CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 934
Comments: 25
block bottom
spacer spacer

[DONE]Urgent help needed please
Goto page 1, 2, 3, 4, 5 ... 10, 11, 12  Next
 
Post new topic   Reply to topic       All -> FavForums -> Trend Micro HijackThis Logs [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Fri Feb 08, 2008 4:27 pm    Post subject: Urgent help needed please
Reply with quote

Hello,
I am sorry but I cannot do what you ask before sending you a copy of my Hijackthis log as my computer keeps freezing up so I have to switch off at the wall socket. My main problem is booting up my computer. After about 8 attempts it eventually works. Could someone please just have a look at my logfile to see if you can help me with the booting up. I do have other probs like the computer is running very slow etc.

I am not technical whatsover. Thanks in advance, Lorraine

Here is my Hijackthis Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:48:00, on 08/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijack This Spy Checker\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by NTL Freedom
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet7_22.dll' missing
O16 - DPF: {1B9935E4-8A50-4DD8-BD09-A7518723BF97} (eAssist NetAgent Customer ActiveX Control version 3) - http://etalk.epson.co.uk/netagent/objects/custappx3.CAB
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {34F12AFD-E9B5-492A-85D2-40FA4535BE83} (AxProdInfoCtl Class) - http://www.symantec.com/techsupp/activedata/nprdtinf.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://www-secure.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126033628812
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1196620562921
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{21FE50C9-DBAB-47B6-B48D-D3418EFC3D65}: NameServer = 194.168.4.100 194.168.8.100
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 9238 bytes

Back to top
View users profile Send private message
Prince_Serendip

Site Moderator


Joined: Sep 07, 2002
Posts: 17155

1st Responders MIRT Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Rootkit Responders

PostPosted: Fri Feb 08, 2008 5:29 pm    Post subject:
Reply with quote

You're [READY]. Now you wait for a 1st Responder or Security Expert to come help you.

You can also give us your system specifications. That will help in finding a solution to your problem.

For detailed specs you can try using this freeware application as no install is required. You can attach the scan as text format in your next post. Please make it an attachment, as it will be quite long.

http://www.snapfiles.com/get/winaudit.html

I will alert our systems experts about this topic.


_________________
image
Microsoft MVP Consumer Security 2006, 2007 & 2008
Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Fri Feb 08, 2008 8:26 pm    Post subject: Win Audit Results Attached
Reply with quote

Hello Prince_Serendip,
Thank you for coming back to me. Please find attached Win Audit File.
Best Wishes
Lorraine


Prince_Serendip wrote:
You're [READY]. Now you wait for a 1st Responder or Security Expert to come help you.

You can also give us your system specifications. That will help in finding a solution to your problem.

For detailed specs you can try using this freeware application as no install is required. You can attach the scan as text format in your next post. Please make it an attachment, as it will be quite long.

http://www.snapfiles.com/get/winaudit.html

I will alert our systems experts about this topic.




Computer Audit.txt
 Description:
Sorry, hope I have attached it this time.

Download
 Filename:  Computer Audit.txt
 Filesize:  239.45 KB
 Downloaded:  1123 Time(s)

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7239

Moderators MVP Premium SRT Team F@H

PostPosted: Fri Feb 08, 2008 8:34 pm    Post subject:
Reply with quote

Hi Lorraine, and Welcome to CC Very Happy

While you are waiting for your log to be analysed there are some things you can do with regard to the booting problem, or they will give us more information to work with. We may not be able to solve it until we see the system specs but they are all relatively simple procedures.

First, When your system locks up try holding in the Power button for 5 to 10 seconds. This should shut down your computer without having to switch off at the wall - that can cause an electrical spike that may damage your system. Wait 30 seconds before you turn it back on to allow the electronic bits to settle down.

Second, does your system boot up into Safe Mode properly? To boot into Safe Mode, turn your system on and immediately start tapping the F8 key (ignore any beeps and squawks this causes). When you see the menu on a black background use the cursor (arrow) keys to highlight Safe Mode and press Enter. Wait until your system has fully booted before continuing.

In Safe Mode your computer starts with the minimum of processes running. If it boots fully into Safe Mode then go to Start, Turn Off Computer, Restart. Does it restart OK or do you have to do the 'switch off and back on again' routine?

Thirdly, this behaviour may be caused by a flat motherboard battery or by heat buildup. If you are not confident about opening your computer case then skip this next bit - we can come back to it later, although it is actually a lot simpler to do than to read!

Dust can build up inside the case and traps heat and that is bad news for electronics. It will also cause random shut downs and irregular behaviors. Another common cause for this type of thing is a dead or dying motherboard battery.

You will need a can of compressed air and a CR2032 battery (most motherboard batteries are this kind) for this procedure. You can get them at any Walmart or computer supply store.


  • Shut down the computer and wait for about 30 minutes.
  • Unplug everything from the back of the unit (be sure to note where to plug it back in) and take it outside for some fresh air. (Only if it is nice outside.) This is to prevent all the dust blowing around inside the house.
  • Place it on a firm, flat surface. Open the case by undoing the screws.
  • IMPORTANT Be sure to discharge any static electricity BEFORE you touch any of the components by touching the bare metal inside surface of the case. Do this FREQUENTLY while you are working.
  • Blow out the insides of the computer with the canned air using short bursts, getting into all the nooks and crannies. Be sure not to get too close with the nozzle.
  • Use a pencil tip to hold the fan blades still and blow them out as well. Do NOT use any liquids to clean.
  • You will find a flat coin shaped battery on your motherboard. You might have to look around for it. (Mine is located under the modem card, which I have to remove to get to the battery.)
  • There is usually a small retainer clip holding the battery in place, Using a small screw driver, push on the retainer clip and the battery should just pop out (be sure you note which side is up).
  • Try not to handle the new battery too much before you install it. I recommend using a clean sock over your hand. It should just pop right into the retainer clip.


Look at the capacitors on the motherboard (the soda can looking things). They should not be leaking, bulging, foaming, or discolored. They should look like this: http://diyaudioprojects.com/Chip/P2PLM3875/03capacitors.jpg

Not this:
http://www.firestorm.cx/images/abit-be6-ii-busted-capacitors.jpeg
http://www.windows-help-central.com/image-files/bad_capacitors.jpg

  • If you had to move anything to get to the battery, now is the time to put it back. Make sure that it is securely in place. Also, be sure that you didn't dislodge anything.
  • The airflow inside the case is from front-to-back and from bottom-to-top. Gently arrange the cables so that the airflow will be as unobstructed as possible when the case is closed.
  • Close the case, reattach the power and other peripherals, and boot.


Note, on the first boot after changing the battery you will need to enter the BIOS and change any important settings, including the time and date. Otherwise you will get an error message from the BIOS every time you boot. It should take you to the BIOS on the first boot automatically.

Let us know how it goes. Startup problems may be caused by either hardware or software. Following the steps above will give us a better idea of what's happening.


_________________
Never stop learning
Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Fri Feb 08, 2008 8:50 pm    Post subject:
Reply with quote

Hello Mister2
Thank you for the lovely welcome. With regard to the specs, have I done right in putting it into Notepad. I tried pdf format but the file was so big. I hope I have done right, if not I will soon do as you say.

I have never gone into "Safe Mode" as I don't know how to get back into normal mode. If you could put me right on that I will then try it.

You mention Dust could be the problem, that could be relevant in my case as we have Parrots which are dusty.

It is nearly 9pm over here so I will have to wait until tomorrow to get the canned air and follow your instructions.

I will try what you say "holding power button for 5 -10 seconds" I didn't know about that. If it works, I will be back with a reply on this bit ...... fingers crossed it boots up for me.

Thanks again.



Mister2 wrote:
Hi Lorraine, and Welcome to CC Very Happy

While you are waiting for your log to be analysed there are some things you can do with regard to the booting problem, or they will give us more information to work with. We may not be able to solve it until we see the system specs but they are all relatively simple procedures.

First, When your system locks up try holding in the Power button for 5 to 10 seconds. This should shut down your computer without having to switch off at the wall - that can cause an electrical spike that may damage your system. Wait 30 seconds before you turn it back on to allow the electronic bits to settle down.

Second, does your system boot up into Safe Mode properly? To boot into Safe Mode, turn your system on and immediately start tapping the F8 key (ignore any beeps and squawks this causes). When you see the menu on a black background use the cursor (arrow) keys to highlight Safe Mode and press Enter. Wait until your system has fully booted before continuing.

In Safe Mode your computer starts with the minimum of processes running. If it boots fully into Safe Mode then go to Start, Turn Off Computer, Restart. Does it restart OK or do you have to do the 'switch off and back on again' routine?

Thirdly, this behaviour may be caused by a flat motherboard battery or by heat buildup. If you are not confident about opening your computer case then skip this next bit - we can come back to it later, although it is actually a lot simpler to do than to read!

Dust can build up inside the case and traps heat and that is bad news for electronics. It will also cause random shut downs and irregular behaviors. Another common cause for this type of thing is a dead or dying motherboard battery.

You will need a can of compressed air and a CR2032 battery (most motherboard batteries are this kind) for this procedure. You can get them at any Walmart or computer supply store.

  • Shut down the computer and wait for about 30 minutes.
  • Unplug everything from the back of the unit (be sure to note where to plug it back in) and take it outside for some fresh air. (Only if it is nice outside.) This is to prevent all the dust blowing around inside the house.
  • Place it on a firm, flat surface. Open the case by undoing the screws.
  • IMPORTANT Be sure to discharge any static electricity BEFORE you touch any of the components by touching the bare metal inside surface of the case. Do this FREQUENTLY while you are working.
  • Blow out the insides of the computer with the canned air using short bursts, getting into all the nooks and crannies. Be sure not to get too close with the nozzle.
  • Use a pencil tip to hold the fan blades still and blow them out as well. Do NOT use any liquids to clean.
  • You will find a flat coin shaped battery on your motherboard. You might have to look around for it. (Mine is located under the modem card, which I have to remove to get to the battery.)
  • There is usually a small retainer clip holding the battery in place, Using a small screw driver, push on the retainer clip and the battery should just pop out (be sure you note which side is up).
  • Try not to handle the new battery too much before you install it. I recommend using a clean sock over your hand. It should just pop right into the retainer clip.


Look at the capacitors on the motherboard (the soda can looking things). They should not be leaking, bulging, foaming, or discolored. They should look like this: http://diyaudioprojects.com/Chip/P2PLM3875/03capacitors.jpg

Not this:
http://www.firestorm.cx/images/abit-be6-ii-busted-capacitors.jpeg
http://www.windows-help-central.com/image-files/bad_capacitors.jpg

  • If you had to move anything to get to the battery, now is the time to put it back. Make sure that it is securely in place. Also, be sure that you didn't dislodge anything.
  • The airflow inside the case is from front-to-back and from bottom-to-top. Gently arrange the cables so that the airflow will be as unobstructed as possible when the case is closed.
  • Close the case, reattach the power and other peripherals, and boot.


Note, on the first boot after changing the battery you will need to enter the BIOS and change any important settings, including the time and date. Otherwise you will get an error message from the BIOS every time you boot. It should take you to the BIOS on the first boot automatically.

Let us know how it goes. Startup problems may be caused by either hardware or software. Following the steps above will give us a better idea of what's happening.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7239

Moderators MVP Premium SRT Team F@H

PostPosted: Fri Feb 08, 2008 9:16 pm    Post subject:
Reply with quote

Dusty parrots? Maybe we can sort them out afterwards! Laughing

Notepad format is fine, in fact we prefer it as we all have Notepad and so can read it.

When you boot into Safe Mode your system will be a little slower booting up and you will see a black screen with lots of horrendous items scrolling down it (don't worry, that's normal). Occasionally it will pause for a few seconds while something vital is loaded. Eventually you will see a blocky and badly coloured screen with "Safe Mode" in each corner to remind you. You will also be told you are running in Safe Mode and you have to click 'Yes' in the box.

To boot normally, simply shutdown or restart as you normally would - your computer will automatically start in normal mode unless you tell it otherwise.

I will look through the specs and get back tomorrow - it's around 9PM in my part of the UK, too. Wink


_________________
Never stop learning
Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Fri Feb 08, 2008 9:47 pm    Post subject:
Reply with quote

Awww, my poor little parrots lol. I am sure they would like to be sorted out ha ha ha.

I haven't tried safe mode yet, been copying all your instructions and printing them out first.

I have hunted all through the specs to find my BIOS and I still have not got a clue. I am sounding really stupid here but I don't know what important settings I have apart from the time and date. Don't suppose you live near Cambridgeshire do you lol.

I really appreciate your patience and help. Thanks. If I have not blown up my computer, will see you tom. Night Night




Mister2 wrote:
Dusty parrots? Maybe we can sort them out afterwards! Laughing

Notepad format is fine, in fact we prefer it as we all have Notepad and so can read it.

When you boot into Safe Mode your system will be a little slower booting up and you will see a black screen with lots of horrendous items scrolling down it (don't worry, that's normal). Occasionally it will pause for a few seconds while something vital is loaded. Eventually you will see a blocky and badly coloured screen with "Safe Mode" in each corner to remind you. You will also be told you are running in Safe Mode and you have to click 'Yes' in the box.

To boot normally, simply shutdown or restart as you normally would - your computer will automatically start in normal mode unless you tell it otherwise.

I will look through the specs and get back tomorrow - it's around 9PM in my part of the UK, too. Wink

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7239

Moderators MVP Premium SRT Team F@H

PostPosted: Sat Feb 09, 2008 6:32 am    Post subject:
Reply with quote

The BIOS is where you tell your computer the basics like time, date, whether to boot up from your hard drive or the CD drive and so on. When you switch on you will see a message flash up telling you which key to press to access the BIOS (it's not on screen for long). You then start tapping that key (usually the Del key) and the BIOS screen appears. Nowadays the date and time are usually all you would need to set - most other things are picked up automatically.

You could try that now. You will have to use the cursor (arrow) keys to navigate around - the mouse won't work. But there will be instructions on the screen to guide you. If you get in there you could make a note of the hard drive setting if you like, but it should be determined automatically.

When you exit, choose the option to Not Save the settings. However, after you change the battery and set the time you will need to use the option to Save Settings and Exit. Your computer will then reboot.

Most people never even see the BIOS so no, not stupid at all. The only stupid question is the one that doesn't get asked. Smile

Cambridge? Not a million miles away, but I'm heading in the opposite direction today to borrow my daughter's cat.


_________________
Never stop learning
Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Sat Feb 09, 2008 2:04 pm    Post subject:
Reply with quote

Hiya,
First let me thank you for the fantastic tip on using the Power button instead of switching off at the wall. It is so much easier your way.

Today, it took 4 attempts to boot up. When it did work, my mouse froze so had to use Power button. Next time it worked fine, feeling brave I did as you said to get into Safe Mode and wow, that worked as well. Windows is taking absolutely ages to boot up, got time to go and make a cup of tea .... well, it seems that long.

Thank you for explaining what the BIOS is. Hmmm, I have not managed to see the message as it goes so quick. I am worried about hitting the Del key when I can't see the message ? I am hoping that my problem (even my computers problem) is in the Specs and not the battery or capacitors so I won't have to see the BIOS Smile

Now I am intrigued Mister2 so have to ask, why would you want to borrow your daughters cat lol.


Mister2 wrote:
The BIOS is where you tell your computer the basics like time, date, whether to boot up from your hard drive or the CD drive and so on. When you switch on you will see a message flash up telling you which key to press to access the BIOS (it's not on screen for long). You then start tapping that key (usually the Del key) and the BIOS screen appears. Nowadays the date and time are usually all you would need to set - most other things are picked up automatically.

You could try that now. You will have to use the cursor (arrow) keys to navigate around - the mouse won't work. But there will be instructions on the screen to guide you. If you get in there you could make a note of the hard drive setting if you like, but it should be determined automatically.

When you exit, choose the option to Not Save the settings. However, after you change the battery and set the time you will need to use the option to Save Settings and Exit. Your computer will then reboot.

Most people never even see the BIOS so no, not stupid at all. The only stupid question is the one that doesn't get asked. Smile

Cambridge? Not a million miles away, but I'm heading in the opposite direction today to borrow my daughter's cat.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7239

Moderators MVP Premium SRT Team F@H

PostPosted: Sat Feb 09, 2008 8:40 pm    Post subject:
Reply with quote

OK, don't worry about the BIOS for the moment. I still recommend opening the case and blowing out the dust as this can cause heat problems resulting in various unwanted events occurring..

If it boots into Safe Mode every time then it may well be a software problem. Try booting in to Safe Mode and shutting down (Start, Turn Off Computer, Turn Off) a couple of times - I know it's a pain waiting for it to boot up only to shut down again, but if it does so consistently then it may save a us lot of work.

Reboot normally and download Mike Lin's Startup Control Panel 2.8. Double click the downloaded file and extract it to you Desktop. Finally, double click this file on your Desktop (named StartupCPL.exe) and let it install itself.

Go to Start, Control Panel and you will find a new entry named Startup. Open this. Click on each tab in turn until you find an entry containing InCD. Click the box by this entry to uncheck it. Do the same for an entry containing KService. Close the StartupCPL window and reboot normally.

Let me know if the Safe Mode rebooting is consistently trouble free, and also if your system appears to boot any quicker after you uncheck those two entries.

Oh, and the cat? My daughter is going on holiday with her regular cat feeder, so her cat gets a trip to Mister2's Feline Holiday Camp. Smile


_________________
Never stop learning
Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Sat Feb 09, 2008 9:24 pm    Post subject:
Reply with quote

I will do as you say but get my hubby to sort out the dust.

Before I go and do the safe mode etc etc I have had a "System has recovered from a serious Error !!! I had one of these back on 28 Jan. This time I copied it all out and put it into notepad. I have also included the error from NIS warning me that my Phishing Protection was at risk and their Service Framework had encountered an error. What a day lol.

I will now go and do the Safe Mode etc.

Ha ha ha, I take it you love cats.
Thanks for your help. Smile


Mister2 wrote:
OK, don't worry about the BIOS for the moment. I still recommend opening the case and blowing out the dust as this can cause heat problems resulting in various unwanted events occurring..

If it boots into Safe Mode every time then it may well be a software problem. Try booting in to Safe Mode and shutting down (Start, Turn Off Computer, Turn Off) a couple of times - I know it's a pain waiting for it to boot up only to shut down again, but if it does so consistently then it may save a us lot of work.

Reboot normally and download Mike Lin's Startup Control Panel 2.8. Double click the downloaded file and extract it to you Desktop. Finally, double click this file on your Desktop (named StartupCPL.exe) and let it install itself.

Go to Start, Control Panel and you will find a new entry named Startup. Open this. Click on each tab in turn until you find an entry containing InCD. Click the box by this entry to uncheck it. Do the same for an entry containing KService. Close the StartupCPL window and reboot normally.

Let me know if the Safe Mode rebooting is consistently trouble free, and also if your system appears to boot any quicker after you uncheck those two entries.

Oh, and the cat? My daughter is going on holiday with her regular cat feeder, so her cat gets a trip to Mister2's Feline Holiday Camp. Smile




Serious Error 9 Feb 2008.txt
 Description:
Errors of today

Download
 Filename:  Serious Error 9 Feb 2008.txt
 Filesize:  793 Bytes
 Downloaded:  50 Time(s)

Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Sat Feb 09, 2008 10:36 pm    Post subject:
Reply with quote

Hiya Mister2
Not having much luck at all. Tried starting up in safe mode and managed only once. Closed down tried again 4 more times ..... no way, each time it went straight into normal mode.

Downloaded programme, could not find much at all. This is what it came up with under each tab:

Startup Control Panel
Startup {user) = Shortcut to Startup

HKCU/Run = ctfmon.exe
Microsoft Works Update Detection
update Mgr

Startup {common} = Norton GoBack

Run Once = Blank

Deleted = Blank

HKLM/Run = ccApp

What am I doing wrong now. I am so sorry.
Thanks
Lorraine


Mister2 wrote:
OK, don't worry about the BIOS for the moment. I still recommend opening the case and blowing out the dust as this can cause heat problems resulting in various unwanted events occurring..

If it boots into Safe Mode every time then it may well be a software problem. Try booting in to Safe Mode and shutting down (Start, Turn Off Computer, Turn Off) a couple of times - I know it's a pain waiting for it to boot up only to shut down again, but if it does so consistently then it may save a us lot of work.

Reboot normally and download Mike Lin's Startup Control Panel 2.8. Double click the downloaded file and extract it to you Desktop. Finally, double click this file on your Desktop (named StartupCPL.exe) and let it install itself.

Go to Start, Control Panel and you will find a new entry named Startup. Open this. Click on each tab in turn until you find an entry containing InCD. Click the box by this entry to uncheck it. Do the same for an entry containing KService. Close the StartupCPL window and reboot normally.

Let me know if the Safe Mode rebooting is consistently trouble free, and also if your system appears to boot any quicker after you uncheck those two entries.

Oh, and the cat? My daughter is going on holiday with her regular cat feeder, so her cat gets a trip to Mister2's Feline Holiday Camp. Smile

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7239

Moderators MVP Premium SRT Team F@H

PostPosted: Sun Feb 10, 2008 12:47 pm    Post subject:
Reply with quote

greyfeathers wrote:
What am I doing wrong now.
Nothing - you're doing fine, it's just I was hoping there would be something in there. No worries Smile

When you were trying to reboot into Safe Mode did you keep tapping the F8 key as it rebooted?

I'm still not sure if the booting problem is hardware or software, so let's get the hardware checked out first.

First, download ISORecorder ready for the next bits. This is a simple program that will let you to create CDs that your system will boot from, rather than the more normal way of booting from the hard drive. This is to allow us to run diagnostic tests on your memory and your hard drive without Windows getting in the way. There is a tutorial on using ISORecorder here , but all you need to know is explained below.

Next, download Memtest86 to check out your system memory, and SeaTools for Windows to check your hard drive. If I remember correctly you will have to supply an email address before you can download the latter, but it is safe and I have never had any mail from this source.

You will need a blank CD for the next bit. Open My Computer and navigate to the memtest file you downloaded (named "memtest86-3.4a.iso.zip"). Double click it and unzip to your Desktop. Right click the unzipped file on your Desktop (now named "memtest.iso") and select 'Copy Image to CD'. Follow the instructions for creating the CD. Remove the CD for now.

Navigate to the Seatools file you downloaded (named "SeaToolsForWindowsSetup.exe") and doubleclick it to install.

Now go to Start, All Programs and run SeaTools for Windows (from the Seagate folder). Check the box by your hard drive (probably named "Maxtor 6Y080L0"), click the arrow to the right of 'Basic Tests' at the top of the window and select Long Drive Self Test. Let it run through completely and post the reults back (it may take a while to run).

Now try running the memory test. Open the CD tray and then shut your system down. Put the CD you made earlier in the tray and gently push the tray shut. Boot your computer up - it may boot from the CD, in which case you will quickly see the memtest screen.

If it tries to boot into Windows the we need to go into the BIOS. Shut your system down and wait 30 seconds. Press the Power button and immediately start tapping the Del key (if that doesn't work then try again using the F2 key). You should pop into the BIOS window, where there will be instructions how to navigate around using the keyboard. Find the section where you can set the Boot Device Priority, or Boot Sequence. Change it to boot from CD first, then hard drive :C: ). Exit and save changes (usually F10, but it will tell you on screen) and confirm you want to save changes. Your system should then boot from the CD.

(If you aren't sure about anything you do in the BIOS then there is always the option to exit without changing anything).

When the memtest screen comes up, click Start Test and let it run through 3 or 4 times (overnight is fine - it is a very thorough test and takes a while to run). Again, post any errors reported.

As an aside, when you (or hubby!) blow the cobwebs out, gently push any electrical connectors to make sure they are seated fully. Also, gently press down on any cards sticking up from the main board (press each end together to avoid 'rocking' the cards) for the same reason.

And if all that runs through with no errors then we can look at software next.

If you are unsure about any of that then post back and we'll take it a step at a time.


_________________
Never stop learning
Back to top
View users profile Send private message
greyfeathers

Sergeant
Sergeant


Joined: Feb 07, 2008
Posts: 87


PostPosted: Sun Feb 10, 2008 5:48 pm    Post subject:
Reply with quote

Oh Mister2, I didn't think I would ever get booted up today. It has taken me 4 hours to do so. Each time it started something different happened. A couple of times I managed to get Windows loaded and then the damn mouse froze up on me. This may mean the end of my computer is coming ....... which means I wouldn't be able to come in here to tell you. I do so hope it doesn't pack up as I have a load of stuff on here to do with the rescue parrot charity which I am a Trustee of. If this does happen, please know that I really do appreciate all the help and understanding you have shown to me and your sense of humour of course lol.

Hubby cleaned the computer of dust and boy was it dusty !! I can't say it is any better as yet. He tried all over but no one has the cans of compressed air so he blew like mad. With regard to the capacitors, the black ones all look fine. There are some green thingies which look like caps ???? Some of them look like the link to the picture which says busting. Nothing has the brown bits on the top as in the Bad capacitor pic.

Now to answer your bits:
Yes, I was tapping the F8 key continuously as it rebooted. It totally ignored my wishes.

I will now go and follow your instructions. Hopefully I the computer will keep going long enough for me to get the boot up CD done.

Hope to be able to get back in here and give you some good news Smile


Mister2 wrote:
greyfeathers wrote:
What am I doing wrong now.
Nothing - you're doing fine, it's just I was hoping there would be something in there. No worries Smile

When you were trying to reboot into Safe Mode did you keep tapping the F8 key as it rebooted?

I'm still not sure if the booting problem is hardware or software, so let's get the hardware checked out first.

First, download ISORecorder ready for the next bits. This is a simple program that will let you to create CDs that your system will boot from, rather than the more normal way of booting from the hard drive. This is to allow us to run diagnostic tests on your memory and your hard drive without Windows getting in the way. There is a tutorial on using ISORecorder here , but all you need to know is explained below.

Next, download Memtest86 to check out your system memory, and SeaTools for Windows to check your hard drive. If I remember correctly you will have to supply an email address before you can download the latter, but it is safe and I have never had any mail from this source.

You will need a blank CD for the next bit. Open My Computer and navigate to the memtest file you downloaded (named "memtest86-3.4a.iso.zip"). Double click it and unzip to your Desktop. Right click the unzipped file on your Desktop (now named "memtest.iso") and select 'Copy Image to CD'. Follow the instructions for creating the CD. Remove the CD for now.

Navigate to the Seatools file you downloaded (named "SeaToolsForWindowsSetup.exe") and doubleclick it to install.

Now go to Start, All Programs and run SeaTools for Windows (from the Seagate folder). Check the box by your hard drive (probably named "Maxtor 6Y080L0"), click the arrow to the right of 'Basic Tests' at the top of the window and select Long Drive Self Test. Let it run through completely and post the reults back (it may take a while to run).

Now try running the memory test. Open the CD tray and then shut your system down. Put the CD you made earlier in the tray and gently push the tray shut. Boot your computer up - it may boot from the CD, in which case you will quickly see the memtest screen.

If it tries to boot into Windows the we need to go into the BIOS. Shut your system down and wait 30 seconds. Press the Power button and immediately start tapping the Del key (if that doesn't work then try again using the F2 key). You should pop into the BIOS window, where there will be instructions how to navigate around using the keyboard. Find the section where you can set the Boot Device Priority, or Boot Sequence. Change it to boot from CD first, then hard drive :C: ). Exit and save changes (usually F10, but it will tell you on screen) and confirm you want to save changes. Your system should then boot from the CD.

(If you aren't sure about anything you do in the BIOS then there is always the option to exit without changing anything).

When the memtest screen comes up, click Start Test and let it run through 3 or 4 times (overnight is fine - it is a very thorough test and takes a while to run). Again, post any errors reported.

As an aside, when you (or hubby!) blow the cobwebs out, gently push any electrical connectors to make sure they are seated fully. Also, gently press down on any cards sticking up from the main board (press each end together to avoid 'rocking' the cards) for the same reason.

And if all that runs through with no errors then we can look at software next.

If you are unsure about any of that then post back and we'll take it a step at a time.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7239

Moderators MVP Premium SRT Team F@H

PostPosted: Sun Feb 10, 2008 9:08 pm    Post subject: