System hang during normal boot

[Guest]

System (desktop P4) won't boot in normal mode any more.
The blue bar stops after about 9 times crossing its window which is still
normal, but no loginscreen appears.

By pressing <F8> I can select to boot in safe, logging or debug mode.

In safe mode, a list of *.sys files from the driver folder are shown with
the question to skip d347bus.sys by pressing <ESC>.
Pressing <ESC> or not makes no difference.
The safe mode is entered with all functions working.
The d347bus.sys can be copied and used in a next bootsequence, but it makes
no difference. File corrupt?

In logging mode, the system also hangs on the same moment as in normal mode.

In debug mode, everything seems to be working fine but slower.

Q1) Which process/program uses d347bus.sys?
Q2) What is the difference in booting between debug and normal mode
Q3) Where can I find the results of the debugging (****.log)

Greetings,
Jan Smit

 

[Brian A.]

Do you use Daemon Tools/Alcohol?

Everything I find points to it, see if anything here helps:
http://www.wilderssecurity.com/showthread.php?t=106661

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375

 

[Guest]

Hello Brian,

I do (did) use Deamon Tools to the Sims for my children on the computer.
After removing the Demon Tools program and the d347bus.* from the driver
folder (by renaming them) the computer boots fine again.
Thanks for the link to the Rootkit Hook Analyzer. This program showed it all.
Deamon Tools and the Sims are gone now (where not played anymore for a long
time anyhow).

Thanks for the help and greetings from Holland.
Jan Smit

 

[Brian A.]

Glad to hear you're back in action. Good luck and have fun.

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375