• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.
  • Welcome to Free PC Help, a free PC Help forum to get help with your computer problems.

    Free PC Help is a community that offers free computer help and support for all users, all ages, worldwide.

    In order to start asking questions or contribute on someone else's post you will first need to register. Don't worry - it's quick and easy and once you have registered you will have instant access to the entire forum.

    If you do decide to join the forums you will not have the option to send Private Messages [ PMs ] or add a Signature until you have made 5 posts or more. This is an attempt to try to stop Spammers using the PM system or adding links to their Signature.

Sudden slow loading (boot screen)

Agent

FPCH Member
Joined
Apr 22, 2008
Messages
12
#1
Hello im hoping i can get some help or a explanation for why my pc is taking for every to load when its on the boot screen i been looking around and from what i can tell most take awhile but mine normally takes maybe 5 secs the little blue bar goes by maybe to or 3 times and its booted up but ever since i restarted my pc it takes for ever to boot up and i didnt change anything i checked for spyware virus i checked my ram i even tried to do a sys restore no luck, Also my pc will not boot in safemod since its started doing this when iv had my pc for about a year an half now i got it used at a pc store and i cannot reinstall windows because my first boot is set to hard drive and i cant change it to boot from cd rom first because it asks for the bois password and i dont know it, i cant call dell to get it because the pc was in a custom case when i got it so the sticker with all the info is gone here are the pc specs. Thanks in advance.

Dell OptiPlex GX270
Windows XP Pro SP2
Intel Pentium 4 CPU 2.80GHz
1.25 GB Of RAM
 

maynardvdm

FPCH Long Term Member
Joined
Feb 7, 2007
Messages
3,117
Location
South Africa
#2
Hello Agent

Can i ask what Anti virus you have?

Download Hijack this and do a scan and save log file only, copy the text in the log file and paste it here. TrendMicro™ HijackThis™ Download

Before you do that do these scans also :

Your computer could be infected with Malware.

Malware is the term used to describe computer infections such as Adware, Spyware, Viruses, and Trojan Horses.
You will need to run at least two malware scanners as well as an Antivirus scanner that are listed in the following instructions.
Anti-Malware and Anti-Virus scanners perform different tasks.
The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection.
Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 30 and 90 minutes.
The Eset online scan should take between 1 and 3 hours.
In most cases, these scans will suffice to clean and disinfect your computer.

For best results print the following instructions and bookmark this Web page
To keep this guide printer-friendly, use your cursor to highlight the contents below.
From your browser select File - Print and in the printer dialog box under "Print range"
click the Selection choice to print out these instructions for removal of malware.




----------------------------------------------------------------------------------------------------------------------
  • Follow these instructions carefully.
  • Download ATF-Cleaner from Snapfiles.com to remove "junk" files from your computer that may contain malware.
  • You can also download it from Majorgeeks.com
  • When you run ATF-Cleaner, check the items as shown below for Main.
  • For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
  • NOTE: If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
  • Then click on "Empty Selected".
.



----------------------------------------------------------------------------------------------------------------------
  • Install and run the free version (not the Professional version) of SUPERAntiSpyware from SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!
    • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
    • You do not have to send them your e-mail address, just click next.
    • You can leave the automated check for updates on.
    • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
    • DO NOT allow SUPERAntiSpyware to protect your Home Page settings.
    • On the Top Left select the Scan your computer button.
    • Make sure there is a CHECK MARK on all Fixed Drives.
    • Click "Perform a Complete Scan". Click "Next" and reboot the computer when prompted to do so.
    ----------------------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------------------------
  • Disable your internet security by right clicking on its icon (usually located in the system tray next to the time display) and choosing "Exit", "Disable", or "Shut Down".
  • Run an online scan with Eset from Free Virus Scan: Use ESET's Online Antivirus Scanner
  • You must use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
  • Accept the terms and click "Start".
  • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
  • Click "Start" to begin the scan.
  • When completed restart your computer
Make sure your internet security is enabled, and then please return to Free PC Help and tell us how the computer seems to be operating.
At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.
 

Agent

FPCH Member
Joined
Apr 22, 2008
Messages
12
#6
Ok i ran all the scans they didnt find anything though heres what you asked me to copy and paste

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:09:12 PM, on 4/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\TVersity\Media Server\MediaServer.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
D:\Program Files\Ventrilo\Ventrilo.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Silkroad\sro_client.exe
D:\Program Files\Silkroad\sro_client.exe
D:\Program Files\Silkroad\botmon\botMon_v2.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\UIBHO.dll
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com.../en/x86/MuCatalogWebControl.cab?1192154627468
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1191776679764
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1192154490468
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TVersityMediaServer - Unknown owner - D:\Program Files\TVersity\Media Server\MediaServer.exe

--
End of file - 6455 bytes
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Messages
2,268
Location
Canada
Operating System
Windows Vista - Home Premium
#9
Thanks to you both for the log.

Unfortunately, it doesn't show anything prominent which would account for the slow system. Although I have my misgivings with Norton.

At this point, the most likely suspect is errors on the hard drive. To address such, please do the following:

Click on Start>Run, and type in "chkdsk /r" without the quotes and a space between the K and the /. Press Y at the next screen that appears, and restart the computer to initiate the hard drive error checking.
 

Agent

FPCH Member
Joined
Apr 22, 2008
Messages
12
#12
I have done everything listed as well as contact dell about my problem im still getting the same slow loading also now my dvd drive disapears for no reason even though it is plugged in and new it was just showing up a few hours ago and now its not and wont even when its only one installed but my main thing is how to stop this slow booting time... any ideas?
 

AdvancedSetup

FPCH Long Term Member
Joined
Jan 9, 2008
Messages
819
Location
34° 12' 35" N, 118° 29' 21" W
#13
Well the only other thing I can think of is a driver load error and that should show up in your Event Viewer

Go into your CONTROL PANEL then Administrative Tools and run the Event Viewer application.

There are 3 MAIN sections (you could have more but we only need to look at a couple)

On the left side you should see these sections
Application
System

Click on the Application and then on the Right Side you'll see entries. Look for RED items and YELLOW items but mainly RED that indicate a severe issue.
Then write down a few of them if found from each section (application/system) and copy/paste them back here.

We also need the following with the error.
SOURCE, CATEGORY, Event ID
This will help us to track down the issue.

Here is an example:

Code:
Source: DCOM
Category: None
Event ID: 10005

DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 

Agent

FPCH Member
Joined
Apr 22, 2008
Messages
12
#14
Here is some from the Application tab

Code:
Event Type:    Error
Event Source:    Application Error
Event Category:    (100)
Event ID:    1000
Date:        4/18/2008
Time:        3:43:11 PM
User:        N/A
Computer:    PHILIP
Description:
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 64 72 77   ure  drw
0018: 74 73 6e 33 32 2e 65 78   tsn32.ex
0020: 65 20 35 2e 31 2e 32 36   e 5.1.26
0028: 30 30 2e 30 20 69 6e 20   00.0 in 
0030: 64 62 67 68 65 6c 70 2e   dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e   dll 5.1.
0040: 32 36 30 30 2e 32 31 38   2600.218
0048: 30 20 61 74 20 6f 66 66   0 at off
0050: 73 65 74 20 30 30 30 31   set 0001
0058: 32 39 35 64               295d
Code:
Event Type:    Error
Event Source:    Application Error
Event Category:    None
Event ID:    1000
Date:        4/18/2008
Time:        3:43:01 PM
User:        N/A
Computer:    PHILIP
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module mlang.dll, version 6.0.2900.2180, fault address 0x00002dd5.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 65 78 70   ure  exp
0018: 6c 6f 72 65 72 2e 65 78   lorer.ex
0020: 65 20 36 2e 30 2e 32 39   e 6.0.29
0028: 30 30 2e 33 31 35 36 20   00.3156 
0030: 69 6e 20 6d 6c 61 6e 67   in mlang
0038: 2e 64 6c 6c 20 36 2e 30   .dll 6.0
0040: 2e 32 39 30 30 2e 32 31   .2900.21
0048: 38 30 20 61 74 20 6f 66   80 at of
0050: 66 73 65 74 20 30 30 30   fset 000
0058: 30 32 64 64 35 0d 0a      02dd5..
Code:
Event Type:    Error
Event Source:    Application Error
Event Category:    (100)
Event ID:    1005
Date:        4/7/2008
Time:        12:10:15 PM
User:        N/A
Computer:    MANTHEYS
Description:
Windows cannot access the file D:\Autorun.exe for one of the following reasons:  there is a problem with the network connection, the disk that the file is stored on, or the storage  drivers installed on this computer; or the disk is missing.  Windows closed the program Autorun MFC Application because of this error.

Program: Autorun MFC Application
File: D:\Autorun.exe

The error value is listed in the Additional Data section.
User Action
1. Open the file again.  This situation might be a temporary problem that corrects itself when the program runs again.
2.  If the file still cannot be accessed and
    - It is on the network,  your network administrator should verify that there is not a problem with the network and that the server can be contacted.
    - It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for  further assistance.
Additional Data
Error value: C000009C
Disk type: 5

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Here is some from the system tab
Code:
Event Type:    Error
Event Source:    Service Control Manager
Event Category:    None
Event ID:    7000
Date:        4/29/2008
Time:        9:55:40 AM
User:        N/A
Computer:    PHILIP
Description:
The Process creation detector for NT. service failed to start due to the following error: 
The system cannot find the file specified. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Code:
Event Type:    Error
Event Source:    Service Control Manager
Event Category:    None
Event ID:    7000
Date:        4/28/2008
Time:        10:23:33 PM
User:        N/A
Computer:    PHILIP
Description:
The LiveUpdate service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Code:
Event Type:    Error
Event Source:    DCOM
Event Category:    None
Event ID:    10005
Date:        4/28/2008
Time:        10:23:31 PM
User:        NT AUTHORITY\SYSTEM
Computer:    PHILIP
Description:
DCOM got error "The service did not respond to the start or control request in a timely fashion. " attempting to start the service LiveUpdate with arguments "" in order to run the server:
{0D4C11A3-6BD0-11D3-B542-00902771A435}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Code:
Event Type:    Warning
Event Source:    Tcpip
Event Category:    None
Event ID:    4226
Date:        4/28/2008
Time:        5:14:15 PM
User:        N/A
Computer:    PHILIP
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00   ......T.
0008: 00 00 00 00 82 10 00 80   ....‚..€
0010: 01 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

There is like 36 of these errors
Code:
Event Type:    Error
Event Source:    atapi
Event Category:    None
Event ID:    9
Date:        4/26/2008
Time:        3:24:09 PM
User:        N/A
Computer:    PHILIP
Description:
The device, \Device\Ide\IdePort1, did not respond within the timeout period.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 50 00 01 00 a4 00   ..P...¤.
0008: 00 00 00 00 09 00 04 c0   .......À
0010: 00 01 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 00 00 00 00 00 00 00 00   ........
0030: 00 00 00 00 07 00 00 00   ........
0038: 40 00 00 0e 00 00 00 00   @.......
0040: 00 00 06 12 58 00 00 00   ....X...
0048: 00 00 00 00 04 00 00 00   ........
0050: c8 0d 18 8a b0 12 2a 8a   È..Š°.*Š
0058: 00 00 00 00 40 0a 27 8a   ....@.'Š
0060: 01 00 00 00 00 00 00 00   ........
0068: 5a 08 2a 00 00 00 00 00   Z.*.....
0070: 20 00 00 00 00 00 00 00    .......
Code:
Event Type:    Error
Event Source:    sr
Event Category:    None
Event ID:    1
Date:        4/24/2008
Time:        7:08:03 PM
User:        N/A
Computer:    PHILIP
Description:
The System Restore filter encountered the unexpected error '0xC0000008' while processing the file 'S-1-5-21-4 .. 674531-500' on the volume 'HarddiskVolume2'.  It has stopped monitoring the volume.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
Code:
Event Type:    Error
Event Source:    Dhcp
Event Category:    None
Event ID:    1002
Date:        4/14/2008
Time:        5:35:02 PM
User:        N/A
Computer:    PHILIP
Description:
The IP address lease 192.168.1.101 for the Network Card with network address 000D5621A65A has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Code:
Event Type:    Error
Event Source:    ati2mtag
Event Category:    (44)
Event ID:    45062
Date:        4/14/2008
Time:        8:56:10 AM
User:        N/A
Computer:    PHILIP
Description:
The description for Event ID ( 45062 ) in Source ( ati2mtag ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Data:
0000: 00 00 00 00 01 00 5a 00   ......Z.
0008: 2c 00 00 00 06 b0 00 c0   ,....°.À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
There is like 50 of these errors
Code:
Event Type:    Error
Event Source:    Cdrom
Event Category:    None
Event ID:    7
Date:        4/7/2008
Time:        12:21:42 PM
User:        N/A
Computer:    MANTHEYS
Description:
The device, \Device\CdRom0, has a bad block.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b8 00   ..h...¸.
0008: 00 00 00 00 07 00 04 c0   .......À
0010: 00 01 00 00 9c 00 00 c0   ....œ..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 e0 be 01 00 00 00 00   .à¾.....
0028: fa 67 0c 00 00 00 00 00   úg......
0030: ff ff ff ff 01 00 00 00   ÿÿÿÿ....
0038: 40 00 00 c4 02 00 00 00   @..Ä....
0040: 00 20 0a 12 48 02 00 40   . ..H..@
0048: 00 00 00 00 0a 00 00 00   ........
0050: 00 00 00 00 40 73 c4 82   ....@sĂ
0058: 00 00 00 00 08 f0 9e 82   .....ðž‚
0060: 02 00 00 00 dc 37 00 00   ....Ü7..
0068: 28 00 00 00 37 dc 00 00   (...7Ü..
0070: 1c 00 00 00 00 00 00 00   ........
0078: f0 00 03 00 00 00 00 0a   ð.......
0080: 00 00 00 00 11 05 00 00   ........
0088: 00 00 00 00 00 00 00 00   ........
 

Agent

FPCH Member
Joined
Apr 22, 2008
Messages
12
#15
i also have this in my device manager

SCSI and RAID controllers
(Standard mass storage controllers)
on Extended IO Bus

Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)

Click Troubleshoot to start the troubleshooter for this device.
 

AdvancedSetup

FPCH Long Term Member
Joined
Jan 9, 2008
Messages
819
Location
34° 12' 35" N, 118° 29' 21" W
#16
The SCSI controllers are probably not an issue for right now. We can look at fixing that up later on.

For now - it really does look like you may have Malware / Spyware or at least left over pieces of it on your system. This is not a guaranteed fix but it will help us to greatly reduce or eliminate the potential of Malware being the cause.

Please attempt to run through ALL of these and in the order shown, please DO NOT skip any and DO NOT run other things. Please post back the LOGS for all the Scanners so that we can see what it found or what they did.

After this scanning, cleaning we can then start working on correcting the errors on your system.



  • Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
    It is a combination of the words malicious and software.
    The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.


  • Required Cleanup Steps
    1. Run a Temporary files cleaner
    2. Disable the Spybot Search & Destroy TEA TIMER if enabled
    3. Run 2 Anti-Malware scanners
    4. Run an Online Anti-Virus / Anti-Malware Scanner
    5. Clear out old System Restore points
    6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file

The reason to run multiple scanners is to ensure that no single scanner is missing something.
The time it takes will vary depending on your system and your internet connection speed.
Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.
The ESET online scan should take between 1 to 3 hours.
In most cases, these scans will suffice to clean and disinfect your computer.
Heavily infected systems or slower PCs can take much longer to scan and clean.

For best results print the following instructions and bookmark this Web page
To keep this guide printer-friendly, use your cursor to highlight the contents below.
From your browser select File - Print and in the printer dialog box under "Print range"
click the Selection choice to print out these instructions for removal of malware.​



__________________________________________________​

STEP 1

  • Disable Spybot Search & Destroys' TEA TIMER: (if installed)
    1. Run Spybot-S&D in Advanced Mode.
    2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
    3. On the left hand side, Click on Tools
    4. Then click on the Resident Icon in the List
    5. Uncheck "Resident TeaTimer" and OK any prompts.
    6. Restart your computer.
__________________________________________________​



STEP 2
  • Follow these instructions carefully.
  • Download ATF-Cleaner from Snapfiles.com to remove un-needed temporary files from your computer that may contain malware.
  • You can also download it from Majorgeeks.com
  • When you run ATF-Cleaner, check the items as shown below for Main.
  • For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
  • NOTE: If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
  • Then click on "Empty Selected".
.

__________________________________________________​


STEP 3
  • Install and run the free version (not the Professional version) of SUPERAntiSpyware from SUPERAntiSpyware.com
    • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
    • You do not have to send them your e-mail address, just click next.
    • You can leave the automated check for updates on.
    • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
    • DO NOT allow SUPERAntiSpyware to protect your Home Page settings.
    • On the Top Left select the Scan your computer button.
    • Make sure there is a CHECK MARK on all Fixed Drives.
    • Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.
__________________________________________________​



STEP 4
  • Install and run Malwarebytes' Anti-Malware from Malwarebytes - (direct download)
    • Accept all defaults for the installer
    • Allow the program to update the definitions
    • Click on the Quick Scan and click Next.
    • If any items are found allow it to clean them and then Reboot your computer.
__________________________________________________​


STEP 5
  • Run an online scan with ESET from Free Virus Scan: Use ESET's Online Antivirus Scanner
    • You must use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
    • Accept the terms and click "Start".
    • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
    • Click "Start" to begin the scan.
    • When completed restart your computer
__________________________________________________​


Make sure your internet firewall security is enabled, and then please return to Free PC Help and tell us how the computer seems to be operating.

Once we agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one.
Please follow the instructions here
How to turn off and turn on System Restore in Windows XP
How to turn off and turn on System Restore in Windows Vista



.
 

AdvancedSetup

FPCH Long Term Member
Joined
Jan 9, 2008
Messages
819
Location
34° 12' 35" N, 118° 29' 21" W
#20

CD-ROM ERRORS


Further reading for Vista Restore - though I'm not sure this will help in your case. It looks like you have some damage to some software
on your computer that needs to be repaired which can take time.
Vista - System Restore: frequently asked questions


I'll post more tomorrow some time for other errors, hopefully with more direct answers.​


.