Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

BSOD ntoskrnl.exe tcpip.sys prooblem


  • Please log in to reply

#76
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,425 posts
  • MVP

Its one of the options in Safe Mode.    Enable Low-Resolution Video  (640x480)

 

See the first picture on

 

http://www.pcworld.c..._windows_7.html

 

Kind of hard to see so I copied it:

 

 

I suppose it may be called something else in Dutch but would assume it is in the same position.

 


  • 0

Advertisements


#77
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts
Stil Some 4 minuten to start
  • 0

#78
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,425 posts
  • MVP

I just realized when I asked you to create a new login you just said nico has admin rights.  That's not the issue.  The idea of creating a fresh new user is to see if something is corrupt in your current login.  Windows always checks in two sections of the registry for instructions, HKLM and HKCU.  HKLM is used for all but HKCU is specific to the current user i.e. the current login.

 

Also are we still getting these errors in the system log:

 

Log: 'System' Date/Time: 17/01/2015 15:31:48
Type: Waarschuwing Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
Het stuurprogramma \Driver\WUDFRd kan niet worden geladen voor het apparaat Root\PARAGONBLOCKDEVICE\0000.

 

These come from a program called Paragon Hard Disk Manager Suite  Do you have it installed?  What version?  It doesn't appear that you really need it to function so can you uninstall it?

 

Right click on Computer and select Manage then Device Manager.  Do you see any devices in the right pane with a yellow or red mark?

 

 

If a new user and removing paragon does not help then we need to run Process Monitor.  This is a last ditch program because it creates a very large log.  You will need to zip or rar the log and then post them on a file hosting service like dropbox

 

See:

 

http://en.wikipedia....osting_services

 

and then send me a link to the log.

 

Download Process Monitor http://live.sysinter...com/Procmon.exe

Save it to your desktop and right click on it and Run As Admin.

 

then under Options, click Enable Boot Logging.  Close Process Monitor and reboot.

Open Process Monitor and it should tell you it has a boot log for you to look at.  Tell it you want to look at the log.  Once the info appears,

 

Save the log (File, Save, All Events, to your desktop, )  This should create a file logfile.pml.  Zip or rar the log and post it on dropbox or other free file service and then send me the link.  Make sure anyone can download the file.

 

Also how long does it take to get to the loading windows screen, the login screen, the desktop. 


  • 0

#79
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts

there is one unkown device which has been switched off for long time

 

for the sake of this message switched on, and switched off again

 

Paragon removed

 

will create new user

 

Attached Thumbnails

  • unknown.JPG

  • 0

#80
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,425 posts
  • MVP

Do you have Virtual Clone Drive installed:

 

https://www.elby.ch/...oducts/vcd.html

 

If so uninstall it.  Then right click on the unknown device, uninstall it and reboot.  Does it come back.


  • 0

#81
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts

no virtual clone drive, windows virual is installed which i need for some old programs that only run in xp.

 

it seems like after changing anything, like uninstalling paragon, windows updat installed, the first boot is Always a smooth one, and the next ones are delays-

 

will continue now with your instructions


  • 0

#82
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts
unknown device doesnot come back
 
shutting down takes 1,5 minute
wait for bios spash 9 sec
than windows logo hangs for sometimes 3 and sometimes 2,5 minute
 
after choosing user desktop appears in around 10 sec
 
and next it will take about 5-10 minutes before you will be able to start programs without delay.

Edited by honshu, 19 January 2015 - 09:38 AM.

  • 0

#83
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts
on closing down getting error

Cmd.exe application error

Cannon close properly 0xcOOOO 142
  • 0

#84
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts
I do have to leave now, try to post log, bug waiting for boot.

Otherwise i Will be back in an hour op so

Again Thanks
  • 0

#85
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts

getting this on start up

 

Attached Thumbnails

  • errpr.JPG

  • 0

Advertisements


#86
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,425 posts
  • MVP

Themida  is  Software Protection software.  Apparently it is used by a lot of different companies to protect their software from hackers so I can't tell you which software it is trying to protect but it is known to object to Process Monitor.  See:

 

http://forum.sysinte...topic28022.html

 

The more I think about your problem the more it sounds like a scheduled task running at boot and causing a major delay when it finds some change in the system.  Do you have any sort of automatic backup software running?


  • 0

#87
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts
No Back-up software running

Do you want me to uninstall acronis, anyway i Will remove iT from start up
  • 0

#88
honshu

honshu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 73 posts
How about this cmd.exe warning
  • 0

#89
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,425 posts
  • MVP

Won't hurt I guess.  Let's run FRST so I can get a list of the scheduled tasks that are still there:

 

Please download Farbar Recovery Scan Tool and save it to your Desktop. 
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. 
 
  •  
  • Right click to run as administrator When the tool opens click Yes to disclaimer. Make sure the Addition box is checked.
  • Press Scan button. 
  • It will produce a log called FRST.txt and an additions in the same directory the tool is run from.  
  • Please copy and paste the logs back here. 
  •  

    • 0

    #90
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 24,425 posts
    • MVP

    For the cmd warning:  Run VEW again and let's see what alarms we have.  There should be something on the cmd problem.


    • 0






    Similar Topics

    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users

    As Featured On:

    Microsoft Yahoo BBC MSN PC Magazine Washington Post HP