Windows logon slow .. Odd...

  • Thread starter Thread starter Edward Chan
  • Start date Start date
E

Edward Chan

Here's the problem. When I turn on my PC, it usually
would get onto desktop automatically without any wait
time. I didn't really do anything last night... After a
few hours last night, I turned my PC back on.... under
Win. XP, it shows that Welcome screen, then it makes the
logon sound the screen is still in Welcome. Usually it
would log on to my desktop, make the sound, then load.
But this time, I had to wait for 10+ seconds, then it
goes to my desktop and nothing shows except for my
background image. I don't know what's going on. I assume
it's an IRC virus I caught since the only program that I
had up and running was IRC and it's capable of catching
viruses that allow remote connection to be controlled by
other users using IRC.

Anyways, it shows my desktop and I just let it sit
there.... for a good 5 whole min. and nothing happens. So
I run up the Task Manager and close explorer.exe, then
run it again (explorer.exe) and poof, my desktop loads.
The bad thing is, I had to load up my startup
manually.....

Is there a way that anyone here can think of so I can
actually fix this so it will continue to log on normally?
I am thinking of replacing explorer.exe with another one
since I think it's explorer.exe's problem. Any
suggestions to this problem?
 
Edward Chan said:
Here's the problem. When I turn on my PC, it usually
would get onto desktop automatically without any wait
time. I didn't really do anything last night... After a
few hours last night, I turned my PC back on.... under
Win. XP, it shows that Welcome screen, then it makes the
logon sound the screen is still in Welcome. Usually it
would log on to my desktop, make the sound, then load.
But this time, I had to wait for 10+ seconds, then it
goes to my desktop and nothing shows except for my
background image. I don't know what's going on. I assume
it's an IRC virus I caught since the only program that I
had up and running was IRC and it's capable of catching
viruses that allow remote connection to be controlled by
other users using IRC.

Anyways, it shows my desktop and I just let it sit
there.... for a good 5 whole min. and nothing happens. So
I run up the Task Manager and close explorer.exe, then
run it again (explorer.exe) and poof, my desktop loads.
The bad thing is, I had to load up my startup
manually.....

Is there a way that anyone here can think of so I can
actually fix this so it will continue to log on normally?
I am thinking of replacing explorer.exe with another one
since I think it's explorer.exe's problem. Any
suggestions to this problem?

Edward,

You mention that you suspect a virus. Are you running CURRENT virus
software? Did you scan your system with it? AFTER, you satisfy those
critical issues, I would take a look at your Event Viewer and review any
errors to get a better picture of what is going on. Directions below.

Good Luck

ACCESSING ERROR MESSAGES IN WINDOWS EVENT VIEWER

You can access Event Viewer by selecting Start, Administrative Tools, Event
Viewer. Click on System. On the right-hand side, you should notice any
errors listed since your last reboot and/or when your problem occurred.
Notice the datestamp and how it cooincides with activity since your last
reboot and/or when your problem occurred. Then double-click on each error
individualy. Click on the icon above that looks like two pieces of paper to
copy the error message to the clipboard. Then paste it (Ctrl-V or
Right-click, Paste) into your reply message here and I will respond.

You can read a Microsoft KB article on HOW TO: View and Manage Event Logs in
Event Viewer in Windows XP at
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&Product=winxp.
 
I can only see one error for this day since I booted my
PC on. It shows:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10000
Date: 07/02/2004
Time: 7:12:30 PM
User: EDWARDCHAN\Edward Chan
Computer: EDWARDCHAN
Description:
Unable to start a DCOM Server: {FB7199AB-79BF-11D2-8D94-
0000F875C541}. The error:
"The system cannot find the file specified. "
Happened while starting this command:
C:\Program Files\Messenger\msmsgs.exe -Embedding

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

It looks like it's only a Messenger thing.. I changed the
folder's name because I don't like Windows XP to always
startup Messenger.

I have tried scanning my system for Viruses, trojans,
ad/spywares and found some, but my system still does the
same thing.
 
I can only see one error for this day since I booted my
PC on. It shows:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10000
Date: 07/02/2004
Time: 7:12:30 PM
User: EDWARDCHAN\Edward Chan
Computer: EDWARDCHAN
Description:
Unable to start a DCOM Server: {FB7199AB-79BF-11D2-8D94-
0000F875C541}. The error:
"The system cannot find the file specified. "
Happened while starting this command:
C:\Program Files\Messenger\msmsgs.exe -Embedding

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

It looks like it's only a Messenger thing.. I changed the
folder's name because I don't like Windows XP to always
startup Messenger.

I have tried scanning my system for Viruses, trojans,
ad/spywares and found some, but my system still does the
same thing.

You should make sure that ALL spyware/adware is removed from your system.
If you are having a difficult time removing sypware, then following the
directions below. A simple scan with Ad-Aware does not remove all spyware
in many cases. You should follow the spyware removal directions below until
Ad-Aware finds zero objects.

If after you have removed all spyware/adware and you still have a problem,
then you should review your Task Manager and determine which process is
tying up resources. Once you know what program is responsible, you can then
find steps to solve the problem. Spyware could easily be the culprit so it
is important that as a starting place in solving the problem, that you know
for sure that all spyware has been removed.

Good Luck

STEPS TO REMOVE EASY SPYWARE and ADWARE - TRY FIRST

1. Go to www.lavasoftusa.com and download a free copy of Ad-Aware. Install
Ad-Aware and at the main program screen, click on Check for updates and
download the latest update. (be sure and check for updates each new day
that you scan as updates are released several times each month.)

2. Click Start to start the scan. When the scan has finished, hit Next.
At the results screen, right-click on any check box and choose Select all
objects. Hit Next or Finish to quarantine items found. Repeat the scan
until zero objects are found. If repeated scans will not remove some
spyware, jump to step 2 below.

STEPS TO REMOVE STUBBORN SPYWARE and ADWARE - TRY SECOND

1. Go to www.lavasoftusa.com and download a free copy of Ad-Aware. Install
Ad-Aware and at the main program screen, click on Check for updates and
download the latest update. (be sure and check for updates each new day
that you scan as updates are released several times each month.) Close the
program.

2. Right-click on My Computer and select Properties. Hit the System
Restore tab and check the box to Disable System Restore. Hit OK and then
shut down your computer.

3. Disconnect your network connection.

Upon rebooting and if your system is already set to show hidden files and
folders, skip to step 5.

4. Open My Computer and click on View, Folder Options, View Options, and
check the box to Show Hidden Files and Folders. Hit OK.

5. Browse to c:\documents and settings\<username>\local settings\temp and
empty the folder. Browse to c:\windows\temp or c:\winnt\temp whichever the
case may be and empty the folder. Empty your Recycle Bin.

6. Open your Internet Explorer (IE), click on Tools, Internet Options, and
hit Delete Files. Close IE.

7. Start Ad-Aware and then start the system scan. When the scan finishes,
hit Next. At the results screen, right-click on any check box and choose
Select all objects. Hit Next or Finish to quarantine items found.

If you have more than one user account on your machine, repeat steps 5
through 7 while logged into each account.

8. IMPORTANT - Repeat the scan over and over and over until there are zero
items found. Sometimes this may take 3 or more scans. If you get to a
point where a stubborn few will just not remove, post a message at the
Ad-Aware support forum at www.lavasoftsupport.com and an expert will gladly
help you.

9. Right-click on My Computer, click the System Restore tab, and uncheck
the box to Disable System Restore so that System Restore is now re-enabled.
Reconnect your network connection.

Spyware/Adware Do's and Dont's

1. Be careful where you click. (weblinks, spam, etc..) FREE on the
Internet in most cases means you will pay the price of spyware, adware,
spam, etc. and everything that goes with it to repair your system.
Particularly when it comes to installing FREE software.

2. READ Terms of Service (TOS) before you agree to anything. Particularly
on company sites you are unfamiliar with. Example: www.abcnews.com most
likely won't install spyware or adware on your system. A site like
www.joesfreesoftware.net likely will install spyware or adware on your
system.

3. Stay away from porno and casino sites. If you must, limit yourself to
one reputable site each as these are some of the worst offenders.

4. Whenever you notice unexpected new toolbars on your browser, unexpected
pop-up ads, changed home pages, scan your system with Ad-Aware. Stopping
spyware in it's tracks immediately helps avoid it from multiplying and
increased removal time and steps.

5. Look for the warning signs and scan your system early and also regularly
with Ad-Aware. Don't wait for it get so bad that the spyware/adware
overtakes your system and you are dead in the water.

NOTE: There are many different spyware detection programs available and
Ad-Aware is just one of them. Program results from some of these other
spyware programs are difficult for many pc users to understand. Removing
the wrong files or registry settings with these programs can render other
programs on your machine inoperable. Ad-Aware in my opinion is easiest for
most users to understand and gets the job done. Some people may tell you
that you need 3, 4, or even 5 different spyware programs installed to remove
spyware from your machine. Nonsense. Follow the above steps and you will
find that all you need is 1. Also, catch your spyware early enough and all
you have to do is step 7 to get rid of spyware. But don't forget to check
for updates each new day that you scan. The paid version of Ad-Aware will
automatically check for updates for you.


FINDING PROGRAMS (PROCESSES) SLOWING DOWN YOUR COMPUTER

Hit Ctrl-Alt-Del to start your task manager. Hit the processes tab, then
hit the CPU heading above the listed processes to sort them where the
highest number shows up top. When your problem is occuring, review the
activity of the top running processes. You may see the top few dance around
a bit or you may see one just stuck, stealing all of CPU resources. At this
point you will have an idea of the program is responsible for your system
slowing.

If you don't recognize the process by name, a simple Google search will
often times uncover the program of concern. You can then do another Google
search to try and discover a solution. Chances are, someone has already
experienced the same thing and fixed it. If all else fails, don't hesitate
to post again here.
 
Hmm I have discovered one more thing I can add to this.
It is that, after I have logged on, ended explorer.exe
process and started it back up, my desktop starts to show
(which I have mentioned in my first post).

The new thing I have discovered is that, after I have
logged off and logged back in, the same thing occurs. I
only have one account and use one account on my PC, which
is mines. The problem being which I think it is, is maybe
a startup problem with explorer.exe now.

I have tried those steps and I still see the same problem.

Anyways, I have tried installing Windows XP again, but it
wouldn't allow the installation to go further because
after I have tried running the 'Upgrade (Recommended)'
install, it gives an error saying that I have to log off
my account, log back on and a window will pop up. Then it
says that I should cancel Win. XP Installation, then try
installing again after I have restarted the PC ..... I
think I really need help with this =(
 
Edward Chan said:
Hmm I have discovered one more thing I can add to this.
It is that, after I have logged on, ended explorer.exe
process and started it back up, my desktop starts to show
(which I have mentioned in my first post).

The new thing I have discovered is that, after I have
logged off and logged back in, the same thing occurs. I
only have one account and use one account on my PC, which
is mines. The problem being which I think it is, is maybe
a startup problem with explorer.exe now.

I have tried those steps and I still see the same problem.

Anyways, I have tried installing Windows XP again, but it
wouldn't allow the installation to go further because
after I have tried running the 'Upgrade (Recommended)'
install, it gives an error saying that I have to log off
my account, log back on and a window will pop up. Then it
says that I should cancel Win. XP Installation, then try
installing again after I have restarted the PC ..... I
think I really need help with this =(

Well, we have kinda switched gears now with the re-install, but let's see
what we can do. So did you do as instructed and end up cancelling the
Windows installation? I'm still not convinced that you have gotten rid of
all of your spyware or virus problems. Has your virus been quarantined or
removed? If you scanned your system right now, would it detect spyware?
Once you can get to a point of knowing that you are completely clean on both
issues, can you then consider whether reinstalling Windows solve your
problems. Also, did you review the processes in your Task Manger.
Directions were posted previously in a reply and was labeled FINDING
PROGRAMS (PROCESSES) SLOWING DOWN YOUR COMPUTER. The answer to questions
posed in those steps can quickly point to the responsible culprit.

See what you can do to answer these questions:
Have all viruses been quarantined or deleted? If you scanned your system
right now, would it pass?
Have you completely removed all spyware and adware from your system? If you
scanned your system right now, would it find zero objects?
Were there any programs tying up resources in the Task Manager?

Let me know
 
Back
Top