Stuck at XP logo on boot

[Guest]

This just started today. The first thing that happened is I lost my internet
connection (according to my browser and Yahoo messenger). But AIM still
worked, and my roommate's computer (which is connected to the same internet
connection as my computer) still worked. AIM stopped working about an hour
later. I left for a short while, and when I came back, the screen saver was
on. When it went down, I tried to reboot, since it was obviously my computer
and not the internet that had a problem. But the word "start" was gone from
the start menu button, and when I tried to hit the shut down button, it gave
me the log off/switch user options, multiple times. I eventually restarted
after logging. It started booting as normal, but when it got to the XP logo,
it just stayed there. The little scrolling progress bar kept going, so it
wasn't exactly frozen, but it never made it past.

The only way I've been able to boot is through Safe Mode, when it gives me
the "apology" screen. I haven't tried going to Safe Mode normally. I tried
a clean boot, and that failed, because it couldn't load properly.

Any ideas?

 

[Smoker~]

This just started today. The first thing that happened is I lost my
internet
connection (according to my browser and Yahoo messenger). But AIM still
worked, and my roommate's computer (which is connected to the same
internet
connection as my computer) still worked. AIM stopped working about an
hour
later. I left for a short while, and when I came back, the screen saver
was
on. When it went down, I tried to reboot, since it was obviously my
computer
and not the internet that had a problem. But the word "start" was gone
from
the start menu button, and when I tried to hit the shut down button, it
gave
me the log off/switch user options, multiple times. I eventually
restarted
after logging. It started booting as normal, but when it got to the XP
logo,
it just stayed there. The little scrolling progress bar kept going, so it
wasn't exactly frozen, but it never made it past.

The only way I've been able to boot is through Safe Mode, when it gives me
the "apology" screen. I haven't tried going to Safe Mode normally. I
tried
a clean boot, and that failed, because it couldn't load properly.

Any ideas?

 

[Guest]

I thought of that, but nothing showed up when I did a scan.

 

[Gerry Cornell]

In Safe Mode check Event Viewer.

Please check Event Viewer for Warning / Error Reports in the System
and Application logs for the time of the error and subsequent boot in
normal mode and post copies.

You can access Event Viewer by selecting Start, Administrative Tools, and
Event Viewer. When researching the meaning of the error, information
regarding Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&sd=tech

Part of the Description of the error will include a link, which you should
double click for further information. You can copy using copy and paste.
Often the link will, however, say there is no further information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double click
on the error you want to copy. In the window, which appears is a button
resembling two pages. Double click the button and close Event Viewer. Now
start your message (email) and do a paste into the body of the message. This
will paste the info from the Event Viewer Error Report complete with links
into the message. Make sure this is the first paste after exiting from Event
Viewer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

Well, there are errors and warnings galore, but many have to do with one
thing or another not being able to run in safe mode. So picking and
choosing, it looks like:

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 1/24/2006
Time: 3:41:31 PM
User: NT AUTHORITY\SYSTEM
Computer: LAPTOP
Description:
Windows saved user LAPTOP\Tiffany Lynn registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 1/24/2006
Time: 3:52:21 PM
User: N/A
Computer: LAPTOP
Description:
The DHCP Client service depends on the NetBios over Tcpip service which
failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


(Though I don't know what device could it could be. This was also in there
twice at the exact same time.)


and


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 1/24/2006
Time: 3:52:21 PM
User: N/A
Computer: LAPTOP
Description:
The IPSEC Services service depends on the IPSEC driver service which failed
to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 1/24/2006
Time: 4:53:17 PM
User: N/A
Computer: LAPTOP
Description:
The following boot-start or system-start driver(s) failed to load:
Fips
intelppm
VET-FILT
VET-REC
VETEFILE
VETMONNT

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


(This one was in there several times...I'm guessing it was for all the times
I tried restarting.)

I hope those are all the useful ones. I hope they're useful, period.

 

[Gerry Cornell]

Lynn

For Event ID: 1517 download and install the User
Profile Hive Cleanup Service
Download details: User Profile Hive Cleanup Service
http://snipurl.com/5b61

UPHClean v1.5e readme.txt
http://snipurl.com/ko8m

Do you have this error on 3.52 PM on 24 Jan?

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 12/10/2002
Time: 8:43:25 PM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
DCOM got error "This service cannot be started in Safe
Mode " attempting to start the service EventSystem with
arguments "" in order to run the server:

If yes, the two Event ID: 7001 errors you copied are because
you booted in Safe Mode.

Another thought. In Safe Mode try running your anti-virus.

You may find your anti-virus programme has been disabled by a virus.
If this is the case try Stinger.

Download Stinger from here and run it to make sure that
A-V-disabling viruses are not present on your PC. Download Stinger
to another computer and place it on a floppy and then set the
write protect tab. Run the programme in Safe Mode from the floppy.
http://download.nai.com/products/mcafee-avert/stinger.exe

It does not rid the machine of many viruses but provides a base
from which to carry out comprehensive cleaning of the machine.
Some viruses disable the anti-virus programme as may be
the case on your machine.

Download Stinger from here and run it to make sure that
A-V-disabling viruses are not present on your PC
http://download.nai.com/products/mcafee-avert/stinger.exe

Make sure you run the anti-virus scan in safe mode.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

Yes, I do have several of the 10005 errors. That makes sense. I was more
worried about the 1517. My problem with your solution is that I can only
boot into Safe Mode, and Windows Installer won't work in Safe Mode.

I did run my antivirus. It was one of the first things I tried. It came
back clean. Just in case, I also tried Stinger. It also came back clean.

 

[Gerry Cornell]

Lynn

The Event ID: 1517 error does not relate to the boot problem so
let's put that to one side.

Try to boot in normal mode. When it stops is there any Stop Error
message or do you only see the Logo?

Restart the machine in Safe Mode and look at the Event Viewer
logs for that last normal boot ( not the Safe Mode boot ) . Please
post copies of any Warning or Error Reports.

Another option is to Enable boot logging ( from same menu as
where you select Safe Mode ). Boot Logging text is recorded in
the Ntbtlog.txt file in the root of your C drive.

A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

A copy of the last six lines from the log might give us a fix on
where it stops.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

A turn of events. I noticed that the last driver to load was agp440. I did
a quick search for that on the internet, and one that I looked at said that
he solved it by unplugging his USB mouse. Since I felt I had nothing to
lose, I tried it. And when I rebooted, it worked. Now I'm really confused.

Here's the event log, though, for when I started in normal, before
unplugging the mouse.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/25/2006
Time: 5:03:30 PM
User: NT AUTHORITY\SYSTEM
Computer: LAPTOP
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to
start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


There was an identical one for when I started it in safe mode right after.

Also, I just plugged the mouse back in, and everything's working fine.