Help please - computer hanging on splash screen

Ruadh

Hi all

I would greatly appreciate your help before this drives me completely crazy lol.

On Saturday my normally fast computer decided to go painfully slow on start up. It boots ok but when it gets to the Windows splash screen it hangs. The log in box is not displayed and it stays like that for 10 - 20 mins then suddenly the log in box appears and I can log in and everything is fine. But this happens even if I am just resuming a windows session. Please help.

- Windows 7 64 bit
- have tried running virus scans but they all come up clean - including online bitdefender
- malwarebytes is also not finding any problems

Thanks in advance for your help.

rmg1

Have you tried running in safe mode with networking to see if that's any quicker?
I'd also run a HijackThis scan and post the log to see what's running at startup.
One of the techies can then have a look and advise if there's any problems.

Ruadh

Yes rmg1, I have tried safe mode and it is lightning fast.

HijackThis log below - wish I understood it lol


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:49:20, on 21/03/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Conexant\SAII\SmartAudio.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\windows\SysWOW64\rundll32.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sue\Downloads\HijackThis (1).exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Sue\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\RunOnce: [WLStart] "C:\Program Files (x86)\Windows Live\Installer\wlstart.exe" /nosearch /nohomepage (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [WLStart] "C:\Program Files (x86)\Windows Live\Installer\wlstart.exe" /nosearch /nohomepage (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{08DD9381-B4CD-4543-AEF6-4796E8958978}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CCS\Services\Tcpip\..\{664663CB-6D17-4EAE-8345-6C0DA3085749}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{08DD9381-B4CD-4543-AEF6-4796E8958978}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CS2\Services\Tcpip\..\{08DD9381-B4CD-4543-AEF6-4796E8958978}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CS3\Services\Tcpip\..\{08DD9381-B4CD-4543-AEF6-4796E8958978}: NameServer = 156.154.70.22,156.154.71.22
O20 - AppInit_DLLs: C:\windows\SysWOW64\guard32.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9371 bytes

rmg1

OK, need to wait for one of the techies to have a look now. I can spot a few things that can probably be fixed, but without the experience I'd wait for one of them.

Ruadh

ok, hopefully someone will reply otherwise I'll take whatever suggestions you can give.

Oh, forgot to mention that I even did a system to restore to before the problem but that didn't help at all.

birkee

Same operating system as yourself. Rubbish still but legend compared to Vista.

My problem is 'sleep mode'. If you come out of sleep mode, it sits there hackling away for ages, and gets nowhere. Force a reboot, and you get the message "restoring Windows".....and continues booting. Mine gets to the logon screen, I logon, and then it carries on as before, hackling away and getting nowhere. Just the splash screen showing.
Force a reboot again, and you get a message "delete restore files?"..... click yes, and the PC continues and boots normally again.

Just in case, I must mention, that it does wake up from sleep mode SOMETIMES. No changes on the PC between when it does and when it doesn't wake up, episodes.
Given up now, and shutdown instead.

rmg1

It might be worth dropping a copy of the log file into the scanner on the HijackThis website here
http://www.hijackthis.de/en
and then clicking the Analyze button at this bottom. You can either paste the contents of the file into the box or select the text file using the browse button if you know where it's stored.

Ruadh

thx for the suggestion rmg1. I have done that and told hijackthis to fix the selected problems but it doesn't make any difference - they are still coming up in the next hijackthis scan

any idea what I need to do to get one of the techies to help?

rmg1

How did you fix them?
You need to re-run the scan and then tick the appropriate ones and click on Fix. It will give a warning before it does anything.

aliEnRIK

Please stop

FIXING what you dont understand can (especially on a 64 bit system) kill your operating system if your unlucky

Please open malwarebytes, goto LOGS and post the WHOLE of the last log

aliEnRIK

Id guess comodo is at fault and created more networks than there actually are

Id recommend uninstalling comodo, switch on windows firewall and see how it is then

Theres a chance youve knackered the operating system by FIXING items though