Blue Screen during boot-up

[rwrussell]

I'm running Win98se on a Fujitsu laptop with 128RAM. When I start-up the computer I get a "Fatal Exception 06 at ...." When I hit any key the boot completes, but the machine has become prone to crashing.

It also has problems shutting down. Sometimes I get a "Fatal Exception 0D at ....", but most times it just hangs during shutdown and I have to turn the computer off. I'm guessing these are probably related problems, but it's just a guess.

I have followed some earlier advice and checked the autoexec.bat for any references to a virus protection program, but the few lines in the autoexec.bat file do not reference any virus software and are all rem'd out.

Thanks for your help!

 

[beach51]

Hi rwrussell,lets have a look at your startup programs.Go to Start>Run>type in msinfo32>click ok>click on the + sign next to Software environment>click on startup programs>click on edit>select all>edit>copy>and paste the page back here.

 

[Dan O]

I would install a backup copy of the Registry, just before the problem started. Here's how: Boot MS-DOS mode using the boot menu or a Windows Startup diskette. Then type: SCANREG /RESTORE

A list of dates will be displayed, select a date before the problem started and follow the instructions.

Good luck.

 

[rwrussell]

Thank you for the quick responses.

I tried the registry restore, but the oldest file that came up on my list (of about 5 dates) was only 12/17/01 and I was having these problems at that time. (I am curious about what makes these registry backups and can I have any control over it?)

Here are my startup programs:

Microsoft Works Calendar Reminders Startup Group "C:\Program
Files\MSWorks\Calendar\WKCALREM.EXE"
PMSet98 Startup Group "C:\Program Files\Fujitsu\PMSet98\PMSet98.exe"
Kak.hta Startup Group C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA
LifeBook Application Panel Startup Group "C:\Program Files\Fujitsu\Application
Panel\AUVCore.exe"
AIM Registry (Per-User Run) C:\COREL\SUITE8\PROGRAMS\CCWIN\AIM\aim.exe
-cnetwait.odl
MSMSGS Registry (Per-User Run) "C:\Program Files\Messenger\msmsgs.exe"
/background
Tray Temperature Registry (Per-User Run) C:\PROGRAM
FILES\AWS\WEATHERBUG\WEATHERBUG.EXE 1
ScanRegistry Registry (Machine Run) c:\windows\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) c:\windows\taskmon.exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
AtiPTA Registry (Machine Run) Atiptaxx.exe
Ati2cwxx Registry (Machine Run) Ati2cwxx.exe
AtiGart Registry (Machine Run) c:\Ati\Gart\AtiGart.exe
SBWatchDog.EXE Registry (Machine Run)
C:\WINDOWS\SYSTEM\SBUtils\SBWatchDog.EXE /l
LoadBtnHnd Registry (Machine Run) C:\Program Files\Common Files\Fujitsu
Shared\BtnHnd.exe
PRPCMonitor Registry (Machine Run) PRPCUI.exe
LoadQM Registry (Machine Run) loadqm.exe
RealTray Registry (Machine Run) c:\My Download Files\RealPlay.exe
SYSTEMBOOTHIDEPLAYER
SaveNow Registry (Machine Run) C:\Program Files\SaveNow\SaveNow.exe
Gator Registry (Machine Run) "C:\Program Files\Gator.com\Gator\Gator.exe"
NAV Agent Registry (Machine Run) c:\PROGRA~1\NORTON~1\NAVAPW32.EXE
iamapp Registry (Machine Run) c:\Program Files\Norton Internet
Security\IAMAPP.EXE
New.net Startup Registry (Machine Run) rundll32
C:\WINDOWS\NEWDOT~2.DLL,NewDotNetStartup
LoadPowerProfile Registry (Machine Service) Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
ATIPOLAB Registry (Machine Service) ati2plab.exe
SchedulingAgent Registry (Machine Service) mstask.exe
ScriptBlocking Registry (Machine Service) "C:\Program Files\Common Files\Symantec
Shared\Script Blocking\SBServ.exe" -reg
nisserv Registry (Machine Service) c:\Program Files\Norton Internet
Security\NISSERV.EXE

I hope you can make some sense from this, because it's Greek to me. Any clues in all of this?

 

[beach51]

Hi Rwrussell,you have a virus and some nasty spyware on your computer.Kak.hta,is a virus.Go to this site and run a free online virus scan and see if it will remove it.The spyware is

savenow
gator
newnet

Go to start>run>type in msconfig>click on the startup tab>remove the check marks for these 3.Click apply>then ok.Reboot.Now go to the control panel>add and remove programs,see if any of them are listed there,if so remove them and reboot after each one.Now go to this site and download a program called Ad-aware5.6.This is a free program that will scan your computer and remove the spyware componnets.Once you download the program,also download the lastest signature file,and download that to the Ad-aware folder,now run the scan,and remove all that it finds.

http://www.lavasoftusa.net

http://www.housecall.antivirus.com



http://www.housecall.antivirus.com (for the virus scan)

 

[Rollin' Rog]

Sheesh, why is Symantec's AV sleeping on the job here?

 

[TonyKlein]

You have the Wscript.Kak Worm as well: http://www.pchell.com/internet/kakworm.shtml

And far too much other nasty stuff in startup.

Go to Start/run, and type msconfig.
On the Startup tab, uncheck EVERYTHING, EXCEPT for the following items

MSMSGS (optional)
Tray Temperature (optional)
ScanRegistry
AUVCore.exe
LoadPowerProfile
LoadBtnHnd
PRPCMonitor
NAV Agent
iamapp
LoadPowerProfile
SchedulingAgent
ScriptBlocking
nisserv

Click OK, close Msconfig, and reboot (important!)

The items marked 'optional' aren't neccessary for Windows to run either, and you may experiment later by unchecking them as well.

Now go to Software add/remove and remove New(dot)net application.

Reboot AGAIN.

Download and install Ad-Aware . This is a program which scans your system for spyware.

After having downloaded AAW, also download the latest Signature file (Reflist.sig) : http://www.lavasoftusa.net/aaw/binary/reflist.zip
Unpack it to the Lavasoft Ad-Aware folder in Program Files, and have it overwrite the one that's there.

Then have your drives and registry scanned for spyware, check all found files and reg keys, click continue, and have them removed.
Reboot one last time.

Finally, have your computer scanned on line at <A HREF="http://housecall.antivirus.com/">Trend Micro HouseCall </A>

Good luck,