computer not responding in regular windows or safe mode unless it is admin

[Archman]

Okay, here is the situation:

Came home from a run, and had left a bit torrent client running. When I got back in my system had stopped, as my torrent client (TorrentStorm) said my external HD was full( I use my wireless Router, and a Ximeta NDAS 120 GB Hard Drive Network or USB, and I use network)... it was :shocked: with only 294 kb left out of 120GB (I also store data and previous backups on it).

Well, I re-started my system (XP Pro w/ SP2 and all the latest updates) and I got a SLOOOOOW system, task manager showed CPU utilization at 100%, and the system was very slow. I couldn't get it to do anything. So I figure to go into safe mode with my account, still had the same issues... I then go into safe mode using the Admin account, and the system is running smoothly. I can access the network and the internet without any problems.

I deleted a bunch of stuff off of my external HD to free up 10 GB, and presto, I reboot and the system works beautifully

Now I leave again, and come back and the same issue arises again... super slow, non responsive computer in normal windows and safe mode my account, but not with the admin account in safe mode.

I have the latest versions of Ad Aware, Spybot S&D, and SpywareBlaster, and they are all updated. I ran them, and found nothing. I also use Panda Titanium 7 for antivirus, and updated it and ran it... nothing again... so far no spyware/malware or viruses... I am just like :shocked: WTF?!?!

It looks like before my External HD was the culprit because it was full, but I fixed that... any ideas as to what is wrong?

 

[Archman]

I should also add that when I am in regular windows I can not get into explorer to look at my "C:" drive or "My Documents" if I double click, windows is working on it, but nothing happens, the hourglass just dissapears

Any, and all help is appreciated

 

[Archman]

Actually I am tempted to shake the hell out of this laptop to see if any Gremlins fall out

well, I hope that someone has an idea... I think there was some kind of feedback issue with the torrent client and the External HD being full... who knows.

Night people

 

[Scrubber]

Reboot the system and immediately after the BIOS logo disappears, hit F8 a few times in quick succession. This will bring up the Windows Advanced menu. Choose "Last Known Good" from the options and then choose a time and date when you know the machine was running properly.

Any programs, AV updates etc., that you installed after the option you choose will have to be reinstalled again.

There's also a means of doing something similar from within Windows and that's called "System Restore". To run that, go to Start --> All Programs --> Accessories --> System Tools --> System Restore. Choose the option "Restore my computer to an earlier time...." and then choose a "Restore Point" from the calendar when you know the PC was working properly. The system will reboot and wind back the clock to that date.
Either one should work.

 

[FlyingPenguin]

Smells like spyware. Some spyware attaches itself only to one user account.

Adaware and Spybot have been off my radar for almost a year. They don't detect jack anymore and Adaware's sold out to the enemy. Also spyware scans are useless unless you perform them in SAFE MODE. Please follow my detailed spyware removal instructions here: http://theflyingpenguin.com/spyware-removal.shtml

Hope this helps...

 

[Archman]

scrubber I tried that but it does not give me an option for a date to a previous "Last Known Good".

FlyingPenguin Yes, I am thinking it is some kind of spyware/malware but it is a pain in the butt to catch. I still can not understand why the system runs like a pentium I running windows 2000, even PandaScan's activescan (Free online scanner) is supposed to catch spyware/malware, but it said I was clean. I will try your steps, and see if anything arises... if nothing does, then this could still be a problem with the external HD causing some kind of problem with the soho lan.

 

[bunker]

You said task manager shows 100% utilization, which process is using it?

 

[Archman]

there are a tonne that normally appear there... I did try to do a Windows Update and got an error message stating that Windorws Event Logger needed to be accessed in something to do with error/event 1005... methinks it has something to do with the external HD screwing up

help please... i followed the MS way to fix it, but it it missing the button to end that failed app or whatever it is

thanks

 

[NuroMancer]

As bunker said, what task is using 100%?
Screenshot of your task manager?
Scan for adaware using the new microsoft one as well as run cwshredder.
If you think it's the externals fault, remove it from the equation, unplug and see if the comp runs properly. Also how much ram do you have and how much of it is used.
Was your local HDD maxed? Like c:?

 

[Archman]

I ran the new MS adaware, and no adaware found. Will follow up with CWShredder asap. Will try to get a screen shot of my task manager up and posted.

I've removed the external HD, but still no solution. My local HD (C: drive) has 9 GB of free space (out of 30GB), and my computer has 512 MB of RAM.

As far as I can tell, when I try to open "My Computer" the task manager then shows CPU utilization at 100%

The error that I got on Windows Update was new to me though... has anyone ever dealt with the Windows Event Manager/Windows Event Logger? It stated on MS's website that I had to fix the selected problems that had an ID of 1005

Anyways, more info when I get a chance... thanks for the help

 

[mechBgon]

Fragmented MFT comes to mind. Don't fill up your hard drive.

 

[Archman]

Originally posted by: mechBgon
Fragmented MFT comes to mind. Don't fill up your hard drive.

What does that mean exactly?Is there a fix to that?

 

[Creston]

I doubt it's a fragmented MFT, although it's possible. But you would see the same issue with the administrator account.

I'd say it's simply a corrupted profile issue.


Log in as administrator, and go to C:\Documents and Settings. RENAME the offending profile (it's a folder named as the username, so for example Archman) to Archman.old.
Now log back on as the offending user account. (In my example, Archman).

It will create a new profile for that user, rebuild the desktop, all the system files in the profile etc. Then see how it works. If it works smoothly, copy any data you need from the Archman.old profile into your new Archman profile (favorites, My documents, pictures, pst files etc.), then delete the old profile (or keep it, it doesn't really do anything, just takes up space).

I see corrupted profile issues pretty often at work.

Let me know if that works or not.

Creston

 

[Archman]

Originally posted by: Creston
I doubt it's a fragmented MFT, although it's possible. But you would see the same issue with the administrator account.

I'd say it's simply a corrupted profile issue.


Log in as administrator, and go to C:\Documents and Settings. RENAME the offending profile (it's a folder named as the username, so for example Archman) to Archman.old.
Now log back on as the offending user account. (In my example, Archman).

It will create a new profile for that user, rebuild the desktop, all the system files in the profile etc. Then see how it works. If it works smoothly, copy any data you need from the Archman.old profile into your new Archman profile (favorites, My documents, pictures, pst files etc.), then delete the old profile (or keep it, it doesn't really do anything, just takes up space).

I see corrupted profile issues pretty often at work.

Let me know if that works or not.

Creston

woohoo!!! that did the trick thank you, thank you, thank you

Now since I have an inquisitive mind, would you be able to do a coles notes as to why this would happen?

 

[Archman]

I should ask just a couple more things if you wouldn't mind helping

following your instructions, and we will use your example of the new Archman.old folder renaming, how and where do I obtain my emails and bookmarks from within that folder? I use Mozilla Firefox and Mozilla Thunderbird, and would love to get those emails back, I just do not know where to look for them.

Thank you again