[walkeriam]

Hello,
Can anyone tell me what is wrong in my start-up log? The computer seems to hang on boot up for quite sometime and often.

Here is my START-UP LOG:


---------- C:\WINDOWS\desktop\StartUp.Log

Start-Ups checked at 06-21-2002 11:24:24.71a
__________________________________________________________________________
__________________________________________________________________________

StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________________________________
__________________________________________________________________________

Comments:

This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.

StartUp Log (version 1.56) - Release Date 3/11/2002

__________________________________________________________________________
__________________________________________________________________________

StartUp Log Index

1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations

__________________________________________________________________________
__________________________________________________________________________

The following is a list of your current Start-Ups
__________________________________________________________________________
__________________________________________________________________________

1. HKLM Run - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TaskMonitor"="c:\\windows\\taskmon.exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
"Keyboard Manager"="C:\\Program Files\\Netropa\\One-touch Multimedia Keyboard\\MMKeybd.exe"
"NAV Agent"="c:\\PROGRA~1\\NORTON~1\\NORTON~1\\NAVAPW32.EXE"
"NPROTECT"="c:\\Program Files\\Norton SystemWorks\\Norton Utilities\\nprotect.exe"
"SystemTray"="SysTray.Exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo mponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo mponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo mponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo mponents\IMAIL]
"Installed"="1"


==========================================================================
__________________________________________________________________________

2. HKCU Run - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"


==========================================================================
__________________________________________________________________________

3. HKLM RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


==========================================================================
__________________________________________________________________________

4. HKCU RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]


==========================================================================
__________________________________________________________________________

5. HKLM RunServices - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"Hidserv"="Hidserv.exe run"
"ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"
"NPROTECT"="c:\\Program Files\\Norton SystemWorks\\Norton Utilities\\nprotect.exe"
"SymTray - Norton SystemWorks"="c:\\Program Files\\Common Files\\Symantec Shared\\SymTray.exe \"Norton SystemWorks\""


==========================================================================
__________________________________________________________________________

6. HKLM RunServicesOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnc e]


==========================================================================
__________________________________________________________________________

7. WIN.INI File - (c:\windows\win.ini)

Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.


These are the run and load lines in your WIN.INI file

norun=hpfsched

load=

==========================================================================
__________________________________________________________________________

8. SYSTEM.INI File - (c:\windows\system.ini)

Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.


This is the shell line in your SYSTEM.INI file

shell=Explorer.exe

==========================================================================
__________________________________________________________________________

9. AUTOEXEC.BAT File - (c:\autoexec.bat)

(Some trojans have been known to start from this file)


These are your program startups and set paths in your autoexec.bat file

SET BLASTER=A220 I5 D3 T4
LH C:\WINDOWS\AU30DOS.COM
@echo off
REM To make a DOS Boot Diskette, see the file C:\DOSBOOT\DOSBOOT.TXT.
path c:\windows;c:\windows\COMMAND
@REM SetPower.exe will initialize the USB Keyboard.
@c:\windows\system\setpower.exe
REM .c.
call c:\dosboot\drivers.bat
rem - By Windows Setup - mscdex.exe /d:IDECD000 /L:M
REM
REM To enable Zip support in DOS. Uncomment
REM the following line.
REM "C:\Program Files\Iomega\Tools\Guest.exe"
REM

==========================================================================
__________________________________________________________________________

10. StartUp Folder - (c:\windows\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your StartUp folder

*(No start-ups found)*

==========================================================================
__________________________________________________________________________

11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your All Users StartUp folder


*(No start-ups found)*

==========================================================================
__________________________________________________________________________

12. Miscellaneous StartUp Configurations

-============================-
Registry StartUp Directories
-============================-

Should show the Start Menu StartUp and All Users StartUp directories

.....................................................................

[1] HKCU - Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

.....................................................................

[2] HKCU - User Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


.....................................................................

[3] HKLM - Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

.....................................................................

[4] HKLM - User Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


.....................................................................

-=======================-
Registry Shell Spawning
-=======================-

Open Commands for Executable File Types

@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)

@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)

@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)

@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)

@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)

@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)

-=========================-
HKLM RunOnceEx - Registry
-=========================-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


-=========================-
HKU (.Default) Run - Registry
-=========================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"


-==============================-
HKU (.Default) RunOnce - Registry
-==============================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]


-================================-
StubPaths - Registry (Partial Listing)
-================================-

(Please see the StubPath.txt on your desktop for complete listing)

HKLM\Software\Microsoft\Active Setup\Installed Components


"StubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"OldStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"RealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"OldRealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"StubPath"="c:\\windows\\msnmgsr1.exe"
"StubPath"=""
"StubPath"="c:\\windows\\COMMAND\\sulfnbk.exe /L"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\SETUP50.EXE\" /APP:OE /CALLER:IE50 /user /install"
"OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\SETUP50.EXE\" /APP:OE /CALLER:IE50 /user /install"
"RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\SETUP50.EXE\" /APP:WAB /CALLER:IE50 /user /install"
"OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\SETUP50.EXE\" /APP:WAB /CALLER:IE50 /user /install"
"RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

-=================-
DOSSTART.BAT File - (c:\windows\dosstart.bat)
-=================-

LH AU30DOS.COM
@echo off
REM To make a DOS Boot Diskette, see the file C:\DosBoot\DosBoot.txt.

set path=c:\windows\command

mscdex.exe /d:IDECD000 /L:M

SET PROMPT=$p$g
SET TEMP=C:\windows\TEMP
SET TMP=C:\windows\TEMP

set DosOnly=1
call c:\dosboot\mousie.bat

c:\windows\smartdrv /q
c:
cd \windows

REM to enable ZIP support in DOS:
REM 1) cd C:\IOMEGA
REM 2) run IOMEGA.EXE
REM 3) then uncomment the following line
REM C:\IOMEGA\GUEST.EXE

REM for DOS Networking including most networked games,
REM read the file IPX.BAT and then uncomment the following
REM CALL C:\DOSBOOT\IPX.BAT


-=================-
WININIT.BAK File - (c:\windows\wininit.bak)
(name) (type) (size)(modified)(time)
wininit bak 233 06-20-02 7:28p
-=================-

[Rename]
NUL=c:\PROGRA~1\NORTON~1\NORTON~4
NUL=c:\PROGRA~1\NORTON~1\NORTON~1
NUL=c:\Program Files\Norton SystemWorks\Norton CleanSweep
NUL=c:\PROGRA~1\NORTON~1\NORTON~2
NUL=c:\PROGRA~1\NORTON~1\WINFAX
NUL=c:\PROGRA~1\NORTON~1
-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-

SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\BLANKS~1.SCR

==========================================================================
__________________________________________________________________________

- Supplemental Environment Information -

TMP=c:\windows\TEMP
TEMP=C:\windows\TEMP
winbootdir=C:\WINDOWS
COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS;c:\windows;c:\windows\COMMAND;C:\WINDOWS;C:\WINDOWS\COMMAND
windir=C:\WINDOWS

File - c:\windows\Wininit.bak
File - c:\windows\deletefi.ini

==========================================================================
__________________________________________________________________________

- End -

[Rollin' Rog]

There's nothing amiss in your Startup.log that I can see. Exactly when in the bootup process do these delays occur? And when did they begin? Are you networking?

Another program that can be used to analyze boot delays is Bootlog Analyzer.

To use it, after installing it, you must run a "logged boot". Then run Bootlog Analyzer and click the "show delays" tab. You can save the text file and copy/paste the results here.

http://www.vision4.dial.pipex.com/

[walkeriam]

Hi Rollin' Rog,
Sorry it took so long to get back to you.

The delay (stall) happens just before the Windows Desktop loads onto the wallpaper.

NO, I'm not networking and it started a few days ago.

The last thing I installed was UPDATES for Microsoft Office 2000 Pro. and that was a day or so before it started acting up.

Here is my Bootlog Analyzer:

1:42:23 2.44 Loading Device = C:\CDROM\OAKCDROM.SYS
1:42:25 1.06 C:\WINDOWS\AU30DOS.COM[0001B00C] starting
1:42:26 0.94 c:\windows\system\SETPOWER.EXE[0001B01E] starting
1:42:29 0.50 Started LT Win Modem (PCI\VEN_11C1&DEV_0440&SUBSYS_044013E0&REV_01\BUS_00&DEV_0E&FUNC_00)
1:42:31 1.11 Starting PS/2 Compatible Mouse Port (ACPI\*PNP0F13\00000010)
1:42:33 0.50 Initing esdi_506.pdr
1:42:33 0.61 Initing esdi_506.pdr
1:42:34 1.83 Initing drvwq117.vxd
1:42:37 0.28 Dynamic load success C:\WINDOWS\system\serial.vxd
1:42:38 3.78 Dynamic load success au30core.vxd
1:42:42 0.83 INITCOMPLETE = NAVAP
1:42:43 0.56 Dynamic load success C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20020619.005\NAVENG.VXD
1:42:44 13.61 InitDone = TSRQuery (time estimated)


Hope you can Help with this?
I am running Windows 98 on an HP Pavilion 9600
800MHz AMD Athalon

[Rollin' Rog]

Ok, that delay won't show in the bootlog, and there is nothing sorely amiss there -- although some have shortened the TSRQuery delay by updating video drivers. It appears as a 13 second delay -- but I'm not sure just when that is experienced.

I don't see anything in the Startup log to account for it, but you could troubleshoot by running msconfig and using it to selectively disable startup groups for test purposes. You can selectively enable/disable individual items within groups as well, if that looks promissing.

I don't know what would cause it to happen suddenly, but one source of delays might be the Color Depth that is set for the display setting. If it is above 16bit True Color, you should try reducing it.

[Mosaic1]

I see three things.
The first is that you don't seem to have
Scan registry checked. At the first boot each day this creates a registry backup. It is a reat feature and if you ever have a problem, it allows you to restore a previous registry and possibly save your windows Installation. I would say it is something to definitely have enabled.

The second is that you have a delay loading drvwq117.vxd
Do you have a tape drive? If not you can rename three files:

They reside in
C:\WINDOWS\SYSTEM\IOSUBSYS
drvwq117.vxd Drvwppqt.vxd Drvwcdb.vxd

Change the vxd extension to old
drvwq117.old Drvwppqt.old Drvwcdb.old

It will speed up your boot. Not necessarily remove the delay in the spot where you are experiencing it though.

Finally. I have an Hp 8760c
If you have a file in Windows\system named aolfix.exe it should show in msconfig. You need to run that file at every boot. HP is a bit mysterious about it, but it "Repairs Power Management Configuration"
If you do not have that file, then you don't need it. It is something you only need if you have one of the HP's with a problem.

Also, if you have a lot of icons on the desktop, that can cause a slight delay. Another thing I have seen. People who use a shutdown Shortcut may experience this type of delay.

[walkeriam]

Hello,
I have tried your suggestion Rollin' Rog and still get the delay. I tried finding the drvwq117.vxd and the other vxd files you mentioned Mosaic 1, and can't find them in: C:\WINDOWS\SYSTEM\IOSUBSYS file.

I ran another BOOTLOG Analyzer and got this:

23:16:08 4.39 LoadSuccess = C:\WINDOWS\HIMEM.SYS
23:16:13 2.50 Loading Device = C:\CDROM\OAKCDROM.SYS
23:16:15 20.89 LoadSuccess = C:\CDROM\OAKCDROM.SYS
23:16:36 6.83 LoadSuccess = C:\WINDOWS\DBLBUFF.SYS
23:16:43 14.17 LoadSuccess = C:\WINDOWS\IFSHLP.SYS
23:16:57 32.94 C:\WINDOWS\AU30DOS.COM[001704F6] starting
23:17:30 152.67 c:\windows\system\SETPOWER.EXE[00170747] starting
23:20:03 4.28 LoadSuccess = C:\DBLSPACE.BIN
23:20:07 1.94 LoadSuccess = vnetsup.vxd
23:20:09 2.11 LoadSuccess = ndis.vxd
23:20:11 2.28 LoadFailed = ndis2sup.vxd
23:20:14 4.44 LoadSuccess = PERF
23:20:18 3.17 LoadSuccess = c:\windows\SYSTEM\vrtwd.386
23:20:22 2.33 LoadSuccess = c:\windows\SYSTEM\vfixd.vxd
23:20:24 0.94 LoadSuccess = vnetbios.vxd
23:20:25 0.83 LoadSuccess = ASPIENUM.VXD
23:20:26 3.28 LoadSuccess = vredir.vxd
23:20:29 1.89 LoadSuccess = dfs.vxd
23:20:31 2.72 LoadSuccess = C:\WINDOWS\system\VMM32\Hpziol00.VXD
23:20:34 4.78 LoadSuccess = C:\PROGRA~1\SYMANTEC\SYMEVNT.386
23:20:39 1.22 LoadSuccess = SYMTDI.VXD
23:20:40 1.56 LoadSuccess = c:\PROGRA~1\NORTON~1\NORTON~1\NAVAP.VXD
23:20:42 7.28 LoadSuccess = vmouse
23:20:51 0.50 Started LT Win Modem (PCI\VEN_11C1&DEV_0440&SUBSYS_044013E0&REV_01\BUS_00&DEV_0E&FUNC_00)
23:20:52 1.11 Starting PS/2 Compatible Mouse Port (ACPI\*PNP0F13\00000010)
23:20:54 0.56 Initing esdi_506.pdr
23:20:55 0.61 Initing esdi_506.pdr
23:20:56 1.83 Initing drvwq117.vxd
23:20:57 0.33 Init Success drvwq117.vxd
23:20:58 0.28 Dynamic load success C:\WINDOWS\system\serial.vxd
23:20:59 0.28 Enumerating Communications Port (COM2) (ACPI\*PNP0501\00000002)
23:20:59 3.56 Dynamic load success au30core.vxd
23:21:03 0.89 INITCOMPLETE = NAVAP
23:21:04 0.67 Dynamic load success C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20020619.005\NAVENG.VXD
23:21:05 13.56 InitDone = TSRQuery (time estimated)
23:21:19 4.89 Enumerating TapeDetection (TAPECONTROLLER\TAPEDETECTION\0000)
(TAPECONTROLLER\TAPEDETECTION\0000)
23:21:24 201.22 Enumerated TapeDetection
23:24:45 1.22 Started Client for Microsoft Networks (NETWORK\VREDIR\0001)
23:24:46 0.44 Started Client for Microsoft Networks (NETWORK\VREDIR\0001)
23:24:47 0.33 Started Microsoft Family Logon (NETWORK\FAMILY\0000)

What is the (201.22 Enumerated TapeDetection)?
And how do I disable it?
I have NO Tape Drive!

I do not have the aolfix.exe file in my WINDOWS\system folder either.

I have 18 icons on my desktop, but I think it is the TapeDetection thing causing the delay?

[Rollin' Rog]

Yeah that's the baby. Do a Find Files for each of the files Mosaic1 noted and rename them. They are there (at least the ones you see loading in the bootlog). This will eliminate the TapeDetection delay. That is the tape backup program.

For good measure you might also want to uninstall Microsoft Backup in Add/Remove programs > Windows Setup > System Tools.

[walkeriam]

Well Gentlemen,
I have solved this delay problem with your help!!!!

I found the three files Mosaic1 mentioned by going to that folder, clicking VIEW, FOLDER OPTIONS, VIEW, and checking SHOW ALL FILES.

I changed the names to .OLD and walha... Fast BOOT-UP.

I have unchecked Microsoft Backup also. Does that uninstall it or just disable it?

Thanks to the both of you!

[Rollin' Rog]

Unchecking it and clicking OK is sufficient.

It's a good thing Mosaic1 gave us a little nudge with those files; while I'm well aware of the relationship, I usually ignore it unless I see the delay in the TapeDetection component of the BootLog. But I guess it doesn't always show up.

By the way, Mo' is a "she"

And her question about "ScanRegistry" in msconfig was a good catch. Did you re-enable that, or is it not present?

Start>Run>msconfig > startup tab....