OS Hangs at Desk Top

[June]

Trying to help a friend. He is running XP and when his system boots, it is OK
until the desk top loads. I can get task mgr to open and I have run virus
software from there to check for viruses, etc. Files running in task manager
are: alg.exe local service; avgamsvr.exe system; avgcc.exe scott; svchost.exe
system; ctfmon.exe scott; mdm.exe system; atievxx.exe system; iexplore.exe
scott (using the file run command gets me to the internet with iexplore.exe);
avgupsvc.exe system; spoolsv.exe system; svchost.exe local service;
svchost.exe network service; tskmgr.exe scott; svchost.exe system;
svchost.exe system; svchost.exe network service; svchost.exe system;
lsass.exe system; services.exe system; winjlogon.exe system; csrss.exe
system; smss.exe system; wowexce.exe scott; ntvdm.exe scott; system system;
system idle process system.
The system idle process is taking up 92 of the cpu but ony 16 k of memory.
He doesn't have a disk for this os as this computer was a corporate lease
given to an employee and she passed it on to Scott.

I am stumped, what should I try next.

I can't get they control panel to come up to tell the version of xp, but he
had just recently updated to IE7. Other than that he can tell me NOTHING. I
can run command items through the task manager and the file run command.

But I am lost and said I would help if I could.

Thanks

June Jennison

 

[John John]

To start the Control Panel run this:

rundll32.exe shell32.dll,Control_RunDLL

To start Add/Remove Programs:

rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl


Can you run Explorer.exe from the Task Manager? If it doesn't run maybe
try uninstalling IE7 and see if things improve.

I'm not sure what is going on with the setup but there should be little
use in having wowexec & NTVDM running when you boot Windows XP, these
are used to run 16-bit legacy applications, what is he running at
startup that needs these files?

John

 

[Mark L. Ferguson]

Taskbar Repair Tool Plus!: http://www.kellys-korner-xp.com/taskbarplus!.htm
--
Was this helpful? Then click the "Yes" button below. Voting helps the web
interface.

Holiday Lights: http://www.geocities.com/marfer_mvp/Xmaslgt.zip
Mark L. Ferguson

 

[June]

John,

Thanks.

When I run rundll32.exe shell32.dll,Control_RunDLL it pops ups with an Open
With window and none of the apps there will open the file. I have adobe
reader, IE, MS Office Info Path, MS Picture Mgr, MS PPoint, MS Word, Notepad,
Media Player, Picture and Fax Viewer and word pad. Access is either denied or
nothing happens.

When I run rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl I get a RUNDLL
window with Error in shell32.dll, Missing entry: control_rundll

As far as running the older items. I wonder if his construction program
requires that? He is studying to be a contractor.

Help.

Thanks and Merry Christmas

June

 

[June]

Mark,

Thanks for the reply.

I downloaded the tool and ran it. But it did not work. On reboot the system
acts normal until you get to the desk top and then it hangs. I have to do
ctrl-alt-del to get the task manger open.

Thanks and Merry Christmas.

June

 

[Mark L. Ferguson]

Losing the exe association on rundll.exe would make me think there is some
spyware or virus damage. I would install Windows Defender, and look at what
the 'software explorer' in defender can tell you.
Software Explorer Windows Defender :
http://www.microsoft.com/athome/security/spyware/software/support/howto/softwareexplorer.mspx

 

[June]

Mark,

Installed Windows Defender and ran the software explorer on Currently
Running Programs. All but two programs are permitted.

microsoft WMI: 3968 - file name wmiprvse.exe, display name Mircosoft WIM,
Description: WIM, Publisher: Microsoft; Digitally signed Microsoft windows
verification Intermediate PCA; File Type: Applicaton; Auto Start: No; Path:
C:\windows\system32\wbem\wmiprvse.exe; Size: 218112; Version 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158) Date installed: 1/13/2007 7:56.01 PM; Process ID:
3968; User Name: NT Authority\Network Service; Classification: not yet
classified; Ships with OS: Yes; SpyNet Voting: Not available

and

Windows Internet Explorer: 1200 - Fiel name: Iexplore.exe; Display name:
Windows Internet Explorer; Pub: Microsoft; Digitally signed by: Microsoft
Windows Verification Intermediate PCS; File Type: Application; Auto Start:
No; File path: C:\program files\internet Explorer\IExplore.exe; File Size:
625152; Date Installed: 1/13/2007 7:59:20 PM; Process ID: 1200; User Name:
Scott-8fa269B89\scott; Classification: Not yet classified; ships with OS:
yes; spynet voting: Not available.

Could the IE7 that is running be bugged?

Thanks

June

 

[June]

John,

I uninstalled IE 7 and am back on IE6 and still have the problem.

Thanks

June

 

[Mark L. Ferguson]

I'm not sure I understand why you would not permit IE or the WMI. Certainly
Explorer and IE will never work that way. If you are having permissions
problems, this site has the fix.
Aaron Stebner's WebLog Solving setup errors by using the SubInACL tool to
repair file and registry permissions:
http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx

 

[June]

Mark,

Tried that and now all programs are permitted under currently running
programs, but still at the same spot. Hanging on the desktop.

Going to take a couple hours break from the pc and see if anything else
surfaces.

Thanks

June

 

[Mark L. Ferguson]

You can enter Safe Mode (F8 during the 'black screen' of a restart) and log
on as the default "Administrator" account. This may demonstrate that what you
need is a new account setup, to then "Import" the old account settings.
811151 - How to Copy User Data to a New User Profile:
http://support.microsoft.com/default.aspx?scid=kb;en-us;811151

 

[June]

Safe mode and administrator, just brings me to a black screen, that is 1/2
the size of a normal screen, with safe mode in all 4 corners and microsoft
windows xp (r) (build 2600.xpsp_sp2_gdr.070227-2254:Service Pack 2)

Then I can ctrl alt del to get the task manager up to reboot.

Was worth a try. I tried safe mode and admin when I first got this pc on
Sunday.

I don't know what else to do but a complete install and he doesn't have the
disk that goes with the computer. Is there a reinstall that would not use a
CD? I am running 2000 on all my pcs.

Thanks for all your help on this holiday.

June

 

[Mark L. Ferguson]

Try booting to:
"Safe Mode With Command Prompt"
HOW TO Start the System Restore Tool from a Command Prompt in Windows XP:
http://support.microsoft.com/default.aspx?scid=kb;en-us;304449

 

[June]

That is a system restore. I tried that after I ran trendmicro then mcaffe
online. But they did not do any restore points. Or that is also corrupt. The
only thing I see now is the items you had me install today.

 

[June]

That takes me to system restore. I tried that after I ran trendmicro and
mcaffe onine. Trendmicro found a couple of bho's but removed them. They did
not do any restore points. The only ones I see are the one you had me install
today.

I am wondering if there is anyway to do a reinstall without the cd. Or a
repair of the system without the CD. They are agreeable to reinstalling their
programs that they have on the computer.

 

[Mark L. Ferguson]

Since they are running a desktop, it's a lot less likely that they have a
hidden partition with the O.S. setup files on it. It would be in a folder
called '/i386', and would have 'setup.exe' within it.

Other than that possibility, They would need a legal copy of a "Product Key'
and a disk that matched their 'edition' (home/pro/media center...)

They can find their existing product key with this utility: (or it could be
on a sticker on the back. a COA or 'certificate of authority')
ViewKeyXP.htm: http://www.michaelstevenstech.com/ViewKeyXP.htm

REPLACEMENT MS CDs - 800-360-7561 - - REPLACEMENT PRODUCT KEY- 1 800 426
9400 - - OEM CDs that are out of business - 1 800 325 1233

How to buy Windows XP Professional:
http://www.microsoft.com/windowsxp/pro/howtobuy/default.mspx

In the event they have no i366 folder, it's likely a regular setup cd from
MS will work (they are pretty cheap. You tell them the key, and they mail a
copy for about 10 bucks.)

If it's a preinstalled system, you will probably require a CD from the maker
of the system. They will probably have a web site for that.

How to Perform a Windows XP Repair Install:
http://michaelstevenstech.com/XPrepairinstall.htm