[superbug]

good day
my problem is when i start runing my pc it freezes or get the blue screen
but this is just in the beginning
usually it is inmediatly, but sometimes i just opened all programs and keep working
let's say between 2 or 10 min and i get this failure
when i pass that "border" the pc keeps working great
thanks in advance

OTL Extras logfile created on: 03/09/2011 10:31:17 a.m. - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\Cobra\Desktop
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000080a | Country: México | Language: ESM | Date Format: dd/MM/yyyy

479.60 Mb Total Physical Memory | 86.95 Mb Available Physical Memory | 18.13% Memory free
1.47 Gb Paging File | 0.75 Gb Available in Paging File | 51.10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 111.69 Gb Total Space | 82.09 Gb Free Space | 73.50% Space Free | Partition Type: NTFS
Drive E: | 298.02 Gb Total Space | 222.26 Gb Free Space | 74.58% Space Free | Partition Type: FAT32

Computer Name: BEBOP | User Name: Cobra | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{53C141BA-4F9E-43FB-B4F9-0C01BB716FA8}" = Adobe Audition 3.0
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007
"{90120000-0015-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007
"{90120000-0016-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007
"{90120000-0018-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007
"{90120000-0019-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007
"{90120000-001A-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007
"{90120000-001B-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007
"{90120000-001F-0403-0000-0000000FF1CE}_ULTIMATER_{4B47C31E-46B0-462B-BEE4-DC383B6A1F2A}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
"{90120000-001F-0416-0000-0000000FF1CE}_ULTIMATER_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007
"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ULTIMATER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007
"{90120000-0044-0C0A-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Spanish) 2007
"{90120000-0044-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007
"{90120000-006E-0C0A-0000-0000000FF1CE}_ULTIMATER_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2007
"{90120000-00A1-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0C0A-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Spanish) 2007
"{90120000-00BA-0C0A-0000-0000000FF1CE}_ULTIMATER_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 3.5.910
"{B3575D00-27EF-49C2-B9E0-14B3D954E992}" = Apple Application Support
"{B6CA7A3C-35FD-401F-9335-FFFD2BCD5FF3}" = BitDefender Antivirus Pro 2011
"{C23CD6DA-1958-43A5-ADD0-59396572E02E}" = Apple Mobile Device Support
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update
"{C897FCB3-2F8B-4185-8035-79E2AF3A92A4}" = iTunes
"7-Zip" = 7-Zip 9.20
"Adobe Audition 3.0" = Adobe Audition 3.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"BitDefender" = BitDefender Antivirus Pro 2011
"Exact Audio Copy" = Exact Audio Copy 1.0beta2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Tag&Rename_is1" = Tag&Rename 3.2
"ULTIMATER" = Microsoft Office Ultimate 2007
"Winamp" = Winamp
"WinPcapInst" = WinPcap 4.1.1

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 20/08/2011 01:21:37 p.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 24/08/2011 02:02:07 a.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 26/08/2011 01:42:23 a.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 26/08/2011 02:57:48 a.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 27/08/2011 01:22:42 a.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 29/08/2011 07:52:17 p.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 30/08/2011 11:59:09 p.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 01/09/2011 12:56:22 a.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 01/09/2011 08:30:26 p.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 02/09/2011 07:55:03 a.m. | Computer Name = Bebop | Source = Customer Experience Improvement Program | ID = 1008
Description =

[ System Events ]
Error - 28/08/2011 09:42:50 p.m. | Computer Name = Bebop | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 28/08/2011 09:52:47 p.m. | Computer Name = Bebop | Source = EventLog | ID = 6008
Description = El cierre anterior del sistema a las 08:47:10 p.m. del ?28/?08/?2011
resultó inesperado.

Error - 28/08/2011 09:53:10 p.m. | Computer Name = Bebop | Source = BugCheck | ID = 1005
Description =

Error - 28/08/2011 09:53:10 p.m. | Computer Name = Bebop | Source = BugCheck | ID = 1001
Description =

Error - 01/09/2011 08:02:12 p.m. | Computer Name = Bebop | Source = EventLog | ID = 6008
Description = El cierre anterior del sistema a las 06:00:15 p.m. del ?01/?09/?2011
resultó inesperado.

Error - 02/09/2011 12:14:08 a.m. | Computer Name = Bebop | Source = EventLog | ID = 6008
Description = El cierre anterior del sistema a las 11:11:53 p.m. del ?01/?09/?2011
resultó inesperado.

Error - 02/09/2011 07:05:40 a.m. | Computer Name = Bebop | Source = BugCheck | ID = 1005
Description =

Error - 02/09/2011 07:05:41 a.m. | Computer Name = Bebop | Source = BugCheck | ID = 1001
Description =

Error - 03/09/2011 11:03:49 a.m. | Computer Name = Bebop | Source = EventLog | ID = 6008
Description = El cierre anterior del sistema a las 10:02:07 a.m. del ?03/?09/?2011
resultó inesperado.

Error - 03/09/2011 11:04:20 a.m. | Computer Name = Bebop | Source = BugCheck | ID = 1001
Description =


< End of report >

[Advertisements]

ComboFix

:!: It must be saved to your desktop, do not run it from your browser:!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Rightclick on ComboFix and select Run As Administrator to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix. Allow it to install the Recovery Console then Continue. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.


A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.

Run OTL (Vista or Win 7 => right click and Run As Administrator)

select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them.


Get the free version of Speccy:

http://www.filehippo...download_speccy (Look in the upper right for the Download
Latest Version button) Download, Save and Install it. Run Speccy. When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File, (to your desktop) note the name it gives. OK. Attach the file to your next post.


Ron

[RKinner]

ComboFix

:!: It must be saved to your desktop, do not run it from your browser:!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Rightclick on ComboFix and select Run As Administrator to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix. Allow it to install the Recovery Console then Continue. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.


A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.

Run OTL (Vista or Win 7 => right click and Run As Administrator)

select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them.


Get the free version of Speccy:

http://www.filehippo...download_speccy (Look in the upper right for the Download
Latest Version button) Download, Save and Install it. Run Speccy. When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File, (to your desktop) note the name it gives. OK. Attach the file to your next post.


Ron

[superbug]

Hello Ron

i've donloaded the ComboFix - but couldnt get rid of the antivirus
i check to "disable the real time protection" but no matter what i check (for 5 minutes, until next boot, permanently) it automatically checks again - also i couldnt terminate the bdagent process - and i have to stop de ComboFix

what can i do now?

[RKinner]

Skip combofix for now. Run speccy.

Ron

[superbug]

thats it Ron
.txt files are attached
i will ask for help at the bitdefender site

waiting for instructions - thanks

Attached Files

•  OTL.Txt   75.76KB   46 downloads
•  Extras.Txt   36.23KB   48 downloads

[RKinner]

Speccy is saying that your hard drive is running in the warning zone between 50 and 55 degrees C. As it is a 3.5 inch drive that means we have a desktop PC which should normally run from 35 to 40 C. Your CPU is also running at 50 C. Overheating will cause the CPU to shutdown the system without leaving a blue screen. I expect that your PC needs a good cleaning with special attention to the air vents, vans and heatsinks. I like to leave the PC off but plugged into the wall. Remove the cover and with a vacuum cleaner hose and a small brush remove as much dust as you can. Sometimes it helps to remove the fan over the CPU heatsink (usually fours screws and you can set it aside) so you can really clean the heatsink. Once you have it as clean as possible, start it up with the cover off. Verify that all fans are running, vents are not blocked, and that the PC is not sitting in direct sunlight or near a heat source. I usually stick the eraser end of a pencil in each fan to stop it momentarily then quickly remove the eraser and note how fast it starts up again. A slow starting fan should be replaced. A marginal fan that sometimes started and sometimes didn't might explain your crashes. If the fan starts it runs OK. IF it doesn't start then the CPU overheats in about 10 minutes and crashes.

You can use speccy to test the result of your cleaning. Keep it running and it will show the temps on the first page. Run an anti-virus scan or watch a movie or do something else that takes a lot of CPU power and see if the temperatures climb.

Ron

PS I used to work for DIRECTV Latin America and we had a site in Mexico City. It was always overheating because the air was so dusty that it clogged the filters in a very short time. The dust was also not the usual gray dry dust but a sticky greasy black dust that really clogged things up. It would get into fan bearings and cause them to fail early.

[superbug]

hello Ron

i've just cleaned the fan device - it was an amateur cleaning - i really going to take to an official service
it was all a mess...
the computer (since that) have been working normal
but as you can see from speccy BEBOP2 the temperature it's almost the same
i still believe that i have some crap - something called RECYCLER

have a nice day!

[RKinner]

The hard drive temp has gone down to normal. Don't know if that's because of your cleaning or because it hasn't been on that long.

If you can't get bitdefender to shutdown so we can run Combofix we can replace it with the free Avast and then you can reinstall it when you are clean.

Download and Save the free Avast installer.
http://www.avast.com...ivirus-download
Download and Save the bd uninstaller:
http://www.bitdefender.com/uninstall
Uninstall BitDefender (save the license key before uninstalling: http://www.bitdefend...se-key-328.html)
Run the bd uninstaller.
Reboot
Install Avast. You don't need to register if you don't plan to keep it.

Click on the Avast ball. Then click on Additional Protections then on AutoSandbox then on Settings then uncheck Enable AutoSandbox. OK

Right click on the Avast Ball and select Avast! Shields Control and Disable Until Computer is Restarted

Delete your old Combofix

Download a new one:

Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Doubleclick on ComboFix to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix. Allow it to install the Recovery Console then Continue. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.


A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.


Avast will come back on when you reboot. It's a good idea to let Avast run a boot-time scan tho it will take several hours:

Click on the Avast ball. Then click on Scan Computer, then on
Boot-Time Scan then on Settings. Change the Ask at the bottom to Move to Chest. OK then Schedule Now. Reboot and let it run a scan. It may take hours.
Once it finishes it should load windows. Click on the Avast ball and then on Scan Logs, select the Boot-time scan report then View Results. How many did it find?
aswboot.txt in C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\report\
I think that's where they hide the log file in XP. Attach it to your next post.

We can check for other problems:
Get Process Explorer

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator). Click once or twice on the CPU column header to sort things by CPU usage with the big hitters at the top. Wait 60 seconds for it to settle down. File, Save As, Save. Open the file Procexp.txt on your desktop and copy and paste the text to a reply.

Ron