Member Avatar for piowaty

Hello,
This is my first post on here, but I see that you have a few other people that you've helped in my predicament. I can not use IE, add printers, use windows explorer, or open control panel. I can use everything (except printers of course) inside of Safe Mode. I've tried downgrading to IE 5.5, reapplying SP4 on W2k, reloading and patching IE6, I've ran SFC, regsvr32 appwiz.cpl, and a few other things that I can't remember. I actively use and update spybot and adaware. I even renamed my profile and recreated it. Any help is very much appreciated. My HJT log is below. Originally I couldn't work at all as the shell would hang, but after using safe mode and disabling "show web content" on Active Desktop, I was able to atleast log in.

Logfile of HijackThis v1.98.2
Scan saved at 2:30:13 PM, on 8/20/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP1 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O1 - Hosts file is located at: C:\WINNT\System32\drivers\etc\hosts
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe." /StartedFromRunKey
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe
O4 - HKLM\..\Run: [CPortPatch] C:\WINNT\DockQuickInstall\cppch.exe
O4 - Global Startup: Kaiser VPN Client.lnk = C:\Program Files\Kaiser\VPN Client\ipsecdialer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {60046ED9-8E77-11D0-9B21-0080C79EFE90} (VanGrid.VanGridCtrl) - file://C:\WINNT\TEMP\vangrid.cab
O16 - DPF: {BAF8BCAE-D9D1-11D0-9B21-0080C79EFE90} (VanTree.VanTreeCtrl) - file://C:\WINNT\TEMP\vantree.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain =
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain =
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain =


Thank you!!!!!


-Tim

  • 2 Contributors
  • 3 Replies
  • 198 Views
  • 6 Days Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

Thanks to for the follow-up — the original problem was tracked down and resolved after the workstation completed an off-site mailbox migration when re-docked to the corporate network. That restored the desktop shell and the ability to open Control Panel, Explorer and the browser. Also thanks to for prompting the normal-mode checks that helped narrow the issue.

Short technical context: when normal boot fails but Safe Mode works, the difference is almost always services, drivers, shell extensions or network-dependent resources that Safe Mode does not load. Mail client syncs, roaming-profile actions, mapped printers or third-party services waiting on network endpoints are common culprits because they can block shell initialization or COM objects that Explorer and Control Panel rely on.

Practical checklist for anyone hitting the same symptoms later:

  • Try a normal boot with the network disconnected (unplug NIC or disable Wi‑Fi) to see if the system behaves differently.
  • Check Event Viewer (System/Application) for timeouts, service failures or COM/Explorer errors at the time of the hang.
  • Log on with a local administrator account to separate profile/roaming issues from system-wide problems.
  • Review Services for nonessential, network-bound services and set them to Manual temporarily (document changes).
  • Use lightweight diagnostics (Process Explorer / Autoruns) to identify hung processes or shell extensions that load in normal mode.
  • If unable to return to the corporate network, coordinate with IT so they can finish server-side migrations or provide a safe workaround rather than permanently disabling services.

Cautions and prevention: keep at least one local admin account for recovery, avoid making permanent changes without documentation, and capture event logs and a process/service list before altering configuration — those artifacts make remote troubleshooting far easier.

Recommended Answers

All 3 Replies

Member Avatar for crunchie

Hi :). You need to post a log that was scanned in normal mode.

Member Avatar for piowaty

Hi Crunchie, Thanks for taking a look at this. It turns out that it was related to a mailbox migration that hadn't completed on lotus notes 6.5 on my office system. As soon as I redocked there, it completed the migration and the problem was resolved. In the case of people that can't get back to their network for it to finish, in the services.msc concole plugin, they can disable multi-user cleanup service and their system will then work off the network.

-Tim

Member Avatar for crunchie

Thanks for getting back with that info. Hopefully it will help others with that problem.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.