STOP ERROR Message on XP Pro repair

[Martin Ellis]

Dell XPS 600 - Windows XP professional

Following an infection with Antivirus 2008, and an unsuccsessful removal
attempt, the PC stalled at the desktop walllpaper with no icons and no
taskbar displayed. Same in safe mode. Task manager could be made to appear
and logging on/off was possible, but other than that, no response.

Booting from the XP Pro CD and choosing to repair an existing installation,
I get the following message part way through setup;

DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATION

The best the knowledge base could come up with was renaming a file (in
Windows\system32\drivers) called raspppoe.sys to raspppoe.sy_ but that seems
to have had no effect.

Any ideas please?

I do have access to another PC so can install this drive to make file
changes etc, and I have run a virus/anti spyware scan on the drive.

 

[Gerry]

Martin

There are other Knowledge Base links referenced here:
http://aumha.org/a/stop.htm

Do you know the driver is raspppoe.sys or did you happen to find the
Knowledge Base Article and assume that was the driver?

Can you please post an exact copy of the Stop Error message?

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and select
option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard

The driver may be named in the Stop Error Report -see link:
http://msdn.microsoft.com/en-us/library/ms797129.aspx

What hardware / software changes did you make in the last session before
you the first error occurred?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Martin Ellis]

Do you know the driver is raspppoe.sys or did you happen to find the
Knowledge Base Article and assume that was the driver?

A) I entered the DRIVER_UNLOADED_ bit into the knowledge base searchbar and
this was the only item returned, so I tried it.
*********

Can you please post an exact copy of the Stop Error message?

A) I hope that the relevant bits you need are as follows;
STOP: 0x000000CE (0xF6D2165E, 0x00000008, 0xF6D2165E, 0x00000000)
.....The problem seems to be caused by ctoss2k.sys

Isn't it odd how I never saw the ctoss2k.sys bit before now? Now you have
brought this to my attention, I realise that there a couple of things I could
try, but I'll wait for your reply before diving in.

BTW, I'd already disabled auto restart from te boot-up options menu.
*********



========

What hardware / software changes did you make in the last session before
you the first error occurred?

*********

I didn't personally do anything, it was don eby another family member, but
no hardware mds were involved. 'Antivirus 2008' infected the PC and the
mother of the household paid the requested amount and followed whatever
instructions were given. The current situation is what resulted.

I transferred the drive to a clean PC and ran a full A/V A/S scan on it,
finding four viruses. After reconecting to teh Dell PC, the fault was still
present, so I decided to try a repair.

 

[Gerry]

Martin

That's a good step forward. Unfortunately I cannot research your problem
further until I return from work later today.



~~~~


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Martin Ellis]

OK, this is fun...not...

Couldn't wait. A search for ctoss2k.sys revealed five files, so I renamed
them to ctosss2k.sy_

Lo and behold, setup completed without further error messages....but...I'm
back to square one - Only boots to the desktop wallpapaper and sits there,
even in safe mode. No icons, no taskbar. Ctrl+Alt+Del brings up the taskbar
but with no applications running, plenty of processes though. Mouse works,
log off, restart and shutdown options are available from Task manager, but
other than that...useless.

If I try running Explorer by clicking on the 'New Task' button, I get
'Windows cannot find Explorer'

I transferred the drive to another PC and after copying the current ones to
a safe location, I replaced the following files with the ones from the
Windows/Repair folder - SAM - SOFTWARE - SECURITY - DEFAULT - SYSTEM

This makes the PC boot up fully, but obviously way out of date. I tried
running System restore in the hope of restoring a more recent set of files
but was told that System Restore could not be used. Presumably this is
because I'm trying to restore to a future point which doesn't exist yet as
far at the current file set is aware?

I'm sure I remember reading an article about using System restore after
sustituting these backup files for the later ones, but can't for the life of
me remember where.

 

[Pegasus \(MVP\)]

Dell XPS 600 - Windows XP professional

Following an infection with Antivirus 2008, and an unsuccsessful removal
attempt, the PC stalled at the desktop walllpaper with no icons and no
taskbar displayed. Same in safe mode. Task manager could be made to appear
and logging on/off was possible, but other than that, no response.

Booting from the XP Pro CD and choosing to repair an existing
installation,
I get the following message part way through setup;

DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATION

The best the knowledge base could come up with was renaming a file (in
Windows\system32\drivers) called raspppoe.sys to raspppoe.sy_ but that
seems
to have had no effect.

Any ideas please?

I do have access to another PC so can install this drive to make file
changes etc, and I have run a virus/anti spyware scan on the drive.

Is Antivirus 2008 a new virus?

If System Restore is active then you can restore the damaged
registry hive manually - see here:
http://support.microsoft.com/kb/307545
However . . . Depending on what damage the virus did, it may
not be possible to fully repair the system.

 

[Mick Murphy]

http://www.malwarebytes.org/mbam.php

Above is the recommended way to get rid of Antivirus 2008
Get the FREE version from the site through Download or Major Geeks

 

[Gerry]

Martin

ctoss2k.sys is your Ctreative Sound Blaster Audio driver. You need to
rename them back to their correct names with exception of the one in the
System32 folder, which is likely to be the one which caused the problem.
One of the other four is a backup copy for the one in the system32
ffolder. Right click on each the four and select Properties and note the
file versions against the locations. Copy the latest version of the file
to the system 32 folder. Normally files in the system32 folder are
subject to Windows Protection but by placing the drive in the second
computer you get round that problem. Hopefully when you place the drive
back in the original computer you will not see the Stop Error messages
you saw previously.

My feeling is that the Explorer problem is a second problem not related
to the first. Are you able to access Event Viewer and post copies of
Error Reports from the System and Application logs.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~