View Full Version : Weird XP startup problem
russi 01-18-2011, 06:23 PM My son has an XP service pack 3 desktop for college work. Anyway, today he kept getting a BSOD after the computer has been on for a few minutes, with a non-specific message when I Google it.
However, I can run Bart PE or LInux bootable with software fine. And for extended periods. Like hour or more. - So obviously not hardware.
He did not load new software or drivers.
If I simply boot the computer and it goes to profile login screen, even f I do nothing, it will go to BSOD. Otherwise I can enter Windows in profile, open software or Internet, but will get BSOD. Event log did mention possible Trojan, but how to remove it as the XP will not last more than a few minutes?
He has much college work on it. Ideas?
Russ
RuralGuy 01-18-2011, 08:03 PM Boot up in safe mode with networking and download MalwareBytes and run it in safe mode. Pressing F8 while booting will let you select Safe Mode.
JamesMcS 01-19-2011, 12:28 AM The event log could also reveal what's causing the blue screen.
russi 01-19-2011, 03:29 AM Thanks for the ideas, but... Under XP the system will go to BSOD within 3 - 5 minutes so cannot run Malware Bytes. But Linux boot disk ran Avaira and found a trojan but removed it. Still a problem with XP. I did check event log but only gives a brief number series that I can find nothing on when I Google.
Other ideas? He has a major research project among other things on the drive.
Russ
rainman89 01-19-2011, 03:53 AM it blue screens in safemode also?
lookup and download combofix from bleepingcomputer.org run that in safemode and see if that clears up the issue...
also do you have a system restore point you can try rolling back too?
JamesMcS 01-19-2011, 04:01 AM Probably a fresh install is going to be the fixer here, it usually is in my experience.... take the HDD out of the dud PC and put it in as a secondary drive on another machine (you can get USB HDD interfaces cheaply if you don't want to mess around in the other machine) and copy what you need off, I'd say.
Insane_ai 01-19-2011, 06:22 AM A repair installation would also do the trick.
Here's how: http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx
JamesMcS 01-19-2011, 06:24 AM What does that do exactly? Does it completely reinstall the OS from scratch and leave documents etc. behind?
I always think of Windows as a bit of a house of cards. Nice and neat and stable when it's just finished (installing), but when you start taking bits out of the middle and putting them back in again... well.....
RuralGuy 01-19-2011, 06:31 AM It pretty neatly will overwrite the OS files and leave your documents alone. You may however need to spend the next few hours downloading and installing all of the updates that are no longer installed.
JamesMcS 01-19-2011, 06:33 AM That IS clever!
Every day's a school day! :)
Insane_ai 01-19-2011, 06:48 AM You may run into an activation problem. It took me a while to find my notes on this but these instructions will help reset the activation timer so you can log in the machine and set up any drivers that may be missing, like the network card which is needed to activate Windows.
Reseting the Activation Trial:
------------------------------
In this example: Your activation period has expired, (past 30 days) and you need to get to Normal mode again.
1. Turn On your PC
2. Press F8 repeatedly and go to Safe Mode. If you cannot get a console at first reboot and choose safemode with command prompt.
3. Logon as per normal
(note: Administrator password is usually blank, but hopefully you know your password)
4. Allow the Desktop to fully load (answering "Yes" to continue into Safe Mode)
(note: This is just a long way of saying go to Safe Mode)
5. Click on Start - Run
6. Type in exactly: rundll32.exe syssetup,SetupOobeBnk (and click OK)
(note: one space, after "rundll32.exe " also the Oo are two letter o's in "oobe"; capitals and comma are important)
7. Wait a couple of seconds (although you will Not see any change)
8. Restart your PC normally (Start - Shutdown - Restart - Ok)
9. You are now able to go to Normal Mode again (For another 30 days !!!)
10. Do whatever you like, you're back to Normal.
RuralGuy 01-19-2011, 06:55 AM I have not had problems with the activation timer getting reset.
JamesMcS 01-19-2011, 06:56 AM Could also be construed as being a little bit naughty, if you were of that ilk - but then none of us are are we?
Simon_MT 01-19-2011, 07:18 AM Another method if there to mount the drive on another PC as a secondary (Slave) drive and check this drive out using whatever tools you have available - Anti-Virus and chkdsk on the enslaved. There should be spare internal power leads and connectivity on the cable. There are jumpers and a diagram on the most drives as to which jumper setting to use.
Simon
Insane_ai 01-19-2011, 07:30 AM Re: Weird XP startup problem
Could also be construed as being a little bit naughty, if you were of that ilk - but then none of us are are we?
Any tool can be mis-used. I am not in any way supporting piracy or abuse of licensing.
I did not interpret your comment to be accusatory, I simply felt the need to clarify.
JamesMcS 01-19-2011, 07:31 AM Of course they can. Just my liddle joke :)
Simon_MT 01-19-2011, 11:19 AM Who cares about the legitimacy, in a situation where XP has broken, one gets out the toolbox and you don't care whether you use a spanner or a crescent.
Simon
russi 01-19-2011, 06:42 PM First, I want to thank all of you for your time and ideas. The slave drive in another PC sounds okay.
No, he did not have System Restore setup. And, chkdsk has found no problem. Chkdsk finds no problem.
I guess my big question is this. I have seen the BSOD on other computers but always when the PC would not boot into Windows. This is different in that it will boot fin einto a profile and I can even do the Internet. But after 3 - 5 minutes, it stops and goes to BSOD. Unfortunately not enough time to run combofix, I would think. Has anyone ever seen that?
The Event Log shows an error but with an error code that does not show in Google. 1000008e Followed by parameter errors 1, 2, 3, 4 with some numbers after each parameter.
Russ
RuralGuy 01-19-2011, 10:45 PM Maybe this link will be helpful: http://aumha.org/a/stop.php#0x8e
Simon_MT 01-20-2011, 03:17 AM I would try scanning the disk for viruses.
When does this error occur, what application are you running?
Here is other link:
http://support.microsoft.com/kb/903251
1) I would also try looking at if there is anything in Startup
2) Look at regedit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
Simon
rainman89 01-20-2011, 03:31 AM You can also check that all of your drivers are up to date. Sometimes a driver will cause a BSOD
JamesMcS 01-20-2011, 03:39 AM Yeah Ruralguy's link points to a driver issue, probably just a corrupt one - doesn't say which one in the event log though? Weird.
Copy required files over and repair/reinstall is the way on this one I think
rainman89 01-20-2011, 05:36 AM Yeah Ruralguy's link points to a driver issue, probably just a corrupt one - doesn't say which one in the event log though? Weird.
I didn't even look at his link... shame on me! ;)
russi 01-20-2011, 02:08 PM Thanks everyone.
I did check for viruses, drivers, and...
Anyway, I will copy over the files and try a Windows Repair.
Russ
tienlv2011 04-05-2011, 01:52 AM I have not had problems with the activation timer getting reset.!!
|