XP Pro repair reinstallation problems

[rjhfandclf]

1. I recently contacted Kaspersky over a very slow PC issue, that seemed to be related to their own processes and multiple svhost processes hogging CPU in task manager. From their GSI (GetSystemInfo) programme I uploaded, they advised me to reset the hosts to default via MS's online kb facility. This worked well and the PC is much faster now. However, at the same time, they advised that the GSI indicated that my HDD was about to fail, but since I run a mirror RAID, I can't tell which disk it is referring to. Can anyone recommned a safe programme that might identify in simple terms where the problem might lie, as Kaspersky have gone cold on my thread?

 

2. The original question to Kaspersy followed an incident whereby the PC had become so slow (minutes to load pages) that I decided to risk a full PC check via Advanced System Care Pro. I have always shunned away from these programmes, but thought IOBit to be reputable, so risked allowing the default ‘clean-up’ process (very considerable) to go ahead. This resulted in a major Windows crash. I tried to reverse the actions, but this failed, so it was only resolved by a week of repair reinstallations. These continually failed until I started to reboot via a Retrospect Disaster Recovery disk. This didn’t in fact load, but obviously did something as Windows miraculously fired up – albeit with most of my personal settings lost. I then discovered that MS Office Pro 2003 was also damaged and needed a major repair, again losing some settings. Since I find that other programmes are also not now as I set them up. My query now is that during the repair reinstallation process, Windows failed to copy numerous files from under the I386 folder during the latter stages. The files were on the CD of course, but when browsed to install, showed no .extensions - although they are clearly listed with extensions when the CD is searched manually. Although Windows is working OK, I am sure that many of these files are 'missing' and may be needed. What does anyone feel I should do ... try another repair installation??? Or is there a good system info checker that might give someone with much greater knowledge than mine an insight into the state of the PC?

 

(NB I would quite like to update to Win7/Office 2007 to match my laptop, but as my PC is now quite old, I am not sure that new HDDs and possible other upgardes would be cost effective.)

 

Thanks!

 

System info: 2004 custom built system with Gigabyte nForce m/b; AMD Athlon 64 3400+ (running in 32 mode), 2.0 GB memory and twin HDDs in mirror RAID. The HDDs are 160 Gb with ca 85 Gb free. I run XP Pro SP3 fully up to date and Firefox as browser. Internet via Belkin wireless router. Protection is via Kaspersky Internet Security 2012 and I back up daily after any significant work via Retrospect 7.7 to a 200 Gb external Maxtor HD drive.

[KenB]

Hi and welcome to ExTS

 

I am not sure that new HDDs and possible other upgardes would be cost effective.

I think you may be right.

It may not be possible to upgrade this machine to Win7 as some of the hardware may not be compatible.

(There is a piece of software that is available to advise you if you want to try this route)

 

You need to check the System Files - Windows can do this itself using SFC ( System File Checker )

 

Start > Run ....type in .....cmd ............ENTER

At the prompt type in .......sfc /scannow ...........( there is a space after sfc )

 

See here for more information:

http://kenspchelp.co.uk/viewtopic.php?f=36&t=462

You may need the XP installation CD if you have it.

[rjhfandclf]

Hello Ken - and thanks.

 

Re the upgrade to Win7, I have run the MS advisor programme, and it says that it should all be OK, but I know some of the programmes and maybe some bits and pieces may not work under the 64 setup - so needs more thought.

 

I have run SFC as suggested. It took a while and called immediately for the CD. When finished, it merely closed down - I assume that was correct, so to check the action I followed your linked advice on your own website. However, when I paste in the command script, it tells me FINDSTR cannot open C:\WINDOWS\...\CBS.log. I have checked in the Win Logs folder and there is no CBS subfolder or file to be seen. Have I done something wrong???

[KenB]

Have I done something wrong???

No - I don't think so.

 

Try searching for ........sfcdetails

This is the name of the Notepad file.

 

Alternatively open Notepad > File > Open

Type sfcdetails into the "file name" box

[rjhfandclf]

I've run a full search of C drive in Explorer as I didn't know which directory to start notebook in - but there are no results to show for sfcdetails. I should have added before that the notepad file sfclog.txt is created on desktop, but is empty of course. Is there anything else I can try - or perhaps run SFC again? I don't know how else to find out what has been corrected, as I don't know what might have been wrong in the first place.

[KenB]

You can run SFC /scannow again.

It will often find things on the second scan that were missed on the first.

 

If it produces a log it will only show the results of the present scan.

 

The log could be in the Recycle Bin.

Take a look there.

[rjhfandclf]

I don't seem to be doing very well! I have run SFC again - with the same results - it can't find CBS.log and sfclog.txt is empty. I have done a C drive search for all the files, again with no result - including Recycle bin. Could this be one of the processes that failed to load when I did the repair installation perhaps?

[rjhfandclf]

Further Windows running problems

 

Hello,

 

I am starting a new thread as my previous one seems to have come to a standstill - and my problems have now proceeded further. Although the previous issues still exist, the CPU usage has improved dramatically since resetting the hosts to default. However, I am still trying to get Windows to work 'cleanly', so I decided to clear out (via TFC) the miriad of temp files (ca 950Mb) left over from the re-installation. I don't know what this has done, but on restart, I now find that I cannot open almost any programmes post Windows boot up - particularly any MS progs including Outlook email, Explorer, etc. I can't open Help & Support to restore to an earlier point, and even Task Manager only works intermittently. Currently, I can get online via Firefox, but that is all.

 

Checking Task Manager, I have 258 processes running, of which 192 are ipconfig.exe! CPU usage is generally at just 10-15%, with occasional Kaspersky avp spikes. I can open My Computer, but it will not respond further than that, so, for instance, I cannot run my CD or DVD drives through Windows.

 

I have tried rebooting several times, but without improvement so far. I will keep trying. I guess I could try another reinstalltion from boot, when Windows offers a repair option after checking for existing system installations, but that was what caused my present problems through not loading all the files from I386.

 

Any ideas would be really appreciated to avoid a major disaster recovery via Retrospect - which in itself might be suspect after so long trying to sort this out (it has made full errorless backups for the past few days).

 

Thanks!

[KenB]

I am starting a new thread as my previous one seems to have come to a standstill

Your last post was yesterday afternoon !!

I posted Monday - you answered Tuesday.

We do have other things to do other than sit by a computer watching the screen.

 

I have merged the two threads - for obvious reasons.

[rjhfandclf]

I stand well and truly rebuked! - However I certainly intended no rebuke myself, as I am eternally grateful for any help I receive. It is just the frustration of taking one step forward and two back, when I just wish that I had a computer screen that was actually worth watching!

[KenB]

Do you have a full XP installation disk ?

 

If so - we can try a repair install which will keep your installed software / files / photos etc intact ( or should do ! )

[rjhfandclf]

Yes, it is XP Pro with SP3. We also have a laptop which I can use for contact in parallel in case things get stuck.

 

NB Windows got stuck rebooting last time, so I had to restart it. My RAID array is therefore now in sync state - yet again.

[KenB]

You can try a repair install of the OS

 

See here:

http://kenspchelp.co.uk/viewtopic.php?f=29&t=23

 

If you have 2 drives installed I suggest that you disconnect the second whilst doing the repair install.

[rjhfandclf]

Thanks - I have read your topic note, which is what I have done previously - with the exception of the extra stage of installing the extra SATA raid drivers from a floppy. I am assuming that your recommendation is to physically disconnect one of the drives. The problem I have here is that I don't know which is first or second, and which one may be likely to fail (according to Kaspersky). Are you adamant that I disconnect, as I would prefer not to mess around with the hardware if avoidable? Also, as the reinstallation calls for the separate loading of the SATA raid drivers, will this not cause a problem either during installation, or later when I have to reinstall the second in its RAID? This is all getting to the edge of my 'reasonable' experience!

[KenB]

Hi

 

If you are not too happy disconnecting the second hard drive then leave it as it is.

 

Raid drivers should be OK as this is a repair installation not a complete format / reinstall.

 

You could try chkdsk from a command prompt before you attempt the repair install.

Check which drive letter is allocated to each drive from My Computer.

 

One will be C:\

 

Then Start > Run ....type in .....cmd .....ENTER

At the prompt type in ...... chkdsk /r ( there is a space after chkdsk )

This will check C:\ drive for errors.

 

If you want to check the other drive type chkdsk X:/r ( space after chkdsk and X = the drive letter of your second drive )

 

You may be prompted to restart before it will run chkdsk.

[rjhfandclf]

Hello,

 

The problem with the raid is that it combines the two disks into the one drive 'C' - so My Computer only sees 'C' ... in fact it now sees nothing at all as that won't populate either now!. (I'll try yet another reboot.) I could then disolve the raid array at boot and then the two drives may become visible. Onwards and (hopefully!) upwards!

[rjhfandclf]

Hello again,

 

PC jammed up again, so I re-booted again a couple of times; however, I now find that it will not complete the boot. Windows starts OK to desktop, but then jams before task bar icons. So I have now re-booted again, having first deleted the raid array, but Windows still won't complete, so I am writing this on the laptop.

 

Having just written this, the PC has just rebooted into Windows OK, although I can't open programmes, I can open My Computer, so can see the two drives identified OK. I have tried to run chkdsk, but for C: it says 'The type of file system is NTFS. Cannot lock current drive'. Cmd now seems to be locked up and won't close. I have tried to run a 2nd chkdsk on the 2nd drive 'E', but this says the same re NTFS, but not the locking bit, and also won't close. Task manager won't open so I will have to reboot with them open. Just tried that but the whole thing is now jammed open and will not close down via any route, so I will have to unplug it and try again tomorrow.

[KenB]

Hi,

 

Try running chkdsk as follows:

chkdsk /f

 

This should fix any errors - if it is possible.

[rjhfandclf]

I've now tried chkdsk /f but it freezes and won't close in exactly the same way as chkdsk /r as above. By freeze, I mean that the curser does a carriage return after the line 'cannot lock ...', and continues to flash, but will not accept any entries nor close commands. I still cannot open any useful programmes, including Control panel or 'Your uninstaller', so cannot uninstall IE 8 before doing a repair install. I will try one more reboot, but will then have to leave everythign else, I guess, until after that.

 

One thing I have now managed to do by deleting the raid is run the Kaspersky recommended programme CrystalDiskInfo. This tells me that the two disks are in 'caution' state concerning 'reallocated sector counts'. I have no idea what this means, but if I can fire up Firefox on the PC (I cannot open email at all), I may be able to attach a file of the test run results - if it is of any value/interest.

Edited June 14, 2012 by rjhfandclf

[KenB]

Hi,

 

'reallocated sector counts

When the HDD ( probably SMART technology ) finds errors on the drive it marks that sector as "reallocated" and transfers data from that sector to another section of the drive.

You may be given an indication as to how many sectors have been identified and moved.

The drive can normally still operate - but the more bad sectors there are the more difficult it gets and the system gets slower and slower.

If you are getting this message then the drive is likely to fail completely at some point in the not too distant future.

 

If chkdsk is failing to complete it looks as if the drive is well on the way to failing.

 

I suggest before you go any further - that you get any data off the drive that you need.

[rjhfandclf]

I have now tried several ways to check/fix the disks, but nothing works. I tried via Explorer > properties: check disk and even that said it couldn't complete. cmd > chkdsk (no parameters) runs but says it finds errors, but can't complete in read only mode. Everything seems to point at the disks. The problem is the age of the system (8years). It has a very early SATA array and the m/b will only take 3.5" 150 drives. Replacement HDDs are very scarce and consequently seem very expensive in relation to an entirely new system. It seems daft to replace redundant equipment, so I need to think through a possible total replacement - and quickly. I have all my user files backed up via Retrospect on an external drive but these are in progs under XP - so there will be the problem of intrgrating into Win7 (I understand they can go into their own 'window' within Win 7 Pro).

 

Meanwhile one query: With all the now available backup.recovery media, do you think there is any great value in mirror raid systems? I could possibly then replace just one disk - although a full (like for like) restore from Retrospect would not be possible.

 

Thanks again.

[KenB]

is any great value in mirror raid systems?

I am sorry - I don't know enough about this to comment.

 

You are right regarding the cost and availability of a replacement HDD.

 

It seems daft to replace redundant equipment,

I tend to agree with you - it does, however, depend on your finances.

[rjhfandclf]

For some reason you/administrator has banned my IP addresses on both PC and laptop - so I have had to reset my router to make this update! No reply needed at this stage. I have been working on the problem, and after numerous false starts, decided to try an F8 OS start via last good configuration - something that had failed previously. After a couple of attempts, it worked. I therefore went through the sfc process again, and it seems that this is party to the problem as the system immediately froze and failed again. Perhaps the bad sectors prevail. It took a couple more F8 resets to get it going again and I currently have reasonable (if not total) control. I shall leave well alone while I think about the future of this system. - Presently, it doesn't bode well for it!

 

I have copied the I386 directory to both C: and E: as well as a mem stick, so that there are alternatives to the CD if I do have to make a repair install (previously this has failed to copy important files due to not recognising the extentions on the CD - no idea why. I shall now rebuld the mirror raid so that I can link directly to Retrospect again, so hopefully that will work OK ...

 

Again, thanks for your help.

Edited June 15, 2012 by rjhfandclf

[KenB]

For some reason you/administrator has banned my IP addresses on both PC and laptop

I have just checked the banned IP Addresses and the IP Address used in your first post is not on that list.

 

I find it strange that you should not be able to access the site without re-setting your router.

You certainly have not been banned as this would show where FPCH Member is showing under your forum name.

 

What message did you get when trying to log in ?

 

Keep us informed of your progress :)

[rjhfandclf]

Perhaps there is something else wrong at this end ... I just wrote you a response to this, but when I posted it, the site told me that it had failed as the ticket (or something?) had expired - please reload the page. I reloaded and so lost everything I wrote!!! Incidentally, it usually shows a regular 'autosave flash in the botton RH corner of the message box - but I cannot find anywhere where the message is saved - or is it not you but Firefox perhaps?

 

Anyway, the previous banned message appeared in the middle of a blank page when I reopened Firefox. It said something like "Your IP address has been banned. Please click here to contact the administrator" Clicking here opened your contact form, which I responded to with a simple: "Banned???"!

 

I am still having the same problems. It took two reloads via F8 to get going this am, but pm I had no problem first time without F8! Currently I have just 65 processes (one ipconfig - where I have sometimes had up to 200!) in task manager. I does seem that this relates somehow to the number of processes/applications that are trying to load, with a new ipconfig added at each failure. I know how well it might work by the number of task bar icons that appear at startup.

 

I have a load of urgent work to catch up with so will not risk the raid array yet. I will keep you informed i.d.c.

 

I'll try to send this again (copied to clipboard just in case!!)