
Debug session time: Sat Mar 14 19:02:36.484 2009 (GMT+3)
System Uptime: 0 days 4:47:35.050
Loading Kernel Symbols
.................................................. .................................................. .................................................. ....
Loading User Symbols
Loading unloaded module list
......................
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {fffffff9, 0, 80544a9d, 0}


Could not read faulting driver name
Probably caused by : ntkrnlpa.exe ( nt!ExFreePoolWithTag+237 )

Followup: MachineOwner
---------

Speedy Gonzales
15-03-2009, 11:45 AM
Could be the file on the bottom, it maybe corrupt or something

Could not read faulting driver name

Probably caused by : ntkrnlpa.exe ( nt!ExFreePoolWithTag+237 )

Is XP up to date?? I think there was a kernel update recently

alawi
15-03-2009, 12:29 PM
It is up to date, but how could I fix it?

Blam
15-03-2009, 12:59 PM
Try running memtest:
http://www.memtest.org/

Extract the zip file, you will get an iso.

Burn it to CD with ImgBurn/Any burning software

Blam

alawi
15-03-2009, 01:50 PM
Thanks but the problem is in windows file I think?

Blam
15-03-2009, 03:00 PM
Its currently on of the only possible solutions for this one the web.

And it doesn't hurt to try

alawi
16-03-2009, 01:13 AM
I have try it error not found.