LEM Help

[aligatrjoe]

I need additional help with CHKNTFS problem. Could you please email me at:
(e-mail address removed)

 

[sgopus]

not going to happen, you ask your question here you get your answer here.

 

[aligatrjoe]

HI LEM

First point. I ran diskmgmt.msc. No problem that I could see
Tried running CHKDSK C: /F. Rebooted. Chkdsk was bypassed.
Read about CHKNTFS. Thought I better run with option /D for default to
allow Chkdsk /f would work. It was still by passed.
Next step I read were the default registry key should be:
HKEY_LOCAL_MACHINE\SYSTEM\CURENTCONTROLSET\CONTROL\Session Manager value
BootExecute:REG_MULTI_SZ:autocheck autochk *
The key value I have is: autocheck autochk /p \??\C: autocheck autochk *
I found this info in Microsoft KB160963. I thought before I would change
the key to the default, I would first do a RESTORE. I can't do a restore.
Sytem wouldn't do it.

The two problems I am trying to solve are:
1. System will sometimes stall at the WELCOME page when booting up.
2. I can not see the C:\ drive or the CD-ROM drive from windows explorer.
I can see same in Safe Mode or from a newly created User.

I feel you are very knowledge in this particular area from your answer.
Will really appreciate any further help.

Am about to buy a new PC if I can't solve these problems.

 

[Lem]

HI LEM

First point. I ran diskmgmt.msc. No problem that I could see
Tried running CHKDSK C: /F. Rebooted. Chkdsk was bypassed.
Read about CHKNTFS. Thought I better run with option /D for default to
allow Chkdsk /f would work. It was still by passed.
Next step I read were the default registry key should be:
HKEY_LOCAL_MACHINE\SYSTEM\CURENTCONTROLSET\CONTROL\Session Manager value
BootExecute:REG_MULTI_SZ:autocheck autochk *
The key value I have is: autocheck autochk /p \??\C: autocheck autochk *
I found this info in Microsoft KB160963. I thought before I would change
the key to the default, I would first do a RESTORE. I can't do a restore.
Sytem wouldn't do it.

The two problems I am trying to solve are:
1. System will sometimes stall at the WELCOME page when booting up.
2. I can not see the C:\ drive or the CD-ROM drive from windows explorer.
I can see same in Safe Mode or from a newly created User.

I feel you are very knowledge in this particular area from your answer.
Will really appreciate any further help.

Am about to buy a new PC if I can't solve these problems.

I don't know what you've done to get yourself in this situation or
whether some malware might be at least in part responsible. See advice
from MVP PA-Bear at the end of this post.

As far as chkdsk is concerned, the "/p \??\C:" part of the registry key
is supposed to schedule an unconditional chkdsk for the C: drive.
However the trailing "autocheck autochk *" may confuse things.

If I were you, I'd first look in the Application Event log (Start > run

eventvwr [OK]) for any messages from Winlogon. However, in the end,

you're probably better off just changing the value of the BootExecute
key to its default value "autocheck autochk *" [without quotes].

As to your other problems, what is the malware status of the machine,
and how do you know? From the number and variety of symptoms (system
restore doesn't work; logon to Windows stalls; Windows Explorer doesn't
work), it sure sounds like something is going on.

If you're really thinking of buying a new PC to deal with this issue
(and, assuming that your data is not backed up, to lose all your data),
it would be cheaper to first run the disk drive manufacturer's
diagnostic utility to ensure that there is no problem with the drive and
to then do a clean install of Windows.
http://www.michaelstevenstech.com/cleanxpinstall.html

[Quote: MVP PA-Bear]
Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**
[/QUOTE]

--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm

 

[Bob I]

You wouldn't happen to be running Goback on the PC? Or ZoneAlarm? Some
interference from them will be seen.

 

[aligatrjoe]

Thanks very much LEM.

You have certainly given me some ideas. I have been assuming I did not have
malware or virus, etc. because this PC is using AOL internet and Norton
antivirus. In addition, the problems developed after I installed additional
memory and tried to clean up the disk as it had not be defragged in a couple
of years. It also exhibited some errors when I first tried to ruin chkdsk.
So my efforts since have been trying to determine if Windows has an error or
I have a faulty disk. I ran a thorough check of memory for 1/2 hour and it
showed no errors.
For example, before I added memory, etc. the PC showed no signs of halting
and I was able to see the C: drive and CD ROM drive without resorting to a
SAFE MODE boot.

I really appreciate your help and comments. I will try your suggestions.
I will comment on results later.
Thanks again.


--
Bill W

HI LEM

First point. I ran diskmgmt.msc. No problem that I could see
Tried running CHKDSK C: /F. Rebooted. Chkdsk was bypassed.
Read about CHKNTFS. Thought I better run with option /D for default to
allow Chkdsk /f would work. It was still by passed.
Next step I read were the default registry key should be:
HKEY_LOCAL_MACHINE\SYSTEM\CURENTCONTROLSET\CONTROL\Session Manager value
BootExecute:REG_MULTI_SZ:autocheck autochk *
The key value I have is: autocheck autochk /p \??\C: autocheck autochk *
I found this info in Microsoft KB160963. I thought before I would change
the key to the default, I would first do a RESTORE. I can't do a restore.
Sytem wouldn't do it.

The two problems I am trying to solve are:
1. System will sometimes stall at the WELCOME page when booting up.
2. I can not see the C:\ drive or the CD-ROM drive from windows explorer.
I can see same in Safe Mode or from a newly created User.

I feel you are very knowledge in this particular area from your answer.
Will really appreciate any further help.

Am about to buy a new PC if I can't solve these problems.

I don't know what you've done to get yourself in this situation or
whether some malware might be at least in part responsible. See advice
from MVP PA-Bear at the end of this post.

As far as chkdsk is concerned, the "/p \??\C:" part of the registry key
is supposed to schedule an unconditional chkdsk for the C: drive.
However the trailing "autocheck autochk *" may confuse things.

If I were you, I'd first look in the Application Event log (Start > run

eventvwr [OK]) for any messages from Winlogon. However, in the end,

you're probably better off just changing the value of the BootExecute
key to its default value "autocheck autochk *" [without quotes].

As to your other problems, what is the malware status of the machine,
and how do you know? From the number and variety of symptoms (system
restore doesn't work; logon to Windows stalls; Windows Explorer doesn't
work), it sure sounds like something is going on.

If you're really thinking of buying a new PC to deal with this issue
(and, assuming that your data is not backed up, to lose all your data),
it would be cheaper to first run the disk drive manufacturer's
diagnostic utility to ensure that there is no problem with the drive and
to then do a clean install of Windows.
http://www.michaelstevenstech.com/cleanxpinstall.html

[Quote: MVP PA-Bear]
Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm
[/QUOTE]

 

[Lem]

Thanks very much LEM.

You have certainly given me some ideas. I have been assuming I did not have
malware or virus, etc. because this PC is using AOL internet and Norton
antivirus. In addition, the problems developed after I installed additional
memory and tried to clean up the disk as it had not be defragged in a couple
of years. It also exhibited some errors when I first tried to ruin chkdsk.
So my efforts since have been trying to determine if Windows has an error or
I have a faulty disk. I ran a thorough check of memory for 1/2 hour and it
showed no errors.
For example, before I added memory, etc. the PC showed no signs of halting
and I was able to see the C: drive and CD ROM drive without resorting to a
SAFE MODE boot.

I really appreciate your help and comments. I will try your suggestions.
I will comment on results later.
Thanks again.

Are you *certain* that you used the correct memory for your motherboard?
If so, try reseating the memory and/or download memtest86+ from
http://www.memtest.org/

If you have a floppy drive on the computer, download the "pre-compiled
package for floppy (DOS-Win)" unzip it to a formatted floppy disk and
then reboot with the floppy in the drive. If you have questions about
memtest86+, click the link for its forum.

--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm

 

[aligatrjoe]

No. Not running GOBack
--
Bill W

You wouldn't happen to be running Goback on the PC? Or ZoneAlarm? Some
interference from them will be seen.