slow pc boot up after reinstall

[traumajohn]

Hi,
I have a HP tower with XP home. It was attacked by viruses and malware. I
cleaned it and it still ran slow. I did a complete reinstall with the HP
repair software and it ran fine. Then I did the updates and it ran fine. I
loaded the data, music, and pictures after I scanned them for virus and they
where clean. The PC boots real slow but when all programs are loaded runs
fine. I ran antivus and malware program snad they came out clean. I did
defrag and scan disk still runs slow. disk clean up and still runs slow. It
had 256 memory so I increased it to 256 +512 and it still runs slow. I went
into msconfig and the only programs and processes running are the HP ones and
the AVG antivirus program. The slowness seems to happen after the XP splash
screen and when it says " Windows is starting up"
Thanks,
John

 

[Gerry]

What you done about updating third party drivers?

What errors appear in Event Viewer?

Please post copies of all Error and Warning Reports appearing in the
System and Application logs in Event Viewer relating to the last boot in
normal mode . No Information Reports or Duplicates please. Indicate
which also appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[traumajohn]

Hi Gerry,
Thanks for the fast response. I did a reinstall from the HP reinstall ghost
on the D drive and thought the third party drivers would have been installed.
I will go to HP site tonight and double check. I will also check event viewer
and post after I check it.
Thanks again,
John

 

[Daave]

Hi,
I have a HP tower with XP home. It was attacked by viruses and
malware. I
cleaned it and it still ran slow. I did a complete reinstall with the
HP
repair software and it ran fine. Then I did the updates and it ran
fine. I
loaded the data, music, and pictures after I scanned them for virus
and they
where clean. The PC boots real slow but when all programs are loaded
runs
fine. I ran antivus and malware program snad they came out clean. I
did
defrag and scan disk still runs slow. disk clean up and still runs
slow. It
had 256 memory so I increased it to 256 +512 and it still runs slow. I
went
into msconfig and the only programs and processes running are the HP
ones and
the AVG antivirus program. The slowness seems to happen after the XP
splash
screen and when it says " Windows is starting up"

Right-click My Computer | Manage | Device Manager

Double-click IDE ATA/ATAPI controllers

Double-click Primary IDE Channel

Click Advanced Settings tab

What is the Current Transfer Mode?

 

[traumajohn]

Okay. I went to the HP site and reinstalled all drivers and it still boots
slow. It works fine when it finally loads. Below are the error codes from all
the sections from the last boot in normal mode.

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 7/16/2008
Time: 9:48:15 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: YOUR-XHTR8HVC4P
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.



For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/16/2008
Time: 9:55:37 PM
User: N/A
Computer: YOUR-XHTR8HVC4P
Description:
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Thanks,
John

 

[traumajohn]

Ultra DMA mode 5.
John

Right-click My Computer | Manage | Device Manager

Double-click IDE ATA/ATAPI controllers

Double-click Primary IDE Channel

Click Advanced Settings tab

What is the Current Transfer Mode?

 

[Gerry]

John

I have researched the second of your two errors.

When booting the system is looking for mrtrate.sys which, if present, is
normally located in c:\windows\system32\drivers. It is either not there
or if it is there it is corrupted. The file seems to come with Quicken
or Quickbooks and is used by the programme to access a remote service
through Dial-Up Networking. You will note that the first error report
refers to Network Services so the errors are related. Have you
previously used and subsequently uninstalled a Quicken or Quickbooks
product as it is quite common to find that a registry start-up item is
not removed as it should be when the programme is uninstalled?

The solution is normally to disable or remove the redundant registry
entry and the best way to do this is to use Autoruns (freeware).

http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx

With Autoruns you can uncheck an item, which disables it from starting,
or you can can right click an item and then delete it. If you uncheck
you can recheck to re-enable the item. It is a much safer approach than
editing the Registry. Another useful feature of the programme is that
you can right click an item and select Search Online to get information
about the item selected.

With Autoruns running open the Everything tab and select File, Find and
type"mrtrate.sys" without the quotes and you should find the entry.
Disable the entry and exit. Restart your computer and see whether the
time taken to boot is less and whether the Error Report is no longer
being generated.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[traumajohn]

Hi Gerry,
I did the autoruns and unchecked the item but it still takes 2min 20seconds
to boot all the way into windows and be ready to use. I still get this error
in the events window..

Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1003
Date: 7/17/2008
Time: 6:17:26 AM
User: N/A
Computer: YOUR-XHTR8HVC4P
Description:
Your computer was not able to renew its address from the network (from the
DHCP Server) for the Network Card with network address 00402B7064C4. The
following error occurred:
The operation was canceled by the user. . Your computer will continue to try
and obtain an address on its own from the network address (DHCP) server.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c7 04 00 00 Ç...

Thanks,
JOhn

 

[Daave]

That's the correct setting. Seems like Gerry is covering other
possibilities.

 

[Daave]

Hi Gerry,
I did the autoruns and unchecked the item but it still takes 2min
20seconds to boot all the way into windows and be ready to use.

That's not long at all in my opinion.

How long does it take to boot if you try the clean boot method?:

http://support.microsoft.com/kb/310353