Blue screen every time I start-up. Why?

Reply

•
•
Join Date: Apr 2006
Posts: 14
Reputation: Terence Sleeper is an unknown quantity at this point 
Solved Threads: 0
Terence Sleeper Terence Sleeper is offline Offline
Newbie Poster

Blue screen every time I start-up. Why?

 
0
  #1
Oct 19th, 2006
Dear Daniweb:

Every time I start up my laptop (ACER Aspire 1644WLMi running on Windows XP2) I get a blue screen advising me that my C disk is being checked. The end result of the analysis is (usually) OK, but I cannot figure out why it is doing this at all. Sometimes I get messages on the blue screen to the effect that "Mozilla Firefox has been truncated" & I have to re-install Firefox and the folders placed on it.

I am attaching a HJT log. Perhaps you can see something on it that is causing the problem?

Thanks.

Terry.

Logfile of HijackThis v1.99.1
Scan saved at 9:02:44 PM, on 10/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
C:\Program Files\Eraser\eraser.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Mozilla Firefox 2 Beta 2\firefox.exe
C:\DOCUME~1\PETERE~1\LOCALS~1\Temp\Temporary Directory 3 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.co.uk/index_first.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/index_first.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tiscali.co.uk/index_first.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/index_first.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: NOW!Imaging - {9AA2F14F-E956-44B8-8694-A5B615CDF341} - blank (file missing)
O2 - BHO: XBTP01621 - {9EBBE90B-282E-4c39-8A7E-120749169F0F} - C:\PROGRA~1\BEARSH~2\MediaBar.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [Tracks Eraser Pro] C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe min
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O13 - DefaultPrefix:
O13 - WWW Prefix:
O13 - Home Prefix:
O13 - Mosaic Prefix:
O13 - FTP Prefix:
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain =
O17 - HKLM\Software\..\Telephony: DomainName =
O17 - HKLM\System\CCS\Services\Tcpip\..\{08DC2B02-7314-47E7-96A5-14C2EA19E1FF}: NameServer = 212.74.112.66,212.74.112.67
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain =
O17 - HKLM\System\CS1\Services\Tcpip\..\{08DC2B02-7314-47E7-96A5-14C2EA19E1FF}: NameServer = 212.74.112.66,212.74.112.67
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AutoComplete Service (Autocomplete) - Acesoft - C:\Program Files\Acesoft\Tracks Eraser Pro\autocomp.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: CachemanXP (CachemanXPService) - OuterTechnologies - C:\PROGRA~1\CACHEM~1\CachemanXP.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
Reply With Quote Quick reply to this message  
•
•
Join Date: Oct 2006
Posts: 37
Reputation: RiverKqj is an unknown quantity at this point 
Solved Threads: 0
RiverKqj's Avatar
RiverKqj RiverKqj is offline Offline
Light Poster

Re: Blue screen every time I start-up. Why?

 
0
  #2
Oct 21st, 2006
Remove all of the O13's and O17's very nasty

Then follow the steps in this thread

http://www.daniweb.com/techtalkforums/thread27570.html

If you still get the blue screens download the "ulimate boot cd" and run some system tests like hard drive and ram.
Tottenham Hotspur
Webmaster Marketplace
Joomla Problems
Reply With Quote Quick reply to this message  
•
•
Join Date: Sep 2006
Posts: 327
Reputation: Colin Mac is on a distinguished road 
Solved Threads: 22
Colin Mac Colin Mac is offline Offline
Posting Whiz

Re: Blue screen every time I start-up. Why?

 
0
  #3
Oct 21st, 2006
Do NOT check the 17s!!

Those are the DNS for your ISP
Last edited by Colin Mac; Oct 21st, 2006 at 5:57 pm.
Reply With Quote Quick reply to this message  
•
•
Join Date: Oct 2006
Posts: 37
Reputation: RiverKqj is an unknown quantity at this point 
Solved Threads: 0
RiverKqj's Avatar
RiverKqj RiverKqj is offline Offline
Light Poster

Re: Blue screen every time I start-up. Why?

 
0
  #4
Oct 21st, 2006
•
•
•
•
Originally Posted by Colin Mac View Post
Do NOT check the 17s!!

Those are the DNS for your ISP
Colin is correct , i thought they were another something else
Tottenham Hotspur
Webmaster Marketplace
Joomla Problems
Reply With Quote Quick reply to this message  
•
•
Join Date: Apr 2006
Posts: 14
Reputation: Terence Sleeper is an unknown quantity at this point 
Solved Threads: 0
Terence Sleeper Terence Sleeper is offline Offline
Newbie Poster

Re: Blue screen every time I start-up. Why?

 
0
  #5
Oct 23rd, 2006
AVG System Areas test shows the boot sector of disc C with a yellow exclamation mark next to it. AVG asks whether it wants this changing. Whether my reply is yes or no I still get a blue screen. How do I repair this boot sector & stop blue screens on boot-up?

Terry.
Reply With Quote Quick reply to this message  
•
•
Join Date: Oct 2006
Posts: 18
Reputation: 1337_MilkMan is an unknown quantity at this point 
Solved Threads: 0
1337_MilkMan's Avatar
1337_MilkMan 1337_MilkMan is offline Offline
Newbie Poster

Re: Blue screen every time I start-up. Why?

 
0
  #6
Oct 24th, 2006
What file system is C:/ disc using? If FAT, this is one of the disadvantages. Use NTFS instead. Kudos.
Reply With Quote Quick reply to this message  
•
•
Join Date: Apr 2006
Posts: 14
Reputation: Terence Sleeper is an unknown quantity at this point 
Solved Threads: 0
Terence Sleeper Terence Sleeper is offline Offline
Newbie Poster

Re: Blue screen every time I start-up. Why?

 
0
  #7
Nov 22nd, 2006
•
•
•
•
Originally Posted by 1337_MilkMan View Post
What file system is C:/ disc using? If FAT, this is one of the disadvantages. Use NTFS instead. Kudos.
Thanks.

But, er, how...?!

Tery.
Reply With Quote Quick reply to this message  
Reply

Quick Reply to Thread
This thread is more than three months old.
Perhaps start a new thread instead?
•
•
•
•
•
•
•
•
Message:
•
•
•
•



Similar Threads
Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



Tag cloud for Viruses, Spyware and other Nasties
adobe adware anti-malware anti-virussitesaccessissue antivirus attack audio avg backtoschoolspeech bar blackhat botnet botnets censorship china combofix commercial commercials conficker connect control crosssitescripting cyber cybercrime ddos domains e-mafia education email europe exam exploit facebook fake fancheckvirus gaming gumblar halloween herss.exe hijack hosting internet kaspersky legal logfiles mail malware mcafee mega-d messagelabs microsoft mobile nazi news obama onlinethreats panel parents patch phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirect redirecting reliability report research risk rogueantivirus rootkit sans scareware school search security seopoisoning software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec threat trojan unwanted update usa virus viruses vista volume warning windows worm yahoo zero-day
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC