Windows takes an hour to boot and then gives a BSOD message

[birdjaguar]

I see you are posting. I will wait.

[birdjaguar]

Originally Posted by 1972vet

Goodness. You get back here pretty quick!

Please don't adjust any more programs using msconfig. Please return to msconfig and check everything that you have previously unchecked, then leave it the way it is during this troubleshooting effort.

So should everything in startup be checked even if it was unchecked prior to these problems?

Originally Posted by 1972vet

The McAfee program and Core Temp program were both shown in the logs you provided. If neither show up in "add/remove" programs, look for an uninstall string in the programs folder. If none are found there, then please reinstall both of them, then simply uninstall them again.

McAfee came with this computer and I deleted it two years ago. There are no program folders for either that or Core Temp. I never had any disks for McAfee. I will reinstall core temp and uninstall it again.

Originally Posted by 1972vet

I have serious doubts about that. Did you check the Microsoft Article?

No but I will.

Originally Posted by 1972vet

The "StiSvc" is the service relating an executable which is installed by Windows together with digital cameras, scanners or another graphical input devices. Hardware device drivers use this service and it should not be terminated while these devices are used. If you've disabled this using msconfig, your boot time will slow substantially while the system tries to reconcile the argument.


It may not be an issue unless you've disabled it via msconfig. If the external hard drive is not connected, obviously the "associated" device is not present. To be certain, the service should most assuredly be enabled as long as you still plan to occasionally use the external hard drive.

I have not disabled any of the cannon camera items.

Originally Posted by 1972vet

Additionally, I noted the following from your postings in the other forum:

...and I suspect this was not the first time. While I can agree that waiting for the system to load as you have, it can indeed be frustrating but by stopping the system's reading and writing process during it's attempt to load will terribly scatter data on the hard disk and badly fragment the disk, even perhaps corrupt some portions to an extent that you will need to correct it to allow the system to boot properly. You might also suffer some corruption to windows core files. The exact same thing can be expected for example, during a thunder storm. If you are in the middle of something and experience a power failure then you should expect to also perform these steps outlined below...

You will need to do the following at the C:\ prompt:
chkdsk /f

when it completes, perform this one:
chkdsk /r

When that completes, perform this one:
sfc /scannow

You will need your windows installation CD for that one. Insert it when prompted and allow the scan to complete. When it does, the progress bar will disappear and you will be left with just the command window open. When you see that, the scan has completed. If indeed you were prompted to insert the windows installation CD, it is because windows found that there are either missing or corrupted core files that it wants to replace. You might want to reboot at this point to see if you've now found some positive results.

Should I do this first or after I try to reboot with all the changes?

Originally Posted by 1972vet

Also, can you tell me what you use this for?:
pixma extended survey
...it's installed with your camera but may not be necessary for it's use.

It goes with my cannon printer and allows cannon to monitor my use. I can turn it off probably.

[birdjaguar]

Should i reboot to safe mode and c prompt to run the chkdsk items?

[birdjaguar]

I could not run chkdsk /f because it could not lock files. So i told it to run when I rebooted. It did, but the results screen did not stay up long enough for a good look. It appeared to run OK from what I saw. The normal boot took another 1:45.

When I downloaded Core Temp to reinstall, it installed fine this time, unlike last time, and gave me readings a few degrees lower than Speed fan (34-35 rather than 38).

I will uninstall both for now. I will reboot into safe mode to see if i can run the other chkdsk sequences you suggest.

[birdjaguar]

Well last night did not go so well. I am working today, so I cannot try anything new until late this afternoon.

I ran chkdsk /r from the command prompt and when it told me it could not run it because of my NTSF file system, I selected Yes to do upon reboot.
I tried to uninstall Speed fan, but it refused to uninstall because it was running and right clicking the app in the task bar did not provide any menu at all. When I shut down, windows saw it as an unresponsive program.
I rebooted. It ran chkdsk /r which took over an hour. I do not know exactly how long because I went to bed at 12:30 when it was 50% done with stage 4. This morning when I looked at my computer it had booted completely and was at the desk top with a message about selective start up. The second I clicked the window, it went to the BSOD with the message:
irql not less or equal
0x000000A (0x000000E8, 0x00000002, 0x00000001, 0x806E4A16)

I turned it off and went to work.

Could you answer these questions before we proceed?
1. Can the chkdsk operations be run other than on reboot?
2. Can chkdsk be run and then go into safe mode? (so I don’t have to wait 2 hours to get a desktop)
3. Is there a way to pause the chkdsk results screen during reboot so it doesn’t move on after 2 seconds?
4. Is there a chkdsk log files I can see?
5. Do I need to redo chkdsk /f & /r functions since I haven’t seen the actual results? Or can I go to the sfc /scannow?
6. Should all startup items be checked even if I have not used an item for several years and it was not checked prior to this set of problems? (ie webshots & egames)
7. Should “hide all Microsoft services” be checked?
8. I prefer core tempt to Speed fan, can I keep that instead?

Would this be the correct sequence of events:
Delete one of the temperature programs
Go to msconfig make sure all start up boxes and all services boxes are checked (can the McAfee box be left unchecked?)
Go to c prompt and run chkdsk functions
Reboot and read chkdsk results


Your Microsoft link does not seem to apply:

This article discusses the reasons why Microsoft Windows XP Service Pack 2 (SP2) may display a "STOP 0x000000D1 DRIVER_IRQL_NOT_LESS_OR_EQUAL" error message on portable computers that have an Intel Pentium M mobile processor. This error message may appear when users switch the computer from utility (AC) power to battery (DC) power, or vice versa.

Mine is a desktop and not using a mobile processor IIRC.

Thanks.

[1972vet]

Please return to msconfig and check everything that you have previously unchecked, then leave it the way it is during this troubleshooting effort.
So should everything in startup be checked even if it was unchecked prior to these problems?
Yes, please.

By the way, the item below is from your dds scan:
mRun: [MSKDetectorExe] c:\program files\mcafee\spamkiller\MSKDetct.exe /uninstall
...You can remove McAfee using their Removal Tool

I have not disabled any of the cannon camera items.

Your log tells us different. Below is an excerpt from your "Attach.txt" results from your dds scan:

==== Disabled Device Manager Items =============

Class GUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
Description: Canon MX700 ser Network
Device ID: ROOT\CANON_IJ_NETWORK\0000
Manufacturer: Canon
Name: Canon MX700 ser Network
PNP Device ID: ROOT\CANON_IJ_NETWORK\0000
Service: StillCam

...Disabling the service for this attached hardware will cause your system's bios some aggrevation on bootup. As I stated in my original post, any hardware you have connected to the back of your CPU should also have the related software installed. I should add, DO NOT disable any of it's related service components either.

Should I do this first or after I try to reboot with all the changes?
It looks like you already have. When you ask a question, please wait for the answer before continuing. With the number of times you post inbetween my last post and next, it requires that I go back over all the material before I answer. Then, during the construction of my intended post to you, I have found that you again have posted which requires me to scrap my constructed post and once again, start over.

...so, please wait for a response before you post again!

Your Microsoft link does not seem to apply...Mine is a desktop and not using a mobile processor IIRC.

That's fine...i'll just assume then that you've researched through the update site to find that all of your drivers have been updated.

Could you answer these questions before we proceed? Certainly...please remember though, DO NOT post until you receive a reply for each of your posted responses

1. Can the chkdsk operations be run other than on reboot?
No. Not using the parameters that I've included in the instruction.

2. Can chkdsk be run and then go into safe mode? (so I don’t have to wait 2 hours to get a desktop)
You can but should not.

3. Is there a way to pause the chkdsk results screen during reboot so it doesn’t move on after 2 seconds?
Although you cannot pause the screen, you can view the results in the event log. Click start-->run...type eventvwr.msc, then click "OK". In the log look for “Autochk” in the Source column.
Double click on the appropriate line and you’ll view the last chkdsk results.

4. Is there a chkdsk log files I can see?
See #3 above.

5. Do I need to redo chkdsk /f & /r functions since I haven’t seen the actual results? Or can I go to the sfc /scannow?
The disk has been badly abused by your computing habits. By that I am making reference to your haste to see results and stopping the read/write process during boot up. During a time such as that, interruping it by performing a hard boot (pressing the button on the tower) is akin to a power failure. When that happens, windows will want to take the time to check the disk. You should NEVER interupt the process. Allow it to complete, and when it does, windows will automatically reboot on it's own (as you described in one of your other posts).

The automatic reboot is another safety feature. Windows wants to have a copy of the disk configuration after it properly records the changes made to the hard disk. This can only happen after a reboot...so naturally, windows will reboot the system for you.

If you can take the time, you can manually run the chkdsk features on your own as I have them outlined in my previous post. With each one, you should allow the system to perform the scan...then after the reboot, the system should have made the corrections to the errors it found.

When the chkdsk is completed (both /f and /r), then you should run the sfc /scannow function. Allow that to complete, remove the disk, and reboot once more.

6. Should all startup items be checked even if I have not used an item for several years and it was not checked prior to this set of problems? (ie webshots & egames)
You should never use the msconfig utility to disable an item...You should instead use the software itself. That said, check your msconfig utility once more and see to it that everything listed in your startup tab has a check in the box

7. Should “hide all Microsoft services” be checked?
It is not checked by default. If you want to check the box, the option is available. It's your preference.

8. I prefer core tempt to Speed fan, can I keep that instead?

...the core temp software has caused problems for users. I would prefer that you uninstall it during these troubleshooting efforts if you really want to get to the bottom of your current issues. Thanks!

[birdjaguar]

Thanks, I will be home this afternoon and proceed. I will slow down.

That's fine...i'll just assume then that you've researched through the update site to find that all of your drivers have been updated.

I've never done that before. I will go through the site looking for drivers. What drivers am I looking for?

Does the BSOD error mesage tell us anything?

The cannon MX700 is my printer. I use it regularly. It is conected directly to my computer via a usb cable. I have a Cannon sd850is camera, but only download pictures via the removeable media.

The only items connected to my computer are:
Network cable to the router
Cannon MX700 printer
USB cable to external hard drive
Speakers
Mouse
Keyboard

My computger is currently off. Can I do the necessary work in safe mode, or do I need to try to boot normally before I proceed?

Steps: (add, subtract or change the order as you think appropriate please)
look for drivers
remove McAfee
remove core temp
review chkdsk logs for /f & /r
post anything interesting
Confirm all msconfig check boxes
run sfc /scannow
reboot
post

Thanks.

[1972vet]

What drivers am I looking for?

Anything that the Windows Update site presents. When you go there, instead of clicking the "Express" button, click the "Custom" button. Scroll down if you can't see it.

With the "Express" scan, Windows Updates presented will all be the "Critical" variety. With the "Custom" scan, you will be presented with optional downloads for software and hardware. You should consider installing everything that the scan returns.

Does the BSOD error mesage tell us anything?

It can. If you have already posted everything that was shown on your screen then I'd say we have reached a dead end (so far as the bsod is concerned). But if not, should the blue screen appear again, copy everything that the screen has to say including any driver information...typically, if any driver info is shown, it will appear at the bottom of that screen. Let us know.

Can I do the necessary work in safe mode, or do I need to try to boot normally before I proceed?

I would prefer that you perform everything in your normal windows user mode. Any changes at all then, should be noticed at that time and it would be important to point that out when (if) it happens.

Let's do it this way:
look for drivers...then after installing everything, reboot
Confirm all msconfig check boxes ...then reboot. When the system comes back up, remove the check from the box that says something like "Don't show me this again" warning box from the system utility that pops up on boot up.
run sfc /scannow ...then reboot
remove McAfee ...then reboot
remove core temp ...then reboot

Post back when completed.

review chkdsk logs for /f & /r<--This one isn't necessary. You can look at your leisure but I don't need any information from the logs.
post anything interesting...as it relates to the instructions and the results.

Thanks!

[birdjaguar]

I'm going through your post now.

[1972vet]

Please finish up first with my last instruction but before your next reply, please go through these instructions as well and include the requested information.

Step I
I'd like to see a list of currently running services for this log on session...Click start-->Run...then type CMD in the run box and click "OK" or hit your enter key. At the command prompt, copy and paste the following then press your enter key:

net start > junk
notepad junk


On your next reply, please include the content of the notepad file that opened for you.

Step II
Next, please Click Start-->Run...then type or copy and paste the following in the run box and click "OK":
msinfo32.exe

When the System Information utility opens, click Edit from the menu at the top and select "Select All". Click Edit again and select Copy this time. Open a blank notepad and right-click anywhere inside, then select Paste. Save the notepad to your desktop so you wont lose the data, then close the System Information window. Please include that information as well on your next reply.

Step III
Next, we're going hunting for any faulty device drivers you have installed.

• Click-->Start-->Run...then type or copy and paste Verifier
• Keep the default of Create Standard Settings and click Next.
• Select Automatically select all drivers installed on this computer then click Finish.
• A list of drivers to be verified on the next boot will be shown.
• Reboot
• If your computer stops with a blue screen, you should get an error message with the problem driver shown at the bottom of the screen.

To turn off the Verifier:
Click start-->run...then type or copy and paste the following:
verifier /reset
Please include any information that was produced if you indeed received a blue screen stop message after following these instructions.

Step IV
Next, we want to Verify Unsigned Device Drivers

• Click Start, click Run, type "sigverif" (without the quotation marks), and then click OK.
• Click Advanced.
• Click Look for other files that are not digitally signed.
• In the Look in this folder box, type "x:\Windows\system32\drivers" (without the quotation marks), where x is the letter
  of the drive where Windows XP is installed.
• On the Logging tab, make sure the Save the file signature verification results to a log file check box is selected, and then click OK.
• Click Start.

NOTE: The log file is named Sigverif.txt, and it is saved in the Windows folder. Third-party drivers that are unsigned are displayed as "Not signed."

We will use the drivers in this list as our troubleshooting starting point for your unsigned device driver issues.

In addition to the information requested in my previous post, please remember to include these as well:
I. List of running services
II. System Information
III. Any Blue Sceen Info Produced
IV. Unsigned Driver Report

Thanks!

[birdjaguar]

Update:
Booted into normal: 1 hour this go around not the 1:45; no BSOD, but two new items:
MS error reporting showed up twice requesting error information be sent to MS and I was directed to a link.
2 screen shots are attached.

Only 4 MS updates noted as missing and currently being installed:
Office 2007 SP2
KB967715
KB890830 malicious software removal
KB951847 MS.netframe 3.5 SP1

[1972vet]

...so, do I just assume that you are finished already with everything i requested in post #28 and post #30? And if so, can you think of a reason why I need to ask again, "may I see the requested logs and answer to the questions" in those posts? I can't.

When you post a reply to my requests, please include the information requested...you can at that time, update me with anything you wish and I will address it then if I feel it is germane to our focus. Otherwise, this thread may begin to just appear to be nothing more than a chat session log.

There are other forum members who may be interested in following along with the issues here and the results from our tests. When the thread's content starts to stray to the point that it's no longer cohesive, readers (including me) loose interest and the mind begins to drift along as well.

That's not good. We need to keep things in perspective and follow along with the program so to speak. If not, after a short time (it's been my experience), I'll start to see needless, purposeless repetition and that is a real time waster. There are many others who are also waiting for me to respond to logs that they've provided.

Please understand that the instructions I post are not to be considered as sort of a "pick and choose" what you think you should do. The instructions should be followed in total and in the order that they appear.

It is becoming more and more difficult to work with you considering the amount of scattered information you post unrelated to my requests. Please try to stay focused on each instruction I render...complete that and include whatever you wish with it. In that way, we can expect to see these troubleshooting efforts to a successful conclusion. Thanks!

[birdjaguar]

Well, its been an interesting evening. It took 2+ hours to update the 4 windows files and I then rebooted. The computer sprang to life and was at a fully loaded desktop within 2 minutes. I let things sit for 10 minutes to make sure everything was loaded. ZA was but not bit defender. I double clicked on my bd icon to open it up and the hour glass appeared. It sat that way (unresponsive to any keystrokes) until now when the BSOD appeared 3+ hours later.

The information is the same as last time followed by a physical memory dump and the notice of its completion. There is no mention of a file name.

So on your first list I have finished step 1: update windows.

Normal mode seems to be unavailable. So what do you recommend now? I have not turned off the BSOD yet. I am on another computer at the moment.

The reason this is taking so long is that I am waiting for each step to finish. I've been sitting at my computer since I started this afternoon. It took over 2 hours to do the update; you told me to lete all the processes run to completion and I have. It really took over 3 hours for the BSOD to appear.

[1972vet]

As long as you have another computer that you can use to access this site, then let's uninstall BitDefender altogether for now. If you have a licensed version then you should either have an installation CD or a download link...if not, then the free version is always available to reinstall later. For that matter, I would prefer that you use "Avira" antivir anyway. Let me know if you'd like a download link for that and I will provide one for you.

Meanwhile, try usingthe Dell Driver Reset Tool in an attempt to avert any more bsod issues.

...then refer back to step one and continue. Once completed, post all the information requested in the same posting. Thanks!

[birdjaguar]

I'm at work today, but will proceed as soon as i get home tonight. My BD is licensed. I am unfamiliar with Avira. Why is it better?

Before i went to bed, I rebooted and left it running all night. The BSOD was there this morning. I will be removing bd from safe mode.

[1972vet]

Before i went to bed, I rebooted and left it running all night. The BSOD was there this morning.

If you know with certainty that the desktop loaded just fine on reboot, and that things were okeedokee there...and then you decided "ok, I'll leave it running like this and see how it looks tomorrow", then I now strongly suspect your BitDefender program.

The reason I do is because the active protection element scans your system
in real time and could certainly have hit a brick wall before the scan completed if it started conflicting with some other driver insisting that it yields to IT'S authority. Protective software should not be designed to yield since MALWARE will ask it to do the same. I'm certain you understand that.

If you know that your configuration is taking advantage of the real time protection module, and you have other security software that may also be using some active protection module in real time, then if the two want to argue about custody rights, a blue screen can certainly result.

I DO know that BitDefender has had some driver compatibility issues with other security software. Ad-Aware for one does not play well with BD...some swear that if you have Ad-Aware installed, you positively MUST uninstall BD. I can't attest to that, but certainly can offer a link where such a discussion has taken place. Read it Here. Although it's an older thread, I nevertheless can find others that will allude to incompatibility issues with BD. While these troubleshooting efforts are underway, uninstalling it is one way of scratching that one off the list of possible culprits. I don't need to point out that at least one of your previously posted logs DID show that Ad-Aware was among your running services.

To answer your question, Antivir is much better. Since you have a licensed version of BD, you have some options. If you uninstall it, you should be able to reinstall (if you insist) using the CD or d/l link they gave you. If you choose not to uninstall it, then you can contact their support services and ask them to troubleshoot your BSOD issues with you.

Let me know how you wish to proceed. Thanks!

[birdjaguar]

I will uninstall BD when I get home and decide about which AV to use once we get this problem fixed.

[birdjaguar]

Originally Posted by 1972vet

If you know with certainty that the desktop loaded just fine on reboot, and that things were okeedokee there...and then you decided "ok, I'll leave it running like this and see how it looks tomorrow", then I now strongly suspect your BitDefender program.

When I went to bed the desk top had not yet come up; that has been taking an hour or so. Given the way it started (slowly) I suspect that it took an hour to place the icons and then more time to try and load the rest before it fafiled. It certainly did not repeat the quick complete load that I saw after the update process. When I left it, there were a few scatered icons on the desktop and a stopped clcok in the corner.

[1972vet]

It took 2+ hours to update the 4 windows files and I then rebooted. The computer sprang to life and was at a fully loaded desktop within 2 minutes.
That's more like it.
I let things sit for 10 minutes to make sure everything was loaded. ZA was but not bit defender. I double clicked on my bd icon to open it up and the hour glass appeared. It sat that way (unresponsive to any keystrokes) until now when the BSOD appeared 3+ hours later.

This description of events tends to lend credence to my suspicion that BitDefender is behind your current issues. Since the Desktop loaded quickly on that reboot and everything else was fine except BitDefender, is there any other possibility? There can certainly be but just based upon that description, I'd think it's not likely.

Even so, I'd still like you to continue with my previous posted instructions and post back the requested logs. However, I think you really should consider uninstalling BitDefender and make that the first thing on the list. Even if you notice a marked improvement right away, we can still continue the troubleshooting effort until we complete those previous posted instructions. No doubt, there are other things we can do to help speed things up for you.

...And, if you notice no improvement whatsoever, then my suspicion obviously was in error. But then, that's pretty much how a troubleshooting endeavor goes. Kinda like working on your car. When it's not running well, you look at the simple things first...and certainly wouldn't consider replacing the engine as the first step.

[birdjaguar]

Thanks. I booted to safe mode and cannot uninstall bd because I cannot access the windows installer. I tried from both add/remove and from the uninstall option in the programs menu.