having difficulties rebooting and starting windows

[ladywolf718]

A few years back someone reformatted my computer. It was booting in the d drive and not c. With the help of a friend most things were straightened out. He even gave me a code to boot windows in the correct drive. i since havent been in touch with him and its become a bother rebooting my computer.
Sorry if i put this in the wrong catigory..didnt know where to ask for help. When i restart my computer more than 75% of the time it will not reboot right away. i end up manually shutting it off a few times, i have no choice but to wait atleast 5 minutes then everything boots normally. if i dont wait the 5 minutes is when i have problems and it wont reboot... any idear why? here is a few things that might help.... something i know just isnt right in here..

under MSCONFIG:
General>
startup selection> selective start up> (checked items) process SYSTEM.INI File> Process WIN.INI File> Load System Services >
load Start up items > Use Modified BOOT.INI

SYSTEM.INI> ( items checked)
; for 16 bit app support
[driver]
[mci]
[driver 32]
[386enh]

WIN.INI > everything checked
BOOT.INI > it says the fallowing
[boot loader]
timeout=30
default=multi(0)rdisk(0)partition(1)WINDOWS
[operating system]
multi(0)disk(0)rdisk(0)partion(1)WINDOWS="Microsof t Windows XP Home Edition"/fastdetect/NoExecute=OptIn


Services... too many to list all are microsoft and not all running some stopped.
startup only anti-virus, firewall and yahoomessanger running.

if you need to know something else please feel free to ask me. thank you


****update*** recently tried to boot in safemode to reconfigure my firewall... computer would not boot to safe mode. I restarted, selected f8 selected safemode from the list, choose windows xp home edition and a dos screen came up displaying the fallowing top to bottom :

multi(0)disk(0)rdisk(0)partion(1)WINDOWS="Microsof t Windows XP Home Edition"/fastdetect/NoExecute=OptIn


the very end of that stand was diffent each time displayign something else.

[jholland1964]

Try booting to Safe Mode this way;
Go back into msconfig.
Choose Boot.INI and place a checkmark in Safe Boot. Click Ok and then Apply.
Reboot and see if you can get into Safe Mode.

When i restart my computer more than 75% of the time it will not reboot right away. i end up manually shutting it off a few times, i have no choice but to wait atleast 5 minutes then everything boots normally. if i dont wait the 5 minutes is when i have problems and it wont reboot...

When this happens does the computer actually shut all the way down before the reboot attempt or is it really hanging at shut down?
How are you trying this?
Start, Turn Off Computer, Turn Off? OR Start, Turn Off Computer, Restart?

startup only anti-virus, firewall and yahoomessanger running.

Do you mean that these three items are supposedly the only items running at Start Up? Why do you have Yahoo Messenger running at Start up? This is totally unnecessary and can easily, and should be, run Manually. Take it out of the Start up. In fact, take all of them out of auto start and see what happens.
What anti-virus and firewall are you running?
There definitely are more...the items in Services for one thing.

[ladywolf718]

sorry i didnt get back to you i have been having other problems too recently.
I get that problem when i restart and the computer starts to "boot-up". i can "shut down" and then manually turn computer on and if i do it right away it wont boot-up. I believed it was a resource problem with the display adapter and shut down un-nessisary hardware items..( modem im on cable dont need the dial up.. usb ports ect ect) even when i "restart" i was getting the same problem. everything seemed better since i freed up resources until this morning. NOW i have a even more puzzling problem. my screen split in 3 parts! the left moved completely all the way to the right. the middle is on the left side of the left, and its magnified and backwards.?????? plus the right side of the screen is on the left side???? i restored to an earlier date and everything was workign fine til i ran a ad-adware scan and the screen split again before the program was done. i restored again to an even earlier point and this time nothing happened. spoolsv.exe has been asking for permission to access the web( i dotn have a printer or fax) doesnt appear to be the virus either..

here is a copy of HJT

Logfile of HijackThis v1.99.1
Scan saved at 8:29:34 AM, on 10/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Firewall\ca.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust Anti-Spam\QSP-2.1.215.5\QOELoader.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Avant Browser\avant.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAV.exe
C:\Hijackthis\hijackthis\HijackThis.exe
C:\Hijackthis\hijackthis\HijackThis.exe
C:\Hijackthis\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.angelfire.com/blog/shewolf526/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Firewall\ca.exe"
O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust EZ Armor\eTrust Anti-Spam\QSP-2.1.215.5\QOELoader.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Open In New Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: ChatSpace Full Java Client 4.0.0.320 - http://204.157.0.193:8000/Java/cfs40320.cab
O16 - DPF: Yahoo! Canasta - http://download2.games.yahoo.com/gam...ts/y/yt2_x.cab
O16 - DPF: Yahoo! Literati - http://download2.games.yahoo.com/gam...ts/y/tt4_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download2.games.yahoo.com/gam...s/y/poti_x.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/do...e_Inst_Win.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://home3.ca.com/PestPatrol/unibl...n/pestscan.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/reso...lscbase969.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1119038391356
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1144942463367
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/v...fo/webscan.cab
O16 - DPF: {A031D222-B496-11D2-9CC8-00105A10AAF6} (WONWebLauncher Class) - http://hoylegames.sierra.com/cab/WON...herControl.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZONELABS\vsmon.exe

my computer will not reboot into safemode...why i havent anyidea thats a problem too...HELP ME PLEASEEEEE

[jholland1964]

Can you give us more information on the computer itself? Make and model, hard drive size, RAM installed, video adapter, audio, etc.?

[ladywolf718]

I will tell you anything and everything I know to date...
Hubby bought computer 2000..
Compact Persario I wanna say 5500
Came with Windows ME edition ( many, many, many, many, many problems from day 1 see any and all posts in this forum under shewolf526)
Upgraded 2003 to Windows XP Home Edition, Had problems reformating, IT stopped wipped out the entire operating system.. a friend burned a copy of what he had so we could boot the upgrade version, so we have now.. Windows XP over NT operating system.

System:
Microsoft Windows XP Home Edition Version 2002 w/SP1 and SP2 ( with NT features)
Computer:
AMD Duron(tm)processor
701 mhz 448 MB of Ram
C Drive:
Used Space 6.96GB
Freed Space 6.66GB
capacity 13.6GB (very small Next on the upgrade after i get a cd rewrite drive)
D Drive EMPTY
3.99GB Capacity
Video is Nvidia---Detonator XP drivers (recently upgraded 10/22/06)
audio is whatever standard in the computer
cd rom was changed... ( says 56X max on front other than that havent a clue what it is, just standard cd drive) I have cable connection, IP is roadrunner. I have EZ anti-virus, EZ- Firewall, Ad-Adware, Windows defender, EZ pestpatrol (rarely used) Avant 11 (with the latest upates) did i miss anything?

I CAN NOT reformat my drive right now. I moved 1600 miles to another state. all my software is still sitting in public storage in old state. cant afford to buy another copy right now either.

[jholland1964]

Have again gone through your HJT log...are you running two firewalls OR even three?
I see Zone Alarm, eTrust EZ Firewall and wonder too if you are also running the built in XP firewall?
If you are running more than one this is an Absolute No-No. One firewall only. Uninstall Zone Alarm and make certain that the built in Windows Firewall is turned off.
This statement confuses me;

IT stopped wipped out the entire operating system.. a friend burned a copy of what he had so we could boot the upgrade version, so we have now.. Windows XP over NT operating system.

When you say IT stopped wipped out the entire operating system, what do you mean? A reformat is supposed to wipe out the system. If you are running a "burned copy" of somebody elses "what he had" then this is not a legal copy of XP and probably could not be reinstalled anyway.
You say you updated the video driver yesterday. Obviously this is a problem. Roll back that video driver since your problem with your "split screens" began after that install. Why did you update the driver anyway? Were you having a problem with your display?
Don't update anything like that for now because your problem obviously is not video or audio.

I am sorry that you cannot get to your software but just for others...software disks are very small, most can fit in a manila envelope...carry all of those with the computer when you change locations.

[ladywolf718]

hmmmm well i know i have been having problems with true vector, BUT... truevector(zone labs ) is ez which now has changed to ca...go figure ..How can i check to make sure im not shutting of ez, if I have 2 running.

[ladywolf718]

ok just checked again to be sure but windows fire wall is NOT running...

[ladywolf718]

programs I have that I know of:
EZ- Firewall

EZ- Anti-virus(automatically set to run a scan every night around midnight)

Pest Patrol (rarely used)

Windows Defender(automatically set to run a scan every night around midnight)

Ad-Adware SE (used weekly)

Registry Mechanic ( used monthly) I dont have the full paid version just scan and i remove what i see it says in the registry.

Avant Browser (used daily)
IE 6 ( rarely used, only when avant is having issues)
but to my knowledge when I looked them up online ( zone labs, truevector, ez, and CA) are all the same company just changed names a few 100 times.

[jholland1964]

but to my knowledge when I looked them up online ( zone labs, truevector, ez, and CA) are all the same company just changed names a few 100 times.

Boy I am not sure about that...Computer Associates E-Trust EZ Firewall is, in fact based on the code used in Zone Labs' Zone Alarm. The way I read it is they ARE different firewalls, not one and the same...EZ Armor, which is based on an earlier version of ZoneAlarm...this does not say they are the same program, which would mean you are running TWO firewalls at the same time.

You also did not answer my question when you stated above;

IT stopped wipped out the entire operating system

What is IT? and what do you mean

wiped out the entire operating system

???
If you reformat you do wipe out the operating system and then reinstall it. Please answer my questions.
You also state you use Registry Mechanic on a monthly basis. This is totally unnecessary. A registry editor should never be used as a regular maintenance procedure.