Strange logon hang -- Windows xp professional

Viruses and worms
1

I have windows xp professional and service pack 3. My problem is, that when windows xp loading logo has gone, screen turns to blue, after that I can only see my desktop but no shortcuts. I have to wait about almost minute and then my desktop has loaded correctly. I have defragmented my C (=system partition), D and E partitions, cleaned all temp files. Avast virus scan found nothing. I don’t get any errors during the boot but I would like to know why windows hangs. It is loading something, but what?

I ran hijackthis and attached log file below:
also ran OTL tool which someone mentioned in this thread: http://forum.avast.com/index.php?topic=53253.0 logs below:

Amd athlon 64X2 4400(dual core) 2.30ghz, 2GB ram, 320 gb western digital hard drive (WDC 3200YS), windows xp professinal SP3 32 bit, Avast free 5.0.677.

Any help would be appreciated. Thanks!

2

did you try Malwarebytes also ?

Essexboy is notified… :wink:

3

It helps to include RAM amount in your signature.

I have 1.5GB RAM and have no problem but I do delay avast! to load after all services.

4

Ram amount is in my post. I have 2GB ram. I will add it to my signature. I have not ran malwearebytes scan yet.

5

Here’s also MBAM log, which if s in finnish :slight_smile: MBAM found nothing!

6

Your computer’s logon hang may be partially due to far too many start-up programs.
Also, there is no evidence of a running firewall.

Overview of running tasks :

smss.exe
System process
Session Manager Subsystem

winlogon.exe
System process
Microsoft Windows Logon Process

services.exe
System process
Windows Service Controller

services.exe
System process
Microsoft Windows Operating System

lsass.exe
System process
Local Security Authority Service

lsass.exe
System process
Microsoft Windows Operating System

nvsvc32.exe
Application
NVIDIA Driver Helper Service

svchost.exe
System process
Microsoft Service Host Process

svchost.exe
System process
Microsoft Windows Operating System

svchost.exe
System process
Microsoft Service Host Process

svchost.exe
System process
Microsoft Windows Operating System

svchost.exe
System process
Microsoft Service Host Process

svchost.exe
System process
Microsoft Windows Operating System

AvastSvc.exe
Virusscan
avast! Antivirus

spoolsv.exe
System process
Microsoft Printer Spooler Service

spoolsv.exe
System process
Microsoft Windows Operating System

ADCDLicSvc.exe
Backgroundtask
Autodata Limited License Service

NT611SVC.EXE
Backgroundtask
Bell

monitor.exe
System process
Microsoft Monitor

cisvc.exe
System process
Microsoft Index Service Helper

CTsvcCDA.exe
Backgroundtask
Creative CD-ROM Services

svchost.exe
System process
Microsoft Service Host Process

svchost.exe
System process
Microsoft Windows Operating System

jqs.exe
Backgroundtask
Java Quick Starter Service

mdm.exe
Application
Machine Debug Manager

nassvc.exe
Backgroundtask
nassvc

NMSAccessU.exe
Backgroundtask
NMSAccessU.exe

PORTMAP.EXE
Backgroundtask
Bell

Explorer.EXE
System process
Microsoft Windows Explorer

svchost.exe
System process
Microsoft Service Host Process

svchost.exe
System process
Microsoft Windows Operating System

vssvc.exe
System process
Microsoft ShadowCopy

WLIDSVC.EXE
Unknown process (Windows Live Sign-In Assistant service)
Unknown task http://www.howtogeek.com/howto/30348/what-are-wlidsvc.exe-and-wlidsvcm.exe-and-why-are-they-running/

SearchIndexer.exe
System process
Search Indexer

CTSysVol.exe
Driver
Creative Volume Manager

CALMAIN.exe
Driver
Canon Camera Access Library

DBMANG.EXE
Backgroundtask
Bell

SetPoint.exe
Backgroundtask
Logitech SetPoint Event Manager

jusched.exe
Backgroundtask
Sun Java Update Scheduler

RUNDLL32.EXE
System process
Microsoft Rundll32

WLIDSvcM.exe
Unknown process (Windows Live Sign-In Assistant service manager)
Unknown task http://www.howtogeek.com/howto/30348/what-are-wlidsvc.exe-and-wlidsvcm.exe-and-why-are-they-running/

avastUI.exe
Virusscan
avast! Antivirus

NokiaMServer.exe
Backgroundtask
NokiaMServer.exe

CTSched.exe
Backgroundtask
Creative Scheduler

ctfmon.exe
System process
Alternative User Input Services

WMPNSCFG.exe
Backgroundtask
Windows Media Player Network Sharing Service Confi

hpohmr08.exe
Driver
HP OfficeJet Component

hpotdd01.exe
Application
HP Multimedia products

RtWLan.exe
Driver
wg111cfg Application

WindowsSearch.exe
Backgroundtask
Windows Desktop Search Tray

NasNavi.exe
Backgroundtask
NasNavigator

KHALMNPR.EXE
Backgroundtask
Logitech Mouse Utility

nassche.exe
Backgroundtask
nassche.exe

SyncBack.exe
Backgroundtask
SyncBack

hpoevm08.exe
Application
Hewlett Packard multi-function printers

wmiapsrv.exe
System process
Microsoft WMI Performance Adapter

hpoSTS08.exe
Driver
Hewlett Packard OfficeJet’s diagnostics

cidaemon.exe
System process
Microsoft Indexing Service

taskmgr.exe
System process
The Windows Task Manager.

NokiaOviSuite.exe
Backgroundtask
Nokia Ovi Suite 2

ServiceLayer.exe
Backgroundtask
Nokia Connectivity Library

NclUSBSrv.exe
Backgroundtask
Nokia USB Media Server

NclRSSrv.exe
Backgroundtask
Nokia Serial Media Server

NclMSBTSrv.exe
Backgroundtask
NclMSBTSrv.exe

nokiaaserver.exe
Backgroundtask
nokiaaserver.exe

HiJackThis.exe
Application
Merijn Hijackthis

SearchProtocolHost.exe
System process
SearchProtocolHost

7

I don’t use software firewall. I only use windows firewall and modem’s (A-link RR24api+) NAT. I even disabled modems own firewall. That’s enough protection for me.

8

Hi the logs look OK so lets try a little TLC first

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-527237240-1532298954-725345543-1003\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done

.
THEN

Download and run Puran Disc Defragmenter
For the first run use the boot defrag and disc check

9

I ran OTL custom scan and Puran Disc Defragmenter. Startup may be now quicker a little. Thank you for your advice.

10

Another option to try is

To try and ease the startup try this

Download Startup Control Panel heredownload the standalone exe version
Install and you will find a startup icon in the control panel - run this

[*] In the HKLM tab, you may disable (be careful → “disable”) all the entries except your security software
[*] In the HKCU tab, you may disable all entries.
[*] In the StartUp tab, you may disable all entries.

Note : if you notice that some programs no longer run, you can enable them again by running Startup Control Panel, selecting the entry and choosing Run Now.
If you are in doubt with something, don’t hesitate to ask :wink: